last executing test programs: 3m46.417352091s ago: executing program 1 (id=1882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80050002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m46.293127491s ago: executing program 1 (id=1883): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x554e, &(0x7f0000008740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 3m44.438316792s ago: executing program 1 (id=1896): openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 3m43.332503577s ago: executing program 1 (id=1902): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c732000000000000000020b00e44de83eb12e1addb51edd821f23ab83af360c42a3a64f4e227479c5dd61952d5fcb0bcfee33d3832a050f83cc04ac5025adbf5d9fc1d72fb565aa4734eec868691025f3a382de96d325d0f56d2859781ea76aea7305d7661f8bd5650b7e9dcc1af8c0daef9686f8a1a5637c77b000b423d659049a769bbd8ac3ec13220fb30c2cbcc5f045b71395d17d76da531a330468bfd2dd4b7f6d9991ec27e0485b36bff71689d333fd4b5b6d8dfabb206dd573227856bdd7661d970d01bf6639b3177b0fd9d80ce94358a17b72a27def19e853c337df0e8a1a8f27d44010f9399f8feae412a6c3d07f8f9e24f8948"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m42.782448089s ago: executing program 1 (id=1903): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) 3m42.079008836s ago: executing program 1 (id=1910): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000140)={0x2a, 0x3}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 3m41.626542472s ago: executing program 32 (id=1910): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000140)={0x2a, 0x3}, 0xc) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 3m28.198005918s ago: executing program 3 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) 3m27.966315227s ago: executing program 3 (id=1984): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) 3m27.715017469s ago: executing program 3 (id=1985): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3m27.500730434s ago: executing program 3 (id=1986): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 3m27.250247537s ago: executing program 3 (id=1987): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) 3m26.711122437s ago: executing program 3 (id=1989): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5435, 0x0) 3m26.067710944s ago: executing program 33 (id=1989): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5435, 0x0) 2m7.310140157s ago: executing program 2 (id=2530): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x80000000}, &(0x7f00000001c0)=0x8) 2m7.150580734s ago: executing program 2 (id=2532): unshare(0x2040400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) 2m6.915402343s ago: executing program 2 (id=2537): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) sendfile(r1, r0, 0x0, 0xbc44) 2m6.681356612s ago: executing program 2 (id=2541): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x8001) 2m6.083616292s ago: executing program 2 (id=2546): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m5.610270481s ago: executing program 2 (id=2548): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c106"], 0x0) 1m50.519458125s ago: executing program 34 (id=2548): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c106"], 0x0) 36.793955876s ago: executing program 4 (id=3103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 36.323640944s ago: executing program 4 (id=3105): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmmsg$inet(r0, &(0x7f0000002400)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x4048040) 35.765087098s ago: executing program 4 (id=3111): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xff) 35.447067991s ago: executing program 4 (id=3115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000001080)={0x0, 0x20000000006, 0x8001, 0x55e}, 0x0) 35.280972509s ago: executing program 4 (id=3117): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) 35.059036456s ago: executing program 4 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 20.041934968s ago: executing program 35 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 5.358979503s ago: executing program 7 (id=3362): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xd0, 0x0, 0x0) 5.060828393s ago: executing program 7 (id=3366): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000300)=""/194, 0xfffffffffffffe6d, 0x0, 0x3, 0x2}}, 0x48) 4.827100933s ago: executing program 7 (id=3370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x9, 0x1, 0x8, 0xffffffffffffffff, 0x20}) 4.826856883s ago: executing program 5 (id=3371): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, r0, 0x303, 0x70bd27, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) 4.550630599s ago: executing program 5 (id=3375): syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x61d3, &(0x7f0000008140)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) 4.530093712s ago: executing program 7 (id=3376): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005880)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@background_gc_on}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xd74}}], [{@smackfsdef={'smackfsdef', 0x3d, 'fault_injection'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x36, 0x32, 0x63, 0x32, 0x34, 0x37], 0x2d, [0x37, 0x63, 0x65, 0x38], 0x2d, [0x65, 0x61, 0x61, 0x62], 0x2d, [0x64, 0x61, 0x65, 0x36], 0x2d, [0x32, 0x31, 0x0, 0x31, 0x35, 0x61, 0x33, 0x33]}}}, {@uid_lt}, {@subj_role={'subj_role', 0x3d, 'batadv0\x00'}}, {@obj_type={'obj_type', 0x3d, 'noinline_dentry'}}, {@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) writev(r0, &(0x7f0000006b80)=[{&(0x7f0000005a40)='\r', 0x1}], 0x1) 3.198611775s ago: executing program 0 (id=3386): r0 = openat$comedi(0xffffff9c, &(0x7f000001f8c0)='/dev/comedi2\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'fl512\x00', [0x3c4, 0x7f5, 0x2, 0xa, 0x7, 0x0, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x3, 0x400, 0x2, 0x3, 0x80, 0xffffffa7, 0x7, 0xe0e9, 0x1, 0x3ff, 0x9, 0x200, 0x9, 0xaa14, 0x5, 0x4, 0x0, 0x7, 0xf58, 0x80000001]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 2.938491228s ago: executing program 0 (id=3388): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 2.855919152s ago: executing program 5 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 2.589039627s ago: executing program 0 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x130, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x104, 0x3, "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"}]}]]}, 0x130}}, 0x0) 2.398401069s ago: executing program 5 (id=3392): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000c888aa"], 0x0}, 0x0) 2.169833387s ago: executing program 0 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1.963701271s ago: executing program 7 (id=3396): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x0, 0x76d, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.886991274s ago: executing program 0 (id=3397): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.662247372s ago: executing program 6 (id=3398): write(0xffffffffffffffff, &(0x7f0000000100)="11", 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1.278795346s ago: executing program 6 (id=3399): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="070000000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1.019368489s ago: executing program 6 (id=3400): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 677.478077ms ago: executing program 6 (id=3401): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 354.372871ms ago: executing program 7 (id=3402): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r1, 0xb, 0x0, 0x10, 0x0, @in={0x3, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x118) 353.97353ms ago: executing program 6 (id=3403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000008000000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 306.306818ms ago: executing program 5 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@delchain={0x44, 0x65, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3a}, {0x8, 0x9}, {0xf, 0x9}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000fb2355840000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273"], 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x0) 72.511538ms ago: executing program 6 (id=3405): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) writev(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)='!', 0x1}], 0x1) 7.099969ms ago: executing program 0 (id=3406): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227}) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 0s ago: executing program 5 (id=3407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xf}, 0x1) kernel console output (not intermixed with test programs): iTV DVB-T USB2.0)) [ 414.978651][ T5831] usb 5-1: media controller created [ 415.060072][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.221368][ T5831] DVB: Unable to find symbol mt352_attach() [ 415.351919][ T5831] DVB: Unable to find symbol nxt6000_attach() [ 415.358170][ T5831] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 415.417358][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 415.472537][ T5831] dvb-usb: schedule remote query interval to 1000 msecs. [ 415.494357][ T5831] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 415.535795][ T5831] dvb-usb: bulk message failed: -22 (7/0) [ 415.553280][ T5831] dvb-usb: bulk message failed: -22 (7/0) [ 415.574949][ T5831] usb 5-1: USB disconnect, device number 7 [ 415.673531][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2597'. [ 415.751886][ T5831] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 415.890647][T12964] loop5: detected capacity change from 0 to 64 [ 416.273520][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.317490][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.333829][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.350513][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.367100][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.385069][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.403996][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.421114][T12970] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 416.680391][T12984] loop0: detected capacity change from 0 to 1024 [ 416.753902][T12984] hfsplus: bad catalog entry type [ 416.842916][ T12] hfsplus: b-tree write err: -5, ino 25 [ 416.848758][ T12] hfsplus: b-tree write err: -5, ino 4 [ 416.880752][ T12] hfsplus: b-tree write err: -5, ino 2 [ 416.947127][T12988] loop5: detected capacity change from 0 to 4096 [ 417.010748][T12988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.037786][T12986] loop4: detected capacity change from 0 to 4096 [ 417.169111][T12986] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 417.223659][T12986] ntfs3: loop4: Failed to load $Extend (-22). [ 417.245996][T12986] ntfs3: loop4: Failed to initialize $Extend. [ 417.257300][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.562105][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2613'. [ 417.708753][T13000] tipc: Enabling of bearer rejected, failed to enable media [ 418.911887][T13007] loop5: detected capacity change from 0 to 32768 [ 418.982502][T13007] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.283599][T13007] XFS (loop5): Ending clean mount [ 419.352423][T13007] XFS (loop5): Quotacheck needed: Please wait. [ 419.489159][T13007] XFS (loop5): Quotacheck: Done. [ 419.644845][T13043] loop4: detected capacity change from 0 to 128 [ 419.722425][T13043] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.812908][T13043] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.955257][T10901] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.995658][T13048] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 420.037035][T10630] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.282949][T13050] loop4: detected capacity change from 0 to 64 [ 421.109803][ T5777] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 421.139975][ T5774] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.291582][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 421.304566][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.326341][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.336301][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 421.353758][ T5774] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 421.369755][ T5777] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 421.389018][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.407004][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.419602][ T5774] usb 6-1: Product: syz [ 421.429668][ T5774] usb 6-1: Manufacturer: syz [ 421.434339][ T5774] usb 6-1: SerialNumber: syz [ 421.444656][ T5777] usb 1-1: config 0 descriptor?? [ 421.461940][ T5774] usb 6-1: config 0 descriptor?? [ 421.495980][ T5774] gspca_main: sq930x-2.14.0 probing 2770:930c [ 421.910317][ T5777] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 422.098015][ T5777] corsair 0003:1B1C:1B02.001E: Failed to get K90 initial state (error -71). [ 422.117318][ T5777] usb 1-1: USB disconnect, device number 23 [ 422.139576][ T5774] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 422.140549][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 422.359643][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 422.367245][ T5831] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 422.378738][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.383637][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.394931][ T5774] gspca_sq930x: Sensor ov9630 not yet treated [ 422.397396][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.404030][ T5774] sq930x: probe of 6-1:0.0 failed with error -22 [ 422.416317][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.428216][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.431981][ T5774] usb 6-1: USB disconnect, device number 6 [ 422.444559][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.453388][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.454908][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.476258][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 422.491137][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.501223][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.533731][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.552073][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.579513][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.592782][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.622951][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.629240][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.639326][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.685650][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.734289][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.750707][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.779525][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.783187][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.795769][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.821423][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.827927][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.839853][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.854973][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.858616][T13078] can0: slcan on ttyS3. [ 422.864044][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.874694][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.886305][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.898971][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.908585][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.931277][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.944234][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.956143][ T5831] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.964391][ T5831] usb 5-1: config 0 has no interface number 0 [ 422.970730][ T5831] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.981729][ T5831] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.994870][ T5831] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 423.004241][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.012951][ T5831] usb 5-1: Product: syz [ 423.017339][ T5831] usb 5-1: Manufacturer: syz [ 423.022141][ T5831] usb 5-1: SerialNumber: syz [ 423.042067][ T5831] usb 5-1: config 0 descriptor?? [ 423.051398][ T5831] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 423.079081][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.162258][T13077] can0 (unregistered): slcan off ttyS3. [ 423.212929][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.268154][ T5831] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 423.446851][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.499310][T13091] loop5: detected capacity change from 0 to 256 [ 423.501076][ T5774] usb 5-1: USB disconnect, device number 8 [ 423.536515][ T5774] etas_es58x 5-1:0.2: Disconnecting syz syz [ 423.575991][T13075] chnl_net:caif_netlink_parms(): no params data found [ 423.610784][T13091] FAT-fs (loop5): Directory bread(block 64) failed [ 423.617594][T13091] FAT-fs (loop5): Directory bread(block 65) failed [ 423.627898][T13091] FAT-fs (loop5): Directory bread(block 66) failed [ 423.658598][T13091] FAT-fs (loop5): Directory bread(block 67) failed [ 423.687964][T13091] FAT-fs (loop5): Directory bread(block 68) failed [ 423.705211][T13091] FAT-fs (loop5): Directory bread(block 69) failed [ 423.723514][T13091] FAT-fs (loop5): Directory bread(block 70) failed [ 423.748130][T13091] FAT-fs (loop5): Directory bread(block 71) failed [ 423.770143][T13091] FAT-fs (loop5): Directory bread(block 72) failed [ 423.779119][T13091] FAT-fs (loop5): Directory bread(block 73) failed [ 424.115045][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.119244][T13088] loop0: detected capacity change from 0 to 32768 [ 424.131691][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.171483][T13075] bridge_slave_0: entered allmulticast mode [ 424.179083][T13075] bridge_slave_0: entered promiscuous mode [ 424.274174][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.325148][T13088] JBD2: Ignoring recovery information on journal [ 424.333131][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.400631][T13075] bridge_slave_1: entered allmulticast mode [ 424.466156][T13075] bridge_slave_1: entered promiscuous mode [ 424.550244][T13088] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 424.569552][ T5778] Bluetooth: hci4: command tx timeout [ 424.598848][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.652101][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.834938][T13088] syz.0.2646 (13088) used greatest stack depth: 17840 bytes left [ 424.959227][T13118] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2654'. [ 424.972236][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 425.486685][T13075] team0: Port device team_slave_0 added [ 425.697327][T13075] team0: Port device team_slave_1 added [ 425.799706][ T5831] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 425.899677][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.948711][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.009622][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 426.015889][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.030984][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.048981][ T5831] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 426.067795][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.079797][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.098441][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.128310][ T5831] usb 1-1: config 0 descriptor?? [ 426.179845][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.356561][T13124] loop5: detected capacity change from 0 to 40427 [ 426.384553][T13124] F2FS-fs (loop5): invalid crc value [ 426.436773][T13124] F2FS-fs (loop5): Found nat_bits in checkpoint [ 426.489268][T13075] hsr_slave_0: entered promiscuous mode [ 426.498895][T13075] hsr_slave_1: entered promiscuous mode [ 426.510707][T13075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.523796][T13075] Cannot create hsr debugfs directory [ 426.569114][ T5831] kye 0003:0458:0138.001F: unknown main item tag 0x3 [ 426.579692][ T5831] kye 0003:0458:0138.001F: unknown global tag 0xe [ 426.586179][ T5831] kye 0003:0458:0138.001F: item 0 1 1 14 parsing failed [ 426.627145][ T5831] kye 0003:0458:0138.001F: parse failed [ 426.640694][ T5778] Bluetooth: hci4: command tx timeout [ 426.677217][ T5831] kye: probe of 0003:0458:0138.001F failed with error -22 [ 426.684679][T13124] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 426.784850][ T23] usb 1-1: USB disconnect, device number 24 [ 426.895924][T13157] tipc: Started in network mode [ 426.902267][T13157] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 426.930013][T10901] syz-executor: attempt to access beyond end of device [ 426.930013][T10901] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.930116][T13157] tipc: Enabled bearer , priority 12 [ 426.950277][T10901] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 427.275265][T13163] tipc: Enabling of bearer rejected, failed to enable media [ 427.558952][T13168] vivid-000: disconnect [ 427.581631][T13166] vivid-000: reconnect [ 427.905391][T13178] loop0: detected capacity change from 0 to 256 [ 428.049626][ T1188] tipc: Node number set to 15444650 [ 428.216443][ T1088] hsr_slave_0: left promiscuous mode [ 428.235155][ T1088] hsr_slave_1: left promiscuous mode [ 428.244810][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.257501][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.287522][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.298875][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.312991][ T1088] bridge_slave_1: left allmulticast mode [ 428.325076][ T1088] bridge_slave_1: left promiscuous mode [ 428.331653][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.354363][ T1088] bridge_slave_0: left allmulticast mode [ 428.360429][ T1088] bridge_slave_0: left promiscuous mode [ 428.375629][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.485493][ T1088] veth1_macvtap: left promiscuous mode [ 428.496710][ T1088] veth0_macvtap: left promiscuous mode [ 428.509857][ T1088] veth1_vlan: left promiscuous mode [ 428.515516][ T1088] veth0_vlan: left promiscuous mode [ 428.722009][ T5778] Bluetooth: hci4: command tx timeout [ 428.934266][ T5774] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 429.139615][ T5774] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.159544][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.209030][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.224012][ T5774] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 429.251498][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.290270][ T5774] usb 5-1: config 0 descriptor?? [ 429.792569][ T5774] wacom 0003:056A:0010.0020: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 429.826272][ T5774] wacom 0003:056A:0010.0020: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 429.851883][ T5774] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0020/input/input27 [ 430.118646][ T5831] usb 5-1: USB disconnect, device number 9 [ 430.557458][ T1088] team_slave_1 (unregistering): left allmulticast mode [ 430.578654][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 430.672291][ T1088] team_slave_0 (unregistering): left allmulticast mode [ 430.689900][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 430.820163][ T5778] Bluetooth: hci4: command tx timeout [ 430.904309][ T1088] bond0 (unregistering): (slave c@0): Releasing backup interface [ 431.035382][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.796944][ T1088] bond0 (unregistering): Released all slaves [ 432.008866][T13198] syz_tun: entered promiscuous mode [ 432.042751][T13198] macsec1: entered allmulticast mode [ 432.048217][T13198] syz_tun: entered allmulticast mode [ 432.086520][T13198] syz_tun: left allmulticast mode [ 432.098545][T13198] syz_tun: left promiscuous mode [ 432.208277][T13075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.225173][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2682'. [ 432.288078][T13075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.430934][T13075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 432.507289][T13075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.617211][T13209] loop5: detected capacity change from 0 to 1024 [ 432.691144][T13209] EXT4-fs: Ignoring removed orlov option [ 432.848376][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 432.878296][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 432.932049][T13213] validate_nla: 45 callbacks suppressed [ 432.932066][T13213] netlink: 'syz.4.2685': attribute type 18 has an invalid length. [ 432.973684][T13209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.129613][ T27] audit: type=1800 audit(1775918764.440:420): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2684" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 433.165138][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.247461][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.251452][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.312608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.319858][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.358191][ T3992] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.365544][ T3992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.964958][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.435434][T13191] Set syz1 is full, maxelem 65536 reached [ 434.739948][T13075] veth0_vlan: entered promiscuous mode [ 434.772837][T13075] veth1_vlan: entered promiscuous mode [ 434.864857][T13261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2690'. [ 434.911923][T13075] veth0_macvtap: entered promiscuous mode [ 434.930500][ T7050] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 434.944961][T13075] veth1_macvtap: entered promiscuous mode [ 435.007198][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.038837][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.059882][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.089684][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.108404][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.139508][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.140875][ T7050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.153156][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.216313][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.239091][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.251980][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.289885][ T7050] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 435.293554][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.317372][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.328335][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.338224][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.348816][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.348868][ T7050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.361019][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.428925][ T7050] usb 1-1: config 0 descriptor?? [ 435.486323][T13075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.528557][T13075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.545558][T13075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.564841][T13075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.809743][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.817740][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.911388][ T7050] wacom 0003:056A:0010.0021: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 435.946103][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.946501][ T7050] wacom 0003:056A:0010.0021: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 435.969703][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.040003][ T7050] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0021/input/input30 [ 436.141698][ T7050] usb 1-1: USB disconnect, device number 25 [ 436.240843][T13283] fido_id[13283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 436.668500][T13275] loop5: detected capacity change from 0 to 32768 [ 436.696562][T13275] [ 436.696562][T13275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 436.696562][T13275] [ 436.764632][T13275] ERROR: (device loop5): ea_get: invalid ea.flag [ 436.764632][T13275] [ 436.820622][T13275] ERROR: (device loop5): remounting filesystem as read-only [ 436.899807][ T7050] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 436.937463][T13280] loop4: detected capacity change from 0 to 32768 [ 437.067513][T13280] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 437.125021][ T7050] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 437.143876][ T7050] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 437.189324][ T7050] usb 7-1: Product: syz [ 437.225818][ T7050] usb 7-1: Manufacturer: syz [ 437.251167][T13280] XFS (loop4): Ending clean mount [ 437.269720][ T7050] usb 7-1: SerialNumber: syz [ 437.310743][ T7050] usb 7-1: config 0 descriptor?? [ 437.319771][T13280] XFS (loop4): Quotacheck needed: Please wait. [ 437.362876][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 437.529275][T13280] XFS (loop4): Quotacheck: Done. [ 437.530217][ T7050] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 437.760477][ T7050] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 437.780924][ T7050] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 437.787761][ T7050] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 437.842776][T10630] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 437.911611][ T7050] peak_usb: probe of 7-1:0.0 failed with error -8 [ 438.028978][ T5813] usb 7-1: USB disconnect, device number 2 [ 438.145466][T13325] loop0: detected capacity change from 0 to 512 [ 438.263492][T13325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.330396][T13325] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.460371][ T1188] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 438.552578][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.659963][ T1188] usb 6-1: Using ep0 maxpacket: 8 [ 438.667440][ T1188] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 438.676470][ T1188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.697427][ T1188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.740939][ T1188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 438.768706][ T1188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.803610][ T1188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.819713][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.889797][ T1188] usbtmc 6-1:16.0: bulk endpoints not found [ 439.059874][ T7050] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 439.091449][ T1188] usb 6-1: USB disconnect, device number 7 [ 439.271504][ T7050] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.299499][ T7050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.329273][ T7050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.357106][ T7050] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 439.387973][ T7050] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.421247][ T7050] usb 7-1: config 0 descriptor?? [ 439.557005][T13364] loop0: detected capacity change from 0 to 512 [ 439.597124][T13364] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.606627][ T5813] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 439.657871][T13364] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #17: comm syz.0.2716: inode has both inline data and extents flags [ 439.705530][T13364] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2716: couldn't read orphan inode 17 (err -117) [ 439.776709][T13364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.802025][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 439.819576][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.853522][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 439.888281][ T7050] wacom 0003:056A:0010.0022: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 439.898286][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.939372][ T7050] wacom 0003:056A:0010.0022: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.6-1/input0 [ 439.939465][ T5813] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 439.969649][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.004817][ T7050] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0010.0022/input/input33 [ 440.005761][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.056760][ T5813] usbtmc 6-1:16.0: bulk endpoints not found [ 440.096910][ T5813] ati_remote 6-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 440.202405][T13357] loop4: detected capacity change from 0 to 32768 [ 440.275682][ T1188] usb 6-1: USB disconnect, device number 8 [ 440.346698][T13357] JBD2: Ignoring recovery information on journal [ 440.353716][ T5813] usb 7-1: USB disconnect, device number 3 [ 440.411726][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.418122][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.524749][T13357] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 440.759347][T10630] ocfs2: Unmounting device (7,4) on (node local) [ 441.043572][T13392] loop0: detected capacity change from 0 to 164 [ 441.492359][T13401] netlink: 'syz.0.2726': attribute type 4 has an invalid length. [ 441.741813][T13404] loop5: detected capacity change from 0 to 4096 [ 441.817772][T13411] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 442.389843][T13387] loop4: detected capacity change from 0 to 32768 [ 442.475041][T13387] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 442.553331][T13387] JBD2: Ignoring recovery information on journal [ 442.634228][T13431] loop5: detected capacity change from 0 to 2048 [ 442.646843][T13387] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 442.697517][T13431] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.764751][T13438] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.770076][ T27] audit: type=1800 audit(1775918774.080:421): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2720" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 442.932936][T13438] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 442.960221][T13438] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 442.984539][T10630] ocfs2: Unmounting device (7,4) on (node local) [ 443.005568][T13438] Remounting filesystem read-only [ 443.024556][ T12] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 443.038757][ T12] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.070770][ T12] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.089889][ T12] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 443.097422][ T12] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 443.119520][ T12] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 443.126799][ T12] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 443.167607][ T12] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.190011][ T12] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.207813][ T12] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.229008][T10901] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 443.265879][T10901] NILFS (loop5): discard dirty page: offset=0, ino=12 [ 443.299878][T10901] NILFS (loop5): discard dirty block: blocknr=17, size=1024 [ 443.307251][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.360567][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.399735][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.466841][T10901] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 443.497677][T13451] loop0: detected capacity change from 0 to 1024 [ 443.499482][T10901] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 443.540233][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.592700][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.626865][T13451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 443.629523][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.649805][T13451] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.688912][T10901] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 443.696034][T10901] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 443.703609][T10901] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 443.711382][T10901] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 443.718717][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.727923][T10901] NILFS (loop5): discard dirty page: offset=131072, ino=3 [ 443.735803][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.745565][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.762714][T10901] NILFS (loop5): discard dirty block: blocknr=46, size=1024 [ 443.777869][T10901] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 443.878847][T13464] loop4: detected capacity change from 0 to 512 [ 443.917216][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 443.960021][T13464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.043564][T13464] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.2745: bad orphan inode 131083 [ 444.088332][T13464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.251271][T13474] loop0: detected capacity change from 0 to 1024 [ 444.322636][T13474] hfsplus: bad catalog entry type [ 444.450104][T10630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.468009][ T49] hfsplus: b-tree write err: -5, ino 25 [ 444.494418][ T49] hfsplus: b-tree write err: -5, ino 4 [ 444.510252][ T49] hfsplus: b-tree write err: -5, ino 2 [ 444.836672][T13495] loop5: detected capacity change from 0 to 64 [ 444.889147][T13495] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 444.920694][T13495] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 444.979822][ T7050] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 445.181022][ T7050] usb 1-1: too many configurations: 70, using maximum allowed: 8 [ 445.196070][ T7050] usb 1-1: config index 0 descriptor too short (expected 65016, got 133) [ 445.226661][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.259856][ T7050] usb 1-1: config index 1 descriptor too short (expected 65016, got 133) [ 445.281334][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.320251][ T7050] usb 1-1: config index 2 descriptor too short (expected 65016, got 133) [ 445.349570][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.381108][ T7050] usb 1-1: config index 3 descriptor too short (expected 65016, got 133) [ 445.399629][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.428466][T13502] loop4: detected capacity change from 0 to 4096 [ 445.450294][ T7050] usb 1-1: config index 4 descriptor too short (expected 65016, got 133) [ 445.459358][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.489866][ T7050] usb 1-1: config index 5 descriptor too short (expected 65016, got 133) [ 445.520111][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.520948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.553946][ T7050] usb 1-1: config index 6 descriptor too short (expected 65016, got 133) [ 445.575697][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.620929][ T7050] usb 1-1: config index 7 descriptor too short (expected 65016, got 133) [ 445.640630][ T7050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.682763][ T7050] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.712366][ T7050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.741319][ T7050] usb 1-1: Product: syz [ 445.745572][ T7050] usb 1-1: Manufacturer: syz [ 445.786895][ T7050] usb 1-1: SerialNumber: syz [ 445.818211][ T7050] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 445.855817][ T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 446.514316][T13504] loop5: detected capacity change from 0 to 32768 [ 446.615834][ T7050] usb 1-1: USB disconnect, device number 26 [ 446.699259][T13504] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.746732][T13508] loop6: detected capacity change from 0 to 40427 [ 446.797933][T13504] XFS (loop5): Ending clean mount [ 446.808972][T13508] F2FS-fs (loop6): invalid crc value [ 446.841923][T13504] XFS (loop5): Quotacheck needed: Please wait. [ 446.859869][T13508] F2FS-fs (loop6): Found nat_bits in checkpoint [ 447.074744][T13504] XFS (loop5): Quotacheck: Done. [ 447.074871][T13508] F2FS-fs (loop6): Start checkpoint disabled! [ 447.126332][T13508] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 447.217610][ T23] usb 1-1: Service connection timeout for: 256 [ 447.247625][ T23] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 447.277469][ T23] ath9k_htc: Failed to initialize the device [ 447.301354][ T7050] usb 1-1: ath9k_htc: USB layer deinitialized [ 447.435871][T10901] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 447.626863][ T11] kworker/u4:0: attempt to access beyond end of device [ 447.626863][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 447.692143][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 447.710801][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 448.227300][T13558] loop5: detected capacity change from 0 to 4096 [ 448.244785][T13558] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 448.304428][T13558] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 448.328165][T13547] loop4: detected capacity change from 0 to 32768 [ 448.336529][T13558] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 448.375908][T13547] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2766 (13547) [ 448.433293][T13547] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 448.436080][ T27] audit: type=1800 audit(1775918779.746:422): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2768" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 448.499656][T13547] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 448.555820][T13547] BTRFS info (device loop4): using free space tree [ 448.732923][T13580] loop6: detected capacity change from 0 to 256 [ 448.835638][T13547] BTRFS info (device loop4): enabling ssd optimizations [ 448.857519][T13580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 448.884438][T13547] BTRFS info (device loop4): auto enabling async discard [ 449.186413][T10630] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 449.609742][ T5778] Bluetooth: hci1: failed to read key size for handle 0 [ 449.619295][ T5778] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 449.856940][T13562] loop0: detected capacity change from 0 to 32768 [ 449.907458][T13582] loop5: detected capacity change from 0 to 32768 [ 449.977676][T13562] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.095161][T13582] [ 450.095161][T13582] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.095161][T13582] [ 450.112472][T13609] loop6: detected capacity change from 0 to 256 [ 450.186303][T13562] XFS (loop0): Ending clean mount [ 450.250896][T13562] XFS (loop0): Quotacheck needed: Please wait. [ 450.443275][T10901] [ 450.443275][T10901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.443275][T10901] [ 450.478898][T13562] XFS (loop0): Quotacheck: Done. [ 450.509733][T10901] [ 450.509733][T10901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.509733][T10901] [ 450.546951][ T27] audit: type=1800 audit(1775918781.856:423): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2770" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 450.803834][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.996797][T13622] loop5: detected capacity change from 0 to 512 [ 451.039625][T13622] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 451.086517][T13622] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 451.149635][T13622] EXT4-fs (loop5): 1 truncate cleaned up [ 451.160759][T13622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.231428][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2786'. [ 451.352592][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.680206][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 451.903649][T13643] loop5: detected capacity change from 0 to 64 [ 452.556965][T13656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.724559][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 452.752142][ T51] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 452.959581][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 452.967086][T13656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.152410][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.181622][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.196492][T13656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.206964][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.209168][ T42] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 453.257052][T13681] loop6: detected capacity change from 0 to 1024 [ 453.268455][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.315166][ T42] usb 5-1: Product: syz [ 453.339680][ T42] usb 5-1: Manufacturer: syz [ 453.359058][ T42] usb 5-1: SerialNumber: syz [ 453.378707][T13681] hfsplus: bad catalog entry type [ 453.401021][ T42] usb 5-1: selecting invalid altsetting 1 [ 453.430646][ T42] usb 5-1: unit 6 not found! [ 453.438733][T13656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.494530][ T1088] hfsplus: b-tree write err: -5, ino 25 [ 453.530093][ T1088] hfsplus: b-tree write err: -5, ino 4 [ 453.549287][ T1088] hfsplus: b-tree write err: -5, ino 2 [ 453.611657][ T42] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 453.674233][ T42] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 453.821713][T13656] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.884571][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.915215][T13656] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.917119][ T23] usb 5-1: USB disconnect, device number 10 [ 454.021070][T13656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.107454][T13656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.273324][T13706] loop6: detected capacity change from 0 to 1024 [ 454.284837][T13706] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.293764][T13706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.336658][T13706] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.358075][T13706] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #11: comm syz.6.2812: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 454.399232][T13706] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2812: couldn't read orphan inode 11 (err -117) [ 454.442708][T13706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.577143][T13075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.843623][T13726] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2821'. [ 454.860175][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2821'. [ 454.907760][T13726] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2821'. [ 455.099966][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 455.254087][T13738] loop0: detected capacity change from 0 to 256 [ 455.266702][T13738] exfat: Deprecated parameter 'namecase' [ 455.289717][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 455.303795][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 455.320283][ T5774] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 455.323872][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.349540][ T23] usb 5-1: Product: syz [ 455.353784][ T23] usb 5-1: Manufacturer: syz [ 455.368754][ T23] usb 5-1: SerialNumber: syz [ 455.374547][T13738] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 455.448541][ T27] audit: type=1400 audit(1775918786.756:424): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 6-1: Using ep0 maxpacket: 8 [ 455.593468][T13731] loop6: detected capacity change from 0 to 40427 [ 455.621751][T13731] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 455.628162][ T5774] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 455.641637][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.666630][ T5774] usb 6-1: Product: syz [ 455.666721][T13731] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 455.680229][ T5774] usb 6-1: Manufacturer: syz [ 455.680244][ T23] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 455.694673][ T5774] usb 6-1: SerialNumber: syz [ 455.715766][ T23] usb 5-1: clock source 0 is not valid, cannot use [ 455.735335][T13731] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 455.739341][ T5774] usb 6-1: config 0 descriptor?? [ 455.766908][ T23] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 455.776175][ T23] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 455.787449][T13731] F2FS-fs (loop6): Found nat_bits in checkpoint [ 455.790804][ T5774] gspca_main: se401-2.14.0 probing 047d:5003 [ 455.817222][ T23] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 455.850212][ T23] usb 5-1: clock source 0 is not valid, cannot use [ 455.867679][ T23] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 455.880703][ T23] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 455.917247][T13731] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 455.937038][T13731] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 455.986815][ T23] usb 5-1: USB disconnect, device number 11 [ 456.002114][T13731] F2FS-fs (loop6): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 456.127492][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.229556][ T5774] gspca_se401: Bayer format not supported! [ 456.438813][ T5774] usb 6-1: USB disconnect, device number 9 [ 456.479181][T13752] loop4: detected capacity change from 0 to 128 [ 456.516999][T13752] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 456.576714][T13752] hpfs: filesystem error: improperly stopped [ 456.601639][T13752] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 456.624507][T13752] hpfs: You really don't want any checks? You are crazy... [ 456.662762][T13752] hpfs: hpfs_map_sector(): read error [ 456.668885][T13752] hpfs: code page support is disabled [ 456.695085][T13752] hpfs: hpfs_map_4sectors(): unaligned read [ 456.714063][T13752] hpfs: hpfs_map_4sectors(): unaligned read [ 456.746382][T13752] hpfs: filesystem error: unable to find root dir [ 456.806147][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 456.824442][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 456.835526][ T5778] Bluetooth: hci3: hardware error 0x00 [ 456.908782][T13743] loop0: detected capacity change from 0 to 32768 [ 457.059616][T13743] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 457.196374][T13770] loop5: detected capacity change from 0 to 512 [ 457.216530][T13770] EXT4-fs: inline encryption not supported [ 457.233063][T13770] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.270036][T13743] XFS (loop0): Ending clean mount [ 457.326572][T13743] XFS (loop0): Quotacheck needed: Please wait. [ 457.333529][T13770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.417411][T13770] EXT4-fs (loop5): Test dummy encryption mode enabled [ 457.458574][T13770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 457.479634][T13770] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2831: inode #13: comm syz.5.2831: iget: illegal inode # [ 457.513786][T13743] XFS (loop0): Quotacheck: Done. [ 457.525500][T13770] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2831: couldn't read orphan inode 13 (err -117) [ 457.597582][T13770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 457.815031][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.843108][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 458.278748][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2837'. [ 458.315621][T13774] loop4: detected capacity change from 0 to 32768 [ 458.324876][T13774] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 458.537706][T13748] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 458.969816][ T5778] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 459.312691][T13810] can0: slcan on ttynull. [ 459.391752][T13809] can0 (unregistered): slcan off ttynull. [ 459.483949][T13790] loop0: detected capacity change from 0 to 40427 [ 459.538141][T13790] F2FS-fs (loop0): invalid crc value [ 459.571506][T13790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 459.754024][T13818] loop5: detected capacity change from 0 to 4096 [ 459.769139][T13790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 459.783096][T13818] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 459.918872][T13818] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 459.919686][T13790] syz.0.2834: attempt to access beyond end of device [ 459.919686][T13790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.014577][T13790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 460.039773][ T42] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 460.196297][T13800] loop4: detected capacity change from 0 to 40427 [ 460.234979][T13800] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 460.260046][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 460.269641][T13800] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 460.300501][ T42] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.330484][T13800] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 460.338000][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 460.361948][T13800] F2FS-fs (loop4): Found nat_bits in checkpoint [ 460.385913][ T42] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 460.409496][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.459973][ T42] usb 7-1: config 0 descriptor?? [ 460.568169][T13800] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 460.595996][T13800] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 460.690550][T13800] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 460.904538][ T42] waltop 0003:172F:0037.0023: unknown main item tag 0x2 [ 460.931124][ T42] waltop 0003:172F:0037.0023: unknown main item tag 0x0 [ 460.948877][ T42] waltop 0003:172F:0037.0023: unexpected long global item [ 460.961578][ T42] waltop: probe of 0003:172F:0037.0023 failed with error -22 [ 461.099161][ T42] usb 7-1: USB disconnect, device number 4 [ 461.315669][T13844] loop0: detected capacity change from 0 to 256 [ 461.415518][T13844] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 461.613174][T13837] loop5: detected capacity change from 0 to 32768 [ 461.734863][T13837] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 462.069181][T13837] XFS (loop5): Ending clean mount [ 462.111996][T13837] XFS (loop5): Quotacheck needed: Please wait. [ 462.293240][T13837] XFS (loop5): Quotacheck: Done. [ 462.846211][T13883] loop0: detected capacity change from 0 to 8192 [ 462.857402][T10901] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 462.885820][T13848] loop4: detected capacity change from 0 to 32768 [ 463.117534][ T3992] read_mapping_page failed! [ 463.146757][ T3992] ERROR: (device loop4): txCommit: [ 463.146757][ T3992] [ 463.179926][ T3992] ERROR: (device loop4): remounting filesystem as read-only [ 463.187495][ T3992] jfs_write_inode: jfs_commit_inode failed! [ 463.566002][T13894] loop0: detected capacity change from 0 to 4096 [ 463.664347][T13894] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 463.726136][T13894] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 463.780568][T13906] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.579764][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2878'. [ 464.609644][T13932] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2878'. [ 464.754333][T13933] loop0: detected capacity change from 0 to 4096 [ 464.862541][T13936] loop5: detected capacity change from 0 to 512 [ 464.996668][T13936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.126335][T13936] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.288657][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.682546][T13923] loop4: detected capacity change from 0 to 32768 [ 465.772712][T13939] loop6: detected capacity change from 0 to 32768 [ 465.845677][T13939] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 466.307525][T13939] XFS (loop6): Ending clean mount [ 466.332439][T13939] XFS (loop6): Quotacheck needed: Please wait. [ 466.364096][T13975] loop5: detected capacity change from 0 to 1024 [ 466.482801][T13975] hfsplus: bad catalog entry type [ 466.574894][T13939] XFS (loop6): Quotacheck: Done. [ 466.715456][ T4523] hfsplus: b-tree write err: -5, ino 25 [ 466.730708][ T4523] hfsplus: b-tree write err: -5, ino 4 [ 466.736551][ T4523] hfsplus: b-tree write err: -5, ino 2 [ 466.870796][T13075] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 468.267969][T13985] loop0: detected capacity change from 0 to 32768 [ 468.308820][T14019] loop5: detected capacity change from 0 to 1024 [ 468.372108][T13985] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 468.372108][T13985] [ 468.447749][T14021] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 468.491092][T14021] hfsplus: xattr search failed [ 468.497018][T14021] hfsplus: can't free extent [ 468.665993][T14000] loop4: detected capacity change from 0 to 32768 [ 468.724718][ T27] audit: type=1800 audit(1775918800.036:425): pid=14000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2897" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 469.921861][T14059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 469.954170][T14059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 470.042374][T14062] loop0: detected capacity change from 0 to 8 [ 470.210320][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2911'. [ 470.247829][T14038] loop5: detected capacity change from 0 to 32768 [ 470.262858][T14058] loop4: detected capacity change from 0 to 8192 [ 470.303061][T14038] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2904 (14038) [ 470.311838][T14058] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 470.400783][T14038] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 470.442910][T14058] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 470.469743][T14038] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 470.501120][T14038] BTRFS info (device loop5): using free space tree [ 470.732627][T14038] BTRFS info (device loop5): enabling ssd optimizations [ 470.735763][T14089] loop0: detected capacity change from 0 to 1024 [ 470.764469][T14038] BTRFS info (device loop5): auto enabling async discard [ 470.829672][ T27] audit: type=1800 audit(1775918802.126:426): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2904" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 470.940613][T14089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.020053][T10901] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 471.042145][T14089] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 471.069081][T14089] EXT4-fs warning (device loop0): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 471.217570][T14100] netlink: 'syz.6.2918': attribute type 3 has an invalid length. [ 471.322963][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.404874][T14102] loop5: detected capacity change from 0 to 512 [ 471.445420][T14102] EXT4-fs: inline encryption not supported [ 471.464189][T14102] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.481965][T14102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.494297][T14104] loop6: detected capacity change from 0 to 8 [ 471.519973][T14102] EXT4-fs (loop5): Test dummy encryption mode enabled [ 471.591661][T14102] EXT4-fs (loop5): orphan cleanup on readonly fs [ 471.621540][T14104] SQUASHFS error: Failed to read block 0x1ec: -5 [ 471.623849][T14102] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2919: inode #13: comm syz.5.2919: iget: illegal inode # [ 471.628664][T14104] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 471.694197][T14102] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2919: couldn't read orphan inode 13 (err -117) [ 471.736156][T14102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 471.850309][T14102] EXT4-fs (loop5): shut down requested (0) [ 471.910777][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2922'. [ 472.033364][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.140543][T14098] loop4: detected capacity change from 0 to 40427 [ 472.168447][T14098] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 472.178952][T14098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 472.209881][T14098] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 472.239910][T14098] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 472.248358][T14098] F2FS-fs (loop4): Image doesn't support compression [ 472.261430][T14098] F2FS-fs (loop4): invalid crc value [ 472.302895][T14098] F2FS-fs (loop4): Found nat_bits in checkpoint [ 472.460336][T14098] F2FS-fs (loop4): Start checkpoint disabled! [ 472.497444][T14098] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 472.515390][T14098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 472.769025][T14124] loop0: detected capacity change from 0 to 4096 [ 472.820290][T14124] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 472.887872][ T4523] kworker/u4:10: attempt to access beyond end of device [ 472.887872][ T4523] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 472.906218][ T4523] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 472.929832][ T4523] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 473.019684][T14124] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 473.213654][T14124] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 473.380867][ T5771] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 473.511199][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 474.381198][T14175] loop5: detected capacity change from 0 to 1024 [ 474.386564][T14172] loop4: detected capacity change from 0 to 4096 [ 474.504755][T14175] hfsplus: b-tree write err: -5, ino 20 [ 474.633012][T13535] hfsplus: b-tree write err: -5, ino 25 [ 474.659252][T13535] hfsplus: b-tree write err: -5, ino 4 [ 474.674229][T13535] hfsplus: b-tree write err: -5, ino 2 [ 475.157889][T14166] loop6: detected capacity change from 0 to 40427 [ 475.182759][T14166] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 475.198706][T14166] F2FS-fs (loop6): invalid crc value [ 475.234556][T14166] F2FS-fs (loop6): Found nat_bits in checkpoint [ 475.363604][T14166] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 475.416503][T14195] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 475.590203][ T42] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 475.795668][T14206] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2969'. [ 475.831800][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.864271][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.894768][ T42] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 475.934485][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.978828][ T42] usb 6-1: config 0 descriptor?? [ 476.072868][T14212] loop6: detected capacity change from 0 to 2048 [ 476.115632][T14212] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 476.157303][T14216] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.437037][ T42] isku 0003:1E7D:319C.0024: invalid report_size 1730974941 [ 476.455719][ T42] isku 0003:1E7D:319C.0024: item 0 4 1 7 parsing failed [ 476.470287][ T42] isku 0003:1E7D:319C.0024: parse failed [ 476.486880][ T42] isku: probe of 0003:1E7D:319C.0024 failed with error -22 [ 476.642848][ T23] usb 6-1: USB disconnect, device number 10 [ 476.971526][T14214] loop4: detected capacity change from 0 to 32768 [ 477.016804][T14214] read_mapping_page failed! [ 477.018308][T14217] loop0: detected capacity change from 0 to 40427 [ 477.032588][T14214] ERROR: (device loop4): txCommit: [ 477.032588][T14214] [ 477.039864][T14217] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 477.099557][T14217] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 477.128913][T14217] F2FS-fs (loop0): invalid crc value [ 477.171681][T14217] F2FS-fs (loop0): Found nat_bits in checkpoint [ 477.336940][T14217] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 477.353829][T14217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 477.613662][ T1088] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 477.659841][ T1088] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 478.742348][T14263] loop4: detected capacity change from 0 to 8192 [ 478.812798][T14263] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 478.862211][T14273] loop6: detected capacity change from 0 to 1024 [ 478.869612][T14263] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 478.878900][T14263] REISERFS (device loop4): using ordered data mode [ 478.931721][T14263] reiserfs: using flush barriers [ 478.945829][T14263] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 478.971907][T14263] REISERFS (device loop4): checking transaction log (loop4) [ 479.196779][T14263] REISERFS (device loop4): Using tea hash to sort names [ 479.224935][T14263] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 479.805198][T14284] loop0: detected capacity change from 0 to 1024 [ 479.840692][T14284] EXT4-fs: Ignoring removed orlov option [ 479.915158][T14284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 479.984512][T14284] System zones: 0-1, 3-12 [ 480.022012][T14284] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.201452][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 480.564323][T14273] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 480.620883][T14273] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 480.779089][T13535] hfsplus: b-tree write err: -5, ino 25 [ 480.788453][T13535] hfsplus: b-tree write err: -5, ino 4 [ 480.804822][T13535] hfsplus: b-tree write err: -5, ino 2 [ 480.829767][T14295] loop4: detected capacity change from 0 to 32768 [ 480.845556][T14295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3007 (14295) [ 480.909667][T14295] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.949916][T14295] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 480.958976][T14295] BTRFS info (device loop4): using free space tree [ 480.978107][T14288] loop5: detected capacity change from 0 to 32768 [ 481.043753][T14306] vivid-000: disconnect [ 481.048779][T14303] vivid-000: reconnect [ 481.113544][T14288] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 481.197278][T14295] BTRFS info (device loop4): enabling ssd optimizations [ 481.208913][T14325] loop0: detected capacity change from 0 to 128 [ 481.211043][T14295] BTRFS info (device loop4): auto enabling async discard [ 481.474775][T14288] XFS (loop5): Ending clean mount [ 481.614390][T14338] loop0: detected capacity change from 0 to 256 [ 481.718671][T14338] FAT-fs (loop0): Directory bread(block 64) failed [ 481.756987][T14338] FAT-fs (loop0): Directory bread(block 65) failed [ 481.775328][T10901] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 481.804765][T14338] FAT-fs (loop0): Directory bread(block 66) failed [ 481.811758][T14338] FAT-fs (loop0): Directory bread(block 67) failed [ 481.820113][T14338] FAT-fs (loop0): Directory bread(block 68) failed [ 481.826794][T14338] FAT-fs (loop0): Directory bread(block 69) failed [ 481.834515][T14338] FAT-fs (loop0): Directory bread(block 70) failed [ 481.851459][T14338] FAT-fs (loop0): Directory bread(block 71) failed [ 481.911785][T14338] FAT-fs (loop0): Directory bread(block 72) failed [ 481.918408][T14338] FAT-fs (loop0): Directory bread(block 73) failed [ 482.137767][T10630] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.179607][T14343] netlink: 'syz.5.3018': attribute type 2 has an invalid length. [ 482.183927][T13535] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 482.319043][T14345] loop6: detected capacity change from 0 to 1024 [ 482.488687][T14349] loop0: detected capacity change from 0 to 512 [ 482.586264][ T27] audit: type=1800 audit(1775918813.896:427): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3020" name="file1" dev="loop6" ino=26 res=0 errno=0 [ 482.691653][ T49] hfsplus: b-tree write err: -5, ino 25 [ 482.697662][ T49] hfsplus: b-tree write err: -5, ino 4 [ 482.709426][T14349] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.3021: iget: bad extra_isize 50264 (inode size 256) [ 482.724591][T14354] netlink: 'syz.5.3023': attribute type 16 has an invalid length. [ 482.769632][T14354] netlink: 64130 bytes leftover after parsing attributes in process `syz.5.3023'. [ 482.788958][ T49] hfsplus: b-tree write err: -5, ino 2 [ 482.819560][ T49] hfsplus: b-tree write err: -5, ino 26 [ 482.840070][T14349] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3021: couldn't read orphan inode 15 (err -117) [ 482.867488][T14349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.944877][T14349] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.3021: Directory hole found for htree leaf block 0 [ 483.130977][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.430047][T14368] loop6: detected capacity change from 0 to 2048 [ 483.467566][T14368] NILFS (loop6): invalid segment: Magic number mismatch [ 483.495392][T14368] NILFS (loop6): trying rollback from an earlier position [ 483.556459][T14368] NILFS (loop6): recovery complete [ 483.579771][T14371] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.798918][T14374] loop0: detected capacity change from 0 to 256 [ 483.863102][T14374] exfat: Deprecated parameter 'utf8' [ 483.943258][T14374] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 484.125996][T14379] loop6: detected capacity change from 0 to 4096 [ 484.155768][T14379] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 484.252070][T14379] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 484.305933][T14379] ntfs3: loop6: failed to convert "c46c" to iso8859-14 [ 484.371518][T14358] loop4: detected capacity change from 0 to 32768 [ 484.412690][T14358] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3019 (14358) [ 484.464994][T14358] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 484.518520][T14358] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 484.560591][T14358] BTRFS info (device loop4): using free space tree [ 484.742166][T14358] BTRFS info (device loop4): enabling ssd optimizations [ 484.763233][T14358] BTRFS info (device loop4): auto enabling async discard [ 484.833643][T14358] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 484.928787][T10630] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 485.445664][T14381] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 485.504865][T14414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.625018][T13748] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 485.996925][T14403] set_capacity_and_notify: 2 callbacks suppressed [ 485.996945][T14403] loop0: detected capacity change from 0 to 32768 [ 486.118530][T14423] loop5: detected capacity change from 0 to 512 [ 486.204798][T14423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.244855][T14423] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 486.451121][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.757602][T14432] loop5: detected capacity change from 0 to 1024 [ 486.809326][T14416] loop6: detected capacity change from 0 to 32768 [ 486.851455][T14432] hfsplus: bad catalog entry type [ 486.878146][T14416] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 486.952407][ T4523] hfsplus: b-tree write err: -5, ino 25 [ 486.958792][ T4523] hfsplus: b-tree write err: -5, ino 4 [ 486.965947][ T4523] hfsplus: b-tree write err: -5, ino 2 [ 487.102852][T14416] XFS (loop6): Ending clean mount [ 487.378571][T13075] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 488.024182][T14451] loop4: detected capacity change from 0 to 32768 [ 488.178639][T14455] loop5: detected capacity change from 0 to 40427 [ 488.238161][T14455] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 488.271954][T14455] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 488.315596][T14455] F2FS-fs (loop5): Found nat_bits in checkpoint [ 488.421852][T14455] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 488.433179][T14455] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 488.552389][ T5774] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 488.609326][T10901] syz-executor: attempt to access beyond end of device [ 488.609326][T10901] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.656519][T10901] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 488.767471][ T5774] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 488.788098][ T5774] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.814476][ T5774] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.846246][ T5774] usb 5-1: config 0 interface 0 has no altsetting 0 [ 488.860635][ T5774] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 488.881447][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.919198][ T5774] usb 5-1: config 0 descriptor?? [ 489.354461][ T5774] sony 0003:054C:0374.0025: nested delimiters [ 489.379525][ T5774] sony 0003:054C:0374.0025: item 0 4 2 10 parsing failed [ 489.398626][ T5774] sony 0003:054C:0374.0025: parse failed [ 489.419716][ T5774] sony: probe of 0003:054C:0374.0025 failed with error -22 [ 489.563948][ T5774] usb 5-1: USB disconnect, device number 12 [ 490.071610][T14494] overlayfs: missing 'lowerdir' [ 490.216119][T14499] loop0: detected capacity change from 0 to 256 [ 490.249869][T14499] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.294044][T14479] loop6: detected capacity change from 0 to 32768 [ 490.308621][ T27] audit: type=1800 audit(1775918821.606:428): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3076" name="file1" dev="loop0" ino=1048941 res=0 errno=0 [ 490.320701][T14499] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 490.359833][T14499] FAT-fs (loop0): Filesystem has been set read-only [ 490.398836][T14479] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.3067 (14479) [ 490.402053][T14503] loop5: detected capacity change from 0 to 2048 [ 490.473857][T14503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.504718][T14479] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 490.548455][T14479] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 490.593718][T14479] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 490.649487][T14479] BTRFS info (device loop6): use zstd compression, level 3 [ 490.656835][T14479] BTRFS info (device loop6): using free space tree [ 490.714412][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.922500][T14479] BTRFS info (device loop6): enabling ssd optimizations [ 490.950890][T14479] BTRFS info (device loop6): auto enabling async discard [ 491.476642][T14539] loop4: detected capacity change from 0 to 1024 [ 491.551158][T13535] hfsplus: b-tree write err: -5, ino 25 [ 491.582035][T13535] hfsplus: b-tree write err: -5, ino 4 [ 491.606445][T13535] hfsplus: b-tree write err: -5, ino 2 [ 491.881694][T13075] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 491.902908][T14544] loop4: detected capacity change from 0 to 256 [ 492.015098][T14544] FAT-fs (loop4): Directory bread(block 64) failed [ 492.022427][T14544] FAT-fs (loop4): Directory bread(block 65) failed [ 492.029101][T14544] FAT-fs (loop4): Directory bread(block 66) failed [ 492.038373][T14544] FAT-fs (loop4): Directory bread(block 67) failed [ 492.112718][T14544] FAT-fs (loop4): Directory bread(block 68) failed [ 492.119343][T14544] FAT-fs (loop4): Directory bread(block 69) failed [ 492.169720][T14544] FAT-fs (loop4): Directory bread(block 70) failed [ 492.176411][T14544] FAT-fs (loop4): Directory bread(block 71) failed [ 492.246213][T14544] FAT-fs (loop4): Directory bread(block 72) failed [ 492.264128][T14544] FAT-fs (loop4): Directory bread(block 73) failed [ 492.905010][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3093'. [ 493.074146][T14546] loop0: detected capacity change from 0 to 32768 [ 493.208573][T14548] loop5: detected capacity change from 0 to 32768 [ 493.414705][ T113] ERROR: (device loop5): diUpdatePMap: the iag is outside the map [ 493.414705][ T113] [ 493.450073][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 493.685581][T14552] loop4: detected capacity change from 0 to 32768 [ 493.742542][T14552] (syz.4.3092,14552,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 493.781898][T14552] (syz.4.3092,14552,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 493.877062][T14552] JBD2: Ignoring recovery information on journal [ 494.023115][T14552] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 494.287740][T14558] loop0: detected capacity change from 0 to 40427 [ 494.346526][T14558] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 494.397186][T14558] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 494.424283][T10630] ocfs2: Unmounting device (7,4) on (node local) [ 494.439858][T14558] F2FS-fs (loop0): heap/no_heap options were deprecated [ 494.465087][T14558] F2FS-fs (loop0): invalid crc value [ 494.507733][T14556] loop6: detected capacity change from 0 to 40427 [ 494.525959][T14558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 494.556536][T14556] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 494.603652][T14556] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 494.634572][T14556] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 494.671215][T14556] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 494.682231][T14556] F2FS-fs (loop6): Image doesn't support compression [ 494.710054][T14556] F2FS-fs (loop6): invalid crc value [ 494.715786][T14558] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 494.725981][T14556] F2FS-fs (loop6): Found nat_bits in checkpoint [ 494.732640][T14558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 494.868815][T14556] F2FS-fs (loop6): Start checkpoint disabled! [ 494.905106][T14556] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 494.922025][T14556] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 495.190964][T14577] loop4: detected capacity change from 0 to 1024 [ 495.331186][ T4523] hfsplus: b-tree write err: -5, ino 25 [ 495.344236][ T49] kworker/u4:3: attempt to access beyond end of device [ 495.344236][ T49] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 495.354609][ T4523] hfsplus: b-tree write err: -5, ino 4 [ 495.361213][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 495.383781][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 495.414500][ T4523] hfsplus: b-tree write err: -5, ino 2 [ 496.523619][T14602] [U] [ 496.668695][T14607] syz.5.3113 (14607): /proc/14606/oom_adj is deprecated, please use /proc/14606/oom_score_adj instead. [ 497.005703][T14613] loop5: detected capacity change from 0 to 4096 [ 497.030672][T14613] EXT4-fs: inline encryption not supported [ 497.102344][T14613] EXT4-fs (loop5): Test dummy encryption mode enabled [ 497.132551][T14613] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 497.160243][T14613] System zones: 0-5 [ 497.191761][T14613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.401652][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.234127][T14646] loop0: detected capacity change from 0 to 128 [ 498.576590][T14638] loop5: detected capacity change from 0 to 32768 [ 498.629095][T14638] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 498.733351][T14638] XFS (loop5): Ending clean mount [ 498.850024][ T1188] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 498.884884][T10901] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 499.108537][ T1188] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 499.118478][ T1188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.169561][ T1188] usb 7-1: Product: syz [ 499.173804][ T1188] usb 7-1: Manufacturer: syz [ 499.178467][ T1188] usb 7-1: SerialNumber: syz [ 499.206957][T14658] loop0: detected capacity change from 0 to 32768 [ 499.219348][ T1188] usb 7-1: config 0 descriptor?? [ 499.501243][T14663] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3134'. [ 499.526759][T14663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3134'. [ 499.845220][ T1188] usb 7-1: Firmware version (0.0) predates our first public release. [ 499.864656][ T1188] usb 7-1: Please update to version 0.2 or newer [ 499.999034][ T1188] usb 7-1: USB disconnect, device number 5 [ 500.239703][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 500.430979][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 500.457467][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 500.466934][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.483638][ T42] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 500.507547][ T42] usb 6-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice= 0.40 [ 500.524285][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.533712][ T42] usb 6-1: Product: syz [ 500.537935][ T42] usb 6-1: Manufacturer: syz [ 500.543393][ T42] usb 6-1: SerialNumber: syz [ 500.801638][ T42] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 500.818685][ T42] usb 6-1: MIDIStreaming interface descriptor not found [ 500.831060][ T42] usb 6-1: 0:2 : does not exist [ 500.926613][ T42] usb 6-1: USB disconnect, device number 11 [ 501.006049][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.030333][ T1188] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 501.067835][T14686] loop6: detected capacity change from 0 to 32768 [ 501.106169][T14686] JBD2: Ignoring recovery information on journal [ 501.198985][T14686] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 501.231935][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.245146][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.256043][ T1188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.270588][ T1188] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.280558][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.307707][ T1188] usb 1-1: config 0 descriptor?? [ 501.617126][T13075] ocfs2: Unmounting device (7,6) on (node local) [ 501.748346][ T1188] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 501.833333][ T1188] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 501.863662][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.873279][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.984992][ T23] usb 1-1: USB disconnect, device number 27 [ 502.067484][T14700] fido_id[14700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 502.426821][T14715] loop5: detected capacity change from 0 to 1024 [ 502.537096][T13535] hfsplus: b-tree write err: -5, ino 25 [ 502.549877][T13535] hfsplus: b-tree write err: -5, ino 4 [ 502.555712][T13535] hfsplus: b-tree write err: -5, ino 2 [ 503.259070][T14722] loop5: detected capacity change from 0 to 32768 [ 503.294408][T14722] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.3158 (14722) [ 503.367940][T14722] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 503.415787][T14722] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 503.429976][T14722] BTRFS info (device loop5): setting nodatacow, compression disabled [ 503.446373][T14722] BTRFS info (device loop5): turning on flush-on-commit [ 503.466929][T14722] BTRFS info (device loop5): using free space tree [ 503.477349][T14734] loop6: detected capacity change from 0 to 1024 [ 503.505125][T14734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.608227][T14734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.643215][T14722] BTRFS info (device loop5): enabling ssd optimizations [ 503.659642][T14722] BTRFS info (device loop5): auto enabling async discard [ 503.824564][T13075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.899654][ T27] audit: type=1800 audit(1775918835.186:429): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3158" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 503.944345][T14761] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.3167'. [ 504.136607][T10901] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 504.255627][T14769] loop0: detected capacity change from 0 to 64 [ 504.919587][ T5831] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 504.977176][T14783] loop5: detected capacity change from 0 to 128 [ 504.998208][T14783] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 505.014179][T14783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.109588][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 505.122301][ T5831] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.159594][ T5831] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.186918][ T5831] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.204492][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.215234][ T5831] usb 7-1: Product: syz [ 505.230710][ T5831] usb 7-1: Manufacturer: syz [ 505.235518][ T5831] usb 7-1: SerialNumber: syz [ 505.472762][ T5831] usb 7-1: 0:2 : does not exist [ 505.505767][ T5831] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 505.639859][ T5831] usb 7-1: USB disconnect, device number 6 [ 505.736154][T13748] udevd[13748]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.609150][T14829] loop0: detected capacity change from 0 to 1024 [ 506.699734][T13535] hfsplus: b-tree write err: -5, ino 25 [ 506.705603][T13535] hfsplus: b-tree write err: -5, ino 4 [ 506.716695][T13535] hfsplus: b-tree write err: -5, ino 2 [ 507.054543][T14842] loop6: detected capacity change from 0 to 256 [ 507.079153][T14842] exfat: Deprecated parameter 'utf8' [ 507.096271][T14842] exfat: Deprecated parameter 'namecase' [ 507.116465][T14844] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3201'. [ 507.130172][T14842] exfat: Deprecated parameter 'namecase' [ 507.166391][T14842] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 507.422565][T14848] loop5: detected capacity change from 0 to 8 [ 507.666003][T14836] loop0: detected capacity change from 0 to 32768 [ 507.713367][T14836] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 507.829955][T14836] XFS (loop0): Ending clean mount [ 507.873760][T14836] XFS (loop0): Quotacheck needed: Please wait. [ 508.067625][T14836] XFS (loop0): Quotacheck: Done. [ 508.173755][T14870] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3209'. [ 508.248955][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 509.405692][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3222'. [ 509.706577][T14905] loop0: detected capacity change from 0 to 2048 [ 509.724913][T14888] loop6: detected capacity change from 0 to 32768 [ 509.761097][T14888] JBD2: Ignoring recovery information on journal [ 509.819886][T14905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.856694][T14888] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 509.995937][T14888] (syz.6.3217,14888,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 510.174825][T14916] loop0: detected capacity change from 0 to 16 [ 510.191213][T13075] ocfs2: Unmounting device (7,6) on (node local) [ 510.201980][T14916] erofs: (device loop0): mounted with root inode @ nid 36. [ 510.359613][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 510.559682][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 510.572253][ T23] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 510.572291][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.572315][ T23] usb 6-1: Product: syz [ 510.572333][ T23] usb 6-1: Manufacturer: syz [ 510.572350][ T23] usb 6-1: SerialNumber: syz [ 510.575008][ T23] usb 6-1: config 0 descriptor?? [ 510.583291][ T23] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 510.583339][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 510.605129][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 510.610760][ T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 510.610821][ T23] usb 6-1: media controller created [ 510.695802][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.704527][T14924] delete_channel: no stack [ 510.710511][ T23] usb 6-1: selecting invalid altsetting 7 [ 510.769933][ T23] cxusb: set interface failed [ 510.769953][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 510.791815][T14913] cxusb: i2c wr: len=80 is too big! [ 510.791815][T14913] [ 510.825586][ T23] DVB: Unable to find symbol lgdt330x_attach() [ 510.825615][ T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 510.942018][ T23] rc_core: IR keymap rc-dvico-portable not found [ 510.942040][ T23] Registered IR keymap rc-empty [ 510.944560][ T23] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 510.947056][ T23] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input36 [ 510.949912][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 510.949938][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 510.958725][ T23] usb 6-1: USB disconnect, device number 12 [ 511.063547][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 511.139555][ T5813] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 511.329753][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 511.341458][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.381221][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 511.398888][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 511.414116][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 511.432407][ T5813] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 511.442382][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 511.461765][ T5813] usb 7-1: Product: syz [ 511.474906][ T5813] usb 7-1: Manufacturer: syz [ 511.489545][ T5813] usb 7-1: SerialNumber: syz [ 511.500421][ T5813] usb 7-1: config 0 descriptor?? [ 511.551011][ T5813] usb 7-1: no audio or video endpoints found [ 511.737574][ T5813] usb 7-1: USB disconnect, device number 7 [ 511.766236][T14943] loop5: detected capacity change from 0 to 256 [ 512.278022][T14951] loop0: detected capacity change from 0 to 4096 [ 512.318376][T14951] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 512.520502][T14951] ntfs3: loop0: failed to convert "c46c" to default [ 513.119802][ T1188] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 513.163932][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.177588][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.187978][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.198880][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.208933][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 513.216463][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.337176][ T1188] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 513.391143][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.418940][ T1188] usb 1-1: Product: syz [ 513.427557][T14975] overlayfs: conflicting options: nfs_export=on,index=off [ 513.429018][ T1188] usb 1-1: Manufacturer: syz [ 513.459199][ T1188] usb 1-1: SerialNumber: syz [ 513.481044][ T1188] usb 1-1: config 0 descriptor?? [ 513.506292][ T1188] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 513.632167][T14979] loop5: detected capacity change from 0 to 2048 [ 513.755225][T14979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.778927][T14979] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.860115][T14989] loop6: detected capacity change from 0 to 512 [ 513.960116][T14989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.967466][T10901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.973425][T14989] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.035879][T14969] chnl_net:caif_netlink_parms(): no params data found [ 514.082426][T13075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.120476][ T1188] gspca_stk1135: reg_w 0x3 err -71 [ 514.126842][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.146030][ T1188] gspca_stk1135: Sensor write failed [ 514.152081][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.158494][ T1188] gspca_stk1135: Sensor write failed [ 514.164611][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.171420][ T1188] gspca_stk1135: Sensor read failed [ 514.176720][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.183907][ T1188] gspca_stk1135: Sensor read failed [ 514.189184][ T1188] gspca_stk1135: Detected sensor type unknown (0x0) [ 514.196432][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.203508][ T1188] gspca_stk1135: Sensor read failed [ 514.208945][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.217403][ T1188] gspca_stk1135: Sensor read failed [ 514.223070][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.229780][ T1188] gspca_stk1135: Sensor write failed [ 514.235137][ T1188] gspca_stk1135: serial bus timeout: status=0x00 [ 514.242494][ T1188] gspca_stk1135: Sensor write failed [ 514.247913][ T1188] stk1135: probe of 1-1:0.0 failed with error -71 [ 514.260652][ T1188] usb 1-1: USB disconnect, device number 28 [ 514.300191][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3261'. [ 514.389088][T14998] ptrace attach of "./syz-executor exec"[10901] was attempted by ""[14998] [ 514.466579][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.484411][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.499976][T14969] bridge_slave_0: entered allmulticast mode [ 514.532255][T14969] bridge_slave_0: entered promiscuous mode [ 514.550273][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.567948][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.587730][T14969] bridge_slave_1: entered allmulticast mode [ 514.601245][T14969] bridge_slave_1: entered promiscuous mode [ 514.752086][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.790874][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.011076][T14969] team0: Port device team_slave_0 added [ 515.047829][T14969] team0: Port device team_slave_1 added [ 515.055752][T15014] loop5: detected capacity change from 0 to 256 [ 515.077849][T15014] exfat: Deprecated parameter 'namecase' [ 515.116878][T15014] exfat: Deprecated parameter 'namecase' [ 515.134704][T15014] exfat: Deprecated parameter 'namecase' [ 515.171101][T15014] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 515.192660][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.218759][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.256874][T15014] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 515.279595][ T51] Bluetooth: hci0: command tx timeout [ 515.287353][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.310055][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.317064][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.345696][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.553494][T14969] hsr_slave_0: entered promiscuous mode [ 515.611719][T14969] hsr_slave_1: entered promiscuous mode [ 515.643885][T14969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.659315][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3275'. [ 515.675276][T14969] Cannot create hsr debugfs directory [ 516.448665][T15046] loop0: detected capacity change from 0 to 4096 [ 516.549636][T15046] NILFS (loop0): invalid segment: Checksum error in segment payload [ 516.557719][T15046] NILFS (loop0): trying rollback from an earlier position [ 516.573155][T14969] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 516.608185][T14969] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 516.638744][T15046] NILFS (loop0): recovery complete [ 516.652181][T14969] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 516.676994][T15049] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.697067][T14969] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 517.061715][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.142686][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.184471][T15051] loop0: detected capacity change from 0 to 256 [ 517.193679][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.200937][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.253184][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.260433][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.267935][T15051] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 517.327716][T15044] loop5: detected capacity change from 0 to 32768 [ 517.359917][ T51] Bluetooth: hci0: command tx timeout [ 517.464356][T15048] loop6: detected capacity change from 0 to 32768 [ 517.492093][T14969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.551404][T14969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.580830][T15048] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 517.826566][T15048] XFS (loop6): Ending clean mount [ 517.885210][T15048] XFS (loop6): Quotacheck needed: Please wait. [ 518.091745][T15048] XFS (loop6): Quotacheck: Done. [ 518.258802][T13075] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.312058][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.688846][ T42] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 518.879951][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 518.897044][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.940085][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.971424][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 519.015316][ T42] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 519.035620][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.059280][ T42] usb 1-1: config 0 descriptor?? [ 519.341216][T14969] veth0_vlan: entered promiscuous mode [ 519.401384][T14969] veth1_vlan: entered promiscuous mode [ 519.442806][ T51] Bluetooth: hci0: command tx timeout [ 519.496955][ T42] kye 0003:0458:0087.0027: unknown main item tag 0xe [ 519.501494][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3299'. [ 519.505378][ T42] kye 0003:0458:0087.0027: unknown main item tag 0x0 [ 519.522353][ T42] kye 0003:0458:0087.0027: unknown main item tag 0x5 [ 519.529294][ T42] kye 0003:0458:0087.0027: unknown main item tag 0xe [ 519.537142][ T42] kye 0003:0458:0087.0027: unknown global tag 0xe [ 519.548378][ T42] kye 0003:0458:0087.0027: item 0 1 1 14 parsing failed [ 519.570743][ T42] kye 0003:0458:0087.0027: parse failed [ 519.577746][ T42] kye: probe of 0003:0458:0087.0027 failed with error -22 [ 519.587309][T14969] veth0_macvtap: entered promiscuous mode [ 519.636114][T14969] veth1_macvtap: entered promiscuous mode [ 519.706006][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.720535][ T5774] usb 1-1: USB disconnect, device number 29 [ 519.744836][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.769874][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.783707][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.798190][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.828469][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.844961][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.866043][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.885398][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.933312][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.957086][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.968386][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.990478][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.008983][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.029749][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.045983][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.070453][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.093255][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.108756][T14969] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.108800][T14969] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.108828][T14969] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.108855][T14969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.316000][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.367481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.414306][T15111] loop0: detected capacity change from 0 to 256 [ 520.458613][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.497040][T15111] FAT-fs (loop0): Directory bread(block 64) failed [ 520.501383][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.528583][T15111] FAT-fs (loop0): Directory bread(block 65) failed [ 520.594939][T15111] FAT-fs (loop0): Directory bread(block 66) failed [ 520.609438][T15111] FAT-fs (loop0): Directory bread(block 67) failed [ 520.616191][T15111] FAT-fs (loop0): Directory bread(block 68) failed [ 520.639607][T15111] FAT-fs (loop0): Directory bread(block 69) failed [ 520.646690][T15111] FAT-fs (loop0): Directory bread(block 70) failed [ 520.660042][T15111] FAT-fs (loop0): Directory bread(block 71) failed [ 520.667144][T15111] FAT-fs (loop0): Directory bread(block 72) failed [ 520.684547][T15111] FAT-fs (loop0): Directory bread(block 73) failed [ 520.800468][ T5815] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 521.008059][ T5815] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 521.037690][ T5815] usb 6-1: config 0 has no interface number 0 [ 521.054848][ T5815] usb 6-1: config 0 interface 36 altsetting 215 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.079523][ T5815] usb 6-1: config 0 interface 36 altsetting 215 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.110118][ T5815] usb 6-1: config 0 interface 36 has no altsetting 0 [ 521.131084][ T5815] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 521.150546][ T5815] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 521.176874][ T5815] usb 6-1: Manufacturer: syz [ 521.200835][ T5815] usb 6-1: config 0 descriptor?? [ 521.246898][T15122] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 521.253775][T15122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.275014][T15126] loop0: detected capacity change from 0 to 512 [ 521.312375][T15122] vhci_hcd vhci_hcd.0: Device attached [ 521.334165][T15126] EXT4-fs (loop0): orphan cleanup on readonly fs [ 521.418868][T15126] EXT4-fs error (device loop0): ext4_find_extent:945: inode #4: comm syz.0.3309: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 521.514468][T15126] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 521.520078][ T51] Bluetooth: hci0: command tx timeout [ 521.524887][T15126] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 521.549989][ T7050] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 521.555862][T15126] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 521.571957][T15126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.629689][ T42] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 521.698228][ T5815] uclogic 0003:256C:006D.0028: interface is invalid, ignoring [ 521.733261][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.734008][T15117] loop7: detected capacity change from 0 to 32768 [ 521.752261][ T7050] usb 7-1: config 0 has no interfaces? [ 521.777488][ T7050] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 521.796913][ T7050] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 521.835352][ T7050] usb 7-1: Manufacturer: syz [ 521.845424][ T7050] usb 7-1: config 0 descriptor?? [ 521.863646][T15117] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 521.909971][ T7050] usb 6-1: USB disconnect, device number 13 [ 521.994969][T15117] XFS (loop7): Ending clean mount [ 522.089097][ T23] usb 7-1: USB disconnect, device number 8 [ 522.095996][T15123] vhci_hcd: connection closed [ 522.115699][ T1088] vhci_hcd: stop threads [ 522.154554][ T1088] vhci_hcd: release socket [ 522.168327][T14969] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 522.182420][ T1088] vhci_hcd: disconnect device [ 522.241614][ T42] usb 45-1: device descriptor read/64, error -71 [ 522.340234][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.461735][ T42] vhci_hcd: vhci_device speed not set [ 522.669693][ T27] audit: type=1326 audit(1775918853.976:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 522.718285][ T27] audit: type=1326 audit(1775918854.016:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 522.741081][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.809440][ T27] audit: type=1326 audit(1775918854.016:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 522.913500][ T27] audit: type=1326 audit(1775918854.016:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 522.954299][ T27] audit: type=1326 audit(1775918854.016:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 522.977301][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.002267][ T27] audit: type=1326 audit(1775918854.016:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 523.025001][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.044048][ T27] audit: type=1326 audit(1775918854.016:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 523.110361][ T27] audit: type=1326 audit(1775918854.406:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 523.129509][ T23] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 523.143773][ T27] audit: type=1326 audit(1775918854.406:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefb59c819 code=0x7ffc0000 [ 523.183405][T15164] loop7: detected capacity change from 0 to 64 [ 523.352218][ T23] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 523.372563][ T23] usb 7-1: config 0 has no interface number 0 [ 523.389047][ T23] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 523.424570][ T23] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 523.437533][ T23] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 523.457760][ T23] usb 7-1: Manufacturer: syz [ 523.469096][ T23] usb 7-1: SerialNumber: syz [ 523.498434][T15170] vim2m vim2m.0: vidioc_s_fmt queue busy [ 523.502875][ T23] usb 7-1: config 0 descriptor?? [ 523.892595][T15180] loop5: detected capacity change from 0 to 128 [ 523.918965][T15180] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 523.982515][T15180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.154195][ T23] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 524.187481][ T23] usb 7-1: USB disconnect, device number 9 [ 524.275529][T15188] loop7: detected capacity change from 0 to 128 [ 524.340957][T15188] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.405310][T15188] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 524.603841][T14969] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.193807][T15215] loop5: detected capacity change from 0 to 1024 [ 525.219860][T15222] loop0: detected capacity change from 0 to 256 [ 525.240708][T15215] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.269822][T15215] EXT4-fs (loop5): blocks per group (131072) and clusters per group (8192) inconsistent [ 525.355193][T15215] ptrace attach of ""[15219] was attempted by "./syz-executor exec"[15215] [ 525.423193][T15222] FAT-fs (loop0): Directory bread(block 64) failed [ 525.462184][T15222] FAT-fs (loop0): Directory bread(block 65) failed [ 525.468934][T15222] FAT-fs (loop0): Directory bread(block 66) failed [ 525.486121][T15224] loop7: detected capacity change from 0 to 2048 [ 525.505847][T15222] FAT-fs (loop0): Directory bread(block 67) failed [ 525.537760][T15222] FAT-fs (loop0): Directory bread(block 68) failed [ 525.554774][T15222] FAT-fs (loop0): Directory bread(block 69) failed [ 525.575931][T15222] FAT-fs (loop0): Directory bread(block 70) failed [ 525.605038][T15224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.619932][T15222] FAT-fs (loop0): Directory bread(block 71) failed [ 525.626745][T15222] FAT-fs (loop0): Directory bread(block 72) failed [ 525.676076][T15222] FAT-fs (loop0): Directory bread(block 73) failed [ 525.719492][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 525.772746][T14969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.807953][T15222] FAT-fs (loop0): Filesystem has been set read-only [ 525.871519][T15222] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 525.917142][T15232] loop5: detected capacity change from 0 to 2048 [ 525.937500][ T9] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 525.981073][ T9] usb 7-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 526.025711][T15233] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.039719][ T9] usb 7-1: config 160 has no interface number 0 [ 526.046179][ T9] usb 7-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.112788][ T9] usb 7-1: config 160 interface 200 has no altsetting 0 [ 526.150207][ T9] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 526.203824][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.249696][ T9] usb 7-1: Product: syz [ 526.268669][ T9] usb 7-1: Manufacturer: syz [ 526.288118][ T9] usb 7-1: SerialNumber: syz [ 526.567010][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3352'. [ 526.635247][ T9] usb 7-1: USB disconnect, device number 10 [ 526.703424][ T1088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.952432][ T1088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.122253][ T1088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.458667][ T1088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.955544][ T1088] tipc: Disabling bearer [ 528.003965][ T1088] tipc: Left network mode [ 528.436363][T15299] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 528.464095][T15299] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 528.482783][T15299] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 528.517464][T15299] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 528.543605][T15299] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 528.573725][T15299] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 528.600298][T15299] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 528.620086][T15299] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 529.063907][T15277] loop5: detected capacity change from 0 to 32768 [ 529.346450][T15320] Bluetooth: MGMT ver 1.22 [ 529.402600][T15280] loop7: detected capacity change from 0 to 40427 [ 529.461706][T15280] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x7ffff [ 529.490185][T15280] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0xe4 [ 529.530742][T15280] F2FS-fs (loop7): invalid crc value [ 529.603517][T15280] F2FS-fs (loop7): Found nat_bits in checkpoint [ 529.766861][T15280] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 529.838557][T15280] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 530.097399][T14969] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 530.106132][T15340] loop6: detected capacity change from 0 to 256 [ 530.159985][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 530.240314][T15340] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 530.370152][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 530.377931][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.424645][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.473398][ T9] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 530.498945][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.553453][ T9] usb 6-1: config 0 descriptor?? [ 530.973463][ T9] hid (null): bogus close delimiter [ 530.995827][ T9] nintendo 0003:057E:200E.0029: bogus close delimiter [ 531.004202][ T9] nintendo 0003:057E:200E.0029: item 0 2 2 10 parsing failed [ 531.016662][ T9] nintendo 0003:057E:200E.0029: HID parse failed [ 531.028592][ T9] nintendo 0003:057E:200E.0029: probe - fail = -22 [ 531.036061][ T9] nintendo: probe of 0003:057E:200E.0029 failed with error -22 [ 531.167952][ T1088] hsr_slave_0: left promiscuous mode [ 531.198798][ T1088] hsr_slave_1: left promiscuous mode [ 531.200091][ T5815] usb 6-1: USB disconnect, device number 14 [ 531.218108][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.243689][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.282713][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.323554][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.345568][ T1088] bridge_slave_1: left allmulticast mode [ 531.372630][ T1088] bridge_slave_1: left promiscuous mode [ 531.378503][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.411339][ T1088] bridge_slave_0: left allmulticast mode [ 531.417096][ T1088] bridge_slave_0: left promiscuous mode [ 531.433989][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.439709][ T51] Bluetooth: hci0: command tx timeout [ 531.472705][T15362] loop7: detected capacity change from 0 to 2048 [ 531.562072][T15362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.602949][T15362] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.648412][T15343] loop0: detected capacity change from 0 to 32768 [ 531.759116][ T1088] veth1_macvtap: left promiscuous mode [ 531.777831][T14969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.789964][ T1088] veth0_macvtap: left promiscuous mode [ 531.799634][ T1088] veth1_vlan: left promiscuous mode [ 531.807431][ T1088] veth0_vlan: left promiscuous mode [ 531.870524][T15343] read_mapping_page failed! [ 531.877140][T15343] ERROR: (device loop0): txCommit: [ 531.877140][T15343] [ 531.892013][T15343] ERROR: (device loop0): remounting filesystem as read-only [ 532.000984][T15373] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3404'. [ 532.078135][ T112] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 532.087577][ T112] ------------[ cut here ]------------ [ 532.093678][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 532.145806][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 532.151955][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 532.159196][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.169415][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 532.174425][ T112] Code: ff 45 73 07 0f 0b e8 58 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 d9 45 73 07 <0f> 0b e8 32 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 532.194333][ T112] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 532.200442][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: b1257bafcec34b00 [ 532.208455][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 532.216555][ T112] RBP: ffffc9000284a1b0 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 532.224648][ T112] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff88807ada4d90 [ 532.232747][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030ca7694 [ 532.240928][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 532.249903][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.256611][ T112] CR2: 000055558baaaa28 CR3: 000000002deb7000 CR4: 00000000003506e0 [ 532.264605][ T112] Call Trace: [ 532.267972][ T112] [ 532.270920][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 532.276140][ T112] jfs_lazycommit+0x56e/0xa70 [ 532.281007][ T112] ? txFreelock+0x5a0/0x5a0 [ 532.285532][ T112] ? do_task_dead+0xd0/0xd0 [ 532.290079][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 532.295198][ T112] kthread+0x2fa/0x390 [ 532.299272][ T112] ? txFreelock+0x5a0/0x5a0 [ 532.303799][ T112] ? kthread_blkcg+0xd0/0xd0 [ 532.308672][ T112] ret_from_fork+0x48/0x80 [ 532.313187][ T112] ? kthread_blkcg+0xd0/0xd0 [ 532.317968][ T112] ret_from_fork_asm+0x11/0x20 [ 532.322759][ T112] [ 532.325805][ T112] Modules linked in: [ 532.355721][ T112] ---[ end trace 0000000000000000 ]--- [ 532.362203][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 532.378725][ T112] Code: ff 45 73 07 0f 0b e8 58 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 d9 45 73 07 <0f> 0b e8 32 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 532.400172][ T112] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 532.406377][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: b1257bafcec34b00 [ 532.414926][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 532.423660][ T112] RBP: ffffc9000284a1b0 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 532.432451][ T112] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff88807ada4d90 [ 532.440608][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030ca7694 [ 532.450869][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 532.460198][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.466880][ T112] CR2: 000055558baaaa28 CR3: 0000000030d75000 CR4: 00000000003506e0 [ 532.475080][ T112] Kernel panic - not syncing: Fatal exception [ 532.491622][ T112] Kernel Offset: disabled [ 532.496128][ T112] Rebooting in 86400 seconds..