last executing test programs: 11m59.412529281s ago: executing program 1 (id=5275): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11m58.495363109s ago: executing program 1 (id=5278): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 11m57.140812607s ago: executing program 1 (id=5285): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x21000, 0x54) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xfffffffd, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xfffdffff, 0x104, 0x5, 0xa, 0xffffffffffffffff}]}) 11m55.251713343s ago: executing program 1 (id=5290): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11m53.499670802s ago: executing program 1 (id=5295): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 11m52.585045997s ago: executing program 1 (id=5298): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) 11m49.944925253s ago: executing program 32 (id=5298): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) 6.140307921s ago: executing program 4 (id=8526): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 6.038149211s ago: executing program 5 (id=8527): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x63, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 5.693424738s ago: executing program 0 (id=8529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) write(r0, &(0x7f0000000040)="862a22", 0x3) 5.197764798s ago: executing program 5 (id=8531): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) getdents64(r0, 0x0, 0x3a) 5.07256063s ago: executing program 4 (id=8532): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@nouid32}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 4.938333498s ago: executing program 3 (id=8533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.471219451s ago: executing program 2 (id=8534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 4.330017419s ago: executing program 5 (id=8535): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x3cba, &(0x7f0000000040)={0x0, 0xc89f, 0xc802, 0x2, 0xb8}) 3.947443423s ago: executing program 0 (id=8536): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0xb, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 3.749400634s ago: executing program 3 (id=8537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000000010000040000100000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 3.469389566s ago: executing program 2 (id=8538): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000003000000", 0xfe60) 3.341378553s ago: executing program 4 (id=8539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000c0) 3.018169993s ago: executing program 5 (id=8540): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x200000) 2.944765683s ago: executing program 0 (id=8541): r0 = epoll_create(0x9) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0xa0000000}) 2.831910716s ago: executing program 3 (id=8542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) 2.678338111s ago: executing program 2 (id=8543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000008000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r0 = io_uring_setup(0x78ec, &(0x7f00000000c0)={0x0, 0xc63f, 0x3018, 0x3, 0x400001f9}) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 2.278924258s ago: executing program 0 (id=8544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) 2.27078087s ago: executing program 4 (id=8545): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000480)='0\x00', 0x2) 2.08637061s ago: executing program 5 (id=8546): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x121180) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001140)=""/136) 1.886233406s ago: executing program 3 (id=8547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2000c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 1.703197215s ago: executing program 2 (id=8548): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) 1.48229997s ago: executing program 4 (id=8549): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18c95, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x30a, &(0x7f0000000480)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 1.199756773s ago: executing program 0 (id=8550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 1.142375974s ago: executing program 5 (id=8551): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.099024911s ago: executing program 3 (id=8552): r0 = socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 877.359632ms ago: executing program 2 (id=8553): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) 316.281109ms ago: executing program 4 (id=8554): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 20.391806ms ago: executing program 0 (id=8555): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x4, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, 0x4cfd, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x108}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff0000ff, 0xb, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x40, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x9}, 0x28) 3.056438ms ago: executing program 3 (id=8556): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x103, 0x0) 0s ago: executing program 2 (id=8557): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049f73720476fb379ce25c0ea42027ba6a7d6e3840d9ab8a824ead708bf72b8eecead3cab6d9481962a189a600dece7dd6cae47e25fd708b45da88295068b73d025dc162712507d33adf2ab5d31173796fe2270cca25d78a51ccd0a115198d8bd016aeb1b285366e8606e3f46b669e4e76ef0fdad1f4d4efd054c1e9628c3437d064dba798be2c185cea31685aad05f5fab7eed43084f56ae24cd5eac9c45321898688d5f98a6dd1695a0bd10e248de84c82b15d6ce5e0ffa15a8ee93fc4947de9f752685b9645ebdc7def"], 0x1, 0x151, &(0x7f0000000300)="$eJzs2r1K82AUB/DzvipKL8Gp0Ax1yLdWwV0QnLwAMbTPEx9MjCSCtFPwBhSHeAmurrp5CZ3d3NQrcIrkyzRJQVBBsf/fktOe5J8EwpmO7HuuzgOZaCW83H3673tuu2eu97nOLcpsE1E7KcZxfKVQw/57fxyHSuOEzl1+7NrRzi0XDjOaGQAAAAAAAAAAAAAAAAAAAAAAM6LznBetg8i75sJh+kQ3GI4OLcdhflD8I1G+o0M88ja5kJhZyeu+Eknp/o6Its6SPK3Sl5KkpfzHv/r91BP3WA2GI1m4ls1sdmQYZk9b1bQ1Q02z1HqidJE/U5lavd9NuU/0oDX3iaiVHeaXRXR+Wk8v3/8zRfi1y1HMevH4QjS9VXzrzA8WJr/Vueycjb209Tve4k8W9flBg0Wzc5/MD6XvOYOP5kdx9Tc8zrSpB/AT3gIAAP//Kr4ovA==") r0 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/179, 0xb3) kernel console output (not intermixed with test programs): hange from 0 to 512 [ 1514.620369][T21488] EXT4-fs: Ignoring removed oldalloc option [ 1514.717584][T21488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1514.781884][T21488] EXT4-fs (loop2): 1 truncate cleaned up [ 1514.911052][T21488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.526199][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.566571][T21496] loop5: detected capacity change from 0 to 512 [ 1515.700507][T21496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.215213][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.548212][T21507] netlink: 'syz.0.6864': attribute type 2 has an invalid length. [ 1518.370587][T21532] program syz.0.6887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.071162][T21541] binder: 21539:21541 ioctl 541b 0 returned -22 [ 1519.109806][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6880'. [ 1519.844606][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1519.980070][T21555] loop2: detected capacity change from 0 to 64 [ 1521.059231][T21570] loop2: detected capacity change from 0 to 512 [ 1521.255226][T21570] EXT4-fs (loop2): 1 orphan inode deleted [ 1521.350761][T21570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1522.024410][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.914307][T21596] netlink: 336 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1522.934532][T21596] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1523.001801][T21598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1523.793979][T21605] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1524.347595][T21607] loop3: detected capacity change from 0 to 4096 [ 1525.024584][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6924'. [ 1526.919367][T21640] macsec2: entered promiscuous mode [ 1526.946051][T21640] macsec2: entered allmulticast mode [ 1527.263742][T21645] loop5: detected capacity change from 0 to 64 [ 1527.824370][T13062] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1528.054194][T13062] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1528.080085][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1528.155810][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1528.211858][T21655] netlink: 'syz.3.6931': attribute type 14 has an invalid length. [ 1528.214312][T13062] usb 1-1: string descriptor 0 read error: -22 [ 1528.226673][T13062] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1528.245335][T21655] netlink: 'syz.3.6931': attribute type 11 has an invalid length. [ 1528.308651][T13062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1528.863786][T13062] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -32 [ 1528.957770][T13062] usb 1-1: USB disconnect, device number 26 [ 1529.632146][T21669] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1530.655196][T21677] loop3: detected capacity change from 0 to 1024 [ 1530.753827][T21682] program syz.5.6946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.738819][ T5847] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1531.947504][ T5847] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1531.982448][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1532.027605][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.094221][ T5847] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1532.153898][T13062] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1532.165598][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1532.178756][T17438] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1532.204235][ T5847] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1532.231460][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.272163][ T5847] usb 5-1: config 0 descriptor?? [ 1532.323058][T21700] loop2: detected capacity change from 0 to 512 [ 1532.394291][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.399639][T17438] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.411818][T21700] EXT4-fs: Ignoring removed oldalloc option [ 1532.428688][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.469124][T21700] EXT4-fs: inline encryption not supported [ 1532.483966][T13062] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1532.503936][T13062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.520143][T17438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1532.520390][T17438] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1532.520575][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.575470][T17438] usb 4-1: config 0 descriptor?? [ 1532.635557][T21700] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1532.645225][T17438] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1532.645505][T17438] dvb-usb: bulk message failed: -22 (3/0) [ 1532.711331][T17438] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1532.747888][T17438] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1532.751056][T13062] usb 6-1: config 0 descriptor?? [ 1532.766383][T17438] usb 4-1: media controller created [ 1532.863517][T21695] dvb-usb: bulk message failed: -22 (4/0) [ 1532.877230][T17438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1532.903527][ T5847] ryos 0003:1E7D:3138.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 1532.946861][T17438] dvb-usb: bulk message failed: -22 (6/0) [ 1532.977824][T17438] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1533.019370][T21700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6954: bg 0: block 64: padding at end of block bitmap is not set [ 1533.043487][T17438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 1533.114581][ T5847] usb 5-1: USB disconnect, device number 31 [ 1533.154137][T21700] loop2: lost filesystem error report for type 5 error -117 [ 1533.158633][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1533.172813][ C1] EXT4-fs (loop2): initial error at time 1533: ext4_validate_block_bitmap:441 [ 1533.181937][ C1] EXT4-fs (loop2): last error at time 1533: ext4_validate_block_bitmap:441 [ 1533.209516][T21700] Quota error (device loop2): write_blk: dquota write failed [ 1533.214843][T17438] dvb-usb: schedule remote query interval to 150 msecs. [ 1533.225606][T21700] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1533.274766][T21700] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.6954: Failed to acquire dquot type 0 [ 1533.313537][T17438] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1533.336877][T21700] loop2: lost filesystem error report for type 5 error -117 [ 1533.338834][T21700] EXT4-fs (loop2): 1 truncate cleaned up [ 1533.383554][T21700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1533.430156][T17438] usb 4-1: USB disconnect, device number 31 [ 1533.570646][T13062] hid-led 0003:27B8:01ED.0038: unbalanced delimiter at end of report description [ 1533.612098][T13062] hid-led 0003:27B8:01ED.0038: probe with driver hid-led failed with error -22 [ 1533.693875][T13062] usb 6-1: USB disconnect, device number 10 [ 1533.937460][T17438] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1534.037906][T21706] fido_id[21706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1534.259191][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.545097][T21710] loop4: detected capacity change from 0 to 512 [ 1534.781319][T21710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.497474][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.295612][T21729] loop2: detected capacity change from 0 to 1764 [ 1536.349126][ T5847] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1536.558944][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 1536.591778][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.606119][T21733] loop3: detected capacity change from 0 to 256 [ 1536.654168][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.699009][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.785657][ T5847] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1536.894652][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.978293][ T5847] usb 5-1: config 0 descriptor?? [ 1537.077737][T21733] FAT-fs (loop3): Directory bread(block 64) failed [ 1537.118002][T21738] loop2: detected capacity change from 0 to 256 [ 1537.127832][T21733] FAT-fs (loop3): Directory bread(block 65) failed [ 1537.141103][T21733] FAT-fs (loop3): Directory bread(block 66) failed [ 1537.147805][T21733] FAT-fs (loop3): Directory bread(block 67) failed [ 1537.163905][T17438] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1537.225170][T21738] exfat: Deprecated parameter 'utf8' [ 1537.255333][T21733] FAT-fs (loop3): Directory bread(block 68) failed [ 1537.287406][T21733] FAT-fs (loop3): Directory bread(block 69) failed [ 1537.311456][T21738] exfat: Deprecated parameter 'utf8' [ 1537.318048][T21738] exfat: Deprecated parameter 'utf8' [ 1537.345612][T21733] FAT-fs (loop3): Directory bread(block 70) failed [ 1537.362763][T17438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.375722][T21733] FAT-fs (loop3): Directory bread(block 71) failed [ 1537.392970][T21733] FAT-fs (loop3): Directory bread(block 72) failed [ 1537.423211][T17438] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1537.444797][T21738] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1537.459259][T17438] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1537.495397][T21733] FAT-fs (loop3): Directory bread(block 73) failed [ 1537.526528][T17438] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1537.587279][T17438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.601683][ T5847] microsoft 0003:045E:07DA.0039: unbalanced collection at end of report description [ 1537.627133][T17438] usb 6-1: Product: syz [ 1537.634196][ T29] audit: type=1800 audit(1537.567:186): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6969" name="file1" dev="loop2" ino=1049085 res=0 errno=0 [ 1537.658724][T17438] usb 6-1: Manufacturer: syz [ 1537.663512][T17438] usb 6-1: SerialNumber: syz [ 1537.703813][ T5847] microsoft 0003:045E:07DA.0039: parse failed [ 1537.725385][T17438] usb 6-1: config 0 descriptor?? [ 1537.744448][ T5847] microsoft 0003:045E:07DA.0039: probe with driver microsoft failed with error -22 [ 1537.844232][ T5847] usb 5-1: USB disconnect, device number 32 [ 1537.995726][T17438] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1538.008984][T17438] uvcvideo 6-1:0.0: No valid video chain found. [ 1538.229904][T17438] usb 6-1: USB disconnect, device number 11 [ 1538.626434][T21742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1538.652440][T21742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1539.512680][T21752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1539.568909][T21752] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1539.733442][T21752] vlan2: entered promiscuous mode [ 1539.767069][T21752] geneve1: entered promiscuous mode [ 1539.809738][T21752] vlan2: entered allmulticast mode [ 1539.827071][T21752] geneve1: entered allmulticast mode [ 1540.245823][T21760] loop2: detected capacity change from 0 to 64 [ 1542.261337][T21783] loop5: detected capacity change from 0 to 512 [ 1542.306097][T21783] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1542.357994][T21783] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1542.478998][T21783] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1542.536868][T21783] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1542.657023][T21783] System zones: 0-2, 18-18, 34-35 [ 1542.678214][T21783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.737161][T21788] loop4: detected capacity change from 0 to 512 [ 1542.949702][T21788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1543.174701][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.591767][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.168699][T17438] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1545.369329][T17438] usb 5-1: Using ep0 maxpacket: 16 [ 1545.412190][T17438] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1545.451227][T17438] usb 5-1: config 0 has no interface number 0 [ 1545.488965][T17438] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1545.557211][T17438] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1545.643291][T17438] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1545.672867][T17438] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1545.713140][T17438] usb 5-1: Product: syz [ 1545.717496][T17438] usb 5-1: SerialNumber: syz [ 1545.746039][T17438] usb 5-1: config 0 descriptor?? [ 1545.803876][T17438] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1545.834036][T17438] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input37 [ 1546.121634][ C0] cm109_urb_ctl_callback: 37 callbacks suppressed [ 1546.121739][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1546.136275][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1546.144647][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1546.154156][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1546.162093][T19292] usb 5-1: USB disconnect, device number 33 [ 1546.168388][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1546.175508][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1546.228201][T21828] cgroup: fork rejected by pids controller in /syz0 [ 1546.272786][T19292] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1548.085066][T21848] loop3: detected capacity change from 0 to 512 [ 1548.268504][T21848] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1548.294344][T18730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.331353][T21848] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1548.454711][T21848] EXT4-fs (loop3): 1 truncate cleaned up [ 1548.535970][T21848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.671338][T18730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.747942][T21848] EXT4-fs: group quota file already specified [ 1549.094853][T18730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.158253][T19490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.289153][T18730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.884741][T18730] bridge_slave_1: left allmulticast mode [ 1549.890726][T18730] bridge_slave_1: left promiscuous mode [ 1549.908151][T18730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.931168][T18730] bridge_slave_0: left allmulticast mode [ 1549.936978][T18730] bridge_slave_0: left promiscuous mode [ 1549.952348][T18730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.977159][T18730] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1550.397851][T18730] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1550.641623][T18730] dvmrp8 (unregistering): left allmulticast mode [ 1550.973947][T18730] bond0 (unregistering): left promiscuous mode [ 1550.995188][T18730] bond_slave_0: left promiscuous mode [ 1551.008081][T18730] bond_slave_1: left promiscuous mode [ 1551.204920][T18730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.312863][T18730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.411340][T18730] bond0 (unregistering): Released all slaves [ 1551.475326][T18730] bond1 (unregistering): Released all slaves [ 1552.481616][T18730] IPVS: stopping backup sync thread 15632 ... [ 1553.213927][T15669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1553.239944][T15669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1553.248917][T15669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1553.250287][T21889] loop5: detected capacity change from 0 to 64 [ 1553.261950][T15669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1553.279422][T15669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1553.470096][ T29] audit: type=1800 audit(1553.437:187): pid=21889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7033" name="file3" dev="loop5" ino=6 res=0 errno=0 [ 1553.884234][T21887] xfrm0 speed is unknown, defaulting to 1000 [ 1554.360258][T21901] loop5: detected capacity change from 0 to 256 [ 1554.397304][T21901] exfat: Deprecated parameter 'namecase' [ 1554.435833][T18730] hsr_slave_0: left promiscuous mode [ 1554.487094][T18730] hsr_slave_1: left promiscuous mode [ 1554.532527][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7040'. [ 1554.545561][T18730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.594404][T18730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.643710][T21901] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1554.649042][T18730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.741818][T18730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.953661][T18730] veth1_macvtap: left promiscuous mode [ 1555.018767][T18730] veth1_vlan: left promiscuous mode [ 1555.053927][T18730] veth0_vlan: left promiscuous mode [ 1555.309010][T15669] Bluetooth: hci1: command tx timeout [ 1555.686341][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.701017][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.417584][T21925] loop4: detected capacity change from 0 to 256 [ 1556.573469][T21925] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1556.747475][T18730] pimreg (unregistering): left allmulticast mode [ 1556.785517][T13062] Process accounting resumed [ 1556.790837][T13062] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 1556.869464][T13062] FAT-fs (loop4): Filesystem has been set read-only [ 1557.389319][T15669] Bluetooth: hci1: command tx timeout [ 1557.543259][T21928] loop3: detected capacity change from 0 to 4096 [ 1557.648939][T21928] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1558.318943][T18730] team_slave_1 (unregistering): left promiscuous mode [ 1558.358950][T18730] team0 (unregistering): Port device team_slave_1 removed [ 1558.434759][T18730] team_slave_0 (unregistering): left promiscuous mode [ 1558.487620][T18730] team0 (unregistering): Port device team_slave_0 removed [ 1559.469043][T15669] Bluetooth: hci1: command tx timeout [ 1559.604766][T21945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7064'. [ 1560.425046][T18730] IPVS: stop unused estimator thread 0... [ 1561.550096][T15669] Bluetooth: hci1: command tx timeout [ 1561.575779][T21887] chnl_net:caif_netlink_parms(): no params data found [ 1561.587824][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7061'. [ 1561.641926][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7061'. [ 1562.352452][T17438] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1562.539307][T17438] usb 3-1: Using ep0 maxpacket: 8 [ 1562.564981][T17438] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.624385][T17438] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1562.696964][T17438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1562.768668][T17438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1562.819460][T17438] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1562.916107][T17438] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1562.957536][T17438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1562.992592][T17438] usb 3-1: Product: syz [ 1562.996948][T17438] usb 3-1: Manufacturer: syz [ 1563.036102][T17438] usb 3-1: SerialNumber: syz [ 1563.084629][T17438] usb 3-1: config 0 descriptor?? [ 1563.423530][T17438] radio-si470x 3-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 1563.627756][T21989] loop3: detected capacity change from 0 to 4096 [ 1563.649241][T17438] radio-si470x 3-1:0.0: software version 100, hardware version 101 [ 1563.692669][T21989] EXT4-fs: Ignoring removed orlov option [ 1563.766343][T21996] loop4: detected capacity change from 0 to 1024 [ 1563.820004][T21989] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1563.844168][T17438] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1563.874659][T17438] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1563.906437][T17438] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1563.929691][T17438] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1563.941645][T21887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.957056][T21887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.969096][T17438] usb 3-1: USB disconnect, device number 33 [ 1563.975640][T21887] bridge_slave_0: entered allmulticast mode [ 1563.989768][T21989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.053365][T21887] bridge_slave_0: entered promiscuous mode [ 1564.136097][T21887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.166993][T21996] hfsplus: bad catalog entry type [ 1564.187702][T21887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.248755][T21989] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1564.251977][T21887] bridge_slave_1: entered allmulticast mode [ 1564.349292][T21887] bridge_slave_1: entered promiscuous mode [ 1564.643341][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1564.704294][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1564.746411][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1564.921206][T19490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.992592][T21887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.121433][T21887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.734737][T21887] team0: Port device team_slave_0 added [ 1565.825534][T21887] team0: Port device team_slave_1 added [ 1566.205031][T21887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.267289][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.364642][T21887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.417063][T21887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.481537][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.692092][T21887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.803228][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1566.884942][T22022] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1566.994312][T22022] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1567.266215][T22027] loop3: detected capacity change from 0 to 2048 [ 1567.391538][T22027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1567.431478][T21887] hsr_slave_0: entered promiscuous mode [ 1567.496499][T21887] hsr_slave_1: entered promiscuous mode [ 1567.544025][T21887] debugfs: 'hsr0' already exists in 'hsr' [ 1567.598897][T21887] Cannot create hsr debugfs directory [ 1571.131645][T13062] hid_parser_main: 28 callbacks suppressed [ 1571.131741][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.245194][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.294048][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.331476][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.352216][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.411591][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.425595][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.451706][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.517196][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.547155][T13062] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1571.661988][T21887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1571.669467][T13062] hid-generic 0000:0000:0004.003A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1571.883418][T21887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1571.957468][T22082] loop5: detected capacity change from 0 to 256 [ 1572.023063][T21887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1572.184497][T21887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1572.720701][T22081] fido_id[22081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1573.093351][T22094] loop5: detected capacity change from 0 to 64 [ 1574.233396][T22106] loop5: detected capacity change from 0 to 64 [ 1574.262173][T21887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.442987][T22106] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1574.628854][T21887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.816497][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.824113][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.074836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.082392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.280580][T21887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.558703][T17438] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1578.792162][T17438] usb 4-1: Using ep0 maxpacket: 32 [ 1578.855725][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.914296][T21887] veth0_vlan: entered promiscuous mode [ 1578.936421][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.998023][T17438] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1579.026278][T21887] veth1_vlan: entered promiscuous mode [ 1579.057124][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.132239][T17438] usb 4-1: config 0 descriptor?? [ 1579.619681][T21887] veth0_macvtap: entered promiscuous mode [ 1579.683396][T17438] zydacron 0003:13EC:0006.003B: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 1579.844605][T21887] veth1_macvtap: entered promiscuous mode [ 1579.874208][T17438] usb 4-1: USB disconnect, device number 32 [ 1580.279601][T21887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.554082][T21887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.727836][T22156] fido_id[22156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1580.779383][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.813081][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.959900][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.037574][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.897563][T22219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1584.982822][T22219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1585.444815][T22229] loop5: detected capacity change from 0 to 256 [ 1586.976668][T22240] loop4: detected capacity change from 0 to 4096 [ 1588.862898][T22271] netlink: 'syz.2.7157': attribute type 49 has an invalid length. [ 1590.009746][T22285] netlink: 'syz.2.7160': attribute type 29 has an invalid length. [ 1590.114369][T22285] netlink: 'syz.2.7160': attribute type 29 has an invalid length. [ 1590.788977][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.848855][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.928582][T17438] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1591.118721][T17438] usb 4-1: Using ep0 maxpacket: 32 [ 1591.147052][ T7854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.185996][ T7854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.220253][T17438] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1591.278638][T17438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.335861][T17438] usb 4-1: Product: syz [ 1591.387669][T17438] usb 4-1: Manufacturer: syz [ 1591.409839][T17438] usb 4-1: SerialNumber: syz [ 1591.485332][T17438] usb 4-1: config 0 descriptor?? [ 1591.915911][T13062] kernel write not supported for file /input/event2 (pid: 13062 comm: kworker/1:2) [ 1592.003857][T17438] airspy 4-1:0.0: Board ID: 00 [ 1592.028965][T17438] airspy 4-1:0.0: Firmware version: [ 1592.229202][T17438] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 1592.296266][T17438] airspy 4-1:0.0: Registered as swradio24 [ 1592.320200][T17438] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1592.387451][T17438] usb 4-1: USB disconnect, device number 33 [ 1593.544962][T22315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7171'. [ 1594.080939][T22323] loop5: detected capacity change from 0 to 256 [ 1594.325927][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 1594.445580][T22323] FAT-fs (loop5): Directory bread(block 64) failed [ 1594.483380][T22323] FAT-fs (loop5): Directory bread(block 65) failed [ 1594.524996][T22323] FAT-fs (loop5): Directory bread(block 66) failed [ 1594.553514][T22332] dvmrp8: entered allmulticast mode [ 1594.589626][T22323] FAT-fs (loop5): Directory bread(block 67) failed [ 1594.596504][T22323] FAT-fs (loop5): Directory bread(block 68) failed [ 1594.676721][T22323] FAT-fs (loop5): Directory bread(block 69) failed [ 1594.683803][T22323] FAT-fs (loop5): Directory bread(block 70) failed [ 1594.713890][T22333] pimreg: entered allmulticast mode [ 1594.742169][T22323] FAT-fs (loop5): Directory bread(block 71) failed [ 1594.789383][T22323] FAT-fs (loop5): Directory bread(block 72) failed [ 1594.813003][T22323] FAT-fs (loop5): Directory bread(block 73) failed [ 1595.809856][T22336] loop3: detected capacity change from 0 to 4096 [ 1595.848779][T22336] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1596.132435][T22336] ntfs3(loop3): ino=1a, mi_enum_attr [ 1596.166320][T22336] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1596.196791][T22336] ntfs3(loop3): ino=1a, mi_enum_attr [ 1596.277751][T22336] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1596.531563][T22336] ntfs3: Volume is dirty and "force" flag is not set! [ 1597.200895][T22352] loop5: detected capacity change from 0 to 2048 [ 1597.400633][T22352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1597.814740][T22361] loop4: detected capacity change from 0 to 512 [ 1598.026993][T22361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1598.093549][T22361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7191: bg 0: block 248: padding at end of block bitmap is not set [ 1598.127157][T22361] loop4: lost filesystem error report for type 5 error -117 [ 1598.128442][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1598.142539][ C0] EXT4-fs (loop4): last error at time 1598: ext4_validate_block_bitmap:441 [ 1598.170307][T22361] Quota error (device loop4): write_blk: dquota write failed [ 1598.183886][T22361] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1598.236472][T22361] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.7191: Failed to acquire dquot type 1 [ 1598.337322][T22361] loop4: lost filesystem error report for type 5 error -117 [ 1598.380705][T22361] EXT4-fs (loop4): 1 truncate cleaned up [ 1598.502062][T22361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1598.705883][T22361] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1598.795245][T22361] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1598.895955][T22361] Quota error (device loop4): write_blk: dquota write failed [ 1598.925588][T22361] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1598.947883][T22361] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.7191: Failed to acquire dquot type 1 [ 1599.393719][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.588873][ T5847] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1599.759090][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 1599.788653][T22381] bond0: option lacp_rate: invalid value (255) [ 1599.816661][T22381] bond0 (unregistering): Released all slaves [ 1599.827440][ T5847] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.827600][ T5847] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.827731][ T5847] usb 1-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1599.827881][ T5847] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1599.828035][ T5847] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 1600.155545][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.254882][ T5847] usb 1-1: config 0 descriptor?? [ 1600.801294][ T5847] hid_parser_main: 91 callbacks suppressed [ 1600.801401][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1600.873890][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1600.913499][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1600.944702][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.008806][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.048680][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.096198][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.160014][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.213528][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.265238][ T5847] holtek_mouse 0003:04D9:A04A.003C: unknown main item tag 0x0 [ 1601.345393][T22399] loop5: detected capacity change from 0 to 64 [ 1601.387334][ T5847] holtek_mouse 0003:04D9:A04A.003C: hidraw0: USB HID v0.00 Device [HID 04d9:a04a] on usb-dummy_hcd.0-1/input0 [ 1601.616518][ T5847] usb 1-1: USB disconnect, device number 27 [ 1602.694678][T22401] fido_id[22401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1602.809491][T22410] ipvlan2: entered allmulticast mode [ 1602.814987][T22410] dummy0: entered allmulticast mode [ 1603.011071][T22411] loop5: detected capacity change from 0 to 2048 [ 1603.238024][T22416] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1603.413738][T22418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1604.447140][T22427] bond1: option lacp_rate: invalid value (255) [ 1604.513432][T22427] bond1 (unregistering): Released all slaves [ 1605.359766][T22436] loop2: detected capacity change from 0 to 1024 [ 1605.984950][ T7834] hfsplus: b-tree write err: -5, ino 25 [ 1606.012552][ T7834] hfsplus: b-tree write err: -5, ino 4 [ 1606.032296][ T7834] hfsplus: b-tree write err: -5, ino 2 [ 1609.454096][T22488] loop4: detected capacity change from 0 to 512 [ 1609.616029][T22488] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7250: inode has both inline data and extents flags [ 1609.686275][T22488] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1609.688452][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1609.704438][ C1] EXT4-fs (loop4): initial error at time 1609: ext4_orphan_get:1397: inode 15 [ 1609.713646][ C1] EXT4-fs (loop4): last error at time 1609: ext4_orphan_get:1397: inode 15 [ 1609.733904][T22488] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7250: couldn't read orphan inode 15 (err -117) [ 1609.778514][T22488] loop4: lost filesystem error report for type 5 error -117 [ 1609.781147][T22488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1609.881780][T13290] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.978942][T13290] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.998895][T13290] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.062719][T13290] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.107887][T17438] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1610.312160][T17438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.364279][T17438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.423755][T17438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.488247][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.501642][T17438] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1610.571201][T17438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.641131][T17438] usb 6-1: config 0 descriptor?? [ 1611.137941][T22504] tmpfs: Cannot disable swap on remount [ 1611.164590][T17438] wacom 0003:056A:0010.003D: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1611.245384][T17438] wacom 0003:056A:0010.003D: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 1611.315616][T17438] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.003D/input/input38 [ 1611.550604][T17438] usb 6-1: USB disconnect, device number 12 [ 1612.346764][T22519] tipc: Started in network mode [ 1612.386956][T22510] fido_id[22510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1612.417545][T22519] tipc: Node identity , cluster identity 4711 [ 1612.483159][T22519] tipc: Failed to set node id, please configure manually [ 1612.632478][T22519] tipc: Enabling of bearer rejected, failed to enable media [ 1614.916386][T22545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1617.090951][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.097550][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.166248][T22568] loop5: detected capacity change from 0 to 4096 [ 1617.229381][T22568] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1617.605963][T22568] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1617.681974][T22568] ntfs3(loop5): ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 1618.396825][T22580] loop2: detected capacity change from 0 to 4096 [ 1618.597928][T22580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.170635][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.601245][T22620] loop3: detected capacity change from 0 to 128 [ 1621.913963][T13062] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1622.105637][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.158259][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.244644][T13062] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1622.276867][T13062] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1622.327362][T13062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.425560][T13062] usb 6-1: config 0 descriptor?? [ 1622.565724][ T5847] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1622.750014][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 1622.826045][ T5847] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1622.869118][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.915406][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.978045][T13062] steelseries 0003:1038:1410.003E: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1622.988078][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1623.077346][ T5847] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1623.107872][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.184055][T17438] usb 6-1: USB disconnect, device number 13 [ 1623.201013][ T5847] usb 5-1: config 0 descriptor?? [ 1623.347758][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7321'. [ 1623.387186][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7321'. [ 1623.736115][ T5847] hid_parser_main: 28 callbacks suppressed [ 1623.736211][ T5847] redragon 0003:0C45:760B.003F: unknown main item tag 0x6 [ 1623.751408][ T5847] redragon 0003:0C45:760B.003F: unexpected long global item [ 1623.843243][ T5847] redragon 0003:0C45:760B.003F: probe with driver redragon failed with error -22 [ 1623.932111][ T5847] usb 5-1: USB disconnect, device number 34 [ 1625.280876][T22652] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.7329'. [ 1626.266351][T22661] loop4: detected capacity change from 0 to 512 [ 1626.476323][T22661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.951775][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.105064][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1632.148962][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1635.499385][T17438] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1635.691971][T17438] usb 4-1: Using ep0 maxpacket: 8 [ 1635.737238][T17438] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1635.764262][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.794610][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.806073][T17438] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1635.827325][T17438] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1635.857467][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.897563][T17438] usb 4-1: config 0 descriptor?? [ 1636.396034][T22779] tmpfs: Cannot disable swap on remount [ 1636.507057][T17438] redragon 0003:0C45:760B.0040: unknown main item tag 0x6 [ 1636.559220][T17438] redragon 0003:0C45:760B.0040: unexpected long global item [ 1636.609973][T17438] redragon 0003:0C45:760B.0040: probe with driver redragon failed with error -22 [ 1636.743990][T13062] usb 4-1: USB disconnect, device number 34 [ 1638.679266][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1638.755453][T22795] loop3: detected capacity change from 0 to 4096 [ 1638.765854][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1638.826200][T22797] netlink: 'syz.0.7398': attribute type 19 has an invalid length. [ 1638.849256][T22795] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1638.885370][T22797] netlink: 'syz.0.7398': attribute type 20 has an invalid length. [ 1639.212205][T22795] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1639.420536][T22795] ntfs3(loop3): ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 1641.027476][T22820] loop5: detected capacity change from 0 to 512 [ 1641.183804][T22820] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7410: inode has both inline data and extents flags [ 1641.219050][T22820] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1641.228664][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1641.244611][ C0] EXT4-fs (loop5): initial error at time 1641: ext4_orphan_get:1397: inode 15 [ 1641.253819][ C0] EXT4-fs (loop5): last error at time 1641: ext4_orphan_get:1397: inode 15 [ 1641.264039][T22820] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7410: couldn't read orphan inode 15 (err -117) [ 1641.365031][T22820] loop5: lost filesystem error report for type 5 error -117 [ 1641.371070][T22820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.798842][T17438] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1642.024580][T17438] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.058134][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.104930][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.187240][T17438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.260857][T17438] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1642.303421][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.373099][T17438] usb 4-1: config 0 descriptor?? [ 1642.956232][T17438] wacom 0003:056A:0010.0041: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1643.029495][T17438] wacom 0003:056A:0010.0041: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 1643.116363][T17438] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0041/input/input41 [ 1643.465320][T17438] usb 4-1: USB disconnect, device number 35 [ 1644.015661][T22844] fido_id[22844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1645.311564][T22867] loop4: detected capacity change from 0 to 64 [ 1645.842394][T22872] ipvlan2: entered allmulticast mode [ 1645.902622][T22871] loop3: detected capacity change from 0 to 1024 [ 1645.906273][T22872] dummy0: entered allmulticast mode [ 1646.525511][T18730] hfsplus: b-tree write err: -5, ino 25 [ 1646.581472][T18730] hfsplus: b-tree write err: -5, ino 4 [ 1646.587285][T18730] hfsplus: b-tree write err: -5, ino 2 [ 1647.688605][T22890] loop3: detected capacity change from 0 to 256 [ 1648.149893][T22890] FAT-fs (loop3): Directory bread(block 64) failed [ 1648.214111][T22890] FAT-fs (loop3): Directory bread(block 65) failed [ 1648.249801][T22890] FAT-fs (loop3): Directory bread(block 66) failed [ 1648.256505][T22890] FAT-fs (loop3): Directory bread(block 67) failed [ 1648.312961][T22890] FAT-fs (loop3): Directory bread(block 68) failed [ 1648.366339][T22890] FAT-fs (loop3): Directory bread(block 69) failed [ 1648.394325][T22890] FAT-fs (loop3): Directory bread(block 70) failed [ 1648.488856][T22890] FAT-fs (loop3): Directory bread(block 71) failed [ 1648.495746][T22890] FAT-fs (loop3): Directory bread(block 72) failed [ 1648.636414][T22890] FAT-fs (loop3): Directory bread(block 73) failed [ 1648.950388][T22902] loop4: detected capacity change from 0 to 2048 [ 1649.034500][T22902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1649.919081][T22913] loop2: detected capacity change from 0 to 512 [ 1650.040472][T22913] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1650.239175][T22913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7453: bg 0: block 248: padding at end of block bitmap is not set [ 1650.358190][T22913] loop2: lost filesystem error report for type 5 error -117 [ 1650.367636][T22913] Quota error (device loop2): write_blk: dquota write failed [ 1650.375282][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1650.375381][ C0] EXT4-fs (loop2): last error at time 1650: ext4_validate_block_bitmap:441 [ 1650.567226][T22913] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1650.582186][T22913] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.7453: Failed to acquire dquot type 1 [ 1650.748212][T22913] loop2: lost filesystem error report for type 5 error -117 [ 1650.774305][T22913] EXT4-fs (loop2): 1 truncate cleaned up [ 1650.834146][T22913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1650.998535][T22913] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1651.135011][T22926] loop4: detected capacity change from 0 to 512 [ 1651.170489][T22913] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1651.191918][T22913] Quota error (device loop2): write_blk: dquota write failed [ 1651.210748][T22913] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1651.244443][T22926] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1651.289685][T22913] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.7453: Failed to acquire dquot type 1 [ 1651.302394][T22926] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.7456: inode #1792: comm syz.4.7456: iget: illegal inode # [ 1651.456333][T22926] loop4: lost filesystem error report for type 5 error -117 [ 1651.458403][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1651.472458][ C1] EXT4-fs (loop4): initial error at time 1651: ext4_get_journal_inode:5888 [ 1651.481384][ C1] EXT4-fs (loop4): last error at time 1651: ext4_get_journal_inode:5888 [ 1651.498654][T22926] EXT4-fs (loop4): Remounting filesystem read-only [ 1651.505330][T22926] EXT4-fs (loop4): no journal found [ 1651.556226][T22926] EXT4-fs (loop4): can't get journal size [ 1651.567247][T22926] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1651.617449][T22926] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1651.683849][T22926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.865413][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.174176][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.089867][T22947] dvmrp8: entered allmulticast mode [ 1653.242838][T22950] pimreg: entered allmulticast mode [ 1653.272708][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1653.372941][T22952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1654.987829][T22971] netlink: 'syz.3.7476': attribute type 49 has an invalid length. [ 1657.094103][T23006] netlink: 'syz.4.7489': attribute type 29 has an invalid length. [ 1657.164632][T23006] netlink: 'syz.4.7489': attribute type 29 has an invalid length. [ 1657.554982][T23009] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1657.609127][T23009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1660.714522][T23051] loop3: detected capacity change from 0 to 64 [ 1660.814354][T23051] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1663.524500][T13062] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1663.698462][T13062] usb 3-1: Using ep0 maxpacket: 32 [ 1663.729401][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.794631][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.856595][T13062] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1663.905262][T23087] loop3: detected capacity change from 0 to 64 [ 1663.917253][T13062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.950681][T13062] usb 3-1: config 0 descriptor?? [ 1664.495224][T13062] zydacron 0003:13EC:0006.0042: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 1664.696381][T13062] usb 3-1: USB disconnect, device number 34 [ 1665.421008][T23093] fido_id[23093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1668.479718][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7552'. [ 1669.696622][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1669.786964][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1671.154391][T23168] loop3: detected capacity change from 0 to 1024 [ 1671.380249][T23168] hfsplus: bad catalog entry type [ 1671.864600][ T7834] hfsplus: b-tree write err: -5, ino 25 [ 1671.916419][ T7834] hfsplus: b-tree write err: -5, ino 4 [ 1671.956500][ T7834] hfsplus: b-tree write err: -5, ino 2 [ 1672.108995][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1672.894452][T23187] loop5: detected capacity change from 0 to 256 [ 1672.975857][T23187] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1673.136940][T17438] Process accounting resumed [ 1673.172361][T17438] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 1673.181735][T23194] loop2: detected capacity change from 0 to 64 [ 1673.214392][T17438] FAT-fs (loop5): Filesystem has been set read-only [ 1673.402563][ T29] audit: type=1800 audit(1673.347:188): pid=23194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7577" name="file3" dev="loop2" ino=6 res=0 errno=0 [ 1673.884624][T23199] loop3: detected capacity change from 0 to 256 [ 1673.975637][T23199] exfat: Deprecated parameter 'namecase' [ 1674.097849][T23199] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1675.469086][T23197] Bluetooth: hci1: command 0x0406 tx timeout [ 1676.695259][T23235] binder: 23234:23235 unknown command 0 [ 1676.703910][T23235] binder: 23234:23235 ioctl c0306201 800002c0 returned -22 [ 1677.247605][T23241] loop4: detected capacity change from 0 to 512 [ 1677.493425][T23241] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1677.523425][T23241] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1677.619258][T23241] EXT4-fs (loop4): 1 truncate cleaned up [ 1677.656903][T23241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1677.657539][T23249] loop5: detected capacity change from 0 to 8 [ 1677.832253][T23241] EXT4-fs: group quota file already specified [ 1677.932717][T17902] udevd[17902]: incorrect cramfs checksum on /dev/loop5 [ 1678.116895][T17902] udevd[17902]: incorrect cramfs checksum on /dev/loop5 [ 1678.191119][T23245] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1678.209726][T17438] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1678.297444][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.436505][T17438] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1678.457812][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.535882][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.545681][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.591048][T17438] usb 4-1: config 0 descriptor?? [ 1678.645113][T17438] cp210x 4-1:0.0: cp210x converter detected [ 1679.125126][T17438] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1679.274657][T13062] usb 4-1: USB disconnect, device number 36 [ 1679.307780][T13062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1679.477644][T13062] cp210x 4-1:0.0: device disconnected [ 1681.500667][T23284] netlink: 'syz.2.7619': attribute type 3 has an invalid length. [ 1681.672481][T23286] netem: incorrect ge model size [ 1681.677649][T23286] netem: change failed [ 1682.720645][T23299] loop4: detected capacity change from 0 to 128 [ 1683.189225][T23303] loop3: detected capacity change from 0 to 128 [ 1684.856703][T23322] netlink: 'syz.4.7637': attribute type 5 has an invalid length. [ 1685.570647][T23331] loop4: detected capacity change from 0 to 512 [ 1685.665196][T23331] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.7642: corrupted inode contents [ 1685.698470][T23331] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1685.699871][T23331] EXT4-fs (loop4): Remounting filesystem read-only [ 1685.714412][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1685.714503][ C1] EXT4-fs (loop4): initial error at time 1685: ext4_do_update_inode:5602: inode 3 [ 1685.714659][ C1] EXT4-fs (loop4): last error at time 1685: ext4_do_update_inode:5602: inode 3 [ 1685.858960][T23331] Quota error (device loop4): write_blk: dquota write failed [ 1685.894562][T23331] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 1685.913875][T13062] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1685.974088][T23331] EXT4-fs (loop4): 1 truncate cleaned up [ 1686.037122][T23331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.097645][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.124363][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.162349][T13062] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1686.201155][T13062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.360909][T13062] usb 4-1: config 0 descriptor?? [ 1686.477558][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.837952][T13062] holtek_kbd 0003:04D9:A055.0043: unknown main item tag 0x1 [ 1686.900623][T13062] holtek_kbd 0003:04D9:A055.0043: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 1686.957998][T23342] sp0: Synchronizing with TNC [ 1687.116617][T13062] usb 4-1: USB disconnect, device number 37 [ 1687.853928][T23346] fido_id[23346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1687.893365][T23350] loop4: detected capacity change from 0 to 1024 [ 1688.632570][ T7834] hfsplus: b-tree write err: -5, ino 25 [ 1688.639005][ T7834] hfsplus: b-tree write err: -5, ino 4 [ 1688.644819][ T7834] hfsplus: b-tree write err: -5, ino 2 [ 1690.133258][T23374] ptrace attach of "./syz-executor exec"[19490] was attempted by " [ 1692.649334][T23414] loop2: detected capacity change from 0 to 128 [ 1693.204576][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7679'. [ 1693.237537][T23418] geneve2: entered promiscuous mode [ 1693.353966][T18730] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1693.415030][T18730] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1693.452557][T18730] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1693.501462][ T7854] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1694.405169][T23431] kernel profiling enabled (shift: 25) [ 1697.717507][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 1697.757911][T23473] loop3: detected capacity change from 0 to 16 [ 1697.791458][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 1697.807138][T23473] erofs (device loop3): mounted with root inode @ nid 36. [ 1699.401188][T23490] loop4: detected capacity change from 0 to 64 [ 1700.486832][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1701.434982][T23510] loop5: detected capacity change from 0 to 128 [ 1702.399345][T23523] program syz.4.7726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1702.823890][T23528] geneve2: entered promiscuous mode [ 1702.871012][T13290] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1702.928737][T13290] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1702.971705][T13290] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1703.016714][T13290] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1703.725931][T23540] loop5: detected capacity change from 0 to 1024 [ 1703.948009][T23546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1704.011973][T23546] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1704.150214][T23540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1704.161432][T23546] vlan2: entered promiscuous mode [ 1704.168010][T23546] geneve1: entered promiscuous mode [ 1704.186418][T23546] vlan2: entered allmulticast mode [ 1704.194987][T23546] geneve1: entered allmulticast mode [ 1704.262623][ T29] audit: type=1800 audit(1704.227:189): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7734" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1704.263870][T23540] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.7734: missing EA_INODE flag [ 1704.426328][T23540] EXT4-fs (loop5): Remounting filesystem read-only [ 1705.005957][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7738'. [ 1705.019517][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.403263][T23570] blktrace: Concurrent blktraces are not allowed on sg0 [ 1706.746464][T23579] geneve3: entered promiscuous mode [ 1706.775246][ T7854] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1706.816654][ T7854] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1706.864343][ T7854] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1706.951690][ T7854] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1707.324309][T23583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7752'. [ 1707.362921][T23583] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7752'. [ 1707.529773][T23583] vlan2: entered promiscuous mode [ 1707.567726][T23583] geneve1: entered promiscuous mode [ 1707.607846][T23583] vlan2: entered allmulticast mode [ 1707.622300][T23583] geneve1: entered allmulticast mode [ 1709.516276][T13062] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1709.703438][T13062] usb 3-1: Using ep0 maxpacket: 16 [ 1709.718012][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.785089][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.857630][T13062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1709.916854][T13062] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1709.926594][T13062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.929824][T23618] loop5: detected capacity change from 0 to 64 [ 1709.962497][T13062] usb 3-1: config 0 descriptor?? [ 1710.614468][T13062] microsoft 0003:045E:07DA.0044: unbalanced collection at end of report description [ 1710.716186][T13062] microsoft 0003:045E:07DA.0044: parse failed [ 1710.744957][T13062] microsoft 0003:045E:07DA.0044: probe with driver microsoft failed with error -22 [ 1710.852207][T13062] usb 3-1: USB disconnect, device number 35 [ 1712.594706][T23647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1713.106789][T23651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7795'. [ 1713.145760][T23655] loop3: detected capacity change from 0 to 128 [ 1713.400937][T23655] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1713.883681][T19490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1715.505410][T23685] loop2: detected capacity change from 0 to 164 [ 1715.649092][ T5847] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1715.834467][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.878492][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.921199][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1715.955087][ T5847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1716.007054][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.055319][ T5847] usb 5-1: config 0 descriptor?? [ 1716.332398][T23691] netlink: 'syz.5.7800': attribute type 1 has an invalid length. [ 1716.431515][T23689] loop3: detected capacity change from 0 to 2048 [ 1716.582481][ T5847] plantronics 0003:047F:FFFF.0045: collection stack underflow [ 1716.586400][T23689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.640900][T23689] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.7797: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1716.693529][ T5847] plantronics 0003:047F:FFFF.0045: item 0 1 0 12 parsing failed [ 1716.774730][ T5847] plantronics 0003:047F:FFFF.0045: parse failed [ 1716.839126][ T5847] plantronics 0003:047F:FFFF.0045: probe with driver plantronics failed with error -22 [ 1716.942959][ T5847] usb 5-1: USB disconnect, device number 35 [ 1716.983574][T19490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.544905][T23710] loop4: detected capacity change from 0 to 4096 [ 1718.602896][T23708] loop5: detected capacity change from 0 to 4096 [ 1718.778129][T23708] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1718.828758][T23717] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1720.535212][T23733] loop2: detected capacity change from 0 to 512 [ 1721.014225][T23733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.664597][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.440456][T23756] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7827'. [ 1722.639590][T23760] netlink: 'syz.4.7840': attribute type 2 has an invalid length. [ 1723.458213][T23771] program syz.5.7833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1723.559361][T23773] loop4: detected capacity change from 0 to 64 [ 1723.903453][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1724.724307][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1725.484357][T23798] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1725.534725][T23798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1726.818704][T13062] kernel read not supported for file /742/net/ip6_tables_names (pid: 13062 comm: kworker/1:2) [ 1726.999512][T23816] loop5: detected capacity change from 0 to 256 [ 1727.481732][T23816] FAT-fs (loop5): Directory bread(block 64) failed [ 1727.506384][T23816] FAT-fs (loop5): Directory bread(block 65) failed [ 1727.549106][T23816] FAT-fs (loop5): Directory bread(block 66) failed [ 1727.556343][T23816] FAT-fs (loop5): Directory bread(block 67) failed [ 1727.622570][T23816] FAT-fs (loop5): Directory bread(block 68) failed [ 1727.747308][T23816] FAT-fs (loop5): Directory bread(block 69) failed [ 1727.827924][T23816] FAT-fs (loop5): Directory bread(block 70) failed [ 1727.845500][T23816] FAT-fs (loop5): Directory bread(block 71) failed [ 1727.904027][T23816] FAT-fs (loop5): Directory bread(block 72) failed [ 1727.963590][T23816] FAT-fs (loop5): Directory bread(block 73) failed [ 1730.657760][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1731.180371][T23870] IPVS: Unknown mcast interface: vc [ 1733.393761][T23897] loop5: detected capacity change from 0 to 1024 [ 1733.581732][T23897] hfsplus: bad catalog entry type [ 1733.603336][T23904] vlan3: entered promiscuous mode [ 1733.616631][T23904] macvlan1: entered promiscuous mode [ 1733.768631][ T5847] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1733.988094][ T5847] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1734.024614][T23906] bridge: RTM_NEWNEIGH with invalid ether address [ 1734.038830][ T5847] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.072663][T18730] hfsplus: b-tree write err: -5, ino 25 [ 1734.100155][T18730] hfsplus: b-tree write err: -5, ino 4 [ 1734.105974][T18730] hfsplus: b-tree write err: -5, ino 2 [ 1734.124452][ T5847] usb 5-1: config 220 has no interface number 2 [ 1734.140297][ T5847] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1734.215873][ T5847] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1734.245633][ T5847] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1734.306931][ T5847] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1734.344429][ T5847] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1734.381470][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.433012][ T5847] usb 5-1: Product: syz [ 1734.458547][ T5847] usb 5-1: Manufacturer: syz [ 1734.463370][ T5847] usb 5-1: SerialNumber: syz [ 1734.803089][ T5847] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1734.849149][ T5847] uvcvideo 5-1:220.0: No valid video chain found. [ 1734.855902][ T5847] usb 5-1: selecting invalid altsetting 0 [ 1734.946663][ T5847] usb 5-1: selecting invalid altsetting 0 [ 1734.959863][ T5847] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1735.000565][ T5847] usb 5-1: USB disconnect, device number 36 [ 1736.043865][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7906'. [ 1736.700367][T23932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1736.872620][T23935] loop2: detected capacity change from 0 to 512 [ 1736.891543][T23932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1736.987651][T23932] batman_adv: batadv0: Adding interface: ip6gretap3 [ 1737.015867][T23935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 1737.037173][T23932] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.098661][T23932] batman_adv: batadv0: Interface activated: ip6gretap3 [ 1737.119575][T23935] System zones: 1-20 [ 1737.267099][T23935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1738.214621][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.239784][T23955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7924'. [ 1739.166099][T23959] loop5: detected capacity change from 0 to 1024 [ 1739.257710][T23963] loop2: detected capacity change from 0 to 256 [ 1739.735930][T23963] FAT-fs (loop2): Directory bread(block 64) failed [ 1739.793242][T23963] FAT-fs (loop2): Directory bread(block 65) failed [ 1739.845755][T23963] FAT-fs (loop2): Directory bread(block 66) failed [ 1739.898825][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1739.904863][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1739.936459][T23963] FAT-fs (loop2): Directory bread(block 67) failed [ 1739.946857][T23963] FAT-fs (loop2): Directory bread(block 68) failed [ 1739.998214][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.019619][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1740.024773][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.069055][T23963] FAT-fs (loop2): Directory bread(block 69) failed [ 1740.075973][T23963] FAT-fs (loop2): Directory bread(block 70) failed [ 1740.168989][T23963] FAT-fs (loop2): Directory bread(block 71) failed [ 1740.207269][T23963] FAT-fs (loop2): Directory bread(block 72) failed [ 1740.240386][T23963] FAT-fs (loop2): Directory bread(block 73) failed [ 1740.271654][T23969] loop3: detected capacity change from 0 to 256 [ 1740.301999][T23969] exfat: Deprecated parameter 'namecase' [ 1740.307949][T23969] exfat: Deprecated parameter 'namecase' [ 1740.562470][T23971] loop4: detected capacity change from 0 to 256 [ 1740.573605][T23969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1740.637422][T23971] exfat: Deprecated parameter 'utf8' [ 1740.709006][T23971] exfat: Deprecated parameter 'utf8' [ 1740.790327][ T29] audit: type=1326 audit(1740.727:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1740.875920][ T29] audit: type=1326 audit(1740.837:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1740.896272][T23971] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 1741.048836][ T29] audit: type=1326 audit(1740.837:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1741.204967][ T29] audit: type=1326 audit(1740.837:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1741.337694][ T29] audit: type=1326 audit(1740.837:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1741.492751][ T29] audit: type=1326 audit(1740.837:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1741.678636][ T29] audit: type=1326 audit(1740.837:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.5.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1743.046692][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1743.335706][T23995] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1743.335706][T23995] program syz.5.7935 not setting count and/or reply_len properly [ 1745.132779][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7946'. [ 1745.142980][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7946'. [ 1746.943403][T24032] loop2: detected capacity change from 0 to 4096 [ 1746.996143][T24032] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1747.460295][T24032] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1747.657272][T24043] ntfs3(loop2): ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 1748.585703][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.638600][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.734200][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.795933][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1749.234880][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1749.297337][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1751.126203][T13062] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1751.331219][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.359459][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.458901][T13062] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1751.493420][T13062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.602519][T13062] usb 6-1: config 0 descriptor?? [ 1752.123286][T13062] holtek_kbd 0003:04D9:A055.0046: unknown main item tag 0x1 [ 1752.307780][T13062] holtek_kbd 0003:04D9:A055.0046: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 1752.396807][T13062] usb 6-1: USB disconnect, device number 14 [ 1753.537714][T24095] fido_id[24095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1754.821713][ T5847] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1754.988731][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 1755.069219][ T5847] usb 6-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.140158][ T5847] usb 6-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.207960][ T5847] usb 6-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1755.279717][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1755.296708][ T5847] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 1755.348660][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.384829][ T5847] usb 6-1: config 0 descriptor?? [ 1755.974104][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.048647][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.065732][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.106150][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.136568][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.218938][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.226701][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.252854][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.265625][ T5847] holtek_mouse 0003:04D9:A04A.0047: unknown main item tag 0x0 [ 1756.298785][T17438] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1756.341802][ T5847] holtek_mouse 0003:04D9:A04A.0047: hidraw0: USB HID v0.00 Device [HID 04d9:a04a] on usb-dummy_hcd.5-1/input0 [ 1756.410456][ T5847] usb 6-1: USB disconnect, device number 15 [ 1756.459067][T17438] usb 5-1: Using ep0 maxpacket: 32 [ 1756.491687][T17438] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1756.561326][T17438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.583944][T17438] usb 5-1: Product: syz [ 1756.604421][T17438] usb 5-1: Manufacturer: syz [ 1756.624414][T17438] usb 5-1: SerialNumber: syz [ 1756.686145][T17438] usb 5-1: config 0 descriptor?? [ 1756.712677][T19292] kernel write not supported for file /input/event2 (pid: 19292 comm: kworker/0:3) [ 1757.046915][T24131] fido_id[24131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1757.180778][T17438] airspy 5-1:0.0: Board ID: 00 [ 1757.185751][T17438] airspy 5-1:0.0: Firmware version: [ 1757.398586][T17438] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1757.451333][T17438] airspy 5-1:0.0: Registered as swradio24 [ 1757.457258][T17438] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1757.599057][T17438] usb 5-1: USB disconnect, device number 37 [ 1758.414206][T24139] loop5: detected capacity change from 0 to 4096 [ 1758.977020][T24151] loop2: detected capacity change from 0 to 256 [ 1760.037218][T24160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1760.188180][T24163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1760.238119][T24158] loop4: detected capacity change from 0 to 2048 [ 1760.324630][T24163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1760.456495][T24158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1762.524477][T24182] loop3: detected capacity change from 0 to 256 [ 1762.593948][T24175] loop5: detected capacity change from 0 to 4096 [ 1762.636802][T24175] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1762.733816][T24182] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1762.904710][T17438] Process accounting resumed [ 1762.921078][T17438] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 1762.972068][T17438] FAT-fs (loop3): Filesystem has been set read-only [ 1763.375815][T24187] loop2: detected capacity change from 0 to 256 [ 1763.437416][T24187] exfat: Deprecated parameter 'namecase' [ 1763.643891][T24187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1764.044317][T24190] loop3: detected capacity change from 0 to 64 [ 1764.209215][ T29] audit: type=1800 audit(1764.177:197): pid=24190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8018" name="file3" dev="loop3" ino=6 res=0 errno=0 [ 1766.133553][T24209] loop3: detected capacity change from 0 to 512 [ 1766.510785][T24209] EXT4-fs (loop3): 1 orphan inode deleted [ 1766.529385][ T57] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1766.599020][ T57] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 1766.619093][T24209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1766.663915][ T57] loop3: lost filesystem error report for type 5 error -117 [ 1767.050990][T19490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.412221][T24224] loop4: detected capacity change from 0 to 1024 [ 1767.595163][T24224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1768.143967][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1768.698650][T17438] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1768.824934][T24240] usb usb1: check_ctrlrecip: process 24240 (syz.4.8043) requesting ep 01 but needs 81 [ 1768.860504][T17438] usb 3-1: Using ep0 maxpacket: 32 [ 1768.900008][T17438] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.958695][T17438] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1769.015394][T17438] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1769.048610][T17438] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1769.048759][T17438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.048879][T17438] usb 3-1: Product: syz [ 1769.048976][T17438] usb 3-1: Manufacturer: syz [ 1769.049073][T17438] usb 3-1: SerialNumber: syz [ 1769.071230][T17438] usb 3-1: config 0 descriptor?? [ 1769.554236][T17438] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1769.772462][T17438] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1769.815875][T17438] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1769.926197][T17438] usb 3-1: USB disconnect, device number 36 [ 1770.043341][T24247] mkiss: ax0: crc mode is auto. [ 1770.257948][T24245] loop5: detected capacity change from 0 to 4096 [ 1770.374807][T24245] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1771.084268][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1771.157534][T24256] loop4: detected capacity change from 0 to 256 [ 1771.582463][T24256] FAT-fs (loop4): Directory bread(block 64) failed [ 1771.667501][T24256] FAT-fs (loop4): Directory bread(block 65) failed [ 1771.696665][T24256] FAT-fs (loop4): Directory bread(block 66) failed [ 1771.728938][T24256] FAT-fs (loop4): Directory bread(block 67) failed [ 1771.735828][T24256] FAT-fs (loop4): Directory bread(block 68) failed [ 1771.909006][T24256] FAT-fs (loop4): Directory bread(block 69) failed [ 1771.915894][T24256] FAT-fs (loop4): Directory bread(block 70) failed [ 1772.078969][T24256] FAT-fs (loop4): Directory bread(block 71) failed [ 1772.085850][T24256] FAT-fs (loop4): Directory bread(block 72) failed [ 1772.210324][T24256] FAT-fs (loop4): Directory bread(block 73) failed [ 1774.402790][T24289] loop2: detected capacity change from 0 to 1024 [ 1774.754847][T24289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.068169][T24297] loop5: detected capacity change from 0 to 1024 [ 1775.361964][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1775.404249][T24297] hfsplus: bad catalog entry type [ 1775.905386][T18730] hfsplus: b-tree write err: -5, ino 25 [ 1775.943935][T18730] hfsplus: b-tree write err: -5, ino 4 [ 1775.981834][T18730] hfsplus: b-tree write err: -5, ino 2 [ 1778.443630][T24331] hsr0: entered promiscuous mode [ 1778.572129][T24331] hsr0: left promiscuous mode [ 1778.611548][T24333] loop3: detected capacity change from 0 to 64 [ 1779.113395][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1779.570406][T24341] loop3: detected capacity change from 0 to 16 [ 1779.654896][T24341] erofs (device loop3): mounted with root inode @ nid 36. [ 1779.736740][ T29] audit: type=1800 audit(1779.697:198): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8089" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 1780.285307][T24347] loop2: detected capacity change from 0 to 16 [ 1780.642171][T24354] loop3: detected capacity change from 0 to 8 [ 1781.566352][T24362] loop5: detected capacity change from 0 to 64 [ 1782.777517][T24365] loop3: detected capacity change from 0 to 4096 [ 1782.853504][T24365] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1783.467565][T24365] ntfs3(loop3): ino=19, mi_enum_attr [ 1783.512070][T24365] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1783.553672][T24382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8107'. [ 1783.786242][T24384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8109'. [ 1784.718649][T19292] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1784.935843][T19292] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1784.994547][T19292] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.037483][T19292] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1785.098046][T19292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.177614][T19292] hub 3-1:4.0: USB hub found [ 1785.405377][T19292] hub 3-1:4.0: config failed, can't read hub descriptor (err -90) [ 1785.614165][T24403] loop3: detected capacity change from 0 to 2048 [ 1785.764613][T19292] usb 3-1: USB disconnect, device number 37 [ 1785.773464][T24403] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1785.808754][T24403] NILFS (loop3): mounting unchecked fs [ 1785.896047][T24405] loop5: detected capacity change from 0 to 64 [ 1785.897955][T24403] NILFS (loop3): recovery complete [ 1785.964542][T24408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1786.802082][T24410] loop5: detected capacity change from 0 to 256 [ 1787.041127][T24417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1789.429273][T24434] vlan3: entered promiscuous mode [ 1789.457342][T24434] macvlan1: entered promiscuous mode [ 1791.253551][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1793.577789][T24482] loop3: detected capacity change from 0 to 128 [ 1793.728013][T24482] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1794.292258][T19490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1795.507079][T24503] netlink: 'syz.2.8162': attribute type 29 has an invalid length. [ 1795.618648][T24505] netlink: 'syz.2.8162': attribute type 29 has an invalid length. [ 1795.984849][T24511] macsec2: entered promiscuous mode [ 1796.026239][T24511] macsec2: entered allmulticast mode [ 1796.711510][T24518] loop5: detected capacity change from 0 to 512 [ 1797.102719][T24518] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.8166: corrupted inode contents [ 1797.223027][T24518] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1797.228391][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1797.244376][ C0] EXT4-fs (loop5): initial error at time 1797: ext4_do_update_inode:5602: inode 3 [ 1797.253938][ C0] EXT4-fs (loop5): last error at time 1797: ext4_do_update_inode:5602: inode 3 [ 1797.269333][T24518] EXT4-fs (loop5): Remounting filesystem read-only [ 1797.291112][T24518] Quota error (device loop5): write_blk: dquota write failed [ 1797.346028][T24518] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 1797.372079][T24518] EXT4-fs (loop5): 1 truncate cleaned up [ 1797.394916][T24518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1797.511803][T24529] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1797.905881][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.662629][T18730] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.708553][T18730] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.765421][T18730] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.801892][T18730] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.527844][T24549] netlink: 'syz.2.8180': attribute type 1 has an invalid length. [ 1800.316295][T24558] xt_HMARK: proto mask must be zero with L3 mode [ 1800.395160][T24557] geneve4: entered promiscuous mode [ 1800.507278][ T7854] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1800.517547][ T7854] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1800.611342][ T7854] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1800.696865][ T7854] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1801.413752][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.428310][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.725272][T24573] smb3: Unexpected value for 'acl' [ 1803.489258][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1803.599080][T24593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1804.227056][T24599] loop5: detected capacity change from 0 to 64 [ 1804.357008][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1804.398703][T24603] program syz.3.8207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1805.473525][T24617] ptrace attach of "./syz-executor exec"[21887] was attempted by " [ 1806.862131][T24628] loop5: detected capacity change from 0 to 512 [ 1807.176172][T24628] EXT4-fs (loop5): 1 orphan inode deleted [ 1807.179557][T24628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1807.660654][T24636] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1807.660654][T24636] program syz.3.8219 not setting count and/or reply_len properly [ 1807.801233][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.426361][T24653] sg_write: data in/out 446940/208 bytes for SCSI command 0x0-- guessing data in; [ 1809.426361][T24653] program syz.5.8231 not setting count and/or reply_len properly [ 1809.466743][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1810.838588][T13062] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1811.094005][T13062] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 1811.094135][T13062] usb 6-1: config 0 has no interface number 0 [ 1811.094253][T13062] usb 6-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.094399][T13062] usb 6-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.094576][T13062] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1811.094713][T13062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.115202][T13062] usb 6-1: config 0 descriptor?? [ 1811.295230][T24673] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1811.295230][T24673] program syz.4.8237 not setting count and/or reply_len properly [ 1811.645708][T13062] hid_parser_main: 29 callbacks suppressed [ 1811.645813][T13062] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1811.735394][T13062] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1811.796221][T13062] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1811.868624][T13062] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1811.875948][T13062] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1811.977410][T13062] uclogic 0003:5543:0522.0048: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input17 [ 1812.098121][T13062] usb 6-1: USB disconnect, device number 16 [ 1813.034531][T24683] loop3: detected capacity change from 0 to 256 [ 1813.212416][T24683] exfat: Deprecated parameter 'utf8' [ 1813.269367][T24683] exfat: Deprecated parameter 'utf8' [ 1813.274991][T24683] exfat: Deprecated parameter 'utf8' [ 1813.355658][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1813.392239][T24679] fido_id[24679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1813.475046][T24683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1814.452291][T24696] loop4: detected capacity change from 0 to 1024 [ 1814.704195][T24696] hfsplus: found bad thread record in catalog [ 1814.810766][T24696] hfsplus: found bad thread record in catalog [ 1815.259500][ T7843] hfsplus: found bad thread record in catalog [ 1817.472935][T24727] vlan3: entered promiscuous mode [ 1817.531451][T24727] macvlan1: entered promiscuous mode [ 1817.709670][T15669] Bluetooth: hci4: unexpected event for opcode 0x0c0d [ 1817.933884][ T29] audit: type=1326 audit(1817.897:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.035770][ T29] audit: type=1326 audit(1817.897:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.184336][ T29] audit: type=1326 audit(1817.947:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.318777][ T29] audit: type=1326 audit(1817.947:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.468850][ T29] audit: type=1326 audit(1817.947:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.609488][ T29] audit: type=1326 audit(1817.987:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.609703][ T29] audit: type=1326 audit(1818.037:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.609909][ T29] audit: type=1326 audit(1818.037:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.0.8263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1818.640681][T24741] loop3: detected capacity change from 0 to 64 [ 1819.079067][T24744] netlink: 616 bytes leftover after parsing attributes in process `syz.2.8266'. [ 1820.708791][T24761] loop3: detected capacity change from 0 to 1024 [ 1821.181190][T24768] hfsplus: request for non-existent node 262144 in B*Tree [ 1821.230937][T24768] hfsplus: request for non-existent node 262144 in B*Tree [ 1821.548807][T19292] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1821.738583][T19292] usb 3-1: Using ep0 maxpacket: 32 [ 1821.787577][T19292] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1821.848707][T19292] usb 3-1: config 0 has no interface number 0 [ 1821.855010][T19292] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1821.958553][T19292] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1821.967847][T19292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.030509][T19292] usb 3-1: Product: syz [ 1822.037737][T19292] usb 3-1: Manufacturer: syz [ 1822.092741][T19292] usb 3-1: SerialNumber: syz [ 1822.126756][T19292] usb 3-1: config 0 descriptor?? [ 1822.156980][T24779] loop4: detected capacity change from 0 to 256 [ 1822.216464][T24779] exfat: Deprecated parameter 'namecase' [ 1822.288731][T24779] exfat: Deprecated parameter 'utf8' [ 1822.560211][T24779] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1822.918642][T19292] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 1822.968846][T19292] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1823.029310][T19292] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1823.080148][T19292] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1823.195030][T19292] usb 3-1: USB disconnect, device number 38 [ 1826.073798][T17438] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1826.278102][T17438] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1826.326758][T17438] usb 5-1: config 0 has no interface number 0 [ 1826.365607][T17438] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1826.387873][T17438] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1826.459486][T17438] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1826.498989][T17438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.517757][T17438] usb 5-1: Product: syz [ 1826.523943][T17438] usb 5-1: Manufacturer: syz [ 1826.540173][T17438] usb 5-1: SerialNumber: syz [ 1826.601292][T17438] usb 5-1: config 0 descriptor?? [ 1826.609216][T24812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1826.647418][T17438] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1826.740351][T17438] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1827.109537][T17438] usb 5-1: USB disconnect, device number 38 [ 1827.173524][T17438] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1827.187037][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1827.267262][T17438] cyberjack 5-1:0.69: device disconnected [ 1828.477099][T24834] loop2: detected capacity change from 0 to 1024 [ 1828.704722][T24840] vlan4: entered promiscuous mode [ 1830.402364][T24852] loop3: detected capacity change from 0 to 256 [ 1830.621748][T24855] loop4: detected capacity change from 0 to 64 [ 1830.661059][T24852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1833.134721][T24880] hugetlbfs: Bad value 'k' for mount option 'size' [ 1833.134721][T24880] [ 1833.289170][T17438] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1833.484726][T17438] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1833.558544][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.601003][T17438] usb 4-1: config 0 descriptor?? [ 1833.655149][T17438] cp210x 4-1:0.0: cp210x converter detected [ 1834.100099][T24890] loop5: detected capacity change from 0 to 256 [ 1834.133775][T17438] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1834.164450][T24890] exfat: Deprecated parameter 'namecase' [ 1834.203472][T24890] exfat: Deprecated parameter 'namecase' [ 1834.249454][T19292] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1834.342010][T24890] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 1834.345763][T13062] usb 4-1: USB disconnect, device number 38 [ 1834.476180][T13062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1834.477364][T19292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.597670][T19292] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1834.659157][T19292] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1834.726751][T19292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.746631][T13062] cp210x 4-1:0.0: device disconnected [ 1834.859954][T19292] usb 3-1: config 0 descriptor?? [ 1834.982090][T19292] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1835.048697][T19292] dvb-usb: bulk message failed: -22 (3/0) [ 1835.128949][T19292] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1835.186419][T19292] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1835.270421][T19292] usb 3-1: media controller created [ 1835.317939][T19292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1835.433997][T19292] dvb-usb: bulk message failed: -22 (6/0) [ 1835.477344][T19292] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1835.553853][T19292] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 1835.610399][T19292] dvb-usb: schedule remote query interval to 150 msecs. [ 1835.648578][T19292] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1835.776121][T19292] usb 3-1: USB disconnect, device number 39 [ 1836.086663][T19292] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1837.800244][T24923] netlink: 'syz.3.8351': attribute type 12 has an invalid length. [ 1837.879588][T24923] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1837.919146][T19292] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1838.138917][T19292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1838.199172][T19292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.261778][T19292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1838.368432][T19292] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1838.428609][T19292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.501741][T19292] usb 3-1: config 0 descriptor?? [ 1839.068652][T19292] plantronics 0003:047F:FFFF.0049: nested delimiters [ 1839.077088][T19292] plantronics 0003:047F:FFFF.0049: item 0 4 2 10 parsing failed [ 1839.194680][T19292] plantronics 0003:047F:FFFF.0049: parse failed [ 1839.276547][T19292] plantronics 0003:047F:FFFF.0049: probe with driver plantronics failed with error -22 [ 1839.376041][T24935] loop3: detected capacity change from 0 to 2048 [ 1839.416997][T19292] usb 3-1: USB disconnect, device number 40 [ 1839.571785][T19297] Dev loop3: unable to read partition block 23055453 [ 1839.636800][T19297] loop3: RDSK (1311599104) unable to read partition table [ 1839.709744][T19297] loop3: partition table beyond EOD, truncated [ 1839.746296][T24935] Dev loop3: unable to read partition block 23055453 [ 1839.836676][T24935] loop3: RDSK (1311599104) unable to read partition table [ 1839.882542][T24935] loop3: partition table beyond EOD, truncated [ 1839.918155][T24935] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1841.242562][T24956] loop4: detected capacity change from 0 to 256 [ 1841.293015][T24956] exfat: Deprecated parameter 'namecase' [ 1841.330079][T24956] exfat: Deprecated parameter 'namecase' [ 1841.396010][T24954] loop5: detected capacity change from 0 to 1024 [ 1841.445705][T24956] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1842.341719][T24963] loop5: detected capacity change from 0 to 512 [ 1842.638060][T24963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.427689][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1844.395045][T17438] kernel read not supported for file /mdstat (pid: 17438 comm: kworker/0:0) [ 1844.886729][T24991] loop2: detected capacity change from 0 to 256 [ 1844.957407][T24991] exfat: Deprecated parameter 'utf8' [ 1845.199808][T24991] exFAT-fs (loop2): error, data size is invalid(34359738378) [ 1845.228750][T24991] exFAT-fs (loop2): Filesystem has been set read-only [ 1845.285901][T24995] exFAT-fs (loop2): error, data size is invalid(34359738378) [ 1845.597658][T17438] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1845.816570][T17438] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1845.860094][T17438] usb 4-1: config 0 has no interface number 0 [ 1845.866402][T17438] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.912914][T17438] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.997077][T17438] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1846.048101][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.183700][T17438] usb 4-1: config 0 descriptor?? [ 1846.736299][T17438] prodikeys 0003:041E:2801.004A: unknown main item tag 0x0 [ 1846.852705][T17438] prodikeys 0003:041E:2801.004A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 1846.991553][T17438] hid_prodikeys: hid-prodikeys: failed to find output report [ 1846.991553][T17438] [ 1847.113468][T17438] usb 4-1: USB disconnect, device number 39 [ 1847.419339][T25017] loop5: detected capacity change from 0 to 24 [ 1847.425857][T25015] loop2: detected capacity change from 0 to 128 [ 1847.482790][T25017] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1847.593546][T25015] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1847.682412][T25015] hpfs: filesystem error: improperly stopped [ 1847.694990][T25015] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1847.806764][T25015] hpfs: You really don't want any checks? You are crazy... [ 1847.844659][T25015] hpfs: hpfs_map_sector(): read error [ 1847.847632][T25012] fido_id[25012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1847.895597][T25015] hpfs: code page support is disabled [ 1847.987863][T25015] hpfs: hpfs_map_4sectors(): unaligned read [ 1848.066362][T25015] hpfs: hpfs_map_4sectors(): unaligned read [ 1848.131197][T25015] hpfs: filesystem error: unable to find root dir [ 1849.565592][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1850.994175][T25051] loop3: detected capacity change from 0 to 4096 [ 1850.996059][T25047] loop5: detected capacity change from 0 to 2048 [ 1851.183753][T25047] Dev loop5: unable to read partition block 23055453 [ 1851.208817][T25057] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1851.238608][T25047] loop5: RDSK (1311599104) unable to read partition table [ 1851.260601][T25051] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1851.302612][T25047] loop5: partition table beyond EOD, truncated [ 1851.316768][T25051] NILFS (loop3): mounting fs with errors [ 1851.390500][T25047] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1852.341361][T25062] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1854.000600][T25080] loop3: detected capacity change from 0 to 512 [ 1854.235262][T25080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.324500][T25083] loop4: detected capacity change from 0 to 512 [ 1854.467950][T25083] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1854.540339][T25083] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1854.570033][T25083] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.8418: corrupted inode contents [ 1854.600927][T25083] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1854.602146][T25083] EXT4-fs (loop4): Remounting filesystem read-only [ 1854.611774][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1854.611863][ C0] EXT4-fs (loop4): initial error at time 1854: ext4_do_update_inode:5602: inode 16 [ 1854.612019][ C0] EXT4-fs (loop4): last error at time 1854: ext4_do_update_inode:5602: inode 16 [ 1854.717501][T25083] EXT4-fs (loop4): 1 truncate cleaned up [ 1854.729380][ T7864] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1854.812148][ T7864] Quota error (device loop4): write_blk: dquota write failed [ 1854.883138][ T7864] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 1854.969898][ T7864] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1855.055994][ T7864] Quota error (device loop4): write_blk: dquota write failed [ 1855.083739][ T7864] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 1855.136773][ T7864] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 1855.194842][ T7864] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1855.249044][ T7864] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1855.318039][T25083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1855.327721][T19490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.890819][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.742672][T25113] loop5: detected capacity change from 0 to 256 [ 1857.039335][T25113] FAT-fs (loop5): Directory bread(block 64) failed [ 1857.077612][T25113] FAT-fs (loop5): Directory bread(block 65) failed [ 1857.119726][T25113] FAT-fs (loop5): Directory bread(block 66) failed [ 1857.139901][T25113] FAT-fs (loop5): Directory bread(block 67) failed [ 1857.146764][T25113] FAT-fs (loop5): Directory bread(block 68) failed [ 1857.195513][T25113] FAT-fs (loop5): Directory bread(block 69) failed [ 1857.254027][T25113] FAT-fs (loop5): Directory bread(block 70) failed [ 1857.266438][T25113] FAT-fs (loop5): Directory bread(block 71) failed [ 1857.307944][T25113] FAT-fs (loop5): Directory bread(block 72) failed [ 1857.385950][T25113] FAT-fs (loop5): Directory bread(block 73) failed [ 1858.717803][T25131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1858.725333][T25131] IPv6: NLM_F_CREATE should be set when creating new route [ 1858.732814][T25131] IPv6: NLM_F_CREATE should be set when creating new route [ 1858.740224][T25131] IPv6: NLM_F_CREATE should be set when creating new route [ 1858.894701][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.903077][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.911380][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.919631][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.927777][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.928576][T19292] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1858.936089][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.951703][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.959959][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.968125][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1858.976446][T25133] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1859.249942][T19292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.288664][T19292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.360648][T19292] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1859.440475][T19292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.505149][T19292] usb 5-1: config 0 descriptor?? [ 1859.767682][T25137] loop5: detected capacity change from 0 to 1024 [ 1860.005105][T25137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1860.140170][T19292] hkems 0003:2006:0118.004B: global environment stack underflow [ 1860.180568][T19292] hkems 0003:2006:0118.004B: item 0 2 1 11 parsing failed [ 1860.259068][T19292] hkems 0003:2006:0118.004B: parse failed [ 1860.265206][T19292] hkems 0003:2006:0118.004B: probe with driver hkems failed with error -22 [ 1860.396064][T19292] usb 5-1: USB disconnect, device number 39 [ 1860.630165][T17690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1861.706700][T25159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8450'. [ 1862.226960][T25161] loop4: detected capacity change from 0 to 2048 [ 1862.327319][T25161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1862.452298][T25164] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8452'. [ 1862.492293][ T29] audit: type=1800 audit(1862.447:207): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8451" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 1862.858862][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.865453][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.174998][T25166] loop2: detected capacity change from 0 to 4096 [ 1863.247700][T25166] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1863.269263][T25166] ntfs3(loop2): ino=3, mi_enum_attr [ 1863.541636][T25166] ntfs3(loop2): MFT: r=b, expect seq=b instead of 0! [ 1863.541875][T25166] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1863.541982][T25166] ntfs3(loop2): Failed to load $Extend (-22). [ 1863.542072][T25166] ntfs3(loop2): Failed to initialize $Extend. [ 1865.532794][T25187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8465'. [ 1867.567778][T25210] loop4: detected capacity change from 0 to 512 [ 1867.672273][T25210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1867.770560][T25210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1867.855222][T25210] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1868.079401][T25210] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.8475: Allocating blocks 41-42 which overlap fs metadata [ 1868.199420][T25210] loop4: lost filesystem error report for type 5 error -117 [ 1868.200701][T25210] EXT4-fs (loop4): Remounting filesystem read-only [ 1868.208343][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1868.208434][ C0] EXT4-fs (loop4): initial error at time 1868: ext4_mb_mark_diskspace_used:4222 [ 1868.208551][ C0] EXT4-fs (loop4): last error at time 1868: ext4_mb_mark_diskspace_used:4222 [ 1868.436429][T25210] Quota error (device loop4): write_blk: dquota write failed [ 1868.446651][T25210] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1868.514117][T25210] Quota error (device loop4): write_blk: dquota write failed [ 1868.586744][T25210] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1868.650698][T25210] EXT4-fs (loop4): 1 truncate cleaned up [ 1868.670011][T25210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1869.003969][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.783260][T19292] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1871.030900][T19292] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1871.072979][T19292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.120588][T19292] usb 3-1: config 0 descriptor?? [ 1871.489003][T19292] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1871.709249][T19292] [drm:udl_init] *ERROR* Selecting channel failed [ 1871.816656][T19292] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1871.878639][T19292] [drm] Initialized udl on minor 2 [ 1871.929157][T19292] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1871.993530][T19292] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1872.023970][T17438] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1872.063799][T19292] usb 3-1: USB disconnect, device number 41 [ 1872.070575][T17438] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1872.806095][T25262] Invalid ELF header len 8 [ 1875.011843][T25284] loop4: detected capacity change from 0 to 2048 [ 1875.176180][T25288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1875.238003][T21397] IPVS: starting estimator thread 0... [ 1875.262284][T25283] loop5: detected capacity change from 0 to 4096 [ 1875.388438][T25290] IPVS: using max 240 ests per chain, 12000 per kthread [ 1875.523437][T25292] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1875.746717][T25288] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1875.857376][T25288] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1875.984176][T25288] Remounting filesystem read-only [ 1876.886315][T25301] loop4: detected capacity change from 0 to 2048 [ 1877.187450][T25301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1880.040547][T25337] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1880.318796][T25341] loop4: detected capacity change from 0 to 128 [ 1880.398705][T25341] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1880.523724][T25341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1880.595198][T25341] System zones: 1-3, 19-19, 35-36 [ 1880.639445][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1880.685765][T25341] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1880.731121][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1880.754201][T25347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1880.994931][T25341] EXT4-fs: Ignoring removed orlov option [ 1881.149341][T25341] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1881.283413][T25341] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1881.644978][ T5783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1881.700882][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1884.013479][T25378] loop4: detected capacity change from 0 to 128 [ 1884.708472][T19292] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1884.973329][T19292] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1884.999552][T19292] usb 6-1: config 0 has no interface number 0 [ 1885.109181][T19292] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1885.128413][T19292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.158403][T19292] usb 6-1: Product: syz [ 1885.178309][T21397] ===================================================== [ 1885.178626][T19292] usb 6-1: Manufacturer: syz [ 1885.185438][T21397] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 1885.216107][T21397] vidtv_ts_null_write_into+0x43e/0x5c0 [ 1885.224360][T21397] vidtv_mux_tick+0x3480/0x3e30 [ 1885.243293][T21397] process_scheduled_works+0xb82/0x1e80 [ 1885.252646][T19292] usb 6-1: SerialNumber: syz [ 1885.263079][T21397] worker_thread+0xee4/0x1590 [ 1885.267916][T21397] kthread+0x53f/0x600 [ 1885.283190][T21397] ret_from_fork+0x20f/0x910 [ 1885.288116][T21397] ret_from_fork_asm+0x1a/0x30 [ 1885.299534][T21397] [ 1885.301914][T21397] Uninit was stored to memory at: [ 1885.306605][T19292] usb 6-1: config 0 descriptor?? [ 1885.309767][T21397] vidtv_ts_null_write_into+0x437/0x5c0 [ 1885.319312][T21397] vidtv_mux_tick+0x3480/0x3e30 [ 1885.335364][T21397] process_scheduled_works+0xb82/0x1e80 [ 1885.343883][T21397] worker_thread+0xee4/0x1590 [ 1885.353784][T21397] kthread+0x53f/0x600 [ 1885.359871][T21397] ret_from_fork+0x20f/0x910 [ 1885.375485][T21397] ret_from_fork_asm+0x1a/0x30 [ 1885.383171][T21397] [ 1885.385566][T21397] Local variable args.i132 created at: [ 1885.396243][T21397] vidtv_mux_tick+0x3119/0x3e30 [ 1885.406476][T21397] process_scheduled_works+0xb82/0x1e80 [ 1885.417394][T21397] [ 1885.424188][T21397] CPU: 1 UID: 0 PID: 21397 Comm: kworker/1:1 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1885.436334][T21397] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1885.451959][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1885.469145][T21397] Workqueue: events vidtv_mux_tick [ 1885.477855][T21397] ===================================================== [ 1885.495228][T21397] Disabling lock debugging due to kernel taint [ 1885.651529][T19292] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1885.781349][T21397] Kernel panic - not syncing: kmsan.panic set ... [ 1885.787926][T21397] CPU: 1 UID: 0 PID: 21397 Comm: kworker/1:1 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1885.799159][T21397] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1885.805654][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1885.815833][T21397] Workqueue: events vidtv_mux_tick [ 1885.821121][T21397] Call Trace: [ 1885.824469][T21397] [ 1885.827485][T21397] __dump_stack+0x26/0x30 [ 1885.831983][T21397] dump_stack_lvl+0x50/0x1c0 [ 1885.836715][T21397] ? dump_stack+0x12/0x25 [ 1885.841197][T21397] dump_stack+0x1e/0x25 [ 1885.845495][T21397] vpanic+0x7b4/0x1430 [ 1885.849734][T21397] panic+0x15d/0x160 [ 1885.853817][T21397] kmsan_report+0x31a/0x320 [ 1885.858494][T21397] ? __msan_warning+0x1b/0x30 [ 1885.863334][T21397] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 1885.869204][T21397] ? vidtv_mux_tick+0x3480/0x3e30 [ 1885.874391][T21397] ? process_scheduled_works+0xb82/0x1e80 [ 1885.880254][T21397] ? worker_thread+0xee4/0x1590 [ 1885.885250][T21397] ? kthread+0x53f/0x600 [ 1885.889642][T21397] ? ret_from_fork+0x20f/0x910 [ 1885.894539][T21397] ? ret_from_fork_asm+0x1a/0x30 [ 1885.899630][T21397] ? ret_from_fork_asm+0x1a/0x30 [ 1885.904726][T21397] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.910745][T21397] ? preempt_schedule_irq+0x79/0xa0 [ 1885.916084][T21397] ? kmsan_get_metadata+0xf1/0x160 [ 1885.921324][T21397] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.927325][T21397] ? vidtv_ts_inc_cc+0xa1/0xf0 [ 1885.932208][T21397] ? filter_irq_stacks+0x49/0x190 [ 1885.937408][T21397] ? stack_depot_save_flags+0x35/0x790 [ 1885.943022][T21397] ? kmsan_get_metadata+0xf1/0x160 [ 1885.948258][T21397] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1885.954763][T21397] ? kmsan_get_metadata+0xf1/0x160 [ 1885.960013][T21397] __msan_warning+0x1b/0x30 [ 1885.964668][T21397] vidtv_ts_null_write_into+0x43e/0x5c0 [ 1885.970372][T21397] vidtv_mux_tick+0x3480/0x3e30 [ 1885.975513][T21397] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1885.980865][T21397] process_scheduled_works+0xb82/0x1e80 [ 1885.986632][T21397] worker_thread+0xee4/0x1590 [ 1885.991485][T21397] kthread+0x53f/0x600 [ 1885.995703][T21397] ? __pfx_worker_thread+0x10/0x10 [ 1886.000967][T21397] ? __pfx_kthread+0x10/0x10 [ 1886.005699][T21397] ret_from_fork+0x20f/0x910 [ 1886.010418][T21397] ? __switch_to+0x51c/0x750 [ 1886.015167][T21397] ? __pfx_kthread+0x10/0x10 [ 1886.019903][T21397] ret_from_fork_asm+0x1a/0x30 [ 1886.024854][T21397] [ 1886.028322][T21397] Kernel Offset: disabled [ 1886.032697][T21397] Rebooting in 86400 seconds..