last executing test programs: 1m37.879883118s ago: executing program 3 (id=993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 1m37.406686185s ago: executing program 3 (id=996): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m36.863199104s ago: executing program 3 (id=999): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4000c800) 1m36.613835777s ago: executing program 3 (id=1001): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m35.783701161s ago: executing program 3 (id=1012): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x31435641, 0x0, 0x0, [{}, {}, {}, {0x80000000}, {}, {}, {}, {0x0, 0x3fd}], 0x2}}) 1m33.714014694s ago: executing program 3 (id=1023): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./bus\x00', 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x554b, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1m32.908345287s ago: executing program 32 (id=1023): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./bus\x00', 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x554b, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 34.241962914s ago: executing program 2 (id=1498): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001040)=""/4065, 0xfe1}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/119, 0x77}], 0x4}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 33.980808708s ago: executing program 2 (id=1504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x1d, 0x0, 0x0, 0xfffffffe}]}) 33.703633792s ago: executing program 2 (id=1509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r0, 0x51, 0x800003d, 0x7ff) 33.501650706s ago: executing program 2 (id=1512): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 33.23408525s ago: executing program 2 (id=1516): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r1 = dup(r0) io_uring_enter(r1, 0x5930, 0x8eaa, 0x0, 0x0, 0x0) 32.672137169s ago: executing program 2 (id=1525): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x800) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 32.096517428s ago: executing program 33 (id=1525): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x800) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 4.194145893s ago: executing program 5 (id=1747): unshare(0x28000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4) 4.193991784s ago: executing program 4 (id=1748): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 4.055703036s ago: executing program 5 (id=1751): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x6b, 0x52, 0x7a, 0x20, 0xbaf, 0xf6, 0xa84a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x32, 0x4, 0x0, 0x60, 0x5a, 0xb8, 0x0, [@generic={0x9, 0x4, "a47c6e072694ef"}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 3.930392608s ago: executing program 4 (id=1753): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090508061000060408082387ac33afe34107259e0305f804090507020002040266072501010303005d857f57853cdc86572d975fae52237fdd7eb386a469e802df8aabd3e535d4a6ccdc409144c9e0f5b7a3903842a706819109b0a11fc8a46b3c7be928fb6901d5aa75ad42df020a25ebbd4b7ed50ad8aabfbe9b78805a969bd579e7fda208a4390716a6611296df978b12efb7d3d9"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2.281924364s ago: executing program 4 (id=1762): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) 2.050104118s ago: executing program 4 (id=1763): r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x100257}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x2004000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.935928659s ago: executing program 4 (id=1765): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x20, 0x2, 0x31, {0x31, 0xb, "5ce3b61857fdb6a7b7b274f212b1224e410397a166d0733cbd91a469e6f5248639b8bf0b274f13b887312efe002cbc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.107755952s ago: executing program 0 (id=1768): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.107598303s ago: executing program 1 (id=1769): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {}, {@gid}, {@force}, {@uid}, {@creator={'creator', 0x3d, "e3fa1e83"}}, {@nls={'nls', 0x3d, 'cp869'}}]}, 0x44, 0x6fd, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x2000, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4100, 0x1004) 960.472425ms ago: executing program 0 (id=1770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x6}}, 0x0, 0x0, 0x30, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) 859.414737ms ago: executing program 5 (id=1771): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@newqdisc={0x14c, 0x24, 0xbad689febb22c699, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x9, 0x7, 0x15, 0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 847.910617ms ago: executing program 1 (id=1772): r0 = socket$xdp(0x2c, 0x3, 0x0) setreuid(0xee00, 0xee00) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) 779.947678ms ago: executing program 0 (id=1773): r0 = getpgrp(0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000780)={0x11, 0x0, 0x80}) 554.023302ms ago: executing program 1 (id=1774): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00000000000000000000000d0003"], 0x30}], 0x1}, 0x0) 553.887431ms ago: executing program 0 (id=1775): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001467fb0f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 553.684142ms ago: executing program 5 (id=1776): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 395.970804ms ago: executing program 0 (id=1777): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 395.874124ms ago: executing program 1 (id=1778): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000300)=0x8, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 331.438295ms ago: executing program 5 (id=1779): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380), &(0x7f0000000040)=0x4) 237.457036ms ago: executing program 0 (id=1780): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201088a, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x7, 0x6161, &(0x7f0000010c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0x2000003, 0x4000}) 170.028228ms ago: executing program 1 (id=1781): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xffffffffffffffff) 118.948109ms ago: executing program 5 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='R', 0x1}], 0x1) 1.01418ms ago: executing program 4 (id=1783): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 0s ago: executing program 1 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x2a, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): 09.437998][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 209.502590][ T8204] MetaData crosses page boundary!! [ 209.504553][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 209.528237][ T8204] lblock = 621d00, size = 28672 [ 209.558525][ T8204] CPU: 0 PID: 8204 Comm: syz.2.874 Not tainted 6.6.99-syzkaller #0 [ 209.566514][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.575591][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 209.576607][ T8204] Call Trace: [ 209.591033][ T8204] [ 209.594031][ T8204] dump_stack_lvl+0x16c/0x230 [ 209.598784][ T8204] ? show_regs_print_info+0x20/0x20 [ 209.604050][ T8204] ? load_image+0x3b0/0x3b0 [ 209.608685][ T8204] __get_metapage+0xaac/0xfa0 [ 209.613436][ T8204] dtSearch+0x591/0x21b0 [ 209.617788][ T8204] jfs_lookup+0x156/0x380 [ 209.622189][ T8204] ? jfs_get_parent+0xb0/0xb0 [ 209.626970][ T8204] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 209.632328][ T8204] ? make_vfsuid+0x51/0xb0 [ 209.636861][ T8204] ? inode_permission+0xf3/0x480 [ 209.641859][ T8204] ? bpf_lsm_inode_create+0x9/0x10 [ 209.647024][ T8204] ? security_inode_create+0xb7/0x100 [ 209.652467][ T8204] ? jfs_get_parent+0xb0/0xb0 [ 209.657205][ T8204] path_openat+0x10b8/0x3190 [ 209.661897][ T8204] ? do_filp_open+0x3d0/0x3d0 [ 209.666673][ T8204] do_filp_open+0x1c5/0x3d0 [ 209.671249][ T8204] ? vfs_tmpfile+0x490/0x490 [ 209.675938][ T8204] ? _raw_spin_unlock+0x28/0x40 [ 209.680863][ T8204] ? alloc_fd+0x58f/0x630 [ 209.685270][ T8204] do_sys_openat2+0x12c/0x1c0 [ 209.690011][ T8204] ? do_sys_open+0xe0/0xe0 [ 209.694484][ T8204] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 209.700612][ T8204] ? lock_chain_count+0x20/0x20 [ 209.705524][ T8204] __x64_sys_creat+0x90/0xb0 [ 209.710176][ T8204] do_syscall_64+0x55/0xb0 [ 209.714652][ T8204] ? clear_bhb_loop+0x40/0x90 [ 209.715161][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 209.719351][ T8204] ? clear_bhb_loop+0x40/0x90 [ 209.719379][ T8204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.719412][ T8204] RIP: 0033:0x7effd758e9a9 [ 209.745628][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.751561][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 209.765343][ T8204] RSP: 002b:00007effd83ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 209.765374][ T8204] RAX: ffffffffffffffda RBX: 00007effd77b5fa0 RCX: 00007effd758e9a9 [ 209.765391][ T8204] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 209.765404][ T8204] RBP: 00007effd7610d69 R08: 0000000000000000 R09: 0000000000000000 [ 209.765419][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.765432][ T8204] R13: 0000000000000000 R14: 00007effd77b5fa0 R15: 00007ffdecbfb058 [ 209.765464][ T8204] [ 209.830876][ T8204] bread failed! [ 209.834424][ T8204] jfs_lookup: dtSearch returned -5 [ 209.883747][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.096431][ T8225] loop1: detected capacity change from 0 to 40427 [ 211.133453][ T8225] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 211.162487][ T8225] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 211.195603][ T8225] F2FS-fs (loop1): Image doesn't support compression [ 211.221700][ T8225] F2FS-fs (loop1): Image doesn't support compression [ 211.260168][ T8225] F2FS-fs (loop1): invalid crc value [ 211.282620][ T8225] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.471152][ T8225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.561228][ T8256] warning: `syz.0.895' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 211.687302][ T5785] syz-executor: attempt to access beyond end of device [ 211.687302][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.729607][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 212.128001][ T8240] loop3: detected capacity change from 0 to 40427 [ 212.170207][ T8240] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 212.222565][ T8240] F2FS-fs (loop3): invalid crc value [ 212.254569][ T8240] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.479923][ T8240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.565616][ T8240] F2FS-fs (loop3): access invalid blkaddr:2816 [ 212.584652][ T8240] CPU: 0 PID: 8240 Comm: syz.3.890 Not tainted 6.6.99-syzkaller #0 [ 212.592638][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.602740][ T8240] Call Trace: [ 212.606059][ T8240] [ 212.609022][ T8240] dump_stack_lvl+0x16c/0x230 [ 212.613796][ T8240] ? show_regs_print_info+0x20/0x20 [ 212.619056][ T8240] ? f2fs_get_next_page_offset+0x690/0x690 [ 212.624953][ T8240] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 212.630394][ T8240] f2fs_map_blocks+0xcdd/0x3c00 [ 212.635446][ T8240] ? f2fs_get_block_locked+0xe0/0xe0 [ 212.640799][ T8240] ? __might_sleep+0xe0/0xe0 [ 212.645421][ T8240] ? down_read_killable+0x340/0x340 [ 212.650654][ T8240] ? stack_trace_save+0x9c/0xe0 [ 212.655527][ T8240] ? stack_trace_snprint+0xf0/0xf0 [ 212.660665][ T8240] f2fs_fiemap+0x902/0x1650 [ 212.665207][ T8240] ? f2fs_overwrite_io+0x1e0/0x1e0 [ 212.670348][ T8240] ? __might_fault+0xaa/0x120 [ 212.675047][ T8240] ? __might_fault+0xaa/0x120 [ 212.679836][ T8240] ? __might_fault+0xc6/0x120 [ 212.684586][ T8240] ? __might_fault+0xaa/0x120 [ 212.689351][ T8240] do_vfs_ioctl+0x140c/0x1bb0 [ 212.694081][ T8240] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 212.699779][ T8240] ? tomoyo_path_number_perm+0x1ba/0x590 [ 212.705456][ T8240] ? __lock_acquire+0x7c80/0x7c80 [ 212.710519][ T8240] ? slab_free_freelist_hook+0x130/0x1b0 [ 212.716206][ T8240] ? tomoyo_path_number_perm+0x477/0x590 [ 212.721895][ T8240] ? __kmem_cache_free+0xba/0x1f0 [ 212.726972][ T8240] ? tomoyo_path_number_perm+0x4dc/0x590 [ 212.732630][ T8240] ? tomoyo_path_number_perm+0x1ba/0x590 [ 212.738308][ T8240] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 212.743825][ T8240] ? __fget_files+0x28/0x4d0 [ 212.748475][ T8240] ? bpf_lsm_file_ioctl+0x9/0x10 [ 212.753463][ T8240] ? security_file_ioctl+0x80/0xa0 [ 212.758612][ T8240] __se_sys_ioctl+0x83/0x170 [ 212.763330][ T8240] do_syscall_64+0x55/0xb0 [ 212.767765][ T8240] ? clear_bhb_loop+0x40/0x90 [ 212.772478][ T8240] ? clear_bhb_loop+0x40/0x90 [ 212.777277][ T8240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.783311][ T8240] RIP: 0033:0x7f74ce78e9a9 [ 212.787754][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.807423][ T8240] RSP: 002b:00007f74cf598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.815970][ T8240] RAX: ffffffffffffffda RBX: 00007f74ce9b5fa0 RCX: 00007f74ce78e9a9 [ 212.823963][ T8240] RDX: 0000200000000280 RSI: 00000000c020660b RDI: 0000000000000004 [ 212.831958][ T8240] RBP: 00007f74ce810d69 R08: 0000000000000000 R09: 0000000000000000 [ 212.839947][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.847934][ T8240] R13: 0000000000000000 R14: 00007f74ce9b5fa0 R15: 00007ffd44f36a48 [ 212.855942][ T8240] [ 212.958173][ T8282] tmpfs: Bad value for 'mpol' [ 213.178446][ T8287] loop1: detected capacity change from 0 to 256 [ 213.194434][ T8287] FAT-fs (loop1): Unrecognized mount option "coDepage=865" or missing value [ 213.616871][ T8293] loop1: detected capacity change from 0 to 128 [ 213.824278][ T8278] loop2: detected capacity change from 0 to 32768 [ 213.868353][ T8299] netlink: 'syz.0.915': attribute type 298 has an invalid length. [ 214.016812][ T8278] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 214.110950][ T48] (kworker/u4:3,48,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 214.115764][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/385.tmp-b7:0' failed: Read-only file system [ 214.212279][ T8278] (syz.2.907,8278,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 214.229669][ T8278] (syz.2.907,8278,0):ocfs2_trim_mainbm:7611 ERROR: status = -12 [ 214.236773][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/395.tmp-b7:2' failed: Read-only file system [ 214.265672][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/385.tmp-b7:0' failed: Read-only file system [ 214.292695][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 214.321165][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 214.394971][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 214.496965][ T6081] udevd[6081]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 214.576712][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/395.tmp-b7:2' failed: Read-only file system [ 214.625392][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 214.698763][ T6081] udevd[6081]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 214.884009][ T6081] udevd[6081]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 215.034919][ T8309] loop3: detected capacity change from 0 to 32768 [ 215.394171][ T8308] loop0: detected capacity change from 0 to 32768 [ 215.458030][ T8308] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.725531][ T8337] loop3: detected capacity change from 0 to 1024 [ 215.792547][ T8308] XFS (loop0): Ending clean mount [ 215.813472][ T8308] XFS (loop0): Quotacheck needed: Please wait. [ 215.830989][ T8337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.856395][ T8321] loop1: detected capacity change from 0 to 32768 [ 215.881247][ T8337] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.954337][ T8321] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.979377][ T8308] XFS (loop0): Quotacheck: Done. [ 216.002817][ T8337] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm syz.3.929: lblock 0 mapped to illegal pblock 0 (length 5) [ 216.110348][ T8337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 216.132071][ T8337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.132071][ T8337] [ 216.235390][ T8321] XFS (loop1): Ending clean mount [ 216.245866][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.281438][ T8321] XFS (loop1): Quotacheck needed: Please wait. [ 216.362437][ T5783] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.424362][ T8321] XFS (loop1): Quotacheck: Done. [ 216.447137][ T8325] loop2: detected capacity change from 0 to 32768 [ 216.456050][ T8325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.927 (8325) [ 216.546354][ T8325] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.587763][ T8325] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 216.607514][ T8325] BTRFS info (device loop2): force clearing of disk cache [ 216.655505][ T8325] BTRFS info (device loop2): enabling auto defrag [ 216.679602][ T8325] BTRFS info (device loop2): max_inline at 0 [ 216.685673][ T8325] BTRFS info (device loop2): enabling disk space caching [ 216.714039][ T8325] BTRFS info (device loop2): disk space caching is enabled [ 216.748301][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.954479][ T8325] BTRFS info (device loop2): enabling ssd optimizations [ 216.992346][ T8325] BTRFS info (device loop2): rebuilding free space tree [ 217.069634][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.076529][ T8325] BTRFS info (device loop2): disabling free space tree [ 217.093459][ T8325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.141994][ T8325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.251401][ T8376] tipc: MTU too low for tipc bearer [ 217.382622][ T3455] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 217.420401][ T5784] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.739562][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'. [ 219.013647][ T8411] loop0: detected capacity change from 0 to 8192 [ 219.080018][ T5795] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.124712][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/405.tmp-b7:2' failed: Read-only file system [ 219.220402][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/407.tmp-b7:0' failed: Read-only file system [ 219.253969][ T6081] udevd[6081]: symlink '../../loop3' '/dev/disk/by-diskseq/402.tmp-b7:3' failed: Read-only file system [ 219.289586][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/407.tmp-b7:0' failed: Read-only file system [ 219.294452][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/405.tmp-b7:2' failed: Read-only file system [ 219.349021][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/407.tmp-b7:0' failed: Read-only file system [ 219.480009][ T5795] udevd[5795]: symlink '../../loop3' '/dev/disk/by-diskseq/402.tmp-b7:3' failed: Read-only file system [ 219.626475][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/405.tmp-b7:2' failed: Read-only file system [ 219.652108][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/408.tmp-b7:0' failed: Read-only file system [ 219.702797][ T5795] udevd[5795]: symlink '../../loop3' '/dev/disk/by-diskseq/402.tmp-b7:3' failed: Read-only file system [ 219.823732][ T8408] loop1: detected capacity change from 0 to 32768 [ 219.894331][ T8408] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.094585][ T8408] XFS (loop1): Ending clean mount [ 220.132952][ T8408] XFS (loop1): Quotacheck needed: Please wait. [ 220.262745][ T8408] XFS (loop1): Quotacheck: Done. [ 220.454867][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.602312][ T8456] loop0: detected capacity change from 0 to 1024 [ 220.705134][ T8456] hfsplus: bad catalog entry type [ 220.776556][ T8460] CUSE: zero length info key specified [ 220.784381][ T11] hfsplus: b-tree write err: -5, ino 4 [ 220.965169][ T8464] loop2: detected capacity change from 0 to 164 [ 221.065240][ T8454] loop3: detected capacity change from 0 to 32768 [ 221.144846][ T8454] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 221.174055][ T8454] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.305045][ T8454] XFS (loop3): Ending clean mount [ 221.335068][ T8454] XFS (loop3): Quotacheck needed: Please wait. [ 221.390432][ T5823] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 221.427149][ T5823] XFS (loop3): Unmount and run xfs_repair [ 221.443362][ T5823] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 221.459439][ T5823] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 221.479036][ T5823] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 221.499763][ T5823] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 221.508762][ T5823] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 221.542247][ T5823] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 221.558175][ T5823] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 221.568463][ T5823] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 221.580476][ T5823] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 221.590257][ T37] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 221.659843][ T8454] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 221.918456][ T5794] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.035059][ T8473] loop0: detected capacity change from 0 to 32768 [ 222.100570][ T8473] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.350319][ T5823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 222.381808][ T8473] XFS (loop0): Ending clean mount [ 222.415212][ T8473] XFS (loop0): Quotacheck needed: Please wait. [ 222.543348][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 222.569141][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.601000][ T5823] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 222.619614][ T5823] usb 2-1: config 12 has no interface number 0 [ 222.632689][ T5823] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 222.645231][ T8473] XFS (loop0): Quotacheck: Done. [ 222.657533][ T5823] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 222.677156][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.685915][ T5823] usb 2-1: Product: syz [ 222.690350][ T5823] usb 2-1: Manufacturer: syz [ 222.695221][ T5823] usb 2-1: SerialNumber: syz [ 222.782381][ T8482] loop2: detected capacity change from 0 to 32768 [ 222.848484][ T8482] [ 222.848484][ T8482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.848484][ T8482] [ 222.849517][ T5783] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.922790][ T5823] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 223.041157][ T8482] ERROR: (device loop2): diWrite: ixpxd invalid [ 223.041157][ T8482] [ 223.088160][ T5823] usb 2-1: USB disconnect, device number 12 [ 223.113916][ T8482] ERROR: (device loop2): txCommit: [ 223.113916][ T8482] [ 223.190349][ T8482] ERROR: (device loop2): dtSearch: stack overrun! [ 223.190349][ T8482] [ 223.199042][ T8482] btstack dump: [ 223.266610][ T8482] bn = 0, index = 0 [ 223.285126][ T8482] bn = 0, index = 0 [ 223.310975][ T8482] bn = 0, index = 0 [ 223.319376][ T8482] bn = 0, index = 0 [ 223.323268][ T8482] bn = 0, index = 0 [ 223.327121][ T8482] bn = 0, index = 0 [ 223.373219][ T8482] bn = 0, index = 0 [ 223.400775][ T8482] bn = 0, index = 0 [ 223.400824][ T8482] jfs_lookup: dtSearch returned -5 [ 223.510198][ T5784] [ 223.510198][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.510198][ T5784] [ 223.538473][ T5784] [ 223.538473][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.538473][ T5784] [ 223.771261][ T8507] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.867178][ T8498] loop3: detected capacity change from 0 to 32768 [ 223.889401][ T8498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.980 (8498) [ 223.972533][ T8498] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.006744][ T8498] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 224.018666][ T8498] BTRFS info (device loop3): setting nodatacow, compression disabled [ 224.036409][ T8498] BTRFS info (device loop3): max_inline at 0 [ 224.045806][ T8498] BTRFS info (device loop3): using free space tree [ 224.120007][ T8512] loop2: detected capacity change from 0 to 4096 [ 224.192355][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/419.tmp-b7:0' failed: Read-only file system [ 224.217444][ T8512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.222275][ T5801] udevd[5801]: symlink '../../loop1' '/dev/disk/by-diskseq/415.tmp-b7:1' failed: Read-only file system [ 224.316939][ T28] audit: type=1800 audit(1753148180.186:33): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.983" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 224.337230][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.356538][ T8536] loop1: detected capacity change from 0 to 2048 [ 224.372779][ T8512] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.983: corrupted inode contents [ 224.393573][ T8498] BTRFS info (device loop3): auto enabling async discard [ 224.404986][ T8536] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.464775][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/422.tmp-b7:2' failed: Read-only file system [ 224.481183][ T8512] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #15: comm syz.2.983: mark_inode_dirty error [ 224.516509][ T6079] udevd[6079]: incorrect nilfs2 checksum on /dev/loop1 [ 224.528397][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 224.537518][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/423.tmp-b7:1' failed: Read-only file system [ 224.540984][ T8512] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.983: corrupted inode contents [ 224.578162][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/419.tmp-b7:0' failed: Read-only file system [ 224.598892][ T8541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.636155][ T8512] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.983: mark_inode_dirty error [ 224.660894][ T8512] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.983: corrupted inode contents [ 224.713938][ T8512] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.983: mark_inode_dirty error [ 224.734137][ T5794] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.781058][ T8512] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.983: corrupted inode contents [ 224.814317][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/419.tmp-b7:0' failed: Read-only file system [ 224.842841][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/423.tmp-b7:1' failed: Read-only file system [ 224.868830][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/422.tmp-b7:2' failed: Read-only file system [ 224.891485][ T8512] EXT4-fs error (device loop2): ext4_truncate:4288: inode #15: comm syz.2.983: mark_inode_dirty error [ 224.961364][ T8512] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 224.996246][ T8538] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.983: corrupted inode contents [ 225.154562][ T5795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5795) [ 225.170655][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.141232][ T8568] loop3: detected capacity change from 0 to 512 [ 226.175850][ T8568] EXT4-fs: Ignoring removed oldalloc option [ 226.272128][ T8568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.347361][ T8568] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.485941][ T8579] loop0: detected capacity change from 0 to 1024 [ 226.545080][ T8579] hfsplus: found bad thread record in catalog [ 226.564212][ T8579] hfsplus: catalog searching failed [ 226.638259][ T59] hfsplus: b-tree write err: -5, ino 4 [ 226.907120][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 226.930548][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 226.947843][ T8586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.967018][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 226.990738][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.997983][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.053846][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.091972][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.170051][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.194338][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.213215][ T8586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.236853][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.266181][ T5794] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 227.437728][ T8586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.719198][ T8586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.746149][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.880828][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.897553][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.005155][ T8586] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.061319][ T8586] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.105854][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.125081][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.157249][ T8586] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.213770][ T8586] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.350687][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.408016][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.544711][ T8609] loop0: detected capacity change from 0 to 256 [ 228.633240][ T8609] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 228.708975][ T8605] loop2: detected capacity change from 0 to 131072 [ 228.723648][ T8605] F2FS-fs (loop2): Allow to mount readonly mode only [ 228.776451][ T6081] I/O error, dev loop2, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.827310][ T8611] loop1: detected capacity change from 0 to 4096 [ 228.838019][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.937980][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.243130][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/431.tmp-b7:2' failed: Read-only file system [ 229.324232][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/430.tmp-b7:0' failed: Read-only file system [ 229.385571][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/431.tmp-b7:2' failed: Read-only file system [ 229.478565][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/433.tmp-b7:2' failed: Read-only file system [ 229.558607][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/434.tmp-b7:1' failed: Read-only file system [ 229.588630][ T6084] udevd[6084]: symlink '../../loop0' '/dev/disk/by-diskseq/435.tmp-b7:0' failed: Read-only file system [ 229.616133][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 229.648215][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:1' failed: Read-only file system [ 229.680984][ T37] tipc: Disabling bearer [ 229.691377][ T37] tipc: Left network mode [ 229.755698][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/434.tmp-b7:1' failed: Read-only file system [ 229.844505][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/434.tmp-b7:1' failed: Read-only file system [ 230.482154][ T8638] sp0: Synchronizing with TNC [ 230.733422][ T8641] loop2: detected capacity change from 0 to 8192 [ 230.779982][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.804111][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.839412][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.853590][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.863955][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.876851][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.219871][ T8630] loop1: detected capacity change from 0 to 32768 [ 231.241001][ T8630] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 231.710399][ T8664] loop2: detected capacity change from 0 to 128 [ 231.844401][ T8664] autofs4:pid:8664:autofs_fill_super: called with bogus options [ 232.991820][ T8645] chnl_net:caif_netlink_parms(): no params data found [ 232.992543][ T5788] Bluetooth: hci3: command tx timeout [ 233.258276][ T37] hsr_slave_0: left promiscuous mode [ 233.349700][ T37] hsr_slave_1: left promiscuous mode [ 233.394892][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.445479][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.521294][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.530141][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.560241][ T37] bridge_slave_1: left allmulticast mode [ 233.565953][ T37] bridge_slave_1: left promiscuous mode [ 233.589576][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.676544][ T37] bridge_slave_0: left allmulticast mode [ 233.700248][ T37] bridge_slave_0: left promiscuous mode [ 233.720977][ T8723] loop2: detected capacity change from 0 to 64 [ 233.739563][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.875345][ T37] veth1_macvtap: left promiscuous mode [ 233.885391][ T37] veth0_macvtap: left promiscuous mode [ 233.897045][ T37] veth1_vlan: left promiscuous mode [ 233.906811][ T37] veth0_vlan: left promiscuous mode [ 234.159365][ T5823] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 234.298666][ T28] audit: type=1326 audit(1753148190.186:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.368965][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 234.372998][ T28] audit: type=1326 audit(1753148190.216:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.391590][ T5823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.402598][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/443.tmp-b7:2' failed: Read-only file system [ 234.412272][ T5823] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 234.443216][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.456028][ T28] audit: type=1326 audit(1753148190.216:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.473223][ T5823] usb 1-1: config 0 descriptor?? [ 234.499563][ T28] audit: type=1326 audit(1753148190.216:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.541080][ T28] audit: type=1326 audit(1753148190.216:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.581265][ T28] audit: type=1326 audit(1753148190.216:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.629457][ T28] audit: type=1326 audit(1753148190.216:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.663893][ T28] audit: type=1326 audit(1753148190.216:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.686577][ T28] audit: type=1326 audit(1753148190.216:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.710901][ T28] audit: type=1326 audit(1753148190.216:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x50000 [ 234.951880][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 234.985625][ T5823] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0014/input/input13 [ 234.992117][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 235.077495][ T5788] Bluetooth: hci3: command tx timeout [ 235.084504][ T5823] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0014/input/input14 [ 235.255489][ T5823] kye 0003:0458:5013.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 235.370761][ T5823] usb 1-1: USB disconnect, device number 12 [ 235.379490][ T5801] udevd[5801]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 235.392840][ T5801] udevd[5801]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 235.441719][ T8737] loop2: detected capacity change from 0 to 32768 [ 235.466814][ T8737] XFS: noikeep mount option is deprecated. [ 235.513791][ T8744] fido_id[8744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 235.592722][ T8737] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.717812][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/444.tmp-b7:2' failed: Read-only file system [ 235.744822][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 235.892724][ T8737] XFS (loop2): Ending clean mount [ 235.898526][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 235.928210][ T8737] XFS (loop2): Quotacheck needed: Please wait. [ 235.940923][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 235.979680][ T8756] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 235.987476][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 236.021644][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/435.tmp-b7:0' failed: Read-only file system [ 236.082348][ T8737] XFS (loop2): Quotacheck: Done. [ 236.092389][ T8758] loop0: detected capacity change from 0 to 64 [ 236.259138][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.830658][ T37] team0 (unregistering): Port device team_slave_1 removed [ 237.086225][ T37] team0 (unregistering): Port device team_slave_0 removed [ 237.149503][ T5788] Bluetooth: hci3: command tx timeout [ 237.179607][ T8776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1083'. [ 237.327420][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.544148][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.730315][ T8786] loop2: detected capacity change from 0 to 1024 [ 237.966371][ T48] hfsplus: b-tree write err: -5, ino 4 [ 238.140433][ T8792] loop2: detected capacity change from 0 to 1024 [ 238.271028][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.469719][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.492212][ T8766] loop0: detected capacity change from 0 to 65536 [ 238.617807][ T8766] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 238.669997][ T8766] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 238.775885][ T8766] XFS (loop0): Ending clean mount [ 238.797720][ T8766] XFS (loop0): Quotacheck needed: Please wait. [ 238.861959][ T5823] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 238.896064][ T5823] XFS (loop0): Unmount and run xfs_repair [ 238.908347][ T5823] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 238.932296][ T5823] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 238.943549][ T5823] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 238.955894][ T5823] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 238.965086][ T5823] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 238.974555][ T5823] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 238.983831][ T5823] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 238.992825][ T5823] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 239.002446][ T5823] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 239.035311][ T1139] XFS (loop0): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 239.084241][ T8766] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 239.218702][ T5783] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 239.237651][ T5788] Bluetooth: hci3: command tx timeout [ 239.407660][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 239.407677][ T28] audit: type=1326 audit(1753148195.296:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x7fc00000 [ 239.411510][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/451.tmp-b7:0' failed: Read-only file system [ 239.501052][ T37] bond0 (unregistering): Released all slaves [ 239.535494][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/451.tmp-b7:0' failed: Read-only file system [ 239.651533][ T6081] udevd[6081]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 239.695821][ T6081] udevd[6081]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 239.847985][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1097'. [ 239.963406][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/453.tmp-b7:0' failed: Read-only file system [ 239.964948][ T8812] pimreg3: entered allmulticast mode [ 240.051394][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 240.064221][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 240.090005][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.097964][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.118055][ T8645] bridge_slave_0: entered allmulticast mode [ 240.128949][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/452.tmp-b7:2' failed: Read-only file system [ 240.137726][ T8645] bridge_slave_0: entered promiscuous mode [ 240.162194][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.209544][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.217093][ T8645] bridge_slave_1: entered allmulticast mode [ 240.225171][ T8645] bridge_slave_1: entered promiscuous mode [ 240.384253][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/452.tmp-b7:2' failed: Read-only file system [ 240.448240][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.490015][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.492049][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 240.719507][ T8645] team0: Port device team_slave_0 added [ 240.753495][ T8645] team0: Port device team_slave_1 added [ 240.951723][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.958738][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.042673][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.089469][ T8821] loop0: detected capacity change from 0 to 32768 [ 241.142418][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.181694][ T8821] read_mapping_page failed! [ 241.189531][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.216679][ T8821] ERROR: (device loop0): txCommit: [ 241.216679][ T8821] [ 241.248014][ T8821] ERROR: (device loop0): remounting filesystem as read-only [ 241.299459][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.449065][ T8645] hsr_slave_0: entered promiscuous mode [ 241.467784][ T8645] hsr_slave_1: entered promiscuous mode [ 241.468590][ T8645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.468654][ T8645] Cannot create hsr debugfs directory [ 242.090870][ T8645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.124898][ T8645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.189939][ T8645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.273885][ T8645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.562578][ T8868] loop2: detected capacity change from 0 to 128 [ 242.614148][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.646232][ T8645] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.672913][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.680172][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.783449][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.790701][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.704573][ T8890] loop2: detected capacity change from 0 to 4096 [ 243.727439][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.040787][ T8902] loop0: detected capacity change from 0 to 256 [ 244.261469][ T8907] loop2: detected capacity change from 0 to 16 [ 244.298757][ T8902] FAT-fs (loop0): Directory bread(block 64) failed [ 244.319383][ T8902] FAT-fs (loop0): Directory bread(block 65) failed [ 244.326095][ T8902] FAT-fs (loop0): Directory bread(block 66) failed [ 244.368104][ T8902] FAT-fs (loop0): Directory bread(block 67) failed [ 244.388561][ T8907] cramfs: Error -3 while decompressing! [ 244.409136][ T8907] cramfs: ffffffff96fd7308(27)->ffff88804c892000(4096) [ 244.416435][ T8907] cramfs: Error -3 while decompressing! [ 244.421983][ T8902] FAT-fs (loop0): Directory bread(block 68) failed [ 244.422055][ T8902] FAT-fs (loop0): Directory bread(block 69) failed [ 244.422155][ T8902] FAT-fs (loop0): Directory bread(block 70) failed [ 244.422184][ T8902] FAT-fs (loop0): Directory bread(block 71) failed [ 244.422281][ T8902] FAT-fs (loop0): Directory bread(block 72) failed [ 244.422310][ T8902] FAT-fs (loop0): Directory bread(block 73) failed [ 244.478684][ T8907] cramfs: ffffffff96fd7323(16)->ffff888051c6e000(4096) [ 244.524148][ T8907] cramfs: Error -3 while decompressing! [ 244.579381][ T8907] cramfs: ffffffff96fdb308(27)->ffff88804c892000(4096) [ 244.602179][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/459.tmp-b7:0' failed: Read-only file system [ 244.618424][ T28] audit: type=1800 audit(1753148200.506:122): pid=8907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1117" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 244.748537][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/459.tmp-b7:0' failed: Read-only file system [ 244.814425][ T8645] veth0_vlan: entered promiscuous mode [ 244.824784][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/461.tmp-b7:2' failed: Read-only file system [ 244.876865][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/459.tmp-b7:0' failed: Read-only file system [ 244.904098][ T8645] veth1_vlan: entered promiscuous mode [ 244.936892][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/461.tmp-b7:2' failed: Read-only file system [ 245.006909][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/463.tmp-b7:2' failed: Read-only file system [ 245.048960][ T8645] veth0_macvtap: entered promiscuous mode [ 245.088754][ T8915] loop0: detected capacity change from 0 to 2048 [ 245.093640][ T8645] veth1_macvtap: entered promiscuous mode [ 245.157704][ T8915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.175953][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/439.tmp-b7:1' failed: Read-only file system [ 245.208142][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.248841][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:1' failed: Read-only file system [ 245.264388][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.302769][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/464.tmp-b7:0' failed: Read-only file system [ 245.308803][ T6081] udevd[6081]: symlink '../../loop2' '/dev/disk/by-diskseq/463.tmp-b7:2' failed: Read-only file system [ 245.330112][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.339483][ T28] audit: type=1800 audit(1753148201.226:123): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1118" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 245.366063][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.417676][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.448813][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.487732][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.559656][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.594388][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.624985][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.658895][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.685038][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.707680][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.719380][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 245.738769][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.780045][ T8645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.813407][ T8645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.827493][ T8645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.836420][ T8645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.943876][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 245.989030][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 246.015768][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.063436][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 246.076952][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.104033][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.133634][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.166701][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 246.193986][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.209317][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.217394][ T9] usb 3-1: Product: syz [ 246.236431][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.254315][ T9] usb 3-1: Manufacturer: syz [ 246.259076][ T9] usb 3-1: SerialNumber: syz [ 246.306563][ T8924] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.341036][ T9] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 246.348628][ T9] usbtest 3-1:1.0: Linux user mode ISO test driver [ 246.398291][ T9] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 246.613476][ T787] usb 3-1: USB disconnect, device number 9 [ 246.891724][ T8960] loop0: detected capacity change from 0 to 256 [ 247.463414][ T8978] binder: 8975:8978 ioctl 400c620e 0 returned -14 [ 247.502922][ T8977] loop4: detected capacity change from 0 to 256 [ 247.563060][ T8977] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 247.796880][ T8987] loop2: detected capacity change from 0 to 1024 [ 248.012417][ T8987] hfsplus: request for non-existent node 1280 in B*Tree [ 248.047805][ T8987] hfsplus: request for non-existent node 1280 in B*Tree [ 248.093719][ T8995] loop4: detected capacity change from 0 to 1024 [ 248.100382][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 248.272527][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 248.335323][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.388632][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.428966][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.490688][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.543050][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.579638][ T27] usb 2-1: config 0 descriptor?? [ 248.836788][ T9012] loop2: detected capacity change from 0 to 256 [ 248.877339][ T9012] exfat: Deprecated parameter 'utf8' [ 248.889588][ T9012] exfat: Deprecated parameter 'namecase' [ 248.908168][ T9012] exfat: Deprecated parameter 'utf8' [ 248.955902][ T9012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 248.985823][ T9014] loop4: detected capacity change from 0 to 1024 [ 249.022829][ T27] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 249.077051][ T27] plantronics 0003:047F:FFFF.0015: unsupported Resolution Multiplier 0 [ 249.129722][ T28] audit: type=1800 audit(1753148205.016:124): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1150" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 249.148650][ T27] plantronics 0003:047F:FFFF.0015: unsupported Resolution Multiplier 0 [ 249.203168][ T27] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 249.286456][ T27] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 249.349586][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 249.379437][ T27] usb 2-1: USB disconnect, device number 13 [ 249.600840][ T9026] loop0: detected capacity change from 0 to 4096 [ 249.613527][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system [ 249.625863][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 249.697908][ T9033] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.791172][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/477.tmp-b7:4' failed: Read-only file system [ 249.956387][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system [ 249.987774][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 249.994483][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/477.tmp-b7:4' failed: Read-only file system [ 250.011813][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:0' failed: Read-only file system [ 250.043634][ T9044] loop2: detected capacity change from 0 to 64 [ 250.125602][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/479.tmp-b7:2' failed: Read-only file system [ 250.188291][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 250.201541][ T9048] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1161'. [ 250.224981][ T6081] udevd[6081]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 250.312534][ T5795] udevd[5795]: symlink '../../loop2' '/dev/disk/by-diskseq/479.tmp-b7:2' failed: Read-only file system [ 250.842494][ T9063] loop2: detected capacity change from 0 to 64 [ 251.298659][ T9042] loop0: detected capacity change from 0 to 32768 [ 251.945896][ T9056] loop4: detected capacity change from 0 to 32768 [ 252.273023][ T9099] devtmpfs: Cannot change global quota limit on remount [ 252.945498][ T9094] loop2: detected capacity change from 0 to 32768 [ 253.015337][ T9094] JBD2: Ignoring recovery information on journal [ 253.116026][ T9094] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.263746][ T9094] (syz.2.1175,9094,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 253.290463][ T9125] Bluetooth: MGMT ver 1.22 [ 253.476902][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 254.021359][ T9146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1192'. [ 254.358194][ T9130] loop4: detected capacity change from 0 to 32768 [ 254.369397][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 254.420891][ T9130] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.466335][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 254.471515][ T9130] XFS (loop4): Ending clean mount [ 254.480546][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.492367][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 254.502218][ T9130] XFS (loop4): Quotacheck needed: Please wait. [ 254.514703][ T9161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 254.592508][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 254.599103][ T9130] XFS (loop4): Quotacheck: Done. [ 254.608509][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 254.659505][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 254.709845][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 254.727868][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.739118][ T787] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 254.748806][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.775171][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.784544][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 254.804175][ T787] usb 3-1: config 0 descriptor?? [ 254.811304][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.850412][ T8] usb 2-1: config 0 descriptor?? [ 254.865639][ T8645] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.076145][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1203'. [ 255.085703][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1203'. [ 255.095606][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1203'. [ 255.096340][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 255.114466][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 255.124478][ T8] usb 2-1: USB disconnect, device number 14 [ 255.247729][ T787] wacom 0003:056A:0301.0016: unbalanced delimiter at end of report description [ 255.262377][ T787] wacom 0003:056A:0301.0016: parse failed [ 255.268409][ T787] wacom: probe of 0003:056A:0301.0016 failed with error -22 [ 255.437104][ T5789] usb 3-1: USB disconnect, device number 10 [ 255.685199][ T9187] loop0: detected capacity change from 0 to 32768 [ 255.878926][ T9193] loop0: detected capacity change from 0 to 64 [ 256.044249][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.050819][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.195131][ T9197] loop2: detected capacity change from 0 to 256 [ 256.236547][ T9197] exfat: Deprecated parameter 'namecase' [ 256.358038][ T9197] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 257.099422][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 257.289346][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 257.296521][ T8] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 257.339577][ T8] usb 3-1: config 0 has an invalid interface number: 164 but max is 0 [ 257.347828][ T8] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 257.387975][ T8] usb 3-1: config 0 has no interface number 0 [ 257.411213][ T8] usb 3-1: config 0 has no interface number 1 [ 257.417417][ T8] usb 3-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 257.435628][ T8] usb 3-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 257.450476][ T9234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1227'. [ 257.470690][ T8] usb 3-1: config 0 interface 50 has no altsetting 0 [ 257.477489][ T8] usb 3-1: config 0 interface 164 has no altsetting 0 [ 257.503697][ T8] usb 3-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 257.518103][ T9236] loop0: detected capacity change from 0 to 4096 [ 257.520373][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.542515][ T8] usb 3-1: Product: syz [ 257.551703][ T8] usb 3-1: Manufacturer: syz [ 257.566988][ T8] usb 3-1: SerialNumber: syz [ 257.576488][ T9236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.591078][ T8] usb 3-1: config 0 descriptor?? [ 257.606549][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 257.712108][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.805981][ T8] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 258.509489][ T8] usb 3-1: device descriptor read/64, error -71 [ 258.803755][ T8] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 259.212907][ T8] usb 3-1: failed to restore interface 50 altsetting 4 (error=-71) [ 259.224844][ T8] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 259.235223][ T8] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 259.249740][ T787] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 259.258676][ T787] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 259.270351][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 259.282231][ T8] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 259.298207][ T8] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 259.318486][ T8] usb 3-1: USB disconnect, device number 11 [ 259.979033][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 260.089368][ T5823] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 260.295301][ T5823] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.310609][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.332374][ T5823] usb 1-1: Product: syz [ 260.336613][ T5823] usb 1-1: Manufacturer: syz [ 260.351619][ T5823] usb 1-1: SerialNumber: syz [ 260.370981][ T5823] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 260.442765][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.751918][ T9294] loop4: detected capacity change from 0 to 1764 [ 260.979604][ T9297] sg_write: process 656 (syz.2.1251) changed security contexts after opening file descriptor, this is not allowed. [ 261.180161][ T5883] usb 1-1: USB disconnect, device number 13 [ 261.265547][ T9303] loop4: detected capacity change from 0 to 512 [ 261.283429][ T9303] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.323544][ T9303] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 261.369409][ T9303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 261.392458][ T9306] loop2: detected capacity change from 0 to 1024 [ 261.402506][ T9303] System zones: 1-12 [ 261.412669][ T9303] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1252: bad orphan inode 65551 [ 261.429847][ T9303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.474325][ T9306] hfsplus: bad catalog entry type [ 261.544851][ T3455] hfsplus: b-tree write err: -5, ino 4 [ 261.569831][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 261.577372][ T8] ath9k_htc: Failed to initialize the device [ 261.604978][ T5883] usb 1-1: ath9k_htc: USB layer deinitialized [ 261.678388][ T8645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.855066][ T9313] loop4: detected capacity change from 0 to 128 [ 261.893709][ T9313] FAT-fs (loop4): Directory bread(block 11554) failed [ 261.910506][ T9313] FAT-fs (loop4): Directory bread(block 11555) failed [ 261.932405][ T9313] FAT-fs (loop4): Directory bread(block 11556) failed [ 261.942540][ T9313] FAT-fs (loop4): Directory bread(block 11557) failed [ 261.969603][ T9313] FAT-fs (loop4): Directory bread(block 11558) failed [ 261.999736][ T9313] FAT-fs (loop4): Directory bread(block 11559) failed [ 262.008670][ T9313] FAT-fs (loop4): Directory bread(block 11560) failed [ 262.029553][ T9313] FAT-fs (loop4): Directory bread(block 11561) failed [ 262.059928][ T9313] FAT-fs (loop4): Directory bread(block 11562) failed [ 262.087859][ T9313] FAT-fs (loop4): Directory bread(block 11563) failed [ 263.139332][ T9340] loop2: detected capacity change from 0 to 4096 [ 263.391150][ T54] kernel write not supported for file /cpuinfo (pid: 54 comm: kworker/1:2) [ 264.355904][ T9384] loop2: detected capacity change from 0 to 64 [ 264.527578][ T9382] loop4: detected capacity change from 0 to 8192 [ 264.566116][ T5784] hfs: node 4:3 still has 1 user(s)! [ 264.574215][ T9382] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.684700][ T9382] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 264.695259][ T9382] REISERFS (device loop4): using journaled data mode [ 264.702136][ T9382] reiserfs: using flush barriers [ 264.736391][ T9382] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.778618][ T9382] REISERFS (device loop4): checking transaction log (loop4) [ 264.804611][ T9382] REISERFS (device loop4): Using r5 hash to sort names [ 264.818531][ T9382] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 264.860902][ T9382] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 265.127371][ T9402] loop2: detected capacity change from 0 to 1024 [ 265.173206][ T9402] hfsplus: bad catalog entry type [ 265.348051][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 265.515987][ T9349] loop0: detected capacity change from 0 to 65536 [ 265.624271][ T9349] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 265.696280][ T9423] loop2: detected capacity change from 0 to 8 [ 265.744995][ T28] audit: type=1326 audit(1753148221.636:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372e98e9a9 code=0x7fc00000 [ 265.816155][ T9349] XFS (loop0): Ending clean mount [ 265.862805][ T9349] XFS (loop0): Quotacheck needed: Please wait. [ 265.999164][ T9349] XFS (loop0): Quotacheck: Done. [ 266.150235][ T5783] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 266.220119][ T9434] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1294'. [ 266.466092][ T9439] CUSE: info not properly terminated [ 266.901083][ T9419] loop4: detected capacity change from 0 to 32768 [ 266.971460][ T9419] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.351732][ T9419] XFS (loop4): Ending clean mount [ 267.376611][ T9419] XFS (loop4): Quotacheck needed: Please wait. [ 267.475876][ T9470] loop0: detected capacity change from 0 to 4096 [ 267.486945][ T9419] XFS (loop4): Quotacheck: Done. [ 267.579363][ T28] audit: type=1800 audit(1753148223.466:126): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1288" name="bus" dev="loop4" ino=9290 res=0 errno=0 [ 267.617301][ T9475] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.677632][ T9477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.707495][ T9470] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 267.731262][ T8645] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.768177][ T9470] Remounting filesystem read-only [ 267.779942][ T9470] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 268.149124][ T9465] loop2: detected capacity change from 0 to 32768 [ 268.196248][ T9465] XFS: ikeep mount option is deprecated. [ 268.309418][ T9465] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.340843][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 268.391229][ T9493] block nbd0: not configured, cannot reconfigure [ 268.612895][ T9465] XFS (loop2): Ending clean mount [ 268.774434][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.827120][ T9512] loop0: detected capacity change from 0 to 512 [ 268.994403][ T9512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.093847][ T9512] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.287990][ T9530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1312: bg 0: block 145: padding at end of block bitmap is not set [ 269.446649][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.508574][ T9534] loop2: detected capacity change from 0 to 256 [ 269.521369][ T9534] exfat: Deprecated parameter 'namecase' [ 269.547861][ T9534] exfat: Deprecated parameter 'utf8' [ 269.643128][ T9534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 269.985577][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1321'. [ 270.349031][ T27] IPVS: starting estimator thread 0... [ 270.469358][ T9570] IPVS: using max 21 ests per chain, 50400 per kthread [ 271.320576][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 271.535672][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 271.562453][ T8] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 271.579343][ T8] usb 3-1: config 0 has no interface number 0 [ 271.596590][ T8] usb 3-1: config 0 interface 230 has no altsetting 0 [ 271.622197][ T8] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 271.645340][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.679375][ T8] usb 3-1: Product: syz [ 271.683612][ T8] usb 3-1: Manufacturer: syz [ 271.709662][ T8] usb 3-1: SerialNumber: syz [ 271.722321][ T8] usb 3-1: config 0 descriptor?? [ 271.750012][ T8] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 271.820863][ T8] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 272.193898][ T9613] loop0: detected capacity change from 0 to 32768 [ 272.263997][ T9613] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.452323][ T9613] XFS (loop0): Ending clean mount [ 272.472772][ T9613] XFS (loop0): Quotacheck needed: Please wait. [ 272.642210][ T9613] XFS (loop0): Quotacheck: Done. [ 272.808949][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.837851][ T9610] loop4: detected capacity change from 0 to 32768 [ 272.871355][ T9610] XFS: ikeep mount option is deprecated. [ 272.933616][ T9610] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 272.968126][ T9610] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.265920][ T9610] XFS (loop4): Ending clean mount [ 273.346673][ T9610] XFS (loop4): Quotacheck needed: Please wait. [ 273.498231][ T9610] XFS (loop4): Quotacheck: Done. [ 273.699398][ T8645] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.821672][ T9664] loop0: detected capacity change from 0 to 512 [ 273.863207][ T9664] EXT4-fs (loop0): filesystem is read-only [ 273.895324][ T9664] EXT4-fs (loop0): filesystem is read-only [ 273.935239][ T9664] EXT4-fs (loop0): orphan cleanup on readonly fs [ 273.966119][ T9664] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1349: bad orphan inode 16 [ 274.067887][ T9664] ext4_test_bit(bit=15, block=3) = 0 [ 274.074811][ T8] ums-usbat: probe of 3-1:0.230 failed with error -5 [ 274.093570][ T9664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 274.117083][ T8] usb 3-1: USB disconnect, device number 12 [ 274.283774][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.896642][ T9696] syz.2.1361 uses old SIOCAX25GETINFO [ 274.999793][ T54] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 275.199589][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 275.215562][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.228085][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.254457][ T54] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 275.274932][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.290387][ T54] usb 2-1: config 0 descriptor?? [ 275.315306][ T28] audit: type=1326 audit(1753148231.206:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.2.1367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effd758e9a9 code=0x0 [ 275.399470][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 275.592381][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.603734][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.613609][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 275.622819][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.634152][ T27] usb 5-1: config 0 descriptor?? [ 275.728580][ T54] glorious 0003:258A:0033.0017: unknown main item tag 0x2 [ 275.738449][ T54] glorious 0003:258A:0033.0017: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 275.930732][ T54] usb 2-1: USB disconnect, device number 15 [ 276.051606][ T27] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 276.060256][ T27] arvo 0003:1E7D:30D4.0018: item fetching failed at offset 5/7 [ 276.069064][ T27] arvo 0003:1E7D:30D4.0018: parse failed [ 276.074997][ T27] arvo: probe of 0003:1E7D:30D4.0018 failed with error -22 [ 276.260549][ T54] usb 5-1: USB disconnect, device number 2 [ 276.519465][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 277.081688][ T9718] loop0: detected capacity change from 0 to 40427 [ 277.095620][ T9718] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 277.119471][ T9718] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 277.138972][ T9739] loop4: detected capacity change from 0 to 64 [ 277.139614][ T9736] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1379'. [ 277.196825][ T9718] F2FS-fs (loop0): Found nat_bits in checkpoint [ 277.248639][ T28] audit: type=1800 audit(1753148233.136:128): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1380" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 277.285778][ T9739] hfs: keylen 1794 too large [ 277.319553][ T9739] hfs: keylen 1794 too large [ 277.452950][ T9718] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 277.480180][ T9718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.558547][ T28] audit: type=1800 audit(1753148233.446:129): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1370" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 278.848825][ T9760] loop2: detected capacity change from 0 to 40427 [ 278.882645][ T9760] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 278.900824][ T9760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 278.924760][ T9760] F2FS-fs (loop2): invalid crc value [ 278.955046][ T9760] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.991798][ T9776] loop0: detected capacity change from 0 to 512 [ 279.053700][ T9776] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1394: casefold flag without casefold feature [ 279.110251][ T9776] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1394: couldn't read orphan inode 15 (err -117) [ 279.126831][ T9760] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 279.137930][ T9776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.147108][ T9760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.178497][ T9760] F2FS-fs (loop2): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem [ 279.211332][ T9776] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.1394: invalid size [ 279.388014][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.820437][ T9793] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.421504][ T9810] loop4: detected capacity change from 0 to 2048 [ 280.430215][ T9785] loop0: detected capacity change from 0 to 32768 [ 280.454238][ T9810] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.557289][ T9785] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.568075][ T9822] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.739663][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 280.864441][ T9785] XFS (loop0): Ending clean mount [ 280.895598][ T9785] XFS (loop0): Quotacheck needed: Please wait. [ 280.939429][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 280.957015][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 280.992621][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 281.042773][ T27] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 281.082089][ T9785] XFS (loop0): Quotacheck: Done. [ 281.095937][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.142908][ T27] usb 2-1: config 0 descriptor?? [ 281.253037][ T5783] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.358591][ T9840] loop4: detected capacity change from 0 to 1024 [ 281.489571][ T9840] hfsplus: bad catalog entry type [ 281.598343][ T27] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 281.616994][ T27] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 281.649897][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 281.657344][ T27] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 281.699349][ T27] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 281.729595][ T27] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 281.777624][ T27] saitek 0003:06A3:0621.0019: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 281.836991][ T27] usb 2-1: USB disconnect, device number 16 [ 281.974594][ T9851] fido_id[9851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 282.059757][ T9853] loop4: detected capacity change from 0 to 2048 [ 282.099337][ T5840] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 282.111271][ T9854] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.204726][ T9853] NILFS (loop4): error -2 truncating bmap (ino=16) [ 282.271426][ T9854] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 282.289697][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 282.291955][ T9854] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 282.305489][ T5840] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.314444][ T9854] Remounting filesystem read-only [ 282.325290][ T1139] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 282.332912][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.341130][ T1139] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 282.351450][ T5840] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 282.361182][ T1139] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 282.368686][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.378949][ T1139] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 282.392148][ T5840] usb 1-1: config 0 descriptor?? [ 282.397393][ T1139] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 282.405503][ T1139] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 282.417317][ T1139] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 282.426609][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.437618][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.463774][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.476592][ T1139] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 282.487244][ T1139] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 282.498283][ T1139] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 282.513642][ T1139] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 282.522296][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.537368][ T1139] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 282.546361][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.555898][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.566534][ T1139] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 282.574453][ T1139] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.593621][ T8645] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 282.612847][ T8645] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 282.629594][ T8645] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 282.636967][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.683361][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.701634][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.716029][ T8645] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 282.726358][ T8645] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 282.735362][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.744944][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.766389][ T8645] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.903726][ T5840] wacom 0003:056A:00CC.001A: hidraw0: USB HID v7d.d9 Device [HID 056a:00cc] on usb-dummy_hcd.0-1/input0 [ 283.035692][ T5840] usb 1-1: USB disconnect, device number 14 [ 283.101838][ T9863] fido_id[9863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 283.269676][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 283.534578][ T9864] loop4: detected capacity change from 0 to 32768 [ 283.567505][ T9864] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 283.711272][ T9885] loop0: detected capacity change from 0 to 1024 [ 284.009909][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 284.593180][ T9906] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1451'. [ 284.610001][ T9905] loop4: detected capacity change from 0 to 1024 [ 284.675627][ T9905] syz.4.1449: attempt to access beyond end of device [ 284.675627][ T9905] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 284.732570][ T9905] Buffer I/O error on dev loop4, logical block 458752, async page read [ 284.767439][ T9905] syz.4.1449: attempt to access beyond end of device [ 284.767439][ T9905] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 284.790517][ T9905] Buffer I/O error on dev loop4, logical block 458752, async page read [ 284.791737][ T9911] loop0: detected capacity change from 0 to 128 [ 284.859615][ T9889] loop2: detected capacity change from 0 to 40427 [ 284.884114][ T28] audit: type=1800 audit(1753148240.776:130): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1453" name="file1" dev="loop0" ino=1048724 res=0 errno=0 [ 284.941642][ T9889] F2FS-fs (loop2): invalid crc value [ 284.976897][ T9889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 285.126081][ T9889] F2FS-fs (loop2): Start checkpoint disabled! [ 285.187166][ T9889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 285.648091][ T59] kworker/u4:4: attempt to access beyond end of device [ 285.648091][ T59] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 285.688151][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 285.705678][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 285.790902][ T9938] loop0: detected capacity change from 0 to 256 [ 285.823019][ T9938] FAT-fs (loop0): Unrecognized mount option "utf " or missing value [ 285.836637][ T9938] devtmpfs: Unknown parameter 'shortname' [ 286.849464][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 286.967146][ T9979] loop0: detected capacity change from 0 to 512 [ 286.981755][ T9979] EXT4-fs: Ignoring removed oldalloc option [ 287.041884][ T9979] EXT4-fs (loop0): 1 truncate cleaned up [ 287.061357][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 287.088386][ T9979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.113395][ T27] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 287.132922][ T9979] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1482: invalid indirect mapped block 234881024 (level 0) [ 287.149089][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.200566][ T27] usb 2-1: config 0 descriptor?? [ 287.207281][ T9979] EXT4-fs (loop0): Remounting filesystem read-only [ 287.232906][ T27] gspca_main: sq930x-2.14.0 probing 041e:403c [ 287.306185][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.427550][ T9993] loop4: detected capacity change from 0 to 512 [ 287.448127][ T9993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 287.501588][ T9993] UDF-fs: Scanning with blocksize 512 failed [ 287.519786][ T9993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 287.546585][ T9993] UDF-fs: Scanning with blocksize 1024 failed [ 287.579910][ T9993] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 287.596535][ T9993] UDF-fs: Scanning with blocksize 2048 failed [ 287.645842][ T9993] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 287.668366][ T9993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.761344][ T9993] [syz.4.1487/9993] FS: loop4 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 287.870208][ T27] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 287.878998][ T27] sq930x: probe of 2-1:0.0 failed with error -71 [ 287.899910][ T27] usb 2-1: USB disconnect, device number 17 [ 288.047298][T10008] loop0: detected capacity change from 0 to 1024 [ 288.105787][T10010] loop2: detected capacity change from 0 to 128 [ 288.132803][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 288.500819][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1498'. [ 288.512217][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1498'. [ 288.522866][T10016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1498'. [ 288.963784][T10037] loop0: detected capacity change from 0 to 64 [ 289.031226][T10037] syz.0.1508: attempt to access beyond end of device [ 289.031226][T10037] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 289.067198][T10037] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 289.083907][T10037] syz.0.1508: attempt to access beyond end of device [ 289.083907][T10037] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 289.165736][T10037] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 289.174954][T10045] loop2: detected capacity change from 0 to 256 [ 289.266761][T10047] netlink: 488 bytes leftover after parsing attributes in process `syz.4.1513'. [ 289.325043][ T5784] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 289.346979][ T5784] FAT-fs (loop2): Filesystem has been set read-only [ 289.386848][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 289.387671][ T5784] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 289.725956][T10059] loop4: detected capacity change from 0 to 512 [ 289.773983][T10059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.793858][T10059] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.905337][ T8645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.938487][T10068] loop0: detected capacity change from 0 to 512 [ 289.946556][T10068] EXT4-fs: Ignoring removed i_version option [ 289.984738][T10068] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 290.025141][T10068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 290.057294][T10068] System zones: 1-12 [ 290.067595][T10068] EXT4-fs (loop0): orphan cleanup on readonly fs [ 290.079915][T10068] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1523: invalid indirect mapped block 12 (level 1) [ 290.106585][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 290.165489][T10068] EXT4-fs (loop0): 1 truncate cleaned up [ 290.220343][T10068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 290.243552][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1523'. [ 290.253309][T10068] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1523'. [ 290.330613][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 290.332392][ T1139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.355012][ T1139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.586273][ T1139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.600198][T10076] loop4: detected capacity change from 0 to 256 [ 290.629750][ T1139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.652972][T10076] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 290.861359][ T1139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.906854][ T1139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.139103][ T1139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.160211][ T1139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.179031][T10091] loop0: detected capacity change from 0 to 256 [ 291.584939][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.613152][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.624567][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.644935][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.669623][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.677190][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.056873][T10084] loop4: detected capacity change from 0 to 32768 [ 292.439307][ T5840] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 292.641532][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.659299][ T5883] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 292.688257][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.723980][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 292.737119][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.775443][ T5840] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 292.806721][T10095] chnl_net:caif_netlink_parms(): no params data found [ 292.813723][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.836398][ T5840] usb 1-1: config 0 descriptor?? [ 292.864552][ T5840] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 292.887329][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.897959][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.941692][ T5883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.955758][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.964322][ T5883] usb 2-1: SerialNumber: syz [ 293.110571][ T54] usb 1-1: USB disconnect, device number 15 [ 293.222738][ T5883] usb 2-1: 0:2 : does not exist [ 293.277310][ T54] appletouch 1-1:0.0: input: appletouch disconnected [ 293.319662][ T5883] usb 2-1: USB disconnect, device number 18 [ 293.494167][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.685420][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.739394][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.746796][T10095] bridge_slave_0: entered allmulticast mode [ 293.785094][T10095] bridge_slave_0: entered promiscuous mode [ 293.800605][ T5788] Bluetooth: hci2: command tx timeout [ 293.848303][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.889448][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.939525][T10095] bridge_slave_1: entered allmulticast mode [ 293.967565][T10095] bridge_slave_1: entered promiscuous mode [ 294.043795][T10150] ip6_vti0: entered promiscuous mode [ 294.158775][ T1139] hsr_slave_0: left promiscuous mode [ 294.175658][ T1139] hsr_slave_1: left promiscuous mode [ 294.219843][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.228623][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.249717][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.257216][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.274823][ T1139] bridge_slave_1: left allmulticast mode [ 294.284380][ T1139] bridge_slave_1: left promiscuous mode [ 294.299823][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.346953][ T1139] bridge_slave_0: left allmulticast mode [ 294.356311][ T1139] bridge_slave_0: left promiscuous mode [ 294.371079][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.530492][ T1139] veth1_macvtap: left promiscuous mode [ 294.537348][ T1139] veth0_macvtap: left promiscuous mode [ 294.572072][ T1139] veth1_vlan: left promiscuous mode [ 294.583934][ T1139] veth0_vlan: left promiscuous mode [ 294.906653][ T1139] pimreg3 (unregistering): left allmulticast mode [ 295.529321][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 295.701259][ T5883] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 295.742118][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 295.757225][ T54] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 295.778091][ T54] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.787497][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.796066][ T54] usb 5-1: Product: syz [ 295.800802][ T54] usb 5-1: Manufacturer: syz [ 295.805463][ T54] usb 5-1: SerialNumber: syz [ 295.825479][ T54] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.862867][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 295.867870][ T5878] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.879303][ T5788] Bluetooth: hci2: command tx timeout [ 295.920895][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 295.928901][ T5883] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 295.937436][ T5883] usb 2-1: config 0 has no interface number 0 [ 295.961364][ T5883] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 295.970738][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.978826][ T5883] usb 2-1: Product: syz [ 295.983524][ T5883] usb 2-1: Manufacturer: syz [ 295.984068][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.988297][ T5883] usb 2-1: SerialNumber: syz [ 295.994100][ T5883] usb 2-1: config 0 descriptor?? [ 296.017357][ T5883] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 296.026525][ T5883] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 296.080571][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.230453][ T5883] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 296.455263][ T5883] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 296.531289][ T5883] usb 5-1: USB disconnect, device number 3 [ 296.663445][ T54] usb 2-1: USB disconnect, device number 19 [ 296.683301][ T54] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 296.982032][ T1139] bond0 (unregistering): Released all slaves [ 297.097439][T10160] kthread_run failed with err -4 [ 297.149723][ T5878] usb 5-1: Service connection timeout for: 256 [ 297.179412][ T5878] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 297.192833][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.215754][ T5878] ath9k_htc: Failed to initialize the device [ 297.232113][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.243364][ T5883] usb 5-1: ath9k_htc: USB layer deinitialized [ 297.376337][T10095] team0: Port device team_slave_0 added [ 297.434095][T10095] team0: Port device team_slave_1 added [ 297.522079][T10196] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 297.545372][T10196] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1567'. [ 297.575911][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.601422][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.702395][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.755391][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.779311][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.859323][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.949573][ T5788] Bluetooth: hci2: command tx timeout [ 298.079418][T10209] nbd: must specify a size in bytes for the device [ 298.095528][ T1139] IPVS: stop unused estimator thread 0... [ 298.112089][T10095] hsr_slave_0: entered promiscuous mode [ 298.150202][T10095] hsr_slave_1: entered promiscuous mode [ 298.189731][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.197361][T10095] Cannot create hsr debugfs directory [ 298.841913][T10095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.875223][T10095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.901568][T10210] loop4: detected capacity change from 0 to 32768 [ 298.912466][T10095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.972489][T10095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.035211][T10210] jfs_strtoUCS: char2uni returned -22. [ 299.047869][T10210] charset = euc-jp, char = 0xd4 [ 299.336762][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.431622][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.497844][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.505110][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.571469][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.578686][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.029420][ T5788] Bluetooth: hci2: command tx timeout [ 300.357270][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.417559][T10273] loop0: detected capacity change from 0 to 1024 [ 300.489829][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 300.503645][T10273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.518785][T10273] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.626428][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 300.645014][T10273] EXT4-fs: Ignoring removed orlov option [ 300.666831][T10273] EXT4-fs: can't change dax mount option while remounting [ 300.691490][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.710784][ T8] usb 5-1: config 0 has no interface number 0 [ 300.720926][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.758465][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.789988][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 300.810995][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.829374][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.878219][ T8] usb 5-1: config 0 descriptor?? [ 301.039936][ T54] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 301.212217][T10095] veth0_vlan: entered promiscuous mode [ 301.239667][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 301.245648][T10095] veth1_vlan: entered promiscuous mode [ 301.262164][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.293939][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.302605][ T8] prodikeys 0003:041E:2801.001B: item fetching failed at offset 0/7 [ 301.328850][ T54] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 301.344116][ T8] prodikeys 0003:041E:2801.001B: hid parse failed [ 301.360595][ T8] prodikeys: probe of 0003:041E:2801.001B failed with error -22 [ 301.369478][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.371637][T10095] veth0_macvtap: entered promiscuous mode [ 301.387775][ T54] usb 2-1: config 0 descriptor?? [ 301.442172][T10095] veth1_macvtap: entered promiscuous mode [ 301.507885][ T8] usb 5-1: USB disconnect, device number 4 [ 301.545000][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.580648][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.601862][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.629708][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.649317][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.670475][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.703920][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.734685][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.755624][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.773276][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.784547][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.806574][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.817328][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.839948][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.890710][T10095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.904966][T10095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.920318][T10095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.932943][T10095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.031356][ T54] usb 2-1: string descriptor 0 read error: -71 [ 302.090704][ T54] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 302.118685][ T54] letsketch: probe of 0003:6161:4D15.001C failed with error -32 [ 302.158073][ T54] usb 2-1: USB disconnect, device number 20 [ 302.190858][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.198797][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.325221][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.345123][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.925429][T10330] vlan2: entered promiscuous mode [ 302.937352][T10330] macvtap0: entered promiscuous mode [ 303.002797][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 303.347062][T10342] loop0: detected capacity change from 0 to 16 [ 303.376765][T10342] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 303.674971][T10353] loop0: detected capacity change from 0 to 128 [ 303.682536][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1608'. [ 303.755207][T10351] loop4: detected capacity change from 0 to 4096 [ 303.947169][T10351] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 303.985123][T10351] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 304.007245][T10359] loop5: detected capacity change from 0 to 256 [ 304.069443][T10351] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 304.270046][T10366] loop0: detected capacity change from 0 to 256 [ 304.346172][T10366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 304.478240][T10371] loop5: detected capacity change from 0 to 64 [ 305.128941][T10385] bridge0: entered promiscuous mode [ 305.138266][T10385] macvlan2: entered promiscuous mode [ 305.274948][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 306.425326][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 306.509666][ T5788] Bluetooth: hci2: command 0x0405 tx timeout [ 307.130785][T10449] loop5: detected capacity change from 0 to 256 [ 307.176550][T10449] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.244062][T10449] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 307.278642][T10454] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1643'. [ 307.344886][T10449] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 307.969291][ T54] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 308.179462][ T54] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 308.187637][ T54] usb 5-1: config 0 has no interface number 0 [ 308.235528][ T54] usb 5-1: config 0 interface 29 has no altsetting 0 [ 308.283846][ T54] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 308.311845][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.349471][ T54] usb 5-1: Product: syz [ 308.353723][ T54] usb 5-1: Manufacturer: syz [ 308.358469][ T54] usb 5-1: SerialNumber: syz [ 308.373174][ T54] usb 5-1: config 0 descriptor?? [ 308.641146][ T54] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 308.867251][ T54] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 308.900242][ T54] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 308.907182][ T54] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 308.950946][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 309.111658][ T54] peak_usb: probe of 5-1:0.29 failed with error -8 [ 309.150981][ T54] usb 5-1: USB disconnect, device number 5 [ 309.542993][T10524] loop0: detected capacity change from 0 to 512 [ 309.585214][T10524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.710639][T10524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.803082][T10524] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.120975][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.230362][T10576] loop5: detected capacity change from 0 to 128 [ 311.290506][T10576] EXT4-fs: Ignoring removed nobh option [ 311.323994][T10551] loop0: detected capacity change from 0 to 32768 [ 311.330180][T10576] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.358904][T10576] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.440733][T10551] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1676 (10551) [ 311.547549][T10551] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.565160][T10095] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.578239][T10551] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 311.607284][T10551] BTRFS info (device loop0): using free space tree [ 311.619583][ T5883] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 311.788385][T10551] BTRFS info (device loop0): enabling ssd optimizations [ 311.802954][T10551] BTRFS info (device loop0): auto enabling async discard [ 311.841573][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.863859][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.914511][ T5883] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 311.959627][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 311.969309][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.006682][ T5883] usb 2-1: config 0 descriptor?? [ 312.076489][ T5783] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.209595][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 312.227657][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.249393][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.288884][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.326398][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.389051][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.439972][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.462328][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.481723][ T5883] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 312.514903][ T8] usb 6-1: Manufacturer: syz [ 312.520707][ T5883] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 312.555201][ T8] usb 6-1: config 0 descriptor?? [ 312.643545][ T5883] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 312.664372][ T5883] hid-steam 0003:28DE:1142.001D: No HID_FEATURE_REPORT submitted - nothing to read [ 312.751220][ T5883] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0 [ 312.839307][ T5883] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 313.015984][ T5883] usb 2-1: USB disconnect, device number 21 [ 313.029815][ T8] rc_core: IR keymap rc-hauppauge not found [ 313.055172][ T8] Registered IR keymap rc-empty [ 313.082969][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.103427][ T5883] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 313.149907][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.202508][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 313.239973][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 313.314771][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.371654][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.429812][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.473650][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.533807][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.595245][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.596521][T10613] loop0: detected capacity change from 0 to 40427 [ 313.640105][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.656822][T10613] F2FS-fs (loop0): invalid crc value [ 313.694877][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.742872][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.809424][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.860692][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 313.869263][T10613] F2FS-fs (loop0): Start checkpoint disabled! [ 313.892840][T10632] overlayfs: lower data-only dirs require metacopy support. [ 313.925462][T10613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 313.933866][ T8] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 4e [ 313.981567][ T8] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 314.006747][ T8] usb 6-1: USB disconnect, device number 2 [ 315.173388][T10667] loop0: detected capacity change from 0 to 128 [ 315.179349][ T8] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 315.316055][T10671] loop5: detected capacity change from 0 to 64 [ 315.371560][ T8] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 315.401926][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 315.420254][ T5789] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 315.436322][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.468330][T10657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.621465][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.642443][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.656629][ T5789] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 315.667525][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.667893][T10677] loop5: detected capacity change from 0 to 256 [ 315.701339][T10677] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.723649][ T5789] usb 2-1: config 0 descriptor?? [ 315.738411][T10677] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 315.775270][T10677] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 315.913383][ T8] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 315.941435][ T8] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input21 [ 316.090453][ T8] usb 5-1: USB disconnect, device number 6 [ 316.096463][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 316.194924][ T5789] wacom 0003:056A:00D0.001F: unknown main item tag 0x0 [ 316.236718][ T5789] wacom 0003:056A:00D0.001F: unknown main item tag 0x0 [ 316.264172][ T5789] wacom 0003:056A:00D0.001F: unknown main item tag 0x0 [ 316.288821][ T5789] wacom 0003:056A:00D0.001F: unknown main item tag 0x0 [ 316.313392][ T5789] wacom 0003:056A:00D0.001F: unknown main item tag 0x0 [ 316.326543][ T5789] wacom 0003:056A:00D0.001F: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 316.367103][ T5789] wacom 0003:056A:00D0.001F: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 316.397615][T10673] loop0: detected capacity change from 0 to 32768 [ 316.402646][ T5789] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.001F/input/input22 [ 316.438418][T10673] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 316.757642][ T5789] usb 2-1: USB disconnect, device number 22 [ 316.775404][ T5790] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 316.946435][T10693] loop4: detected capacity change from 0 to 4096 [ 317.084852][T10698] loop5: detected capacity change from 0 to 64 [ 317.476582][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.486189][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.909497][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 318.899559][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 318.912332][T10774] loop0: detected capacity change from 0 to 2048 [ 318.989458][ T5840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 319.119331][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 319.131984][ T8] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 319.144375][ T8] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 319.162741][ T8] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 319.175068][ T8] usb 6-1: config 0 has no interface number 0 [ 319.181550][ T8] usb 6-1: config 0 has no interface number 1 [ 319.189464][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 319.194698][ T8] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 319.209168][ T8] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 319.223814][ T8] usb 6-1: config 0 interface 50 has no altsetting 0 [ 319.231986][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.240129][ T5883] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 319.250425][ T8] usb 6-1: config 0 interface 164 has no altsetting 0 [ 319.257734][ T5840] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 319.276382][ T5840] usb 5-1: config 13 has no interface number 0 [ 319.285687][ T5840] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 319.296196][ T8] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 319.309879][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.327776][ T5840] usb 5-1: config 13 interface 50 has no altsetting 0 [ 319.336149][ T8] usb 6-1: Product: syz [ 319.341310][ T8] usb 6-1: Manufacturer: syz [ 319.346300][ T8] usb 6-1: SerialNumber: syz [ 319.353718][ T5840] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 319.364069][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.373618][ T5840] usb 5-1: Product: syz [ 319.379282][ T8] usb 6-1: config 0 descriptor?? [ 319.391709][ T8] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 319.409237][ T5840] usb 5-1: Manufacturer: syz [ 319.415988][ T5840] usb 5-1: SerialNumber: syz [ 319.430752][T10766] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 319.451778][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.469549][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.479846][ T5883] usb 2-1: config 1 has no interface number 0 [ 319.486055][ T5883] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.498490][ T5883] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 319.520222][ T5883] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.541411][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.569259][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.589579][ T8] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 319.608233][ T5883] usb 2-1: Product: syz [ 319.614890][ T5883] usb 2-1: Manufacturer: syz [ 319.626708][ T5883] usb 2-1: SerialNumber: syz [ 319.675481][ T5840] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 319.693384][ T5840] usb 5-1: MIDIStreaming interface descriptor not found [ 319.793763][ T5840] usb 5-1: USB disconnect, device number 7 [ 319.959422][T10789] udevd[10789]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.136850][T10782] loop0: detected capacity change from 0 to 40427 [ 320.156867][T10782] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 320.198407][T10782] F2FS-fs (loop0): invalid crc value [ 320.232451][T10782] F2FS-fs (loop0): Found nat_bits in checkpoint [ 320.305147][ T5883] cdc_ncm 2-1:1.1: bind() failure [ 320.319394][ T8] usb 6-1: device descriptor read/64, error -71 [ 320.355376][ T5883] usb 2-1: USB disconnect, device number 23 [ 320.433693][T10782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.545053][ T5783] syz-executor: attempt to access beyond end of device [ 320.545053][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.579981][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.632352][ T8] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 321.029736][ T5883] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 321.051690][ T8] usb 6-1: failed to restore interface 50 altsetting 4 (error=-71) [ 321.084446][ T8] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 321.099491][ T8] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 321.117073][ T8] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 321.131645][ T8] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 321.144865][ T8] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 321.173621][ T8] usb 6-1: USB disconnect, device number 3 [ 321.251440][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 321.272507][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.291406][ T5883] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 321.326584][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.358132][ T5883] usb 5-1: config 0 descriptor?? [ 321.372026][T10808] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.585566][ T27] kernel write not supported for file /cpuinfo (pid: 27 comm: kworker/1:1) [ 321.801522][ T5883] hid (null): global environment stack underflow [ 321.807967][ T5883] hid (null): invalid report_count 1943037601 [ 321.858014][ T5883] hid (null): unknown global tag 0x86 [ 321.930696][ T5883] uclogic 0003:28BD:0078.0020: interface is invalid, ignoring [ 322.021346][ T5883] usb 5-1: USB disconnect, device number 8 [ 322.627449][ T5823] usb 6-1: [UEAGLE-ATM] firmware is not available [ 322.634136][ T9] usb 3-1: [UEAGLE-ATM] firmware is not available [ 322.640695][ T5860] usb 6-1: [UEAGLE-ATM] firmware is not available [ 322.647227][ T787] ------------[ cut here ]------------ [ 322.653845][ T787] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 322.689640][ T787] WARNING: CPU: 0 PID: 787 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 322.698986][ T787] Modules linked in: [ 322.703103][ T787] CPU: 0 PID: 787 Comm: kworker/0:2 Not tainted 6.6.99-syzkaller #0 [ 322.711350][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.721548][ T787] Workqueue: events request_firmware_work_func [ 322.727790][ T787] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 322.733718][ T787] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 9a d2 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 98 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e2 8c 72 ff [ 322.753584][ T787] RSP: 0018:ffffc90003d77800 EFLAGS: 00010246 [ 322.759906][ T787] RAX: f10b6ba258000000 RBX: ffffffff8b214da0 RCX: ffff888021829e00 [ 322.767940][ T787] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 322.776035][ T787] RBP: dffffc0000000000 R08: ffffc90003d77407 R09: 1ffff920007aee80 [ 322.785267][ T787] R10: dffffc0000000000 R11: fffff520007aee81 R12: 1ffffffff16429b8 [ 322.793602][ T787] R13: 0000000000000001 R14: ffff8880682443e0 R15: ffff88823bc0a808 [ 322.801748][ T787] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 322.811093][ T787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.817787][ T787] CR2: 0000001b31c1bff8 CR3: 00000000245d2000 CR4: 00000000003506f0 [ 322.825855][ T787] Call Trace: [ 322.829236][ T787] [ 322.832212][ T787] ? sysfs_unmerge_group+0x10d/0x130 [ 322.837552][ T787] device_del+0x251/0x900 [ 322.842091][ T787] ? kill_device+0x160/0x160 [ 322.846768][ T787] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 322.852792][ T787] ? _raw_spin_unlock+0x40/0x40 [ 322.857703][ T787] ? complete_all+0xd0/0x1d0 [ 322.862404][ T787] firmware_fallback_sysfs+0x682/0x940 [ 322.867941][ T787] _request_firmware+0xed9/0x1510 [ 322.873114][ T787] ? request_firmware+0x50/0x50 [ 322.878029][ T787] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 322.884114][ T787] ? read_lock_is_recursive+0x20/0x20 [ 322.890719][ T787] request_firmware_work_func+0xb0/0x1b0 [ 322.896991][ T787] ? process_scheduled_works+0x957/0x15b0 [ 322.902840][ T787] process_scheduled_works+0xa45/0x15b0 [ 322.908481][ T787] ? assign_work+0x400/0x400 [ 322.913257][ T787] ? assign_work+0x39e/0x400 [ 322.917911][ T787] worker_thread+0xa55/0xfc0 [ 322.922602][ T787] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 322.928570][ T787] ? _raw_spin_unlock+0x40/0x40 [ 322.933584][ T787] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 322.939619][ T787] kthread+0x2fa/0x390 [ 322.943741][ T787] ? pr_cont_work+0x560/0x560 [ 322.948484][ T787] ? kthread_blkcg+0xd0/0xd0 [ 322.953213][ T787] ret_from_fork+0x48/0x80 [ 322.957687][ T787] ? kthread_blkcg+0xd0/0xd0 [ 322.962376][ T787] ret_from_fork_asm+0x11/0x20 [ 322.967222][ T787] [ 322.970326][ T787] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.977730][ T787] CPU: 0 PID: 787 Comm: kworker/0:2 Not tainted 6.6.99-syzkaller #0 [ 322.985755][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.995854][ T787] Workqueue: events request_firmware_work_func [ 323.002074][ T787] Call Trace: [ 323.005394][ T787] [ 323.008452][ T787] dump_stack_lvl+0x16c/0x230 [ 323.013182][ T787] ? show_regs_print_info+0x20/0x20 [ 323.018472][ T787] ? load_image+0x3b0/0x3b0 [ 323.023055][ T787] panic+0x2c0/0x710 [ 323.027008][ T787] ? bpf_jit_dump+0xd0/0xd0 [ 323.031583][ T787] ? ret_from_fork_asm+0x11/0x20 [ 323.036591][ T787] __warn+0x2e0/0x470 [ 323.040627][ T787] ? sysfs_remove_group+0x178/0x2a0 [ 323.045850][ T787] ? sysfs_remove_group+0x178/0x2a0 [ 323.051066][ T787] report_bug+0x2be/0x4f0 [ 323.055501][ T787] ? sysfs_remove_group+0x178/0x2a0 [ 323.060720][ T787] ? sysfs_remove_group+0x178/0x2a0 [ 323.065929][ T787] ? sysfs_remove_group+0x17a/0x2a0 [ 323.071144][ T787] handle_bug+0xcf/0x120 [ 323.075404][ T787] exc_invalid_op+0x1a/0x50 [ 323.079937][ T787] asm_exc_invalid_op+0x1a/0x20 [ 323.084842][ T787] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 323.090665][ T787] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 9a d2 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 98 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e2 8c 72 ff [ 323.110300][ T787] RSP: 0018:ffffc90003d77800 EFLAGS: 00010246 [ 323.116760][ T787] RAX: f10b6ba258000000 RBX: ffffffff8b214da0 RCX: ffff888021829e00 [ 323.124856][ T787] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 323.132943][ T787] RBP: dffffc0000000000 R08: ffffc90003d77407 R09: 1ffff920007aee80 [ 323.140953][ T787] R10: dffffc0000000000 R11: fffff520007aee81 R12: 1ffffffff16429b8 [ 323.148945][ T787] R13: 0000000000000001 R14: ffff8880682443e0 R15: ffff88823bc0a808 [ 323.156955][ T787] ? sysfs_unmerge_group+0x10d/0x130 [ 323.162271][ T787] device_del+0x251/0x900 [ 323.166724][ T787] ? kill_device+0x160/0x160 [ 323.171337][ T787] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 323.177259][ T787] ? _raw_spin_unlock+0x40/0x40 [ 323.182146][ T787] ? complete_all+0xd0/0x1d0 [ 323.186851][ T787] firmware_fallback_sysfs+0x682/0x940 [ 323.192387][ T787] _request_firmware+0xed9/0x1510 [ 323.197454][ T787] ? request_firmware+0x50/0x50 [ 323.202336][ T787] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 323.208334][ T787] ? read_lock_is_recursive+0x20/0x20 [ 323.213727][ T787] request_firmware_work_func+0xb0/0x1b0 [ 323.219397][ T787] ? process_scheduled_works+0x957/0x15b0 [ 323.225174][ T787] process_scheduled_works+0xa45/0x15b0 [ 323.230766][ T787] ? assign_work+0x400/0x400 [ 323.235391][ T787] ? assign_work+0x39e/0x400 [ 323.239999][ T787] worker_thread+0xa55/0xfc0 [ 323.244608][ T787] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 323.250530][ T787] ? _raw_spin_unlock+0x40/0x40 [ 323.255406][ T787] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 323.261338][ T787] kthread+0x2fa/0x390 [ 323.265440][ T787] ? pr_cont_work+0x560/0x560 [ 323.270221][ T787] ? kthread_blkcg+0xd0/0xd0 [ 323.274828][ T787] ret_from_fork+0x48/0x80 [ 323.279279][ T787] ? kthread_blkcg+0xd0/0xd0 [ 323.283918][ T787] ret_from_fork_asm+0x11/0x20 [ 323.288716][ T787] [ 323.292059][ T787] Kernel Offset: disabled [ 323.296500][ T787] Rebooting in 86400 seconds..