last executing test programs: 1m19.444619573s ago: executing program 0 (id=115): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000240)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@nodatacow}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x1, 0xffffffff7fffffff, 0x0, 0x80000000, 0x2, [0x9, 0xd, 0x1, 0x8]}) 1m17.659711459s ago: executing program 0 (id=124): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5540, &(0x7f0000010140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000003180)) 1m15.468265001s ago: executing program 0 (id=133): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 1m14.642179213s ago: executing program 0 (id=138): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x2000) 1m14.311133847s ago: executing program 0 (id=141): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 1m12.340576476s ago: executing program 0 (id=160): r0 = mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\xb7FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\"qH\xe1\x11\x97\xc9d0\x9d\xfa\x86\xf8\x88\xb9\x89\xfd%Nny\xb5\x03\x83\x1c\xddD\x02\x00\x00\x00\x00\x00\x00\x00`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcf\x1e \x9eW\x13\x02\xe2ct\xe9\x7f+8+\v\x88\x01\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x83\xcd\xe21\x92X\x8c!\x0e\x1b(\xdf~ +\xb7{T\xb0\xff\xce\xbdv\xc1\xc0\xfc\xd9r,\xc9\xc5\xc7o\x1d]e\x03t)\xb6)\xe0\x88p\x84\x9e\xae\xaad\xf9\a\xce\x81\x99z\xb3\xb9\xa2\r{\x83\x05=\xfcu\xb3\xa1\x8b\xd1uw\f \xe0\x9fd\xcca&6\xa5{y\bS@\x00TO\'\xc7v\xa9\v_\xd7\x1f\x9cs\f\x7f\xab\x8d\x12\xf3\x1fR\x9f\x80M\x04\xa8\x1b5(s\x94\xeao\xe8\\\xa1sv\x81\xcd\xbd\xfd\x86\x14\xf0V\xe2\x84\xa4C\xfd\xf5c\xfe\x0f\x94>\x87\xdf\xf8\xc7\xe1\xce\xb1\xfe\xfc\xfd\x84\xa7\xee \xb4L*\xc7\xf6\xe4\xfa\x84\x95\xfb\xbd:\vfK-\x10YOja\x9a\xcd\xdb\xccj\xfd\x10\x8a\x1d\x9a\x8d\x00'/360, 0x40, 0x81, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa000201b}) 1m11.991934571s ago: executing program 32 (id=160): r0 = mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\xb7FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\"qH\xe1\x11\x97\xc9d0\x9d\xfa\x86\xf8\x88\xb9\x89\xfd%Nny\xb5\x03\x83\x1c\xddD\x02\x00\x00\x00\x00\x00\x00\x00`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcf\x1e \x9eW\x13\x02\xe2ct\xe9\x7f+8+\v\x88\x01\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x83\xcd\xe21\x92X\x8c!\x0e\x1b(\xdf~ +\xb7{T\xb0\xff\xce\xbdv\xc1\xc0\xfc\xd9r,\xc9\xc5\xc7o\x1d]e\x03t)\xb6)\xe0\x88p\x84\x9e\xae\xaad\xf9\a\xce\x81\x99z\xb3\xb9\xa2\r{\x83\x05=\xfcu\xb3\xa1\x8b\xd1uw\f \xe0\x9fd\xcca&6\xa5{y\bS@\x00TO\'\xc7v\xa9\v_\xd7\x1f\x9cs\f\x7f\xab\x8d\x12\xf3\x1fR\x9f\x80M\x04\xa8\x1b5(s\x94\xeao\xe8\\\xa1sv\x81\xcd\xbd\xfd\x86\x14\xf0V\xe2\x84\xa4C\xfd\xf5c\xfe\x0f\x94>\x87\xdf\xf8\xc7\xe1\xce\xb1\xfe\xfc\xfd\x84\xa7\xee \xb4L*\xc7\xf6\xe4\xfa\x84\x95\xfb\xbd:\vfK-\x10YOja\x9a\xcd\xdb\xccj\xfd\x10\x8a\x1d\x9a\x8d\x00'/360, 0x40, 0x81, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa000201b}) 58.350160078s ago: executing program 5 (id=273): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000}, @exit], &(0x7f0000000000)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 58.18355796s ago: executing program 5 (id=274): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 57.704015437s ago: executing program 5 (id=279): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63e"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 57.451123121s ago: executing program 5 (id=281): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000045, &(0x7f0000000e40)=ANY=[], 0x2, 0x1f0, &(0x7f0000001700)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) 57.179104285s ago: executing program 5 (id=284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 42.610376025s ago: executing program 5 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x24000044) 42.32303909s ago: executing program 33 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x24000044) 3.055759417s ago: executing program 1 (id=866): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x200000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.644331603s ago: executing program 6 (id=875): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x5, 0x7}) 2.639501303s ago: executing program 4 (id=876): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2.638580473s ago: executing program 3 (id=877): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.517461014s ago: executing program 4 (id=878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b699f75b62641d884d2e43ca00f58cd2488900630c7e0000", 0x18) 2.432330736s ago: executing program 6 (id=879): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 2.377978026s ago: executing program 4 (id=880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f0000007000/0x3000)=nil, 0x3000) 2.236777708s ago: executing program 4 (id=881): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) 2.10537983s ago: executing program 4 (id=882): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000200090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r0, 0x0, 0x0) 2.10506897s ago: executing program 1 (id=883): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000034c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000be5ffff0b0005"], 0x20}}, 0x0) 2.08944951s ago: executing program 1 (id=884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0xd0b2e175b015db11, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 2.069069801s ago: executing program 6 (id=885): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2028) 1.844346614s ago: executing program 1 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.631677687s ago: executing program 2 (id=887): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_GETXATTR(r0, 0x0, 0x0) 1.522672219s ago: executing program 3 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 1.348282801s ago: executing program 2 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.348012861s ago: executing program 6 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.287526932s ago: executing program 1 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005180)={0x1c, r1, 0x109, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xb}]}, 0x1c}}, 0x84) 1.132965084s ago: executing program 6 (id=892): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004000, &(0x7f0000001180)=ANY=[], 0x1, 0x1d7, &(0x7f0000000140)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0/file0\x00') 1.040293255s ago: executing program 1 (id=893): creat(&(0x7f0000000000)='./file0\x00', 0x6a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f000001f1c0), &(0x7f000001f200)='./file0\x00', 0x200005, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC], 0xfe, 0x9e8, &(0x7f0000000c80)="$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") 1.012469296s ago: executing program 3 (id=894): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000004880)) 961.641937ms ago: executing program 2 (id=895): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x8000f83, 0x3}, 0x1c) 520.322233ms ago: executing program 2 (id=896): r0 = timerfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x2) 517.883723ms ago: executing program 3 (id=897): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 374.694505ms ago: executing program 3 (id=898): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r0, &(0x7f0000000780)="fb", 0x1) 340.141706ms ago: executing program 6 (id=899): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 252.336117ms ago: executing program 2 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 193.121968ms ago: executing program 3 (id=901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8910, &(0x7f00000000c0)={0x1fffc, 0x1, 0x0, 0x0, 0x1a, "bb40ef000180000002000000e600"}) 150.185878ms ago: executing program 4 (id=902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}, 0x1, 0x3000000}, 0x0) 0s ago: executing program 2 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x102}}, 0xb4}}, 0x0) kernel console output (not intermixed with test programs): oop0): doing ref verification [ 77.306983][ T4521] BTRFS info (device loop0): use no compression [ 77.352156][ T4521] BTRFS info (device loop0): force clearing of disk cache [ 77.359538][ T4521] BTRFS info (device loop0): setting nodatacow, compression disabled [ 77.402226][ T4521] BTRFS info (device loop0): disabling free space tree [ 77.444502][ T4216] kye 0003:0458:5011.0002: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 77.455932][ T4521] BTRFS info (device loop0): has skinny extents [ 77.492005][ T4216] kye 0003:0458:5011.0002: tablet-enabling feature report not found [ 77.500509][ T4216] kye 0003:0458:5011.0002: tablet enabling failed [ 77.584857][ T4541] loop4: detected capacity change from 0 to 4096 [ 77.632416][ T4216] usb 2-1: USB disconnect, device number 2 [ 77.799271][ T4553] fido_id[4553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 77.878046][ T4521] BTRFS info (device loop0): enabling ssd optimizations [ 77.894260][ T4568] loop3: detected capacity change from 0 to 16 [ 77.910803][ T4521] BTRFS info (device loop0): clearing free space tree [ 77.920063][ T4521] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.931274][ T4521] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.966819][ T4568] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.032960][ T1108] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.055482][ T4521] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.075615][ T4568] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 78.498016][ T1108] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.539763][ T1108] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.571774][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.620958][ T1108] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 78.661427][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.723318][ T1108] usb 3-1: config 0 descriptor?? [ 78.776492][ T4564] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.018583][ T4574] loop4: detected capacity change from 0 to 40427 [ 79.058021][ T4574] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 79.090345][ T4574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.122133][ T4574] F2FS-fs (loop4): invalid crc value [ 79.159131][ T4574] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.190373][ T4572] loop1: detected capacity change from 0 to 32768 [ 79.210030][ T4576] loop3: detected capacity change from 0 to 32768 [ 79.252487][ T4576] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.127 (4576) [ 79.306593][ T1108] logitech 0003:046D:C24F.0003: collection stack underflow [ 79.322333][ T4572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.125 (4572) [ 79.341847][ T1108] logitech 0003:046D:C24F.0003: item 0 0 0 12 parsing failed [ 79.347395][ T4574] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.373093][ T4574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 79.380479][ T1108] logitech 0003:046D:C24F.0003: parse failed [ 79.400321][ T1108] logitech: probe of 0003:046D:C24F.0003 failed with error -22 [ 79.438176][ T4576] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.447474][ T4572] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 79.472384][ T4576] BTRFS info (device loop3): using free space tree [ 79.479737][ T4576] BTRFS info (device loop3): has skinny extents [ 79.502604][ T4572] BTRFS info (device loop1): using free space tree [ 79.508634][ T1108] usb 3-1: USB disconnect, device number 3 [ 79.541403][ T4572] BTRFS info (device loop1): has skinny extents [ 79.628844][ T4589] loop0: detected capacity change from 0 to 40427 [ 79.675455][ T4574] attempt to access beyond end of device [ 79.675455][ T4574] loop4: rw=2051, want=131072, limit=40427 [ 79.678747][ T4576] BTRFS info (device loop3): enabling ssd optimizations [ 79.695362][ T4574] F2FS-fs (loop4): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 79.730335][ T4589] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.770957][ T4589] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.876418][ T4572] BTRFS info (device loop1): enabling ssd optimizations [ 79.891621][ T4589] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.093792][ T4572] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.230982][ T4589] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.239185][ T4589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.461040][ T4644] loop2: detected capacity change from 0 to 1024 [ 80.871620][ T4223] hfsplus: b-tree write err: -5, ino 4 [ 81.167489][ T4659] loop3: detected capacity change from 0 to 4096 [ 81.238884][ T4665] loop0: detected capacity change from 0 to 1024 [ 81.305146][ T4667] loop1: detected capacity change from 0 to 2048 [ 81.358518][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.501797][ T4674] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.559004][ T7] cfg80211: failed to load regulatory.db [ 81.637248][ T4168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 168: padding at end of block bitmap is not set [ 81.722339][ T4168] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 81.810664][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 81.877992][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 81.920049][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 81.936201][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 81.957842][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 81.977984][ T4679] mkiss: ax0: crc mode is auto. [ 81.997681][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 82.011027][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 82.020375][ T4673] loop4: detected capacity change from 0 to 32768 [ 82.053894][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 82.077424][ T4673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.140 (4673) [ 82.091069][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 82.117945][ T4168] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 82.162351][ T4673] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 82.192135][ T4673] BTRFS info (device loop4): using free space tree [ 82.199064][ T4673] BTRFS info (device loop4): has skinny extents [ 82.692186][ T4673] BTRFS info (device loop4): enabling ssd optimizations [ 82.761975][ T4669] loop2: detected capacity change from 0 to 40427 [ 82.907245][ T4669] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 82.952154][ T4669] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.999541][ T4669] F2FS-fs (loop2): invalid crc value [ 83.048730][ T4723] loop3: detected capacity change from 0 to 2048 [ 83.103945][ T4669] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.258916][ T4728] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.379948][ T4669] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.437150][ T4669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 83.718275][ T4223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.747848][ T4669] attempt to access beyond end of device [ 83.747848][ T4669] loop2: rw=2051, want=131072, limit=40427 [ 83.822461][ T4669] F2FS-fs (loop2): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 83.865791][ T4223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.034958][ T4223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.158017][ T4749] loop4: detected capacity change from 0 to 128 [ 84.187318][ T4223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.306955][ T4749] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.334297][ T4749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.908727][ T4754] chnl_net:caif_netlink_parms(): no params data found [ 85.067361][ T4776] overlayfs: failed to set xattr on upper [ 85.112457][ T4776] overlayfs: ...falling back to index=off,metacopy=off. [ 85.129934][ T4779] loop3: detected capacity change from 0 to 128 [ 85.134420][ T4776] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 85.182341][ T4733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.271344][ T4779] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 85.299390][ T4779] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 85.309151][ T4757] loop2: detected capacity change from 0 to 32768 [ 85.374877][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.405088][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.405709][ T4757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.164 (4757) [ 85.413963][ T4754] device bridge_slave_0 entered promiscuous mode [ 85.439889][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.447521][ T4733] usb 2-1: Using ep0 maxpacket: 16 [ 85.460701][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.467067][ T4779] sysv_count_free_inodes: unable to read inode table [ 85.476210][ T4757] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 85.495395][ T4754] device bridge_slave_1 entered promiscuous mode [ 85.509950][ T4757] BTRFS info (device loop2): using free space tree [ 85.520555][ T4757] BTRFS info (device loop2): has skinny extents [ 85.566349][ T4170] sysv_free_block: trying to free block not in datazone [ 85.577445][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.581766][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.592300][ T4733] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 85.611280][ T4733] usb 2-1: config 0 has no interface number 0 [ 85.618088][ T4733] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 85.628421][ T4733] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.639735][ T4733] usb 2-1: config 0 interface 41 has no altsetting 0 [ 85.725968][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.842390][ T4733] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 85.872028][ T4733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.925360][ T4757] BTRFS info (device loop2): enabling ssd optimizations [ 85.954636][ T4733] usb 2-1: Product: syz [ 85.958863][ T4733] usb 2-1: Manufacturer: syz [ 85.979573][ T4822] loop3: detected capacity change from 0 to 4096 [ 85.996125][ T4733] usb 2-1: SerialNumber: syz [ 86.043812][ T4822] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 86.074356][ T4754] team0: Port device team_slave_0 added [ 86.093407][ T4733] usb 2-1: config 0 descriptor?? [ 86.119993][ T4769] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.134001][ T4769] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.218160][ T4754] team0: Port device team_slave_1 added [ 86.352297][ T4587] Bluetooth: hci0: command 0x0409 tx timeout [ 86.394450][ T4733] dm9601: probe of 2-1:0.41 failed with error -71 [ 86.426922][ T4733] sr9700: probe of 2-1:0.41 failed with error -71 [ 86.457349][ T4733] usb 2-1: USB disconnect, device number 3 [ 86.586407][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.594402][ T4170] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 86.601026][ T4170] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 86.611716][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.644526][ T4170] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 86.653748][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.734922][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.742001][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.842965][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.100237][ T4754] device hsr_slave_0 entered promiscuous mode [ 87.120148][ T4754] device hsr_slave_1 entered promiscuous mode [ 87.143505][ T4754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.167875][ T4754] Cannot create hsr debugfs directory [ 87.208041][ T4851] loop4: detected capacity change from 0 to 512 [ 87.292729][ T4586] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.338931][ T4851] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 87.558719][ T4865] tipc: Can't bind to reserved service type 33 [ 87.572654][ T4586] usb 4-1: Using ep0 maxpacket: 32 [ 87.636982][ T4851] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.672134][ T4851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0003] [ 87.702870][ T4586] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 87.711118][ T4586] usb 4-1: config 0 has no interface number 0 [ 87.719069][ T4851] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.196: inode #13: comm syz.4.196: iget: illegal inode # [ 87.738669][ T4851] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.196: couldn't read orphan inode 13 (err -117) [ 87.807005][ T4851] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,delalloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 87.835291][ T4223] device hsr_slave_0 left promiscuous mode [ 87.858003][ T4223] device hsr_slave_1 left promiscuous mode [ 87.875160][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.900706][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.909792][ T4851] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.196: resize_inode disabled but reserved GDT blocks non-zero [ 87.923614][ T4586] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 87.954512][ T4586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.981219][ T4586] usb 4-1: Product: syz [ 87.982984][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.996060][ T4586] usb 4-1: Manufacturer: syz [ 88.007045][ T4586] usb 4-1: SerialNumber: syz [ 88.015947][ T4854] loop1: detected capacity change from 0 to 32768 [ 88.025176][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.057777][ T4223] device bridge_slave_1 left promiscuous mode [ 88.067931][ T4586] usb 4-1: config 0 descriptor?? [ 88.091138][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.116904][ T4854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.195 (4854) [ 88.124340][ T4586] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.196791][ T4223] device bridge_slave_0 left promiscuous mode [ 88.212962][ T4854] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 88.221184][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.258242][ T4854] BTRFS info (device loop1): using free space tree [ 88.311724][ T4854] BTRFS info (device loop1): has skinny extents [ 88.336727][ T4888] netlink: 11320 bytes leftover after parsing attributes in process `syz.4.203'. [ 88.354285][ T4586] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.377596][ T4223] device veth1_macvtap left promiscuous mode [ 88.389722][ T4223] device veth0_macvtap left promiscuous mode [ 88.396483][ T4586] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 88.397114][ T4223] device veth1_vlan left promiscuous mode [ 88.416023][ T4223] device veth0_vlan left promiscuous mode [ 88.433183][ T4645] Bluetooth: hci0: command 0x041b tx timeout [ 88.562828][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 49 [ 88.664577][ T4854] BTRFS info (device loop1): enabling ssd optimizations [ 88.775436][ T4586] usb 4-1: USB disconnect, device number 2 [ 88.782306][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 88.940166][ T4586] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 88.974320][ T4586] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.005007][ T4586] quatech2 4-1:0.51: device disconnected [ 89.047461][ T4407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4407) [ 89.235327][ T4918] netlink: 'syz.1.208': attribute type 5 has an invalid length. [ 89.311149][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 89.382986][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 89.500713][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.578308][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.786141][ T4223] bond0 (unregistering): Released all slaves [ 90.093927][ T4754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.113111][ T4754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.135723][ T4754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.172722][ T4754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.191082][ T4926] loop1: detected capacity change from 0 to 40427 [ 90.244209][ T4926] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 90.262454][ T4926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.291617][ T4926] F2FS-fs (loop1): invalid crc value [ 90.354840][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.364288][ T4926] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.380365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.399040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.415691][ T4754] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.453838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.467342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.478114][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.478151][ T4926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.485296][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.495754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.509623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.518150][ T4926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.526617][ T4733] Bluetooth: hci0: command 0x040f tx timeout [ 90.536712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.563547][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.570747][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.593211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.661771][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.671416][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.690623][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.700618][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.721812][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.759474][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.798650][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.818462][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.849605][ T4754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.907891][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.931188][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.963101][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.297331][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.334114][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.375383][ T4754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.695510][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.714672][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.752989][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.768529][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.780344][ T4754] device veth0_vlan entered promiscuous mode [ 91.801997][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.810143][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.838636][ T4754] device veth1_vlan entered promiscuous mode [ 91.901628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.919603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.928384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.952925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.987173][ T4754] device veth0_macvtap entered promiscuous mode [ 92.003116][ T4754] device veth1_macvtap entered promiscuous mode [ 92.055889][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.067342][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.078341][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.090210][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.100581][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.111897][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128079][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.147947][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.159589][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.170013][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.181001][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.192364][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.203135][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.215152][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.231717][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.248045][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.258744][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.279812][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.293239][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.302520][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.319459][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.333073][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.354099][ T4754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.363393][ T4754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.379531][ T4754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.389044][ T4754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.534464][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.559995][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.586512][ T4825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.599093][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 92.613426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.637448][ T4825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.663803][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.820633][ T4994] loop5: detected capacity change from 0 to 1024 [ 93.150921][ T154] hfsplus: b-tree write err: -5, ino 4 [ 93.173849][ T5002] loop2: detected capacity change from 0 to 512 [ 93.301885][ T5002] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 93.383565][ T5002] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 93.414153][ T5002] EXT4-fs (loop2): 1 truncate cleaned up [ 93.419852][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="lazytime,noload,data_err=ignore,grpjquota="errors=continue,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 93.556958][ T5002] EXT4-fs (loop2): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 93.591101][ T5023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 93.739883][ T5028] MPTCP: kernel_bind error, err=-99 [ 93.806260][ T5030] process 'syz.4.232' launched '/proc/sys/net/ipv4/tcp_rmem' with NULL argv: empty string added [ 94.034626][ T5039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.053432][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.454541][ T5018] loop5: detected capacity change from 0 to 32768 [ 94.473319][ T5019] loop3: detected capacity change from 0 to 32768 [ 94.506680][ T5061] sg_read: process 103 (syz.1.241) changed security contexts after opening file descriptor, this is not allowed. [ 94.553756][ T5019] XFS: noikeep mount option is deprecated. [ 94.612785][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.655044][ T5019] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 94.664078][ T5019] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 94.675538][ T5071] loop1: detected capacity change from 0 to 256 [ 94.685516][ T5019] XFS (loop3): Mounting V5 Filesystem [ 94.835020][ T5071] FAT-fs (loop1): Directory bread(block 64) failed [ 94.872643][ T5071] FAT-fs (loop1): Directory bread(block 65) failed [ 94.899930][ T5019] XFS (loop3): Ending clean mount [ 94.900017][ T5071] FAT-fs (loop1): Directory bread(block 66) failed [ 94.913901][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 94.937127][ T5019] XFS (loop3): Quotacheck needed: Please wait. [ 94.952299][ T5071] FAT-fs (loop1): Directory bread(block 67) failed [ 95.012224][ T5071] FAT-fs (loop1): Directory bread(block 68) failed [ 95.018861][ T5071] FAT-fs (loop1): Directory bread(block 69) failed [ 95.062505][ T5019] XFS (loop3): Quotacheck: Done. [ 95.106515][ T5071] FAT-fs (loop1): Directory bread(block 70) failed [ 95.122220][ T5071] FAT-fs (loop1): Directory bread(block 71) failed [ 95.129551][ T5071] FAT-fs (loop1): Directory bread(block 72) failed [ 95.229156][ T23] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 95.239055][ T5071] FAT-fs (loop1): Directory bread(block 73) failed [ 95.245277][ T4170] XFS (loop3): Unmounting Filesystem [ 95.287308][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.302278][ T23] usb 3-1: Product: syz [ 95.306884][ T23] usb 3-1: Manufacturer: syz [ 95.311996][ T23] usb 3-1: SerialNumber: syz [ 95.349469][ T23] usb 3-1: config 0 descriptor?? [ 95.355423][ T5065] loop5: detected capacity change from 0 to 32768 [ 95.754777][ T23] pegasus: probe of 3-1:0.0 failed with error -71 [ 95.784047][ T23] usb 3-1: USB disconnect, device number 4 [ 95.849980][ T5094] loop1: detected capacity change from 0 to 1024 [ 96.555221][ T5083] loop4: detected capacity change from 0 to 32768 [ 96.697023][ T5083] XFS (loop4): Mounting V5 Filesystem [ 96.847099][ T5139] loop1: detected capacity change from 0 to 1024 [ 96.905856][ T5083] XFS (loop4): Ending clean mount [ 97.013061][ T5139] hfsplus: bad catalog entry type [ 97.118848][ T9] hfsplus: b-tree write err: -5, ino 4 [ 97.412942][ T4248] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.450741][ T5165] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 97.631629][ T5110] loop3: detected capacity change from 0 to 32768 [ 97.668516][ T5176] loop5: detected capacity change from 0 to 256 [ 97.682884][ T4248] usb 5-1: Using ep0 maxpacket: 32 [ 97.727224][ T5176] exfat: Deprecated parameter 'namecase' [ 97.812883][ T4248] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 97.822758][ T5110] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 97.903715][ T5176] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 98.023298][ T4248] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 98.057605][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.076603][ T4248] usb 5-1: Product: syz [ 98.081035][ T4248] usb 5-1: Manufacturer: syz [ 98.090317][ T4248] usb 5-1: SerialNumber: syz [ 98.110046][ T4248] usb 5-1: config 0 descriptor?? [ 98.154430][ T5148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.213027][ T4248] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 98.233367][ T4170] ocfs2: Unmounting device (7,3) on (node local) [ 98.406432][ T4586] usb 5-1: USB disconnect, device number 3 [ 98.428371][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 98.440202][ T5195] loop3: detected capacity change from 0 to 512 [ 98.464545][ T5197] loop5: detected capacity change from 0 to 16 [ 98.530062][ T5195] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.278: casefold flag without casefold feature [ 98.562363][ T5195] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.278: couldn't read orphan inode 15 (err -117) [ 98.563400][ T5197] erofs: (device loop5): mounted with root inode @ nid 36. [ 98.588445][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.601558][ T5163] loop1: detected capacity change from 0 to 40427 [ 98.645284][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.655156][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.671128][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.681640][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.692834][ T5163] F2FS-fs (loop1): invalid crc value [ 98.700745][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.714328][ T5163] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 98.743099][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.754525][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.786850][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.824668][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.881614][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.928502][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.950547][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.969957][ T5163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.010607][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.087009][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.143102][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.176825][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.238894][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.257716][ T4169] attempt to access beyond end of device [ 99.257716][ T4169] loop1: rw=2049, want=45104, limit=40427 [ 99.329806][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.378099][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.424245][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.449955][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.484868][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.508759][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.574526][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.623022][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.662619][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.671594][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.751727][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.771462][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.813074][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.849112][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.874987][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.885168][ T5214] loop3: detected capacity change from 0 to 32768 [ 99.893356][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.909051][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 99.980984][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.027094][ T5214] XFS (loop3): Mounting V5 Filesystem [ 100.047964][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.096315][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.121678][ T5247] loop1: detected capacity change from 0 to 2048 [ 100.140859][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.161671][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.167943][ T5214] XFS (loop3): Ending clean mount [ 100.184672][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.186806][ T5214] XFS (loop3): Quotacheck needed: Please wait. [ 100.203717][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.219091][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.225520][ T5247] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742 [ 100.229593][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.250738][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.262149][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.273874][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.283120][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.306678][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.316210][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.334607][ T5214] XFS (loop3): Quotacheck: Done. [ 100.360009][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.369246][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.384966][ T4215] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.412778][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.422232][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 100.441798][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.453035][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.479428][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.485488][ T23] usb 5-1: config 0 descriptor?? [ 100.513109][ T4170] XFS (loop3): Unmounting Filesystem [ 100.523000][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.555281][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.575502][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.593885][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.620742][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.636536][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.656688][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.678952][ T4215] usb 3-1: Using ep0 maxpacket: 16 [ 100.704379][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.721278][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.723001][ T5260] loop1: detected capacity change from 0 to 128 [ 100.756168][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.766946][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.789270][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.791059][ T5260] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 100.798995][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.815201][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.833432][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.847291][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.849362][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,nojournal_checksum,,errors=continue. Quota mode: none. [ 100.856282][ T4215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.871914][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.883006][ T4215] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.912880][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.924534][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.936110][ T4215] usb 3-1: config 0 descriptor?? [ 100.956303][ T5260] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.969349][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.980417][ T23] isku 0003:1E7D:319C.0004: item fetching failed at offset 5/7 [ 100.984912][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.992695][ T23] isku 0003:1E7D:319C.0004: parse failed [ 101.001720][ T23] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 101.042667][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.051853][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.064585][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.075120][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.078803][ T5260] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 101.084285][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.113693][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.123679][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.133659][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.146821][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.158364][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.189162][ T23] usb 5-1: USB disconnect, device number 4 [ 101.192128][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.205435][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.215503][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.225766][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.244731][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.296900][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.332892][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.345520][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.356079][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.365984][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.376210][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.385890][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.395860][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.420528][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.452877][ T4215] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input7 [ 101.476364][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.500434][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.523107][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.542819][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.552009][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.568252][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.588782][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.598270][ T4215] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 101.615420][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.647707][ T4586] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.658017][ T4215] usb 3-1: USB disconnect, device number 5 [ 101.673815][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.690797][ T4586] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.700362][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.714174][ T4582] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.743469][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.777401][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.791212][ T5281] fido_id[5281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 101.813259][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.853198][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.897038][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.911802][ T5288] loop1: detected capacity change from 0 to 256 [ 101.939195][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.960270][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.004809][ T5292] netlink: 'syz.3.314': attribute type 298 has an invalid length. [ 102.020494][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.034398][ T4586] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.072555][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.092549][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.101772][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.117029][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.151597][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.172941][ T4586] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.204615][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.221734][ T5299] loop3: detected capacity change from 0 to 16 [ 102.231845][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.248934][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.259824][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.287172][ T5299] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.315252][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.368446][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.420023][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.448586][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.455838][ T5305] 9p: Unknown Cache mode readahead [ 102.494106][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.529459][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.560436][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.599750][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.628554][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.648389][ T5313] loop2: detected capacity change from 0 to 128 [ 102.671746][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.675815][ T5312] loop3: detected capacity change from 0 to 2048 [ 102.691807][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.714017][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.724593][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.738654][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.758671][ T5312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.778096][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.795847][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.810864][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.830431][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.861008][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.873784][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.901774][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.975036][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.010461][ T5322] loop2: detected capacity change from 0 to 2048 [ 103.019045][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.047396][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.117247][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.125838][ T5329] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.150875][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.197004][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.242532][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.251462][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.334752][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.363038][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.420636][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.448325][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.480425][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.533573][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.560491][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.580662][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.600268][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.620360][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.639551][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.674512][ T5346] loop3: detected capacity change from 0 to 4096 [ 103.689013][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.748921][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.806278][ T5346] ntfs: volume version 3.1. [ 103.816325][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.865661][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.896628][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.917710][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.963173][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 103.990135][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.018749][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.067406][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.087099][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.110876][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.138694][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.153505][ T26] audit: type=1326 audit(2000000017.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.175919][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.244249][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.267609][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.288748][ T26] audit: type=1326 audit(2000000017.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.333441][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.373231][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.392404][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.409676][ T26] audit: type=1326 audit(2000000017.390:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.466995][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.506485][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.520964][ T5368] loop3: detected capacity change from 0 to 512 [ 104.552171][ T26] audit: type=1326 audit(2000000017.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.590008][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.631168][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.639398][ T26] audit: type=1326 audit(2000000017.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.667802][ T5368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.669093][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.717383][ T5368] EXT4-fs (loop3): 1 truncate cleaned up [ 104.729620][ T26] audit: type=1326 audit(2000000017.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.739169][ T5368] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,user_xattr,abort,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 104.753313][ T26] audit: type=1326 audit(2000000017.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.798494][ T26] audit: type=1326 audit(2000000017.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.825349][ T26] audit: type=1326 audit(2000000017.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.833433][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.849311][ T26] audit: type=1326 audit(2000000017.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4474303969 code=0x7fc00000 [ 104.890789][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.910576][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.920719][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 104.962937][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.001218][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.045382][ T5352] loop2: detected capacity change from 0 to 32768 [ 105.057830][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.099990][ T5352] (syz.2.340,5352,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.100168][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.191912][ T5352] (syz.2.340,5352,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.238680][ T5352] JBD2: Ignoring recovery information on journal [ 105.258976][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.268592][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.280520][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.290586][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.300320][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.323593][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.392382][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.399052][ T5352] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.438900][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.475800][ T5352] (syz.2.340,5352,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 105.491597][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.542841][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.593060][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.601916][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.695543][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.740639][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.741650][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 105.771773][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.853100][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.872514][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 105.919376][ T5419] loop2: detected capacity change from 0 to 256 [ 105.935620][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 105.981389][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.019281][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.061246][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.081900][ T5419] FAT-fs (loop2): Directory bread(block 64) failed [ 106.113862][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.122406][ T5419] FAT-fs (loop2): Directory bread(block 65) failed [ 106.129736][ T5419] FAT-fs (loop2): Directory bread(block 66) failed [ 106.163715][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.201233][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.235991][ T5419] FAT-fs (loop2): Directory bread(block 67) failed [ 106.247093][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.259052][ T5419] FAT-fs (loop2): Directory bread(block 68) failed [ 106.277295][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.299081][ T5419] FAT-fs (loop2): Directory bread(block 69) failed [ 106.323066][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.332452][ T5419] FAT-fs (loop2): Directory bread(block 70) failed [ 106.339546][ T5419] FAT-fs (loop2): Directory bread(block 71) failed [ 106.359067][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.370160][ T5419] FAT-fs (loop2): Directory bread(block 72) failed [ 106.380822][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.390302][ T5419] FAT-fs (loop2): Directory bread(block 73) failed [ 106.399408][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.445189][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.473556][ T5434] loop3: detected capacity change from 0 to 1024 [ 106.490085][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.526794][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.571821][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.658631][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.687981][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.758137][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.786767][ T3067] hfsplus: b-tree write err: -5, ino 4 [ 106.833134][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.858954][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.870094][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.887180][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.915559][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.935522][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 106.949089][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.018759][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.049742][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.083781][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.117598][ T4754] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.137438][ T4582] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.370596][ T5464] loop1: detected capacity change from 0 to 2048 [ 107.382174][ T4582] usb 4-1: Using ep0 maxpacket: 32 [ 107.437584][ T5464] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.502392][ T4582] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.520894][ T4582] usb 4-1: config 0 has no interface number 0 [ 107.527389][ T5473] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.538420][ T4407] udevd[4407]: incorrect nilfs2 checksum on /dev/loop1 [ 107.712414][ T4582] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.740194][ T4582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.772741][ T4582] usb 4-1: Product: syz [ 107.777392][ T4582] usb 4-1: Manufacturer: syz [ 107.828304][ T4582] usb 4-1: SerialNumber: syz [ 107.849160][ T4582] usb 4-1: config 0 descriptor?? [ 107.893693][ T4582] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.122814][ T4582] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.161629][ T4582] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.537657][ T4580] usb 4-1: USB disconnect, device number 3 [ 108.552099][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.574106][ T4580] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.607724][ T4580] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.636213][ T4580] quatech2 4-1:0.51: device disconnected [ 108.802945][ T4211] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.253095][ T4211] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 109.253127][ T4211] usb 5-1: config 0 has no interface number 0 [ 109.253165][ T4211] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 109.412951][ T4211] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 109.412984][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.413005][ T4211] usb 5-1: Product: syz [ 109.413020][ T4211] usb 5-1: Manufacturer: syz [ 109.413034][ T4211] usb 5-1: SerialNumber: syz [ 109.420508][ T4211] usb 5-1: config 0 descriptor?? [ 109.461894][ T5544] loop3: detected capacity change from 0 to 764 [ 109.563214][ T5511] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 109.781099][ T5557] loop1: detected capacity change from 0 to 256 [ 109.890293][ T5557] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 109.915541][ T5563] loop3: detected capacity change from 0 to 512 [ 109.922926][ T4211] usb 5-1: MIDIStreaming interface descriptor not found [ 110.019018][ T5563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.029140][ T4211] usb 5-1: USB disconnect, device number 5 [ 110.058470][ T5563] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.419: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.161845][ T5563] EXT4-fs error (device loop3): ext4_quota_enable:6415: comm syz.3.419: Bad quota inode: 3, type: 0 [ 110.224493][ T5563] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 110.272416][ T5563] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 110.289596][ T5563] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,max_batch_time=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 110.424515][ T5571] udevd[5571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.020434][ T5595] netlink: 'syz.3.427': attribute type 298 has an invalid length. [ 111.126681][ T5589] loop1: detected capacity change from 0 to 8192 [ 111.237219][ T5589] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 111.305523][ T5589] REISERFS (device loop1): using ordered data mode [ 111.364030][ T5589] reiserfs: using flush barriers [ 111.428420][ T5589] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.482208][ T4582] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.503201][ T5589] REISERFS (device loop1): checking transaction log (loop1) [ 111.579858][ T5558] loop2: detected capacity change from 0 to 40427 [ 111.646186][ T5558] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 111.688487][ T5558] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 111.732381][ T4582] usb 4-1: Using ep0 maxpacket: 16 [ 111.747106][ T5558] F2FS-fs (loop2): invalid crc value [ 111.772704][ T4582] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 111.810245][ T5558] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.823144][ T5589] REISERFS (device loop1): Using tea hash to sort names [ 111.824079][ T3067] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.846122][ T5589] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 111.984994][ T3067] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.079832][ T5558] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.144241][ T3067] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.295731][ T4172] attempt to access beyond end of device [ 112.295731][ T4172] loop2: rw=2049, want=45104, limit=40427 [ 112.315395][ T3067] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.526533][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.612098][ T4582] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 112.621194][ T4582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 112.636867][ T4582] usb 4-1: Product: syz [ 112.641084][ T4582] usb 4-1: Manufacturer: syz [ 112.647768][ T4582] usb 4-1: SerialNumber: syz [ 112.683191][ T4582] usb 4-1: config 0 descriptor?? [ 112.711649][ T5637] loop1: detected capacity change from 0 to 256 [ 112.734670][ T4582] pwc: Philips SPC 880NC USB webcam detected. [ 112.768726][ T5637] exfat: Deprecated parameter 'utf8' [ 112.812796][ T5637] exfat: Deprecated parameter 'namecase' [ 112.877641][ T5637] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 112.974922][ T4582] pwc: Warning: more than 1 configuration available. [ 113.002183][ T4582] pwc: Failed to set LED on/off time (-71) [ 113.025940][ T4582] pwc: send_video_command error -71 [ 113.043274][ T4582] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 113.050947][ T4582] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 113.107930][ T4582] usb 4-1: USB disconnect, device number 4 [ 113.122706][ T23] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 113.162249][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.170299][ T23] usb 5-1: Product: syz [ 113.188356][ T23] usb 5-1: Manufacturer: syz [ 113.195343][ T4754] syz-executor (4754) used greatest stack depth: 21192 bytes left [ 113.231268][ T23] usb 5-1: SerialNumber: syz [ 113.264135][ T5648] loop1: detected capacity change from 0 to 64 [ 113.312804][ T23] usb 5-1: config 0 descriptor?? [ 113.375098][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 113.439857][ T5648] Trying to free block not in datazone [ 113.476893][ T5648] minix_free_block (loop1:21): bit already cleared [ 114.002751][ T23] gspca_sunplus: reg_r err -71 [ 114.007745][ T23] sunplus: probe of 5-1:0.0 failed with error -71 [ 114.038233][ T23] usb 5-1: USB disconnect, device number 6 [ 114.138472][ T3067] device hsr_slave_0 left promiscuous mode [ 114.146477][ T5683] loop2: detected capacity change from 0 to 24 [ 114.188844][ T3067] device hsr_slave_1 left promiscuous mode [ 114.192231][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.236791][ T3067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.254541][ T3067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.276149][ T5685] block nbd1: NBD_DISCONNECT [ 114.290868][ T3067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.312841][ T3067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.343789][ T3067] device bridge_slave_1 left promiscuous mode [ 114.350084][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.443562][ T3067] device bridge_slave_0 left promiscuous mode [ 114.449865][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.629054][ T3067] device veth1_macvtap left promiscuous mode [ 114.644051][ T3067] device veth0_macvtap left promiscuous mode [ 114.674086][ T5697] trusted_key: encrypted_key: insufficient parameters specified [ 114.683026][ T3067] device veth1_vlan left promiscuous mode [ 114.688958][ T3067] device veth0_vlan left promiscuous mode [ 115.190500][ T5688] loop1: detected capacity change from 0 to 32768 [ 115.224608][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 115.277360][ T5715] ptrace attach of "./syz-executor exec"[4172] was attempted by "./syz-executor exec"[5715] [ 115.322811][ T4215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.361534][ T5688] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 115.381244][ T5718] loop2: detected capacity change from 0 to 512 [ 115.440322][ T3067] team0 (unregistering): Port device team_slave_1 removed [ 115.456392][ T5718] EXT4-fs (loop2): Ignoring removed orlov option [ 115.480831][ T3067] team0 (unregistering): Port device team_slave_0 removed [ 115.506579][ T3067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.530138][ T4169] (syz-executor,4169,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 115.562464][ T3067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.568759][ T4169] ocfs2: Unmounting device (7,1) on (node local) [ 115.597088][ T5718] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.626778][ T5718] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.637972][ T4215] usb 4-1: Using ep0 maxpacket: 32 [ 115.874471][ T5728] program syz.2.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.909419][ T5726] loop1: detected capacity change from 0 to 4096 [ 115.926029][ T3067] bond0 (unregistering): Released all slaves [ 115.933421][ T4215] usb 4-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 115.943745][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.951870][ T4215] usb 4-1: Product: syz [ 115.957548][ T4215] usb 4-1: Manufacturer: syz [ 115.974253][ T4215] usb 4-1: SerialNumber: syz [ 115.986298][ T4215] usb 4-1: config 0 descriptor?? [ 116.001676][ T5726] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 116.026495][ T4215] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 116.130074][ T5726] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 116.196784][ T4733] Bluetooth: hci0: command 0x0409 tx timeout [ 116.204474][ T5726] ntfs3: loop1: Failed to load $Extend. [ 116.446381][ T5726] syz.1.467 (5726) used greatest stack depth: 21168 bytes left [ 116.673856][ T4215] gspca_sunplus: reg_w_riv err -71 [ 116.679269][ T4215] sunplus: probe of 4-1:0.0 failed with error -71 [ 116.754053][ T4215] usb 4-1: USB disconnect, device number 5 [ 116.813095][ T5679] chnl_net:caif_netlink_parms(): no params data found [ 117.117698][ T5732] loop2: detected capacity change from 0 to 32768 [ 117.153834][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.198152][ T5732] (syz.2.470,5732,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.212214][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.213424][ T5679] device bridge_slave_0 entered promiscuous mode [ 117.274867][ T5732] (syz.2.470,5732,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.290340][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.348089][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.400911][ T5732] JBD2: Ignoring recovery information on journal [ 117.427555][ T5679] device bridge_slave_1 entered promiscuous mode [ 117.461165][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.475544][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.522759][ T4642] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.533332][ T5732] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.580011][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 117.701573][ T5679] team0: Port device team_slave_0 added [ 117.764721][ T5679] team0: Port device team_slave_1 added [ 117.778627][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 117.832950][ T4642] usb 2-1: Using ep0 maxpacket: 32 [ 117.856275][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.866092][ T5785] loop3: detected capacity change from 0 to 2048 [ 117.888983][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.967973][ T5785] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.978720][ T4642] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 117.998820][ T4642] usb 2-1: config 0 has no interface number 0 [ 118.052742][ T4642] usb 2-1: config 0 interface 196 altsetting 1 has an invalid endpoint with address 0x12, skipping [ 118.108782][ T4642] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.113598][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.137296][ T5789] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.179212][ T4642] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.228820][ T4642] usb 2-1: config 0 interface 196 has no altsetting 0 [ 118.245682][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.258738][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.292804][ T4733] Bluetooth: hci0: command 0x041b tx timeout [ 118.337770][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.442984][ T4642] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 118.477327][ T4642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.522693][ T4642] usb 2-1: Product: syz [ 118.543084][ T4642] usb 2-1: Manufacturer: syz [ 118.579488][ T4642] usb 2-1: SerialNumber: syz [ 118.586926][ T5679] device hsr_slave_0 entered promiscuous mode [ 118.619319][ T4642] usb 2-1: config 0 descriptor?? [ 118.660565][ T5679] device hsr_slave_1 entered promiscuous mode [ 118.673131][ T5768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.705500][ T5679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.732408][ T5811] netlink: 192 bytes leftover after parsing attributes in process `syz.3.492'. [ 118.742110][ T5679] Cannot create hsr debugfs directory [ 118.832070][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 118.924272][ T4642] ipheth 2-1:0.196: Unable to find endpoints [ 118.951325][ T4642] usb 2-1: USB disconnect, device number 4 [ 119.426867][ T5679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.484321][ T5679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 119.544764][ T5679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.602928][ T5679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.687761][ T5844] tipc: Started in network mode [ 119.720149][ T5844] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 119.762457][ T5844] tipc: Enabled bearer , priority 0 [ 119.976476][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.983855][ T4733] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.057381][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.113662][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.132857][ T4642] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.160726][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.195186][ T5867] device geneve2 entered promiscuous mode [ 120.233066][ T4733] usb 2-1: Using ep0 maxpacket: 32 [ 120.256944][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.300122][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.362898][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 120.363094][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.370082][ T4733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 120.376276][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.402236][ T4642] usb 4-1: Using ep0 maxpacket: 32 [ 120.432153][ T4733] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 120.437613][ T5871] IPVS: fo: TCP 0.0.0.0:0 - no destination available [ 120.463960][ T4733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.483059][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.514416][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.526045][ T4733] usb 2-1: config 0 descriptor?? [ 120.538697][ T4642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.552649][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.560231][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.582140][ T4642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.622198][ T4642] usb 4-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 120.625126][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.655259][ T4642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.682325][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.696707][ T4642] usb 4-1: config 0 descriptor?? [ 120.711298][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.750351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.792147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.811475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.843674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.873102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.885517][ T4586] tipc: Node number set to 8432298 [ 120.917411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.943574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.968806][ T5679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.007733][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.035029][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.050893][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.056309][ T4733] wacom 0003:056A:4004.0006: unknown main item tag 0x0 [ 121.093379][ T4733] wacom 0003:056A:4004.0006: unknown main item tag 0x0 [ 121.131118][ T4733] wacom 0003:056A:4004.0006: unknown main item tag 0x0 [ 121.171706][ T4733] wacom 0003:056A:4004.0006: unknown main item tag 0x0 [ 121.202205][ T4733] wacom 0003:056A:4004.0006: unknown main item tag 0x0 [ 121.218876][ T4642] lenovo 0003:17EF:6049.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.3-1/input0 [ 121.262947][ T4733] wacom 0003:056A:4004.0006: hidraw1: USB HID v1.01 Device [HID 056a:4004] on usb-dummy_hcd.1-1/input0 [ 121.359385][ T4733] usb 2-1: USB disconnect, device number 5 [ 121.419135][ T4580] usb 4-1: USB disconnect, device number 6 [ 121.506958][ T5890] fido_id[5890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 121.553013][ T4586] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.589888][ T5892] fido_id[5892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 121.603699][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.643336][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.676549][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.922375][ T4586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.976563][ T4586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.049228][ T5909] loop1: detected capacity change from 0 to 1024 [ 122.062124][ T4586] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 122.088595][ T4586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.151528][ T4586] usb 3-1: config 0 descriptor?? [ 122.188570][ T5915] netem: incorrect ge model size [ 122.224261][ T5915] netem: change failed [ 122.433132][ T4733] Bluetooth: hci0: command 0x0419 tx timeout [ 122.471196][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.486134][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.499268][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 122.546687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.566530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.599236][ T5679] device veth0_vlan entered promiscuous mode [ 122.611312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.647873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.662561][ T4586] lenovo 0003:17EF:60B5.0008: hidraw0: USB HID v0.09 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 122.688145][ T5679] device veth1_vlan entered promiscuous mode [ 122.782811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.848550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.856759][ T4586] usb 3-1: USB disconnect, device number 6 [ 122.952408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.974197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.987014][ T5939] fido_id[5939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.041457][ T5679] device veth0_macvtap entered promiscuous mode [ 123.074614][ T5679] device veth1_macvtap entered promiscuous mode [ 123.173408][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.220137][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.261825][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.309278][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.361105][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.404851][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.436021][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.522694][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.619697][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.636638][ T5967] loop3: detected capacity change from 0 to 32768 [ 123.684953][ T5967] jfs_mount: Failed to read AGGREGATE_I [ 123.690991][ T5967] Mount JFS Failure: -5 [ 123.695310][ T5967] jfs_mount failed w/return code = -5 [ 123.721035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.731717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.753971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.783566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.838105][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.882188][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.919077][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.977156][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.013269][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.038654][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.069905][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.101150][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.119206][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.135279][ T5679] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.144528][ T5679] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.213317][ T5989] netlink: 'syz.4.548': attribute type 27 has an invalid length. [ 124.215662][ T5679] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.270780][ T5679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.358667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.409702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.481910][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 124.686806][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.710726][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.798081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.821261][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.850839][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.941701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.371145][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 125.371162][ T26] audit: type=1326 audit(2000000038.560:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.6.563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dacd26969 code=0x0 [ 125.569378][ T5999] loop2: detected capacity change from 0 to 32768 [ 126.112346][ T6006] loop3: detected capacity change from 0 to 40427 [ 126.259948][ T6006] F2FS-fs (loop3): invalid crc value [ 126.310978][ T6006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.494367][ T6006] F2FS-fs (loop3): recover fsync data on readonly fs [ 126.510810][ T6006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.559984][ T6067] loop2: detected capacity change from 0 to 256 [ 126.658877][ T6067] exfat: Deprecated parameter 'namecase' [ 126.711020][ T6067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 126.802560][ T6043] Hibernate inconsistent memory map detected! [ 126.837416][ T6043] PM: hibernation: Image mismatch: architecture specific data [ 127.033478][ T4582] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 127.043228][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 127.110824][ T6084] loop3: detected capacity change from 0 to 256 [ 127.180509][ T6084] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 127.202197][ T4580] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 127.402414][ T4582] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 127.402446][ T4582] usb 5-1: config 4 has no interface number 0 [ 127.515760][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 127.531684][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.582'. [ 127.562740][ T4582] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 127.571832][ T4582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.582700][ T4580] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 127.590990][ T4580] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 127.605245][ T4580] usb 3-1: config 0 has no interface number 0 [ 127.611629][ T4582] usb 5-1: Product: syz [ 127.619095][ T4582] usb 5-1: Manufacturer: syz [ 127.628673][ T4580] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 127.659298][ T4582] usb 5-1: SerialNumber: syz [ 127.667749][ T4580] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.678828][ T4580] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 127.688828][ T4580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.699326][ T4580] usb 3-1: config 0 descriptor?? [ 127.707172][ T4582] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 127.795540][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 127.939063][ T6118] loop3: detected capacity change from 0 to 256 [ 128.022557][ T6118] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 128.072528][ T7] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 128.092232][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.124545][ T7] usb 7-1: Product: syz [ 128.132587][ T4582] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 128.148961][ T7] usb 7-1: Manufacturer: syz [ 128.161077][ T4582] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 128.191371][ T7] usb 7-1: SerialNumber: syz [ 128.207749][ T7] usb 7-1: config 0 descriptor?? [ 128.266370][ T7] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 128.330580][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 128.341429][ T4582] usb 5-1: USB disconnect, device number 7 [ 128.415302][ T4580] usb 3-1: USB disconnect, device number 7 [ 128.444500][ T6134] hugetlbfs: Bad value for 'nr_inodes' [ 128.472345][ T7] gspca_sn9c2028: read1 error -32 [ 128.539852][ T6140] loop3: detected capacity change from 0 to 256 [ 128.626601][ T6140] FAT-fs (loop3): Directory bread(block 64) failed [ 128.638702][ T6140] FAT-fs (loop3): Directory bread(block 65) failed [ 128.646125][ T6140] FAT-fs (loop3): Directory bread(block 66) failed [ 128.660766][ T6140] FAT-fs (loop3): Directory bread(block 67) failed [ 128.669374][ T6140] FAT-fs (loop3): Directory bread(block 68) failed [ 128.683158][ T6140] FAT-fs (loop3): Directory bread(block 69) failed [ 128.690017][ T6140] FAT-fs (loop3): Directory bread(block 70) failed [ 128.702941][ T6140] FAT-fs (loop3): Directory bread(block 71) failed [ 128.710387][ T6140] FAT-fs (loop3): Directory bread(block 72) failed [ 128.722587][ T6140] FAT-fs (loop3): Directory bread(block 73) failed [ 128.732377][ T7] gspca_sn9c2028: read1 error -71 [ 128.737594][ T7] sn9c2028: probe of 7-1:0.0 failed with error -71 [ 128.755714][ T7] usb 7-1: USB disconnect, device number 2 [ 128.897419][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 129.117242][ C1] sd 0:0:1:0: tag#1906 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 129.127303][ C1] sd 0:0:1:0: tag#1906 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 129.302854][ T6164] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.501850][ T6169] loop2: detected capacity change from 0 to 32768 [ 130.504828][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 130.526084][ T6219] netlink: 1 bytes leftover after parsing attributes in process `syz.3.622'. [ 130.559865][ T6169] jfs_mount: dbMount failed w/rc = -22 [ 130.572311][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.612217][ T4580] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.616934][ T6169] Mount JFS Failure: -22 [ 130.656255][ T6169] jfs_mount failed w/return code = -22 [ 130.824122][ T6230] loop2: detected capacity change from 0 to 8 [ 130.832313][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 130.851837][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 130.875677][ T4580] usb 5-1: Using ep0 maxpacket: 32 [ 130.976149][ T6230] fuse: Unexpected value for 'default_permissions' [ 130.992227][ T4580] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 131.010780][ T4580] usb 5-1: config 0 has no interface number 0 [ 131.062788][ T4642] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 131.168166][ T23] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 131.182471][ T4580] usb 5-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=db.5b [ 131.198542][ T4580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.203855][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.226562][ T4580] usb 5-1: Product: syz [ 131.242347][ T23] usb 2-1: Product: syz [ 131.251349][ T4580] usb 5-1: Manufacturer: syz [ 131.256899][ T23] usb 2-1: Manufacturer: syz [ 131.261538][ T4580] usb 5-1: SerialNumber: syz [ 131.268109][ T4580] usb 5-1: config 0 descriptor?? [ 131.307139][ T23] usb 2-1: SerialNumber: syz [ 131.324032][ T4580] ftdi_sio 5-1:0.173: FTDI USB Serial Device converter detected [ 131.328146][ T4642] usb 7-1: Using ep0 maxpacket: 8 [ 131.340140][ T23] usb 2-1: config 0 descriptor?? [ 131.354196][ T6241] loop2: detected capacity change from 0 to 4096 [ 131.355132][ T4580] usb 5-1: Detected FT-X [ 131.395010][ T23] gspca_main: sq905-2.14.0 probing 2770:9120 [ 131.483575][ T4642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.496209][ T4642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 131.532309][ T4580] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 131.538844][ T4642] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.566486][ T4642] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 131.576290][ T4580] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 131.584483][ T4642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.592341][ T4580] ftdi_sio 5-1:0.173: GPIO initialisation failed: -71 [ 131.601296][ T4580] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 131.607307][ T4642] usb 7-1: config 0 descriptor?? [ 131.653107][ T6226] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 131.657640][ T4580] usb 5-1: USB disconnect, device number 8 [ 131.687509][ T4580] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 131.704334][ T4580] ftdi_sio 5-1:0.173: device disconnected [ 131.833124][ T23] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 131.842885][ T6249] loop2: detected capacity change from 0 to 256 [ 131.849445][ T23] sq905: probe of 2-1:0.0 failed with error -71 [ 131.886674][ T23] usb 2-1: USB disconnect, device number 6 [ 131.996011][ T6239] loop3: detected capacity change from 0 to 40427 [ 132.067931][ T6239] F2FS-fs (loop3): invalid crc value [ 132.118538][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.126761][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.137558][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.147318][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.159817][ T6239] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.192783][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.200205][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.222148][ T4642] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 132.270983][ T4642] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v1.ff Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0 [ 132.327400][ T4642] usb 7-1: USB disconnect, device number 3 [ 132.428662][ T6239] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 132.494313][ T6239] F2FS-fs (loop3): Start checkpoint disabled! [ 132.520730][ T6260] fido_id[6260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 132.581291][ T6239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 132.620973][ T6271] loop1: detected capacity change from 0 to 512 [ 132.698565][ T4223] attempt to access beyond end of device [ 132.698565][ T4223] loop3: rw=2049, want=45104, limit=40427 [ 132.730277][ T6271] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.732257][ T4580] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.756551][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763155][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.856067][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 132.891782][ T6271] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.958355][ T6276] loop6: detected capacity change from 0 to 128 [ 133.154824][ T4580] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.191773][ T4580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.322471][ T4580] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.352144][ T4580] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.362556][ T4580] usb 3-1: Manufacturer: syz [ 133.408083][ T4580] usb 3-1: config 0 descriptor?? [ 133.441541][ T6289] loop6: detected capacity change from 0 to 512 [ 133.473344][ T6287] loop1: detected capacity change from 0 to 2048 [ 133.540859][ T6289] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.559101][ T6289] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.578149][ T4642] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.582140][ T4580] rc_core: IR keymap rc-hauppauge not found [ 133.644904][ T4580] Registered IR keymap rc-empty [ 133.660610][ T4580] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 133.683033][ T4580] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 133.703364][ T6294] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.952408][ C0] igorplugusb 3-1:0.0: receive overflow, at least 23 lost [ 133.957197][ T4642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.003172][ T4642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.020899][ T4642] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.068365][ T4642] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.107934][ T4642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.159546][ T4642] usb 4-1: config 0 descriptor?? [ 134.170977][ T4580] usb 3-1: USB disconnect, device number 8 [ 134.386648][ T6318] loop1: detected capacity change from 0 to 512 [ 134.629588][ T4642] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description [ 134.653167][ T4642] plantronics 0003:047F:FFFF.000A: parse failed [ 134.659598][ T4642] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 134.761695][ T6324] usb usb8: usbfs: process 6324 (syz.6.657) did not claim interface 0 before use [ 134.767075][ T6318] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3675!=33349) [ 134.767373][ T6318] EXT4-fs (loop1): group descriptors corrupted! [ 134.831586][ T4580] usb 4-1: USB disconnect, device number 7 [ 135.171017][ T6333] loop6: detected capacity change from 0 to 8192 [ 135.230549][ T6333] FAT-fs (loop6): Directory bread(block 22913) failed [ 135.265916][ T6333] FAT-fs (loop6): Directory bread(block 22914) failed [ 135.296943][ T6333] FAT-fs (loop6): Directory bread(block 22915) failed [ 135.319015][ T6333] FAT-fs (loop6): Directory bread(block 22916) failed [ 135.360383][ T6333] FAT-fs (loop6): Directory bread(block 22917) failed [ 135.378248][ T6333] FAT-fs (loop6): Directory bread(block 22918) failed [ 135.414846][ T6346] loop1: detected capacity change from 0 to 128 [ 135.427948][ T6333] FAT-fs (loop6): Directory bread(block 22919) failed [ 135.456561][ T6333] FAT-fs (loop6): Directory bread(block 22920) failed [ 135.490532][ T6333] FAT-fs (loop6): Directory bread(block 22921) failed [ 135.513645][ T6333] FAT-fs (loop6): Directory bread(block 22922) failed [ 135.583975][ T6346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.608447][ T6346] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.028762][ T6364] loop3: detected capacity change from 0 to 1024 [ 136.230819][ T6336] loop2: detected capacity change from 0 to 40427 [ 136.335751][ T6336] F2FS-fs (loop2): invalid crc value [ 136.376542][ T6379] loop1: detected capacity change from 0 to 1024 [ 136.409034][ T6336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.534479][ T6391] loop6: detected capacity change from 0 to 256 [ 136.633593][ T6391] exfat: Deprecated parameter 'namecase' [ 136.704774][ T6391] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 136.725533][ T6336] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 136.792966][ T6336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.993777][ T4172] attempt to access beyond end of device [ 136.993777][ T4172] loop2: rw=2049, want=45104, limit=40427 [ 137.938658][ T6404] loop1: detected capacity change from 0 to 32768 [ 138.025374][ T26] audit: type=1800 audit(2000000051.210:68): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 138.294725][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.710'. [ 138.359178][ T6451] Zero length message leads to an empty skb [ 138.440243][ T6451] syz.4.710 (6451) used greatest stack depth: 21088 bytes left [ 138.501923][ T6433] loop3: detected capacity change from 0 to 32768 [ 138.545295][ T6433] XFS: ikeep mount option is deprecated. [ 138.576545][ T6433] XFS: noikeep mount option is deprecated. [ 138.691481][ T6456] loop6: detected capacity change from 0 to 1024 [ 138.798456][ T6433] XFS (loop3): Mounting V5 Filesystem [ 138.810512][ T26] audit: type=1326 audit(2000000052.000:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae6f93b969 code=0x0 [ 138.972283][ T4257] hfsplus: b-tree write err: -5, ino 4 [ 139.355801][ T6433] XFS (loop3): Ending clean mount [ 139.456031][ T6433] XFS (loop3): Quotacheck needed: Please wait. [ 139.586990][ T6433] XFS (loop3): Quotacheck: Done. [ 139.723596][ T4170] XFS (loop3): Unmounting Filesystem [ 139.911487][ T6486] loop1: detected capacity change from 0 to 512 [ 140.143919][ T6495] lo speed is unknown, defaulting to 1000 [ 140.172543][ T6495] lo speed is unknown, defaulting to 1000 [ 140.181570][ T6495] lo speed is unknown, defaulting to 1000 [ 140.238086][ T6495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.267809][ T6486] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 140.398668][ T6495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.448591][ T6486] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.574787][ T6495] lo speed is unknown, defaulting to 1000 [ 140.746540][ T6495] lo speed is unknown, defaulting to 1000 [ 140.753459][ T6495] lo speed is unknown, defaulting to 1000 [ 140.779813][ T6495] lo speed is unknown, defaulting to 1000 [ 140.806231][ T6495] lo speed is unknown, defaulting to 1000 [ 141.059999][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 141.198012][ T6526] nbd: socks must be embedded in a SOCK_ITEM attr [ 141.739167][ T6547] sg_write: data in/out 131036/70 bytes for SCSI command 0x0-- guessing data in; [ 141.739167][ T6547] program syz.4.747 not setting count and/or reply_len properly [ 141.926302][ T6508] loop2: detected capacity change from 0 to 32768 [ 142.411996][ T6525] loop3: detected capacity change from 0 to 32768 [ 142.572736][ T26] audit: type=1800 audit(2000000055.770:70): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.732" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 142.799677][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-diskseq/293.tmp-b7:2' failed: Read-only file system [ 142.881626][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 142.973009][ T6605] loop6: detected capacity change from 0 to 64 [ 142.982355][ T6603] autofs4:pid:6603:autofs_fill_super: called with bogus options [ 143.092865][ T6605] attempt to access beyond end of device [ 143.092865][ T6605] loop6: rw=0, want=550, limit=64 [ 143.101731][ T6607] loop1: detected capacity change from 0 to 1024 [ 143.121469][ T6605] Trying to free block not in datazone [ 143.151065][ T6605] Trying to free block not in datazone [ 143.156978][ T6605] Trying to free block not in datazone [ 143.177385][ T6605] Trying to free block not in datazone [ 143.232487][ T6605] minix_free_block (loop6:6): bit already cleared [ 143.315268][ T6605] Trying to free block not in datazone [ 143.353559][ T6605] Trying to free block not in datazone [ 143.721935][ T6630] loop1: detected capacity change from 0 to 512 [ 143.848981][ T6630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.928982][ T6630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c019, mo2=0002] [ 143.968598][ T6630] System zones: 1-12 [ 144.034006][ T6630] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.084783][ T6641] loop3: detected capacity change from 0 to 256 [ 144.201888][ T6630] EXT4-fs (loop1): 1 truncate cleaned up [ 144.232906][ T6630] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,nobarrier,nolazytime,,errors=continue. Quota mode: none. [ 144.249954][ T4407] udevd[4407]: symlink '../../loop3' '/dev/disk/by-diskseq/294.tmp-b7:3' failed: Read-only file system [ 144.464240][ T6652] loop3: detected capacity change from 0 to 128 [ 144.789186][ T6664] loop1: detected capacity change from 0 to 64 [ 144.825093][ T6665] ubi31: attaching mtd0 [ 144.857281][ T6665] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 145.076678][ T6676] loop6: detected capacity change from 0 to 256 [ 145.155204][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-diskseq/293.tmp-b7:2' failed: Read-only file system [ 145.343802][ T6676] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x314d4978, utbl_chksum : 0xe619d30d) [ 145.897226][ T6707] netlink: 288 bytes leftover after parsing attributes in process `syz.4.801'. [ 146.243852][ T6724] loop1: detected capacity change from 0 to 16 [ 146.502813][ T6724] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.512169][ T4581] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.572861][ T6724] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 146.733703][ T6688] loop2: detected capacity change from 0 to 40427 [ 146.783616][ T4581] usb 5-1: Using ep0 maxpacket: 32 [ 146.815874][ T6741] loop1: detected capacity change from 0 to 512 [ 146.847639][ T6688] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 146.868221][ T6688] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 146.902301][ T4581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.927352][ T6688] F2FS-fs (loop2): invalid crc value [ 146.942789][ T4581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.982852][ T4581] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 147.027368][ T6688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.034038][ T4581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.059885][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 147.132654][ T4581] usb 5-1: config 0 descriptor?? [ 147.176221][ T6741] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.208483][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.259804][ T5571] udevd[5571]: symlink '../../loop6' '/dev/disk/by-diskseq/295.tmp-b7:6' failed: Read-only file system [ 147.289187][ T4185] udevd[4185]: symlink '../../loop3' '/dev/disk/by-diskseq/294.tmp-b7:3' failed: Read-only file system [ 147.356682][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-diskseq/297.tmp-b7:1' failed: Read-only file system [ 147.383783][ T5571] udevd[5571]: symlink '../../loop6' '/dev/disk/by-diskseq/295.tmp-b7:6' failed: Read-only file system [ 147.410844][ T4185] udevd[4185]: symlink '../../loop3' '/dev/disk/by-diskseq/294.tmp-b7:3' failed: Read-only file system [ 147.438933][ T6688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.440712][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 147.525628][ T6741] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.810: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 147.605798][ T4581] pantherlord 0003:0810:0001.000B: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.4-1/input0 [ 147.668814][ T4581] pantherlord 0003:0810:0001.000B: no output reports found [ 147.725516][ T6741] EXT4-fs (loop1): Remounting filesystem read-only [ 147.775700][ T6763] loop6: detected capacity change from 0 to 4096 [ 147.806643][ T4581] usb 5-1: USB disconnect, device number 9 [ 147.840325][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-diskseq/297.tmp-b7:1' failed: Read-only file system [ 147.918074][ T4407] udevd[4407]: symlink '../../loop3' '/dev/disk/by-diskseq/304.tmp-b7:3' failed: Read-only file system [ 147.933287][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.021760][ T4283] udevd[4283]: symlink '../../loop2' '/dev/disk/by-diskseq/293.tmp-b7:2' failed: Read-only file system [ 148.045872][ T6767] fido_id[6767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 148.076402][ T6763] ntfs: (device loop6): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 148.109449][ T4185] udevd[4185]: symlink '../../loop3' '/dev/disk/by-diskseq/304.tmp-b7:3' failed: Read-only file system [ 148.169220][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-diskseq/300.tmp-b7:1' failed: Read-only file system [ 148.209158][ T4283] udevd[4283]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 148.225167][ T5578] udevd[5578]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.256054][ T5571] udevd[5571]: symlink '../../loop6' '/dev/disk/by-diskseq/301.tmp-b7:6' failed: Read-only file system [ 148.267588][ T4185] udevd[4185]: symlink '../../loop3' '/dev/disk/by-diskseq/307.tmp-b7:3' failed: Read-only file system [ 148.286255][ T6763] ntfs: volume version 3.1. [ 149.097186][ T4211] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.164766][ T6795] loop6: detected capacity change from 0 to 4096 [ 149.337407][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 149.343925][ T6765] loop3: detected capacity change from 0 to 32768 [ 149.375314][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 149.422478][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 149.441011][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 149.491481][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc1c00 [ 149.572234][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc2c00 [ 149.621038][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc4c00 [ 149.656550][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffc8c00 [ 149.728772][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffd0c00 [ 149.740084][ T4211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.778833][ T6795] ntfs3: loop6: try to read out of volume at offset 0x3fffffe0c00 [ 149.779068][ T4211] usb 5-1: config 0 has no interfaces? [ 149.817586][ T6809] netlink: 'syz.3.829': attribute type 24 has an invalid length. [ 149.850745][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 149.946315][ T4211] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.966372][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.033595][ T4211] usb 5-1: SerialNumber: syz [ 150.066588][ T6817] loop1: detected capacity change from 0 to 256 [ 150.069679][ T4211] usb 5-1: config 0 descriptor?? [ 150.335199][ T4586] usb 5-1: USB disconnect, device number 10 [ 150.452406][ T6817] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 150.656981][ T4733] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.810295][ T6839] loop2: detected capacity change from 0 to 1024 [ 151.055856][ T4733] usb 4-1: Using ep0 maxpacket: 16 [ 151.217933][ T4733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.244196][ T4733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.254443][ T4733] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 151.284414][ T4733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.315813][ T6859] sp0: Synchronizing with TNC [ 151.327650][ T4733] usb 4-1: config 0 descriptor?? [ 151.922612][ T4733] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 151.930689][ T4733] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 151.944407][ T6839] hfsplus: bad catalog entry type [ 152.058648][ T4642] usb 4-1: USB disconnect, device number 8 [ 152.106438][ T154] hfsplus: b-tree write err: -5, ino 4 [ 152.986331][ T4407] udevd[4407]: symlink '../../loop3' '/dev/disk/by-diskseq/321.tmp-b7:3' failed: Read-only file system [ 153.247301][ T6933] loop2: detected capacity change from 0 to 512 [ 153.264226][ T5571] udevd[5571]: symlink '../../loop3' '/dev/disk/by-diskseq/321.tmp-b7:3' failed: Read-only file system [ 153.416383][ T6939] loop3: detected capacity change from 0 to 8192 [ 153.529552][ T6939] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 153.529674][ T6939] REISERFS (device loop3): using ordered data mode [ 153.529687][ T6939] reiserfs: using flush barriers [ 153.540501][ T6939] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.540892][ T6939] REISERFS (device loop3): checking transaction log (loop3) [ 153.585989][ T5571] udevd[5571]: symlink '../../loop1' '/dev/disk/by-diskseq/325.tmp-b7:1' failed: Read-only file system [ 153.703255][ T6952] netlink: 7 bytes leftover after parsing attributes in process `syz.1.883'. [ 153.819725][ T6958] loop6: detected capacity change from 0 to 164 [ 153.824212][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-diskseq/326.tmp-b7:2' failed: Read-only file system [ 153.859381][ T6939] REISERFS (device loop3): Using tea hash to sort names [ 153.883183][ T4185] udevd[4185]: symlink '../../loop1' '/dev/disk/by-diskseq/325.tmp-b7:1' failed: Read-only file system [ 153.900128][ T6933] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 153.942516][ T4586] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.959782][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 153.988226][ T6933] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.988541][ T6939] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 154.037327][ T6939] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 154.067193][ T4283] udevd[4283]: symlink '../../loop1' '/dev/disk/by-diskseq/325.tmp-b7:1' failed: Read-only file system [ 154.071889][ T6961] device netdevsim0 entered promiscuous mode [ 154.106206][ T6939] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 154.129326][ T6958] ISOFS: unable to read i-node block [ 154.142183][ T6961] device macvlan2 entered promiscuous mode [ 154.154123][ T4407] udevd[4407]: symlink '../../loop2' '/dev/disk/by-diskseq/326.tmp-b7:2' failed: Read-only file system [ 154.174235][ T5571] udevd[5571]: symlink '../../loop6' '/dev/disk/by-diskseq/323.tmp-b7:6' failed: Read-only file system [ 154.190462][ T6958] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 154.200468][ T6961] device netdevsim0 left promiscuous mode [ 154.205120][ T5578] udevd[5578]: symlink '../../loop3' '/dev/disk/by-diskseq/321.tmp-b7:3' failed: Read-only file system [ 154.259285][ T4586] usb 5-1: Using ep0 maxpacket: 32 [ 154.382300][ T4586] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.397349][ T4586] usb 5-1: config 0 has no interface number 0 [ 154.582404][ T4586] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 154.616904][ T4586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.655893][ T4586] usb 5-1: Product: syz [ 154.660151][ T4586] usb 5-1: Manufacturer: syz [ 154.695506][ T4586] usb 5-1: SerialNumber: syz [ 154.751963][ T4586] usb 5-1: config 0 descriptor?? [ 154.812863][ T6975] loop6: detected capacity change from 0 to 64 [ 154.824934][ T4586] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 154.859942][ T6973] loop1: detected capacity change from 0 to 190 [ 154.881726][ T4586] usb 5-1: selecting invalid altsetting 1 [ 154.930219][ T4586] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 154.947651][ T6975] attempt to access beyond end of device [ 154.947651][ T6975] loop6: rw=0, want=268435470, limit=64 [ 154.952134][ T26] audit: type=1800 audit(2000000068.140:71): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.892" name="bus" dev="loop6" ino=9 res=0 errno=0 [ 154.970723][ T4586] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.992853][ T6975] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 155.001781][ T4586] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 155.010609][ T4586] usb 5-1: media controller created [ 155.042142][ T6973] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 155.110592][ T6973] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 155.121378][ T4586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.152074][ T6973] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 155.223186][ T6973] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 155.252770][ T4586] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 155.255739][ T6975] attempt to access beyond end of device [ 155.255739][ T6975] loop6: rw=0, want=268435470, limit=64 [ 155.269204][ T4586] zl10353_read_register: readreg error (reg=127, ret==-71) [ 155.343121][ T4586] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 155.351349][ T6975] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 155.368553][ T6973] ntfs: volume version 3.1. [ 155.379230][ T6973] ntfs: (device loop1): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 155.444276][ T6973] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 155.464001][ T6973] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 155.482214][ T4586] usb 5-1: USB disconnect, device number 11 [ 155.528895][ T6973] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 155.582549][ T6973] ntfs: (device loop1): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 155.611282][ T6989] netlink: 56 bytes leftover after parsing attributes in process `syz.2.900'. [ 155.637547][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'. [ 155.648339][ T6973] attempt to access beyond end of device [ 155.648339][ T6973] loop1: rw=0, want=232, limit=190 [ 155.693612][ T6973] attempt to access beyond end of device [ 155.693612][ T6973] loop1: rw=0, want=248, limit=190 [ 155.800983][ T6993] loop6: detected capacity change from 0 to 1024 [ 155.871030][ C1] ================================================================== [ 155.879703][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 155.887371][ C1] Read of size 2 at addr ffff888024fea940 by task ksoftirqd/1/20 [ 155.895206][ C1] [ 155.897565][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.184-syzkaller #0 [ 155.905682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.915785][ C1] Call Trace: [ 155.919098][ C1] [ 155.922061][ C1] dump_stack_lvl+0x168/0x230 [ 155.926782][ C1] ? show_regs_print_info+0x20/0x20 [ 155.932013][ C1] ? _printk+0xcc/0x110 [ 155.936190][ C1] ? __nft_trace_packet+0x135/0x150 [ 155.941422][ C1] ? load_image+0x3b0/0x3b0 [ 155.945983][ C1] ? nft_synproxy_do_eval+0x3d3/0x570 [ 155.951478][ C1] print_address_description+0x60/0x2d0 [ 155.957154][ C1] ? __nft_trace_packet+0x135/0x150 [ 155.962645][ C1] kasan_report+0xdf/0x130 [ 155.967095][ C1] ? __nft_trace_packet+0x135/0x150 [ 155.972321][ C1] __nft_trace_packet+0x135/0x150 [ 155.977385][ C1] nft_do_chain+0x120e/0x1420 [ 155.982093][ C1] ? deref_stack_reg+0xd0/0x120 [ 155.986984][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 155.992910][ C1] ? __local_bh_enable_ip+0xcb/0x1b0 [ 155.998256][ C1] ? ipv6_find_tlv+0x270/0x270 [ 156.003079][ C1] nft_do_chain_inet+0x22b/0x300 [ 156.008046][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 156.012940][ C1] ? nf_nat_ipv6_fn+0x217/0x2d0 [ 156.017914][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 156.023318][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 156.028770][ C1] ? lock_downgrade+0x780/0x820 [ 156.033670][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 156.039156][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 156.044133][ C1] nf_hook_slow+0xb9/0x200 [ 156.048785][ C1] ? ip6_input+0xa0/0xa0 [ 156.053153][ C1] NF_HOOK+0x1cb/0x360 [ 156.057252][ C1] ? ip6_input+0xa0/0xa0 [ 156.061649][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 156.066625][ C1] ? ip6_input+0xa0/0xa0 [ 156.071015][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 156.076436][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 156.081317][ C1] ? refcount_add+0x80/0x80 [ 156.086033][ C1] NF_HOOK+0x2d6/0x360 [ 156.090153][ C1] ? refcount_add+0x80/0x80 [ 156.094677][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 156.099925][ C1] ? refcount_add+0x80/0x80 [ 156.104440][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 156.109934][ C1] __netif_receive_skb+0xcc/0x290 [ 156.115273][ C1] process_backlog+0x364/0x780 [ 156.120083][ C1] ? rps_trigger_softirq+0x210/0x210 [ 156.125459][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 156.131718][ C1] ? lock_chain_count+0x20/0x20 [ 156.136652][ C1] ? finish_lock_switch+0x12f/0x280 [ 156.141996][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 156.147226][ C1] __napi_poll+0xc0/0x430 [ 156.151759][ C1] ? net_rx_action+0x2db/0x9c0 [ 156.156603][ C1] net_rx_action+0x4a8/0x9c0 [ 156.161243][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 156.166624][ C1] ? net_tx_action+0x870/0x870 [ 156.171486][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 156.177468][ C1] ? lock_chain_count+0x20/0x20 [ 156.182329][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 156.188428][ C1] handle_softirqs+0x328/0x820 [ 156.193199][ C1] ? run_ksoftirqd+0x98/0xf0 [ 156.197815][ C1] ? do_softirq+0x200/0x200 [ 156.202425][ C1] ? run_ksoftirqd+0x75/0xf0 [ 156.207055][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.212271][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 156.217724][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.222938][ C1] run_ksoftirqd+0x98/0xf0 [ 156.227382][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 156.232731][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 156.238131][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 156.243400][ C1] smpboot_thread_fn+0x4f6/0x970 [ 156.248386][ C1] kthread+0x436/0x520 [ 156.252552][ C1] ? cpu_report_death+0x180/0x180 [ 156.257632][ C1] ? kthread_blkcg+0xd0/0xd0 [ 156.262460][ C1] ret_from_fork+0x1f/0x30 [ 156.267071][ C1] [ 156.270176][ C1] [ 156.272496][ C1] Allocated by task 20: [ 156.276655][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 156.281530][ C1] slab_post_alloc_hook+0x4c/0x380 [ 156.286684][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 156.292156][ C1] __alloc_skb+0xf4/0x750 [ 156.296502][ C1] synproxy_send_client_synack_ipv6+0x15b/0xc50 [ 156.302868][ C1] nft_synproxy_eval_v6+0x36b/0x560 [ 156.308274][ C1] nft_synproxy_do_eval+0x3d3/0x570 [ 156.313769][ C1] nft_do_chain+0x3fc/0x1420 [ 156.318398][ C1] nft_do_chain_inet+0x22b/0x300 [ 156.323348][ C1] nf_hook_slow+0xb9/0x200 [ 156.327880][ C1] NF_HOOK+0x1cb/0x360 [ 156.331970][ C1] NF_HOOK+0x2d6/0x360 [ 156.336064][ C1] __netif_receive_skb+0xcc/0x290 [ 156.341199][ C1] process_backlog+0x364/0x780 [ 156.346211][ C1] __napi_poll+0xc0/0x430 [ 156.350549][ C1] net_rx_action+0x4a8/0x9c0 [ 156.355146][ C1] handle_softirqs+0x328/0x820 [ 156.359938][ C1] run_ksoftirqd+0x98/0xf0 [ 156.364369][ C1] smpboot_thread_fn+0x4f6/0x970 [ 156.369345][ C1] kthread+0x436/0x520 [ 156.373503][ C1] ret_from_fork+0x1f/0x30 [ 156.377948][ C1] [ 156.380439][ C1] Freed by task 20: [ 156.384244][ C1] kasan_set_track+0x4b/0x70 [ 156.388951][ C1] kasan_set_free_info+0x1f/0x40 [ 156.394103][ C1] ____kasan_slab_free+0xd5/0x110 [ 156.399157][ C1] slab_free_freelist_hook+0xea/0x170 [ 156.404628][ C1] kmem_cache_free+0x8f/0x210 [ 156.409507][ C1] nft_synproxy_eval_v6+0x373/0x560 [ 156.414800][ C1] nft_synproxy_do_eval+0x3d3/0x570 [ 156.420190][ C1] nft_do_chain+0x3fc/0x1420 [ 156.424812][ C1] nft_do_chain_inet+0x22b/0x300 [ 156.429880][ C1] nf_hook_slow+0xb9/0x200 [ 156.434307][ C1] NF_HOOK+0x1cb/0x360 [ 156.438400][ C1] NF_HOOK+0x2d6/0x360 [ 156.442470][ C1] __netif_receive_skb+0xcc/0x290 [ 156.447513][ C1] process_backlog+0x364/0x780 [ 156.452279][ C1] __napi_poll+0xc0/0x430 [ 156.456849][ C1] net_rx_action+0x4a8/0x9c0 [ 156.461477][ C1] handle_softirqs+0x328/0x820 [ 156.466330][ C1] run_ksoftirqd+0x98/0xf0 [ 156.470840][ C1] smpboot_thread_fn+0x4f6/0x970 [ 156.475786][ C1] kthread+0x436/0x520 [ 156.479871][ C1] ret_from_fork+0x1f/0x30 [ 156.484455][ C1] [ 156.486793][ C1] The buggy address belongs to the object at ffff888024fea8c0 [ 156.486793][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 156.501630][ C1] The buggy address is located 128 bytes inside of [ 156.501630][ C1] 232-byte region [ffff888024fea8c0, ffff888024fea9a8) [ 156.514936][ C1] The buggy address belongs to the page: [ 156.520615][ C1] page:ffffea000093fa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024feab40 pfn:0x24fea [ 156.532081][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 156.539667][ C1] raw: 00fff00000000200 ffffea00018a5948 ffffea000168ac48 ffff88801b5e4140 [ 156.548556][ C1] raw: ffff888024feab40 00000000000c000b 00000001ffffffff 0000000000000000 [ 156.557308][ C1] page dumped because: kasan: bad access detected [ 156.563942][ C1] page_owner tracks the page as allocated [ 156.569845][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 0, ts 59813888208, free_ts 59782449749 [ 156.586075][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 156.591634][ C1] __alloc_pages+0x1e1/0x470 [ 156.596271][ C1] new_slab+0xc0/0x4b0 [ 156.600401][ C1] ___slab_alloc+0x81e/0xdf0 [ 156.605174][ C1] kmem_cache_alloc_bulk+0x141/0x3c0 [ 156.610665][ C1] __alloc_skb+0x537/0x750 [ 156.615090][ C1] __napi_alloc_skb+0x151/0x2d0 [ 156.619988][ C1] page_to_skb+0x26a/0xcf0 [ 156.624568][ C1] receive_buf+0x1453/0x57d0 [ 156.629175][ C1] virtnet_poll+0x546/0xef0 [ 156.633701][ C1] __napi_poll+0xc0/0x430 [ 156.638168][ C1] net_rx_action+0x4a8/0x9c0 [ 156.642787][ C1] handle_softirqs+0x328/0x820 [ 156.647583][ C1] __irq_exit_rcu+0x12f/0x220 [ 156.652272][ C1] irq_exit_rcu+0x5/0x20 [ 156.656545][ C1] common_interrupt+0xb5/0xd0 [ 156.661325][ C1] page last free stack trace: [ 156.666002][ C1] free_unref_page_prepare+0x637/0x6c0 [ 156.671559][ C1] free_unref_page+0x94/0x280 [ 156.676358][ C1] tlb_finish_mmu+0x236/0x2e0 [ 156.681222][ C1] unmap_region+0x315/0x360 [ 156.685726][ C1] __do_munmap+0x9d3/0xdc0 [ 156.690317][ C1] __vm_munmap+0x137/0x230 [ 156.694835][ C1] __x64_sys_munmap+0x67/0x70 [ 156.699536][ C1] do_syscall_64+0x4c/0xa0 [ 156.703953][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.709856][ C1] [ 156.712193][ C1] Memory state around the buggy address: [ 156.717838][ C1] ffff888024fea800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 156.726013][ C1] ffff888024fea880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 156.734260][ C1] >ffff888024fea900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.742338][ C1] ^ [ 156.748504][ C1] ffff888024fea980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 156.756570][ C1] ffff888024feaa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.764731][ C1] ================================================================== [ 156.772925][ C1] Disabling lock debugging due to kernel taint [ 156.779261][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.786498][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B 5.15.184-syzkaller #0 [ 156.796097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.806164][ C1] Call Trace: [ 156.809445][ C1] [ 156.812500][ C1] dump_stack_lvl+0x168/0x230 [ 156.817460][ C1] ? show_regs_print_info+0x20/0x20 [ 156.822741][ C1] ? load_image+0x3b0/0x3b0 [ 156.827330][ C1] panic+0x2c9/0x7f0 [ 156.831257][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 156.835870][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 156.841819][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 156.847827][ C1] ? _raw_spin_unlock+0x40/0x40 [ 156.852684][ C1] ? print_memory_metadata+0x314/0x400 [ 156.858169][ C1] ? __nft_trace_packet+0x135/0x150 [ 156.863459][ C1] check_panic_on_warn+0x80/0xa0 [ 156.868414][ C1] ? __nft_trace_packet+0x135/0x150 [ 156.873974][ C1] end_report+0x6d/0xf0 [ 156.878155][ C1] kasan_report+0x102/0x130 [ 156.882769][ C1] ? __nft_trace_packet+0x135/0x150 [ 156.887973][ C1] __nft_trace_packet+0x135/0x150 [ 156.893003][ C1] nft_do_chain+0x120e/0x1420 [ 156.897703][ C1] ? deref_stack_reg+0xd0/0x120 [ 156.902714][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 156.908636][ C1] ? __local_bh_enable_ip+0xcb/0x1b0 [ 156.913942][ C1] ? ipv6_find_tlv+0x270/0x270 [ 156.918740][ C1] nft_do_chain_inet+0x22b/0x300 [ 156.924045][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 156.929072][ C1] ? nf_nat_ipv6_fn+0x217/0x2d0 [ 156.934025][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 156.939422][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 156.944989][ C1] ? lock_downgrade+0x780/0x820 [ 156.949932][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 156.955312][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 156.960183][ C1] nf_hook_slow+0xb9/0x200 [ 156.964602][ C1] ? ip6_input+0xa0/0xa0 [ 156.968851][ C1] NF_HOOK+0x1cb/0x360 [ 156.972926][ C1] ? ip6_input+0xa0/0xa0 [ 156.977188][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 156.982127][ C1] ? ip6_input+0xa0/0xa0 [ 156.986518][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 156.992026][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 156.996888][ C1] ? refcount_add+0x80/0x80 [ 157.001384][ C1] NF_HOOK+0x2d6/0x360 [ 157.005514][ C1] ? refcount_add+0x80/0x80 [ 157.010012][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 157.014860][ C1] ? refcount_add+0x80/0x80 [ 157.019466][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 157.024864][ C1] __netif_receive_skb+0xcc/0x290 [ 157.029985][ C1] process_backlog+0x364/0x780 [ 157.034755][ C1] ? rps_trigger_softirq+0x210/0x210 [ 157.040046][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 157.046455][ C1] ? lock_chain_count+0x20/0x20 [ 157.051405][ C1] ? finish_lock_switch+0x12f/0x280 [ 157.056642][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 157.061869][ C1] __napi_poll+0xc0/0x430 [ 157.066210][ C1] ? net_rx_action+0x2db/0x9c0 [ 157.071041][ C1] net_rx_action+0x4a8/0x9c0 [ 157.076252][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 157.081576][ C1] ? net_tx_action+0x870/0x870 [ 157.086475][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 157.092521][ C1] ? lock_chain_count+0x20/0x20 [ 157.097523][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 157.103518][ C1] handle_softirqs+0x328/0x820 [ 157.108286][ C1] ? run_ksoftirqd+0x98/0xf0 [ 157.113059][ C1] ? do_softirq+0x200/0x200 [ 157.117587][ C1] ? run_ksoftirqd+0x75/0xf0 [ 157.122199][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.127412][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 157.132707][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.137931][ C1] run_ksoftirqd+0x98/0xf0 [ 157.142439][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.147842][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 157.153231][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 157.158474][ C1] smpboot_thread_fn+0x4f6/0x970 [ 157.163456][ C1] kthread+0x436/0x520 [ 157.167529][ C1] ? cpu_report_death+0x180/0x180 [ 157.172561][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.177174][ C1] ret_from_fork+0x1f/0x30 [ 157.181668][ C1] [ 157.184944][ C1] Kernel Offset: disabled [ 157.189366][ C1] Rebooting in 86400 seconds..