last executing test programs: 6.770667897s ago: executing program 2 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583", @ANYBLOB="9a3f71a9fbe0eb5e1a2d53f7564fb8f396985989e9569c66d56d4878ce748481870c0efe3515d7005de66febfa71e303e51390064617188bfd2c03ba4a9e601c150132c38cdd76215451bfe9d3f3d894a2251c655b80c1bf4183de23ed1983cc6c286a9948f88db7ba51d5dea0a6a99a39bb75dd9e7bb1e18af7fa2589b70f31ba294262af2d6ad9ab547f558016192735746e7083b1d21acfdcbb752ddb4b6819267cd143fbb5b611b7e7076c17e1feeeafc4a93b829fcf5831079207981dc304e2c5b8a725b62bf88b"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000500)={0x0, 0x10, 0x4, @thr={0x0, &(0x7f0000000440)="ad1929fb5555879a3e6538132c9ee8de3c82e47cf09e838d6030044d2b4f2de38faaba21b133add2cf5dae5f2d49d34e9410f28cd776b293f25faaecf55c8c405f7738dfa7b5b73327268a2040825db5e4eac48f4171b8dc9fdfb3d0dd363374ef6bc752d550f50b376500232d68c0914de9666033f7fea5338b7e744d2479e0711b0432f3c8a462dc7f2679d77a8d59fb733ced"}}, &(0x7f0000000540)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000001700)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xffffffdb) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x7fffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 6.463881983s ago: executing program 0 (id=1178): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) 5.847449236s ago: executing program 2 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) sendmsg$nl_route(r0, 0x0, 0x40) 5.774175278s ago: executing program 3 (id=1182): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.900701426s ago: executing program 3 (id=1187): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fchownat(r1, &(0x7f0000002640)='./file2\x00', r2, r3, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8b26, 0x0) pread64(r1, &(0x7f0000002100)=""/171, 0xab, 0x9a) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973"], 0x0) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x10008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="9deea131e4b80fd7de607f179bf087d5c3202b903ee8ed64aa4b837ab0cae0a4480162b7a97299e9d50e2f251b78b018f3c0cc896e0185a0976d8cf652b8dd85578adca7e4c147a171a4a037fe72f07d8829fd07a33486e412e13796c086"], 0x1, 0x1f3, &(0x7f0000000400)="$eJzslb+LE0EUx7+zm9sfNvbXWHjgWbjZ7CnYHKyNlYXgj8NCMHiJRDdEki3cgKiNrb2dha3/gRBb/wiJgiiINmonjMyPzc4mbELUjcW9T/H2OzNvZ968Yd6AIIgjy4f3P6f8x/4nD4CPHbi6/7Nd+FiG/zvv28M3ly4ePLv58q07DfzybG65+YtzvmL9BoDJBRupbvO5X3b09yqsXHvXYOG07j8AQ6D1LVi4rnUHDDe0vmvogfAPgm4v6QS3B8mhEKEwLWEiYfbm4/v6hOHQiI8Z46NsfK+dJJ1hjUKsc3whc5Mvs/g8YN+IzzyvACrasMgfWrDQ0noPDFe0Pg83z41KibH/7UYxv710/w7+ctsfARQ93Toz64ilVI+HtX4H2EbOPhvnJ1/LEjakyE90A9vZsEDjn03IXaC+UMU1Xe4DfZXLQ+LiZ69jlIacR6q9XhhxxZCzeh4Xi5mf1U/+guGUUZ9UKXkuH4tm2r/fHGXjM71++46jncKzYXguaspCpOxC9Svqsy/r07G8zblf5eswBw/aaTp8Gr/aFh15O1K2XHEVlqx/FnZPYkv+IuYRYqvw+S7fTgXTh4THud61K4NHZagEQRC1cwJM1mRZl6WNwfVrMhvgPLr8n+MkCIIgCIIgCIIgCOLP+R0AAP//n29RNw==") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000600)={0x2020}, 0x2020) syz_usb_control_io$printer(r5, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x1af281) 4.822044888s ago: executing program 2 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0x3}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x48040) 4.754186819s ago: executing program 2 (id=1189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfff, 0x60200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000001800)={0x1, 0x0, 0x0, 0x7, {0x1294, 0x1, 0xa000, 0xf6b}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4.317471918s ago: executing program 3 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583", @ANYBLOB="9a3f71a9fbe0eb5e1a2d53f7564fb8f396985989e9569c66d56d4878ce748481870c0efe3515d7005de66febfa71e303e51390064617188bfd2c03ba4a9e601c150132c38cdd76215451bfe9d3f3d894a2251c655b80c1bf4183de23ed1983cc6c286a9948f88db7ba51d5dea0a6a99a39bb75dd9e7bb1e18af7fa2589b70f31ba294262af2d6ad9ab547f558016192735746e7083b1d21acfdcbb752ddb4b6819267cd143fbb5b611b7e7076c17e1feeeafc4a93b829fcf5831079207981dc304e2c5b8a725b62bf88b"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000500)={0x0, 0x10, 0x4, @thr={0x0, &(0x7f0000000440)="ad1929fb5555879a3e6538132c9ee8de3c82e47cf09e838d6030044d2b4f2de38faaba21b133add2cf5dae5f2d49d34e9410f28cd776b293f25faaecf55c8c405f7738dfa7b5b73327268a2040825db5e4eac48f4171b8dc9fdfb3d0dd363374ef6bc752d550f50b376500232d68c0914de9666033f7fea5338b7e744d2479e0711b0432f3c8a462dc7f2679d77a8d59fb733ced"}}, &(0x7f0000000540)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000001700)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xffffffdb) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x7fffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 3.75413726s ago: executing program 2 (id=1195): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) dup3(r0, r1, 0x0) 3.588526294s ago: executing program 3 (id=1196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x1, 0x10, 0x0) 3.482264146s ago: executing program 3 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) sendmsg$nl_route(r0, 0x0, 0x40) 3.253420391s ago: executing program 0 (id=1202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a0000fd400100"/53, @ANYRES32=0x0, @ANYBLOB="0000000000000000006ee900fe1800ff"], 0x4c}}, 0x0) 2.175415574s ago: executing program 0 (id=1208): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 2.146283455s ago: executing program 2 (id=1209): socket$kcm(0xa, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x4) 2.077530636s ago: executing program 3 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x30, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x30}}, 0x0) 2.030061617s ago: executing program 0 (id=1211): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x200000, &(0x7f0000000ec0)={[{@nouser_xattr}, {@user_xattr}, {@noacl}, {@resuid}, {@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x49e, &(0x7f0000001480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1.649211195s ago: executing program 1 (id=1213): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 1.574291527s ago: executing program 1 (id=1214): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x80900, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x8, 0x4, 0x40000000, 0x1ff, 0x21, 0xe}, &(0x7f0000000cc0)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x2, 0x6}, 0x0, 0x0, 0x0) 1.518308368s ago: executing program 1 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.518147088s ago: executing program 1 (id=1217): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x14) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 1.518060038s ago: executing program 4 (id=1218): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x4, 0x5a4, &(0x7f0000000640)="$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") 1.479844779s ago: executing program 1 (id=1219): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) dup3(r0, r1, 0x0) 1.4351287s ago: executing program 4 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) sendmsg$nl_route(r0, 0x0, 0x40) 982.44425ms ago: executing program 0 (id=1221): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0)="0ee27adfffd1e9c313e85be2f664540f9c2b4d88326e732ed23890d429f425e8d6b3", &(0x7f0000000100)=@udp6=r1, 0x1}, 0x20) 886.338542ms ago: executing program 0 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050007000000140004"], 0x58}}, 0x0) 512.039319ms ago: executing program 1 (id=1223): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfff, 0x60200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000001800)={0x1, 0x0, 0x0, 0x7, {0x1294, 0x1, 0xa000, 0xf6b}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 440.534801ms ago: executing program 4 (id=1224): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0xe, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 354.276283ms ago: executing program 4 (id=1225): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000023c0)={[{@nocompress}, {@cruft}, {@showassoc}, {@block={'block', 0x3d, 0x2000}}, {@mode={'mode', 0x3d, 0xa7c}}, {@sbsector={'sbsector', 0x3d, 0xfe}}, {@check_strict}]}, 0x80, 0x569, &(0x7f0000000200)="$eJzs3V1vE8sZwPFnQwKRK6GqrRCKAgzQi0QKZm2DkcUFbNdjZ8DetXbXKLlCEXFQhAMVoVKTG8QNbaX2Q3DbD9Hrfhl0PoKP9sV5tx1OcJzD+f8s2LF3dubZtbVPxvLOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMut2nbBkobx2itqMLca+M20OCVKZVvvr++3lxUWR/YrYsX/ZHZWrqcvXf/T/upr8X93ZD59Ni+z8WJWdn937feP/zg91d9+SMDnYntn981at9t5P+lAxujGlcHr6tozoW+aTl0rE/qqUi7b95droaqZhg5lNtJN5QbaifzgUvbOlpTOr/ptr151GlotuIuqUKk8ule07bJ6lm9pJwh97/6zfOgum0bDePWkTrw6rvMo/iA+N5GKtNNUamOz2ymN2oG4UuE0lYqjKhXtYrFQKBYL5YeVh49se/rYC/YRcqzG5D+0mKzvdOYGzm4qy//SECOetGVF1IkPV6oSiC/NAeszi0+ywn09tN+D+b+f5a/vr56TJP/fTJ/dHJT/B8Ryfo9t2ZFdeSNr0pWudOT9xCMa78OSw8e8Llo8MRJ+eSpGmuIkr6j4FfFFSUXKUhZbXsqy1CQUJTUx0hAtYe9j9l43k09XIFocicSXQJQsiCuLoqQgFalISZRoycuq+NIWT+pSFSdpZUM2k+NeGhLzXqXCwCq5/ueuI8UhLZH/cXbf69QNnFmvn/+HuHxu0QAAAAAAgHGwkm/f4/H/jNxISjXT0PakwwIAAAAAAN9Rr9frybxY8fhfRG6IxfgfAAAAAIAfjZVcY2eJSE5upaUNsZLLpfgSAAAAAACAH0Ry5f/NeJHMgXJLrL3pUhj/AwAAAADwg/jn4Dn2Z7MqrSvW/36SIJixPrVW/mxtOfGLzlY2ofuloy1GtTnratZIsihPZ89cPW9ls1/uT4KZ9vJ1Y9Rc/1YWgJV+ZbEfwJXTByD/lttpndvr6XK9vybtJVczDZ13/cbjgjjO1alIr0R/e7v5d0l2/19e86olG5vdTv7Vu+56cjA+xa182somUDw2j+KQWD4k8y0k11ycuMczyYUYWb+5tF+7/wY8FWdrKt186tR9PpHPckdEpvfr5g7v/2zcZyE/aO+zKApn3PPPcjetc3fhbro4IYriqCiKB6P45mNxyihKo6IofUMUlhyPAgAmZWNEFrKOJ/5fcK5Nsvv0KbL7Wf68kM+ykNZZmEtOrNNzJ5zR7VFndPuM2e2//Zsf7d0DaVCOjfv9z5Gs+iXe4MvAfsNG0YoP4aUPW3+Va9s7u/c2t9Zed1533haLpbL9wLZ7lqS7ITPJYkikAIDfrtH32BlZw3owYlT9h72fFOTllbyTrqzLUnK1QfKLgxNbzR34GcJSMmqNg83u03Jk1JpL0mR6h5elIaO6y8lVDv12i0PrHo6hNP43AgCAc3RnRB4+Tf5fGjHuPpzLh4+Ocwfu1gYAAMZDB1+tXPQPKwhM62WhUik40bJWge8+V4Gp1rUyXqQDd9nx6lq1Aj/yXb8RF16Yqg5V2G61/CBSNT9QLT80K8oSS1S4Gka6qULddLzIuGGroZ1QK9f3IseNVNWErmq1/9Iw4bIOko3DlnZNzbhOZHxPhX47cHVeqVBrtZUTSSuaqvYiUzNx0VOtwDSdYFW98BvtplZVHbqBaUV+2mC/L+PV/KCZNJuf9MEGAOCC2N7ZfbPW7Xbej7Ew6X0EAACHkaUBAAAAAAAAAAAAAAAAAAAAALj4zuP6PwpjL6z8v9e7AGFckMJluRBh/LoLI08dH8/lBAVgbH4OAAD//4J7Ulg=") 42.083389ms ago: executing program 4 (id=1226): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYRES8, @ANYRES8], 0x4, 0x337, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000740)='./file7\x00', 0x3142813, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) 0s ago: executing program 4 (id=1227): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@data_writeback}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@resv_level={'resv_level', 0x3d, 0x18}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@coherency_buffered}]}, 0x1, 0x4443, &(0x7f0000004480)="$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") kernel console output (not intermixed with test programs): ion mode enabled [ 39.048898][ T4690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.062030][ T4690] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 39.177119][ T4692] loop3: detected capacity change from 0 to 32768 [ 39.186618][ T4692] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 39.190425][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 39.306444][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 39.360164][ T4634] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 39.674888][ T4711] loop2: detected capacity change from 0 to 64 [ 39.720253][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 39.799054][ T4722] capability: warning: `syz.4.89' uses 32-bit capabilities (legacy support in use) [ 39.853906][ T4728] EXT4-fs: Ignoring removed i_version option [ 39.855087][ T4728] EXT4-fs: Ignoring removed nobh option [ 39.859727][ T4728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.875052][ T4728] EXT4-fs (loop2): 1 truncate cleaned up [ 39.876289][ T4728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.085521][ T4724] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 40.220119][ T4742] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.237155][ T4742] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.97: inode has both inline data and extents flags [ 40.256570][ T4634] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 40.262982][ T4742] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.97: couldn't read orphan inode 15 (err -117) [ 40.267276][ T4747] process 'syz.0.99' launched '/dev/fd/4' with NULL argv: empty string added [ 40.269405][ T4742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.600958][ T4769] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 40.635187][ T4634] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 40.690536][ T4412] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.714615][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 40.738384][ T4777] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 40.823378][ T4634] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.870710][ T4412] usb 1-1: Using ep0 maxpacket: 32 [ 40.968869][ T4412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.971599][ T4412] usb 1-1: config 0 has no interfaces? [ 40.975869][ T4412] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 40.977607][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.980120][ T4412] usb 1-1: Product: syz [ 40.983270][ T4412] usb 1-1: Manufacturer: syz [ 40.984028][ T4412] usb 1-1: SerialNumber: syz [ 40.995112][ T4412] usb 1-1: config 0 descriptor?? [ 41.074261][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 41.587253][ T4796] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 41.634614][ T4634] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 41.661343][ T4804] EXT4-fs: Ignoring removed i_version option [ 41.662532][ T4804] EXT4-fs: Ignoring removed nobh option [ 41.663806][ T4804] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.667551][ T4804] EXT4-fs (loop2): 1 truncate cleaned up [ 41.668852][ T4804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.788912][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.795363][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.963276][ T4816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.971928][ T4816] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.127: inode has both inline data and extents flags [ 41.974682][ T4816] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.127: couldn't read orphan inode 15 (err -117) [ 41.976706][ T4816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.230391][ T4827] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 42.275945][ T4634] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 42.338175][ T4831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 42.432373][ T4837] capability: warning: `syz.1.136' uses deprecated v2 capabilities in a way that may be insecure [ 42.526043][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 42.561774][ T4843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 42.698442][ T4849] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 42.750191][ T4634] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 42.767607][ T4855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'. [ 42.810698][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 42.921354][ T4866] Bluetooth: MGMT ver 1.22 [ 42.991224][ T4869] set_capacity_and_notify: 14 callbacks suppressed [ 42.991233][ T4869] loop3: detected capacity change from 0 to 512 [ 42.996623][ T4869] EXT4-fs: Ignoring removed i_version option [ 42.998755][ T4869] EXT4-fs: Ignoring removed nobh option [ 43.008013][ T4869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.014604][ T4869] EXT4-fs (loop3): 1 truncate cleaned up [ 43.015627][ T4869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.126778][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 43.239114][ T4882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.155'. [ 43.269917][ T4884] loop3: detected capacity change from 0 to 512 [ 43.286982][ T4884] EXT4-fs error (device loop3): __ext4_fill_super:5465: inode #2: comm syz.3.156: iget: checksum invalid [ 43.289345][ T4884] EXT4-fs (loop3): get root inode failed [ 43.292929][ T4884] EXT4-fs (loop3): mount failed [ 43.344347][ T4887] loop3: detected capacity change from 0 to 512 [ 43.354061][ T4887] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.360407][ T4887] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.157: inode has both inline data and extents flags [ 43.365635][ T4887] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.157: couldn't read orphan inode 15 (err -117) [ 43.373264][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.435887][ T4588] usb 1-1: USB disconnect, device number 3 [ 43.467712][ T4878] loop4: detected capacity change from 0 to 32768 [ 43.480745][ T4878] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 43.621588][ T4897] loop2: detected capacity change from 0 to 512 [ 43.623107][ T4897] EXT4-fs: Ignoring removed i_version option [ 43.624109][ T4897] EXT4-fs: Ignoring removed nobh option [ 43.625340][ T4897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.636374][ T4634] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 43.639094][ T4897] EXT4-fs (loop2): 1 truncate cleaned up [ 43.640267][ T4897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.726154][ T4903] loop0: detected capacity change from 0 to 164 [ 43.744331][ T4903] Unsupported NM flag settings (240) [ 43.753048][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 43.817530][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.819198][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.834170][ T4911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 44.130574][ T4376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.201772][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 44.310592][ T4376] usb 1-1: Using ep0 maxpacket: 32 [ 44.313005][ T4376] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.314579][ T4376] usb 1-1: config 0 has no interfaces? [ 44.317185][ T4376] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 44.318572][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.319963][ T4376] usb 1-1: Product: syz [ 44.326662][ T4376] usb 1-1: Manufacturer: syz [ 44.327634][ T4376] usb 1-1: SerialNumber: syz [ 44.347756][ T4915] loop3: detected capacity change from 0 to 32768 [ 44.349185][ T4376] usb 1-1: config 0 descriptor?? [ 44.363605][ T4915] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 44.420936][ T4925] loop2: detected capacity change from 0 to 512 [ 44.436643][ T4925] EXT4-fs: Ignoring removed i_version option [ 44.438695][ T4925] EXT4-fs: Ignoring removed nobh option [ 44.454092][ T4925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.468870][ T4925] EXT4-fs (loop2): 1 truncate cleaned up [ 44.469878][ T4925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.513527][ T4643] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 44.567184][ T4936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 44.576089][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 44.597091][ T4940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'. [ 44.637353][ T4944] loop4: detected capacity change from 0 to 512 [ 44.645953][ T4944] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.655670][ T4944] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.179: inode has both inline data and extents flags [ 44.666393][ T4944] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.179: couldn't read orphan inode 15 (err -117) [ 44.673660][ T4944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.151779][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.153403][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.245259][ T4951] loop1: detected capacity change from 0 to 32768 [ 45.250968][ T4951] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 45.296694][ T4634] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 45.344716][ T4965] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: i_blkno is 1089 [ 45.347283][ T4965] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 45.349104][ T4965] OCFS2: File system is now read-only. [ 45.350009][ T4965] (syz.2.186,4965,1):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 45.351996][ T4965] (syz.2.186,4965,1):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 45.353459][ T4965] (syz.2.186,4965,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 45.355019][ T4965] (syz.2.186,4965,1):ocfs2_initialize_super:2255 ERROR: status = -30 [ 45.356569][ T4965] (syz.2.186,4965,1):ocfs2_fill_super:1176 ERROR: status = -30 [ 45.396183][ T4970] EXT4-fs: Ignoring removed i_version option [ 45.397376][ T4970] EXT4-fs: Ignoring removed nobh option [ 45.398681][ T4970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.404831][ T4970] EXT4-fs (loop2): 1 truncate cleaned up [ 45.405999][ T4970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.424919][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 45.479584][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'. [ 45.491626][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 45.604697][ T4979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.192 (4979) [ 45.608509][ T4979] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 45.610231][ T4979] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 45.612129][ T4979] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 45.613567][ T4979] BTRFS info (device loop4): use lzo compression, level 0 [ 45.614718][ T4979] BTRFS info (device loop4): turning on async discard [ 45.615811][ T4979] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 45.617396][ T4979] BTRFS info (device loop4): trying to use backup root at mount time [ 45.618723][ T4979] BTRFS info (device loop4): disabling free space tree [ 45.619803][ T4979] BTRFS info (device loop4): enabling auto defrag [ 45.620908][ T4979] BTRFS info (device loop4): turning on flush-on-commit [ 45.622096][ T4979] BTRFS error (device loop4): cannot disable free space tree [ 45.624386][ T4979] BTRFS error (device loop4): open_ctree failed: -22 [ 45.629288][ T4981] Injecting memory failure for pfn 0x210d17 at process virtual address 0x20ffe000 [ 45.631580][ T4981] Memory failure: 0x210d17: recovery action for reserved kernel page: Ignored [ 45.659259][ T4634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4634) [ 45.800117][ T4995] EXT4-fs: Ignoring removed i_version option [ 45.801704][ T4995] EXT4-fs: Ignoring removed nobh option [ 45.805324][ T4995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.808698][ T4995] EXT4-fs (loop3): 1 truncate cleaned up [ 45.809685][ T4995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.829897][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 45.916138][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 45.929004][ T4990] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 45.969309][ T5002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.977905][ T4634] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 45.986388][ T5002] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.202: inode has both inline data and extents flags [ 45.989913][ T5002] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.202: couldn't read orphan inode 15 (err -117) [ 46.004656][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.348912][ T5021] EXT4-fs: Ignoring removed i_version option [ 46.353269][ T5021] EXT4-fs: Ignoring removed nobh option [ 46.355785][ T5021] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.362721][ T5021] EXT4-fs (loop1): 1 truncate cleaned up [ 46.365002][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.387795][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 46.446627][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 46.485410][ T5030] netlink: 11 bytes leftover after parsing attributes in process `syz.4.214'. [ 46.488068][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.489812][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.558635][ T5028] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 46.603931][ T4634] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 46.819414][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 46.848856][ T5041] binder: tried to use weak ref as strong ref [ 46.851290][ T5041] binder: 5039:5041 Acquire 1 refcount change on invalid ref 0 ret -22 [ 46.874973][ T4672] usb 1-1: USB disconnect, device number 4 [ 46.917012][ T5045] EXT4-fs: Ignoring removed i_version option [ 46.919909][ T5045] EXT4-fs: Ignoring removed nobh option [ 46.921853][ T5046] syz.3.220 uses obsolete (PF_INET,SOCK_PACKET) [ 46.933203][ T5045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.944779][ T5045] EXT4-fs (loop0): 1 truncate cleaned up [ 46.945919][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.559014][ T5058] __nla_validate_parse: 1 callbacks suppressed [ 47.559025][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 47.613149][ T5060] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.685153][ T5056] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 47.697008][ T5068] EXT4-fs (loop1): Test dummy encryption mode enabled [ 47.711944][ T5068] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.230: inode has both inline data and extents flags [ 47.719242][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.723944][ T5068] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.230: couldn't read orphan inode 15 (err -117) [ 47.733061][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.736744][ T5068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.767445][ T4634] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 47.772995][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 47.852059][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.002624][ T5081] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.014114][ T5079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 48.033081][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 48.101491][ T4672] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 48.126708][ T5088] set_capacity_and_notify: 18 callbacks suppressed [ 48.126716][ T5088] loop4: detected capacity change from 0 to 64 [ 48.175616][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 48.303476][ T4672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.306038][ T4672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.308354][ T4672] usb 1-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 48.309841][ T4672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.313165][ T5104] loop4: detected capacity change from 0 to 512 [ 48.317741][ T4672] usb 1-1: config 0 descriptor?? [ 48.319077][ T5104] EXT4-fs: Ignoring removed i_version option [ 48.320450][ T5104] EXT4-fs: Ignoring removed nobh option [ 48.331472][ T5104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.334806][ T5104] EXT4-fs (loop4): 1 truncate cleaned up [ 48.336037][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.357573][ T5097] loop2: detected capacity change from 0 to 32768 [ 48.368001][ T5097] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 48.418831][ T4634] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.719569][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 48.734477][ T4672] usbhid 1-1:0.0: can't add hid device: -71 [ 48.735689][ T4672] usbhid: probe of 1-1:0.0 failed with error -71 [ 48.738056][ T4672] usb 1-1: USB disconnect, device number 5 [ 48.794298][ T5112] loop1: detected capacity change from 0 to 2048 [ 48.806389][ T5112] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 48.819074][ T5112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.867944][ T5120] loop1: detected capacity change from 0 to 64 [ 48.953623][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 48.987841][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.990194][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.002697][ T5116] loop2: detected capacity change from 0 to 32768 [ 49.008155][ T5116] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.247 (5116) [ 49.016671][ T5116] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 49.018640][ T5116] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 49.020804][ T5116] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 49.022578][ T5116] BTRFS info (device loop2): use zstd compression, level 3 [ 49.023841][ T5116] BTRFS info (device loop2): using free space tree [ 49.058335][ T5116] BTRFS info (device loop2): enabling ssd optimizations [ 49.124395][ T5150] loop3: detected capacity change from 0 to 512 [ 49.130059][ T5150] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.171775][ T5150] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.255: inode has both inline data and extents flags [ 49.174522][ T5150] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.255: couldn't read orphan inode 15 (err -117) [ 49.176613][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.180827][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 49.219391][ T4327] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 49.236176][ T5154] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.256'. [ 49.341867][ T4588] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.347462][ T4588] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.400923][ T5157] loop0: detected capacity change from 0 to 4096 [ 49.536570][ T5157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.639117][ T5169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.260'. [ 49.667138][ T5172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.261'. [ 49.698348][ T5169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.260'. [ 49.768421][ T5182] loop2: detected capacity change from 0 to 512 [ 49.770140][ T5182] EXT4-fs: Ignoring removed i_version option [ 49.775455][ T5182] EXT4-fs: Ignoring removed nobh option [ 49.778367][ T5182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.790645][ T5182] EXT4-fs (loop2): 1 truncate cleaned up [ 49.791918][ T5182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.172637][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.174510][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.180017][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 50.227743][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 50.645853][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 50.763945][ T5219] loop3: detected capacity change from 0 to 128 [ 50.776840][ T5219] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 50.779118][ T5219] hpfs: filesystem error: improperly stopped [ 50.780203][ T5219] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 50.783810][ T5219] hpfs: You really don't want any checks? You are crazy... [ 50.788964][ T5219] hpfs: hpfs_map_sector(): read error [ 50.789835][ T5219] hpfs: code page support is disabled [ 50.794150][ T5219] hpfs: hpfs_map_4sectors(): unaligned read [ 50.795328][ T5219] hpfs: hpfs_map_4sectors(): unaligned read [ 50.796238][ T5219] hpfs: filesystem error: unable to find root dir [ 51.263432][ T5232] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 51.414259][ T4634] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 51.494908][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.507242][ T5245] syz.1.287 (pid 5245) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 51.586440][ T5250] sctp: [Deprecated]: syz.2.288 (pid 5250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.586440][ T5250] Use struct sctp_sack_info instead [ 51.678189][ T5245] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 51.699590][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 51.720030][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.722284][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.747539][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 51.774355][ T5259] EXT4-fs: Ignoring removed i_version option [ 51.775942][ T5259] EXT4-fs: Ignoring removed nobh option [ 51.781966][ T5259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.785324][ T5259] EXT4-fs (loop4): 1 truncate cleaned up [ 51.786475][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.904986][ T5267] ntfs3: Unknown parameter 'windows_names' [ 52.712992][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 52.853676][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 53.252154][ T5282] set_capacity_and_notify: 7 callbacks suppressed [ 53.252164][ T5282] loop2: detected capacity change from 0 to 32768 [ 53.280129][ T5282] JBD2: Ignoring recovery information on journal [ 53.284874][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.288768][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.327668][ T5282] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 53.358044][ T4327] ocfs2: Unmounting device (7,2) on (node local) [ 53.756900][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 53.784882][ T5325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 53.824705][ T5328] netlink: 96 bytes leftover after parsing attributes in process `syz.3.316'. [ 53.827114][ T5329] loop4: detected capacity change from 0 to 512 [ 53.836828][ T5329] EXT4-fs: Ignoring removed i_version option [ 53.839220][ T5329] EXT4-fs: Ignoring removed nobh option [ 53.843513][ T5329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.855776][ T5329] EXT4-fs (loop4): 1 truncate cleaned up [ 53.856835][ T5329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.062154][ T5344] loop3: detected capacity change from 0 to 64 [ 54.218988][ T5351] loop3: detected capacity change from 0 to 4096 [ 54.334058][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 54.437093][ T5367] loop0: detected capacity change from 0 to 64 [ 54.576443][ T5380] loop3: detected capacity change from 0 to 2048 [ 54.599641][ T5380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.770021][ T5384] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 54.789784][ T5384] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 54.793093][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 54.813621][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 54.881436][ T5396] loop2: detected capacity change from 0 to 2048 [ 54.888779][ T5396] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 54.890920][ T5396] NILFS (loop2): mounting unchecked fs [ 54.896090][ T5396] NILFS (loop2): recovery complete [ 54.909796][ T5397] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.263477][ T5409] loop4: detected capacity change from 0 to 128 [ 55.548466][ T5415] netlink: 104 bytes leftover after parsing attributes in process `syz.4.347'. [ 55.799289][ T5417] loop0: detected capacity change from 0 to 512 [ 55.801283][ T5417] EXT4-fs: Ignoring removed i_version option [ 55.802423][ T5417] EXT4-fs: Ignoring removed nobh option [ 55.803746][ T5417] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.836325][ T5417] EXT4-fs (loop0): 1 truncate cleaned up [ 55.840607][ T5417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.920164][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 56.161548][ T5438] loop2: detected capacity change from 0 to 512 [ 56.209151][ T5438] EXT4-fs (loop2): 1 orphan inode deleted [ 56.210157][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.550803][ T4399] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.552807][ T4399] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 56.583320][ T4394] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.585101][ T4394] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 56.627294][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 56.769702][ T5460] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.273490][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 57.353292][ T5474] EXT4-fs: Ignoring removed nobh option [ 57.356193][ T5474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.378559][ T5474] EXT4-fs (loop3): 1 truncate cleaned up [ 57.887664][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 57.889319][ T1280] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.327934][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.332483][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.469795][ T5515] set_capacity_and_notify: 4 callbacks suppressed [ 58.469805][ T5515] loop3: detected capacity change from 0 to 128 [ 58.534641][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 58.573503][ T5522] loop3: detected capacity change from 0 to 512 [ 58.592786][ T5522] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.389: attempt to clear invalid blocks 2 len 1 [ 58.599363][ T5522] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 58.620726][ T5522] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.389: invalid indirect mapped block 1819239214 (level 0) [ 58.623557][ T5522] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.389: invalid indirect mapped block 1819239214 (level 1) [ 58.627735][ T5522] EXT4-fs (loop3): 1 truncate cleaned up [ 58.677146][ T5525] loop0: detected capacity change from 0 to 512 [ 58.707441][ T5525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.733828][ T5525] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 58.741192][ T5525] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.741192][ T5525] [ 58.743601][ T5525] EXT4-fs (loop0): Total free blocks count 0 [ 58.744812][ T5525] EXT4-fs (loop0): Free/Dirty block details [ 58.746126][ T5525] EXT4-fs (loop0): free_blocks=65280 [ 58.746982][ T5525] EXT4-fs (loop0): dirty_blocks=33 [ 58.747985][ T5525] EXT4-fs (loop0): Block reservation details [ 58.748915][ T5525] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 58.801552][ T5532] loop0: detected capacity change from 0 to 256 [ 58.823736][ T5532] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 58.888705][ T5536] loop4: detected capacity change from 0 to 512 [ 58.895002][ T5536] EXT4-fs: Ignoring removed i_version option [ 58.897301][ T5536] EXT4-fs: Ignoring removed nobh option [ 58.902917][ T5536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.917158][ T5536] EXT4-fs (loop4): 1 truncate cleaned up [ 58.979095][ T4334] Bluetooth: Wrong link type (-22) [ 59.039910][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 59.090046][ T5554] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 59.257315][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.259221][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.262837][ T5571] netlink: 256 bytes leftover after parsing attributes in process `syz.3.407'. [ 59.265199][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.266946][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.599217][ T5578] loop2: detected capacity change from 0 to 8 [ 59.639358][ T5578] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 59.723407][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 59.754954][ T5584] loop2: detected capacity change from 0 to 256 [ 59.920827][ T5590] loop3: detected capacity change from 0 to 512 [ 59.925402][ T5590] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 61.049527][ T4454] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 61.083224][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.084825][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.149990][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 61.152866][ T5611] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 61.344573][ T5629] loop3: detected capacity change from 0 to 256 [ 61.443707][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.454037][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.211744][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 62.700531][ T4374] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 62.760035][ T5658] loop2: detected capacity change from 0 to 1024 [ 62.761793][ T5658] EXT4-fs: inline encryption not supported [ 62.911398][ T4374] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.913276][ T4374] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.915033][ T4374] usb 1-1: config 2 interface 0 has no altsetting 0 [ 62.916120][ T4374] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 62.917490][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.961017][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.970082][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.202999][ T5694] loop2: detected capacity change from 0 to 512 [ 64.205230][ T5694] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.211541][ T5694] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.454: inode has both inline data and extents flags [ 64.217441][ T5694] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.454: couldn't read orphan inode 15 (err -117) [ 64.492960][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494265][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.597166][ T4374] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 64.598760][ T4374] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 64.599935][ T4374] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 64.603206][ T4374] elo 0003:04E7:0009.0002: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 64.706576][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 64.730657][ T5706] loop3: detected capacity change from 0 to 512 [ 64.732277][ T5706] EXT4-fs: Ignoring removed i_version option [ 64.733480][ T5706] EXT4-fs: Ignoring removed nobh option [ 64.735433][ T5706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.739130][ T5706] EXT4-fs (loop3): 1 truncate cleaned up [ 64.799128][ T4380] usb 1-1: USB disconnect, device number 6 [ 65.355995][ T5729] loop0: detected capacity change from 0 to 512 [ 65.372850][ T5729] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.377213][ T5729] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.467: inode has both inline data and extents flags [ 65.379483][ T5729] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.467: couldn't read orphan inode 15 (err -117) [ 65.386231][ T5729] EXT4-fs mount: 14 callbacks suppressed [ 65.386240][ T5729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.814292][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 65.850381][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 65.859956][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 66.213801][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 66.215411][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 66.216654][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 66.253557][ T5758] loop4: detected capacity change from 0 to 512 [ 66.254986][ T5758] EXT4-fs: Ignoring removed i_version option [ 66.256050][ T5758] EXT4-fs: Ignoring removed nobh option [ 66.257332][ T5758] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.261587][ T5758] EXT4-fs (loop4): 1 truncate cleaned up [ 66.262772][ T5758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.594339][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.131793][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 67.165778][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 67.219516][ T5792] binder: 5791:5792 tried to acquire reference to desc 0, got 1 instead [ 67.222326][ T5792] binder: 5791:5792 got transaction with invalid parent offset or type [ 67.224272][ T5792] binder: 5791:5792 transaction call to 5791:0 failed 7/29201/-22, size 96-24 line 3439 [ 67.226333][ T4666] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.254558][ T5794] loop3: detected capacity change from 0 to 512 [ 67.265720][ T5794] EXT4-fs (loop3): Test dummy encryption mode enabled [ 67.273408][ T5794] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.494: inode has both inline data and extents flags [ 67.279947][ T5794] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.494: couldn't read orphan inode 15 (err -117) [ 67.284733][ T5794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.314253][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 67.330420][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 67.370190][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.373831][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.576975][ T5801] loop0: detected capacity change from 0 to 32768 [ 67.613208][ T5801] XFS (loop0): Mounting V5 Filesystem [ 67.645132][ T5801] XFS (loop0): Ending clean mount [ 67.672155][ T4326] XFS (loop0): Unmounting Filesystem [ 68.086409][ T5822] loop4: detected capacity change from 0 to 512 [ 68.088259][ T5822] EXT4-fs: Ignoring removed i_version option [ 68.089423][ T5822] EXT4-fs: Ignoring removed nobh option [ 68.091799][ T5822] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.095432][ T5822] EXT4-fs (loop4): 1 truncate cleaned up [ 68.096606][ T5822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.232214][ T5829] syz.0.499 (5829) used obsolete PPPIOCDETACH ioctl [ 68.466776][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 68.471886][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 68.735171][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 68.737276][ T4334] Bluetooth: hci5: command 0x1003 tx timeout [ 68.959159][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 69.536204][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.537829][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.596532][ T5872] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 70.251707][ T24] cfg80211: failed to load regulatory.db [ 70.493489][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.497443][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.564605][ T5869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.755965][ T5888] loop0: detected capacity change from 0 to 512 [ 70.779308][ T5888] EXT4-fs: Ignoring removed i_version option [ 70.787236][ T5888] EXT4-fs: Ignoring removed nobh option [ 70.796605][ T5888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.822084][ T5888] EXT4-fs (loop0): 1 truncate cleaned up [ 70.826021][ T5888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.887954][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.900948][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.045354][ T5894] __nla_validate_parse: 3 callbacks suppressed [ 71.045363][ T5894] netlink: 272 bytes leftover after parsing attributes in process `syz.4.525'. [ 71.241355][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 71.245770][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 71.305793][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.311309][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.567700][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.569825][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.597057][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 73.033301][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 73.035499][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 73.082598][ T5943] netlink: 43 bytes leftover after parsing attributes in process `syz.1.544'. [ 73.098427][ T5946] loop9: detected capacity change from 0 to 524287936 [ 73.614653][ T5959] loop3: detected capacity change from 0 to 512 [ 73.617255][ T5959] EXT4-fs: Ignoring removed i_version option [ 73.623266][ T5959] EXT4-fs: Ignoring removed nobh option [ 73.630135][ T5959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.639009][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.646074][ T5959] EXT4-fs (loop3): 1 truncate cleaned up [ 73.647330][ T5959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.648983][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.524183][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 74.526264][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 75.708967][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 75.824949][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.827903][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.732379][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 76.735104][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 77.321462][ T6030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.429936][ T6020] loop2: detected capacity change from 0 to 32768 [ 77.438807][ T6020] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.440870][ T6020] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 77.442553][ T6020] BTRFS info (device loop2): turning on sync discard [ 77.443654][ T6020] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 77.445173][ T6020] BTRFS info (device loop2): use zstd compression, level 3 [ 77.446330][ T6020] BTRFS info (device loop2): turning on async discard [ 77.447523][ T6020] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 77.449265][ T6020] BTRFS info (device loop2): trying to use backup root at mount time [ 77.450989][ T6020] BTRFS info (device loop2): enabling auto defrag [ 77.452100][ T6020] BTRFS info (device loop2): setting nodatacow, compression disabled [ 77.453530][ T6020] BTRFS info (device loop2): using free space tree [ 77.459261][ T5989] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 77.462211][ T6020] BTRFS error (device loop2): failed to load root extent [ 77.463389][ T6020] BTRFS warning (device loop2): try to load backup roots slot 1 [ 77.838507][ T5445] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 77.891084][ T6020] BTRFS warning (device loop2): couldn't read tree root [ 77.892354][ T6020] BTRFS warning (device loop2): try to load backup roots slot 2 [ 77.898032][ T6020] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 77.900269][ T6020] BTRFS warning (device loop2): couldn't read tree root [ 77.905470][ T6020] BTRFS warning (device loop2): try to load backup roots slot 3 [ 77.988183][ T6055] loop4: detected capacity change from 0 to 512 [ 77.989839][ T6055] EXT4-fs: Ignoring removed i_version option [ 77.994322][ T6055] EXT4-fs: Ignoring removed nobh option [ 78.018138][ T6050] syz.3.573 (6050): drop_caches: 2 [ 78.018508][ T6055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.026014][ T6020] BTRFS info (device loop2): enabling ssd optimizations [ 78.027966][ T6020] BTRFS info (device loop2): rebuilding free space tree [ 78.040170][ T6020] BTRFS info (device loop2): checking UUID tree [ 78.051739][ T6055] EXT4-fs (loop4): 1 truncate cleaned up [ 78.052807][ T6055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.104528][ T4327] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.272755][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 78.688453][ T6076] loop3: detected capacity change from 0 to 512 [ 78.689948][ T6076] EXT4-fs: Ignoring removed orlov option [ 78.691374][ T6076] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.696492][ T6076] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.582: corrupted in-inode xattr [ 78.726176][ T6076] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.582: couldn't read orphan inode 15 (err -117) [ 78.733515][ T6076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.010713][ T4412] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.241863][ T4412] usb 1-1: Using ep0 maxpacket: 32 [ 79.244966][ T4412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.246843][ T4412] usb 1-1: config 0 has no interfaces? [ 79.249386][ T4412] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 79.252352][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.253790][ T4412] usb 1-1: Product: syz [ 79.254395][ T4412] usb 1-1: Manufacturer: syz [ 79.255143][ T4412] usb 1-1: SerialNumber: syz [ 79.258178][ T4412] usb 1-1: config 0 descriptor?? [ 79.713407][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 79.729567][ T6092] loop2: detected capacity change from 0 to 512 [ 79.751763][ T6092] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.759375][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.586: inode has both inline data and extents flags [ 79.764104][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.586: couldn't read orphan inode 15 (err -117) [ 79.766215][ T6092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.788149][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 79.973926][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 81.095848][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 81.142394][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 81.522822][ T6146] loop2: detected capacity change from 0 to 4096 [ 81.622926][ T4667] usb 1-1: USB disconnect, device number 7 [ 81.625195][ T6153] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.633267][ T6146] NILFS (loop2): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=0, cno=0, offset=0, blocknr=0, vblocknr=0 [ 81.640218][ T6146] NILFS (loop2): error -2 preparing GC: cannot read source blocks [ 81.726037][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 81.728230][ T6157] netlink: 'syz.1.608': attribute type 3 has an invalid length. [ 82.076035][ T6164] loop3: detected capacity change from 0 to 512 [ 82.083525][ T6164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.094720][ T6164] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.611: inode has both inline data and extents flags [ 82.098185][ T6164] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.611: couldn't read orphan inode 15 (err -117) [ 82.101295][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.130355][ T6160] loop4: detected capacity change from 0 to 32768 [ 82.575601][ T6160] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 82.595677][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 82.649161][ T4333] ocfs2: Unmounting device (7,4) on (node local) [ 82.710751][ T4667] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 82.906165][ T4667] usb 1-1: Using ep0 maxpacket: 16 [ 83.133965][ T4667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.135836][ T4667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.137618][ T4667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.139264][ T4667] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 83.147459][ T4667] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.154978][ T4667] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 83.158670][ T4667] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.164345][ T4667] usb 1-1: Manufacturer: syz [ 83.167810][ T4667] usb 1-1: config 0 descriptor?? [ 83.232111][ T6185] loop2: detected capacity change from 0 to 512 [ 83.256982][ T6185] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 83.259867][ T6185] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.618: corrupted in-inode xattr [ 83.266956][ T6185] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.618: couldn't read orphan inode 15 (err -117) [ 83.269478][ T6185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.273820][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 83.374161][ T4667] Registered IR keymap rc-hauppauge [ 83.412577][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 83.432372][ T6194] loop2: detected capacity change from 0 to 256 [ 83.449220][ T6194] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 83.460586][ T4667] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 83.465695][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.535929][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.552229][ T6199] loop3: detected capacity change from 0 to 2048 [ 83.572443][ T4667] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 83.575168][ T4667] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 83.576436][ T6200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.581869][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.944813][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.968222][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 83.980812][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.020615][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.050616][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.091171][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.120685][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.481304][ T6221] loop4: detected capacity change from 0 to 512 [ 84.487539][ T6221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.490961][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.499818][ T6221] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.631: inode has both inline data and extents flags [ 84.504392][ T6221] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.631: couldn't read orphan inode 15 (err -117) [ 84.506316][ T6221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.575751][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.610581][ T4667] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.650986][ T4667] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 84.652755][ T4667] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 84.667313][ T4667] usb 1-1: USB disconnect, device number 8 [ 85.554922][ T6239] loop2: detected capacity change from 0 to 32768 [ 85.559492][ T6239] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.561051][ T6239] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.569364][ T6239] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 85.573400][ T4667] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.574660][ T4667] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.584695][ T4667] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 85.587299][ T4667] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.588876][ T6239] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.630250][ T6239] gfs2: fsid=syz:syz.0: found 1 quota changes [ 85.645103][ T4327] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 85.645103][ T4327] inode = 11 2339 [ 85.645103][ T4327] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 85.648994][ T4327] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 85.649382][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 85.651013][ T4327] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4327 [syz-executor] gfs2_quota_sync+0x2cc/0x4e8 [ 85.654459][ T4327] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 85.655916][ T4327] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.668739][ T4327] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 85.671792][ T4327] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 85.673685][ T4327] gfs2: fsid=syz:syz.0: File system withdrawn [ 85.675735][ T4327] CPU: 1 PID: 4327 Comm: syz-executor Not tainted syzkaller #0 [ 85.677204][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 85.678975][ T4327] Call trace: [ 85.679527][ T4327] dump_backtrace+0x1c4/0x1f0 [ 85.680335][ T4327] show_stack+0x2c/0x3c [ 85.681078][ T4327] __dump_stack+0x30/0x40 [ 85.681879][ T4327] dump_stack_lvl+0xf4/0x15c [ 85.682710][ T4327] dump_stack+0x1c/0x5c [ 85.683437][ T4327] gfs2_withdraw+0x9f8/0x1244 [ 85.684256][ T4327] gfs2_consist_inode_i+0xf8/0x114 [ 85.685112][ T4327] gfs2_inode_refresh+0x9a0/0xe64 [ 85.685961][ T4327] inode_go_instantiate+0x4c/0x68 [ 85.686775][ T4327] gfs2_instantiate+0x178/0x2b4 [ 85.687596][ T4327] gfs2_glock_wait+0x1b0/0x290 [ 85.688393][ T4327] gfs2_glock_nq+0x8bc/0x11c4 [ 85.689149][ T4327] do_sync+0x414/0xa68 [ 85.689826][ T4327] gfs2_quota_sync+0x2cc/0x4e8 [ 85.690594][ T4327] gfs2_sync_fs+0x50/0xc8 [ 85.691233][ T4327] sync_filesystem+0xe8/0x218 [ 85.692064][ T4327] generic_shutdown_super+0x74/0x32c [ 85.692902][ T4327] kill_block_super+0x78/0xe0 [ 85.693688][ T4327] gfs2_kill_sb+0xc4/0xd8 [ 85.694396][ T4327] deactivate_locked_super+0xb4/0x128 [ 85.695314][ T4327] deactivate_super+0xe4/0x104 [ 85.696085][ T4327] cleanup_mnt+0x3a8/0x430 [ 85.696860][ T4327] __cleanup_mnt+0x20/0x30 [ 85.697601][ T4327] task_work_run+0x1f4/0x280 [ 85.698350][ T4327] do_notify_resume+0x20f8/0x2c84 [ 85.699188][ T4327] el0_svc+0x98/0x128 [ 85.699848][ T4327] el0t_64_sync_handler+0x84/0xf0 [ 85.700738][ T4327] el0t_64_sync+0x18c/0x190 [ 85.703246][ T4327] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 85.705745][ T4327] CPU: 1 PID: 4327 Comm: syz-executor Not tainted syzkaller #0 [ 85.706993][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 85.708568][ T4327] Call trace: [ 85.709075][ T4327] dump_backtrace+0x1c4/0x1f0 [ 85.709827][ T4327] show_stack+0x2c/0x3c [ 85.710569][ T4327] __dump_stack+0x30/0x40 [ 85.711371][ T4327] dump_stack_lvl+0xf4/0x15c [ 85.712166][ T4327] dump_stack+0x1c/0x5c [ 85.712970][ T4327] gfs2_assert_warn_i+0x16c/0x26c [ 85.713839][ T4327] gfs2_quota_cleanup+0x444/0x640 [ 85.714754][ T4327] gfs2_put_super+0x1ec/0x744 [ 85.715605][ T4327] generic_shutdown_super+0x138/0x32c [ 85.716507][ T4327] kill_block_super+0x78/0xe0 [ 85.717392][ T4327] gfs2_kill_sb+0xc4/0xd8 [ 85.718136][ T4327] deactivate_locked_super+0xb4/0x128 [ 85.719136][ T4327] deactivate_super+0xe4/0x104 [ 85.719947][ T4327] cleanup_mnt+0x3a8/0x430 [ 85.720712][ T4327] __cleanup_mnt+0x20/0x30 [ 85.721441][ T4327] task_work_run+0x1f4/0x280 [ 85.722276][ T4327] do_notify_resume+0x20f8/0x2c84 [ 85.723086][ T4327] el0_svc+0x98/0x128 [ 85.723776][ T4327] el0t_64_sync_handler+0x84/0xf0 [ 85.724617][ T4327] el0t_64_sync+0x18c/0x190 [ 85.744299][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 86.199849][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.209261][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.875472][ T6275] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 86.877415][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 87.127734][ T6286] loop2: detected capacity change from 0 to 512 [ 87.139176][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 87.145513][ T6286] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.155209][ T6286] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.648: inode has both inline data and extents flags [ 87.167969][ T6286] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.648: couldn't read orphan inode 15 (err -117) [ 87.197711][ T6286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.717186][ T6311] loop3: detected capacity change from 0 to 2048 [ 87.728199][ T6311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=301129, location=301129 [ 87.737551][ T6311] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.236357][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 88.239273][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 88.266155][ T6330] loop2: detected capacity change from 0 to 512 [ 88.267759][ T6330] EXT4-fs: Ignoring removed i_version option [ 88.268857][ T6330] EXT4-fs: Ignoring removed nobh option [ 88.270046][ T6330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.273627][ T6330] EXT4-fs (loop2): 1 truncate cleaned up [ 88.274707][ T6330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.770544][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.981009][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 88.983817][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.985556][ T24] usb 1-1: config 0 has no interfaces? [ 88.988216][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 88.989870][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.991526][ T24] usb 1-1: Product: syz [ 88.992304][ T24] usb 1-1: Manufacturer: syz [ 88.995947][ T24] usb 1-1: SerialNumber: syz [ 88.999788][ T24] usb 1-1: config 0 descriptor?? [ 89.204217][ T6352] loop3: detected capacity change from 0 to 512 [ 89.225588][ T6352] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.272463][ T6352] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.670: inode has both inline data and extents flags [ 89.274967][ T6352] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.670: couldn't read orphan inode 15 (err -117) [ 89.277024][ T6352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.622172][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 89.675844][ T6361] loop2: detected capacity change from 0 to 2048 [ 89.698222][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 89.703530][ T6361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.034316][ T6380] netlink: 160 bytes leftover after parsing attributes in process `syz.1.676'. [ 90.107132][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 90.596332][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 91.157909][ T4412] usb 1-1: USB disconnect, device number 9 [ 91.188886][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 91.192329][ T6407] loop4: detected capacity change from 0 to 256 [ 91.367759][ T6415] loop4: detected capacity change from 0 to 512 [ 91.751404][ T6415] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.759350][ T6415] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.688: inode has both inline data and extents flags [ 91.763330][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.764325][ T6415] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.688: couldn't read orphan inode 15 (err -117) [ 91.764884][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.771069][ T6415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.222522][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 92.330727][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 92.366460][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.368014][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.441160][ T6445] loop4: detected capacity change from 0 to 512 [ 92.442849][ T6445] EXT4-fs: Ignoring removed i_version option [ 92.443963][ T6445] EXT4-fs: Ignoring removed nobh option [ 92.445308][ T6445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.448479][ T6445] EXT4-fs (loop4): 1 truncate cleaned up [ 92.449604][ T6445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.640687][ T6361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.684362][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 93.379549][ T6461] loop0: detected capacity change from 0 to 512 [ 93.384308][ T6461] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.395892][ T6461] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.705: inode has both inline data and extents flags [ 93.398463][ T6461] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.705: couldn't read orphan inode 15 (err -117) [ 93.408492][ T6461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.529846][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 93.565188][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.574439][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.724509][ T6452] loop2: detected capacity change from 0 to 131072 [ 93.731797][ T6452] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 93.733208][ T6452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.736390][ T6452] F2FS-fs (loop2): invalid crc value [ 93.770996][ T6452] F2FS-fs (loop2): invalid crc value [ 93.771877][ T6452] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 93.787748][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 93.970438][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.976968][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.228884][ T6498] loop4: detected capacity change from 0 to 512 [ 94.230228][ T6498] EXT4-fs: Ignoring removed i_version option [ 94.231634][ T6498] EXT4-fs: Ignoring removed nobh option [ 94.232989][ T6498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.236185][ T6498] EXT4-fs (loop4): 1 truncate cleaned up [ 94.237232][ T6498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.389272][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 94.409778][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 94.562516][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.564240][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.090860][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 95.338037][ T6528] loop0: detected capacity change from 0 to 256 [ 95.347156][ T6528] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 95.388728][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 95.405294][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.406889][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.431785][ T6537] loop0: detected capacity change from 0 to 512 [ 95.437550][ T6537] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.439892][ T6537] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.731: inode has both inline data and extents flags [ 95.454077][ T6537] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.731: couldn't read orphan inode 15 (err -117) [ 95.456192][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.891918][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.894345][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.979675][ T6551] loop4: detected capacity change from 0 to 512 [ 95.992780][ T6551] EXT4-fs: Ignoring removed i_version option [ 95.994950][ T6551] EXT4-fs: Ignoring removed nobh option [ 95.997461][ T6551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.010122][ T6551] EXT4-fs (loop4): 1 truncate cleaned up [ 96.011864][ T6551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.350014][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 96.915470][ T6556] loop0: detected capacity change from 0 to 32768 [ 96.932991][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 96.959874][ T6556] XFS (loop0): Mounting V5 Filesystem [ 96.962688][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 96.997321][ T6556] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x258/0xe54, inode 0x1142 dinode [ 97.014243][ T6556] XFS (loop0): Unmount and run xfs_repair [ 97.018660][ T6556] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 97.028048][ T6556] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 97.036620][ T6556] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.045594][ T6556] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 ce 66 30 ..e.....4.Xh..f0 [ 97.062825][ T6556] 00000030: 34 f7 58 68 80 ce 66 30 00 00 00 00 00 00 00 00 4.Xh..f0........ [ 97.068938][ T6556] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.078240][ T6556] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.087234][ T6556] 00000060: ff ff ff ff 46 fc 31 bd 00 00 00 00 00 00 00 02 ....F.1......... [ 97.095462][ T6556] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 97.104796][ T6556] XFS (loop0): failed to read RT inodes [ 97.170305][ T6591] loop2: detected capacity change from 0 to 1024 [ 97.297096][ T6598] loop4: detected capacity change from 0 to 512 [ 97.343479][ T6598] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.356582][ T6598] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.747: inode has both inline data and extents flags [ 97.359072][ T6598] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.747: couldn't read orphan inode 15 (err -117) [ 97.363475][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.364134][ T6598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.364949][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.518384][ T6608] loop2: detected capacity change from 0 to 16 [ 97.528389][ T6608] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x2cc063ef, 0xf8c4b9bf expected [ 97.596854][ T6616] EXT4-fs: Ignoring removed i_version option [ 97.600525][ T6616] EXT4-fs: Ignoring removed nobh option [ 97.602488][ T6616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.605490][ T6616] EXT4-fs (loop0): 1 truncate cleaned up [ 97.606593][ T6616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.864595][ T6625] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 97.866618][ T6625] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.868232][ T6625] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 97.873201][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 98.171998][ T6635] "syz.3.760" (6635) uses obsolete ecb(arc4) skcipher [ 98.567682][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 98.764096][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 98.818980][ T6655] set_capacity_and_notify: 2 callbacks suppressed [ 98.818988][ T6655] loop4: detected capacity change from 0 to 512 [ 99.623329][ T6677] loop3: detected capacity change from 0 to 512 [ 99.624680][ T6677] EXT4-fs: Ignoring removed i_version option [ 99.625699][ T6677] EXT4-fs: Ignoring removed nobh option [ 99.626893][ T6677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.707982][ T6684] loop0: detected capacity change from 0 to 512 [ 99.710050][ T6684] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.815574][ T6677] EXT4-fs (loop3): 1 truncate cleaned up [ 99.817269][ T6677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.819054][ T6684] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.779: inode has both inline data and extents flags [ 99.825864][ T6684] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.779: couldn't read orphan inode 15 (err -117) [ 99.830415][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.349758][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 100.413054][ T6702] loop2: detected capacity change from 0 to 512 [ 100.427026][ T6702] EXT4-fs: Ignoring removed i_version option [ 100.430615][ T6702] EXT4-fs: Ignoring removed nobh option [ 100.432217][ T6702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.435660][ T6702] EXT4-fs (loop2): 1 truncate cleaned up [ 100.436873][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.831471][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 100.912344][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.787'. [ 100.951699][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.787'. [ 101.033450][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 101.169046][ T6728] loop3: detected capacity change from 0 to 512 [ 101.176793][ T6728] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.181676][ T6728] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.795: inode has both inline data and extents flags [ 101.189702][ T6728] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.795: couldn't read orphan inode 15 (err -117) [ 101.192363][ T6728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.818806][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 102.119358][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 102.386579][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 102.447518][ T6748] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 102.544539][ T6754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.569100][ T6754] bond1: (slave bond2): making interface the new active one [ 102.575763][ T6757] loop0: detected capacity change from 0 to 512 [ 102.579545][ T6754] bond1: (slave bond2): Enslaving as an active interface with an up link [ 102.593344][ T6757] EXT4-fs: Ignoring removed i_version option [ 102.597697][ T6757] EXT4-fs: Ignoring removed nobh option [ 102.600316][ T6748] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 102.614186][ T6757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.628353][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.801'. [ 102.631428][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.633564][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.639574][ T6757] EXT4-fs (loop0): 1 truncate cleaned up [ 102.645231][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.815276][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 103.422195][ T6781] loop2: detected capacity change from 0 to 64 [ 103.436132][ T6781] hfs: unable to change codepage [ 103.442509][ T6781] hfs: unable to parse mount options [ 103.574044][ T6788] loop2: detected capacity change from 0 to 512 [ 103.661414][ T6788] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.948311][ T6788] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.812: inode has both inline data and extents flags [ 103.957641][ T6788] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.812: couldn't read orphan inode 15 (err -117) [ 103.961940][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.989202][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 104.340779][ T4667] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.345849][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 104.422055][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 104.439041][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 104.490712][ T4667] usb 1-1: device descriptor read/64, error -32 [ 104.549697][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.554772][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.670176][ T6824] loop2: detected capacity change from 0 to 512 [ 104.673519][ T6824] EXT4-fs: Ignoring removed i_version option [ 104.674572][ T6824] EXT4-fs: Ignoring removed nobh option [ 104.675859][ T6824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.678873][ T6824] EXT4-fs (loop2): 1 truncate cleaned up [ 104.679792][ T6824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.825152][ T4667] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 105.130681][ T4667] usb 1-1: Using ep0 maxpacket: 32 [ 105.132854][ T4667] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 105.134253][ T4667] usb 1-1: config 0 has no interface number 0 [ 105.135359][ T4667] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.137435][ T4667] usb 1-1: config 0 interface 85 has no altsetting 0 [ 105.139932][ T4667] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 105.143507][ T4667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.144953][ T4667] usb 1-1: Product: syz [ 105.145656][ T4667] usb 1-1: Manufacturer: syz [ 105.146549][ T4667] usb 1-1: SerialNumber: syz [ 105.157091][ T4667] usb 1-1: config 0 descriptor?? [ 105.296135][ T6830] netlink: 64 bytes leftover after parsing attributes in process `syz.3.826'. [ 105.551389][ T6840] loop3: detected capacity change from 0 to 512 [ 105.553457][ T6840] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.573391][ T6840] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.831: inode has both inline data and extents flags [ 105.585477][ T6840] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.831: couldn't read orphan inode 15 (err -117) [ 105.600622][ T6840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.773173][ T4667] appletouch 1-1:0.85: Geyser mode initialized. [ 105.784236][ T4667] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 106.178934][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 106.244976][ T6806] loop4: detected capacity change from 0 to 262144 [ 106.272091][ T6806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.285090][ T6806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.412310][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 106.965740][ T24] usb 1-1: USB disconnect, device number 11 [ 106.999446][ T6882] loop0: detected capacity change from 0 to 512 [ 107.001223][ T6882] EXT4-fs: Ignoring removed i_version option [ 107.002317][ T6882] EXT4-fs: Ignoring removed nobh option [ 107.003616][ T6882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.342146][ T24] appletouch 1-1:0.85: input: appletouch disconnected [ 107.351672][ T6882] EXT4-fs (loop0): 1 truncate cleaned up [ 107.352786][ T6882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.361456][ T6891] loop2: detected capacity change from 0 to 512 [ 107.372628][ T6891] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.454445][ T6891] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 107.458658][ T6891] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 107.464755][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 107.521549][ T6898] loop0: detected capacity change from 0 to 4096 [ 107.538180][ T6898] ntfs3: Unknown parameter 'nocase' [ 107.548779][ T6902] mmap: syz.2.851 (6902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.552418][ T4643] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.572450][ T6898] loop0: detected capacity change from 0 to 1024 [ 107.584031][ T6898] syz.0.849: attempt to access beyond end of device [ 107.584031][ T6898] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 108.125664][ T27] audit: type=1326 audit(108.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.129317][ T27] audit: type=1326 audit(108.090:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.146937][ T27] audit: type=1326 audit(108.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.152311][ T27] audit: type=1326 audit(108.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.156132][ T27] audit: type=1326 audit(108.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.160352][ T27] audit: type=1326 audit(108.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.166649][ T27] audit: type=1326 audit(108.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.172404][ T27] audit: type=1326 audit(108.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.176512][ T27] audit: type=1326 audit(108.090:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.190992][ T27] audit: type=1326 audit(108.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff87b77b68 code=0x7ffc0000 [ 108.299073][ T6907] loop2: detected capacity change from 0 to 32768 [ 108.305785][ T6907] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.853 (6907) [ 108.313747][ T6907] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 108.315627][ T6907] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 108.317335][ T6907] BTRFS info (device loop2): enabling auto defrag [ 108.318232][ T6907] BTRFS info (device loop2): enabling all of the rescue options [ 108.319540][ T6907] BTRFS info (device loop2): ignoring data csums [ 108.320199][ T6928] loop3: detected capacity change from 0 to 512 [ 108.320715][ T6907] BTRFS info (device loop2): ignoring bad roots [ 108.322846][ T6907] BTRFS info (device loop2): disabling log replay at mount time [ 108.323662][ T6928] EXT4-fs: Ignoring removed i_version option [ 108.327642][ T6928] EXT4-fs: Ignoring removed nobh option [ 108.328288][ T6907] BTRFS info (device loop2): disabling auto defrag [ 108.330229][ T6907] BTRFS info (device loop2): enabling disk space caching [ 108.332165][ T6907] BTRFS info (device loop2): turning off barriers [ 108.332770][ T6928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.333723][ T6907] BTRFS error (device loop2): cannot disable free space tree [ 108.342313][ T6907] BTRFS error (device loop2): open_ctree failed: -22 [ 108.345808][ T6928] EXT4-fs (loop3): 1 truncate cleaned up [ 108.346898][ T6928] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.424118][ T6932] netlink: 232 bytes leftover after parsing attributes in process `syz.1.860'. [ 108.425862][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 108.452007][ T4634] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4634) [ 108.453185][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 108.510669][ T4412] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 108.820615][ T4412] usb 1-1: Using ep0 maxpacket: 32 [ 108.965621][ T4412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.967535][ T4412] usb 1-1: config 0 has no interfaces? [ 108.980560][ T4412] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 108.982085][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.983442][ T4412] usb 1-1: Product: syz [ 108.984191][ T4412] usb 1-1: Manufacturer: syz [ 108.988620][ T4412] usb 1-1: SerialNumber: syz [ 108.992426][ T4412] usb 1-1: config 0 descriptor?? [ 109.474064][ T6967] loop4: detected capacity change from 0 to 64 [ 109.644335][ T4634] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.524837][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.527308][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.696316][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.698171][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.049177][ T7001] set_capacity_and_notify: 1 callbacks suppressed [ 111.049188][ T7001] loop2: detected capacity change from 0 to 512 [ 111.076012][ T7001] EXT4-fs (loop2): 1 orphan inode deleted [ 111.077344][ T7001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.111031][ T4521] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1 [ 111.124092][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 111.183177][ T7006] Bluetooth: MGMT ver 1.22 [ 111.274312][ T4336] Bluetooth: hci4: link tx timeout [ 111.276757][ T4336] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.289020][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 111.318547][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.321078][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.648917][ T4412] usb 1-1: USB disconnect, device number 12 [ 111.970440][ T7043] loop2: detected capacity change from 0 to 2048 [ 112.004943][ T7043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.016586][ T7041] loop3: detected capacity change from 0 to 32768 [ 112.050124][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.054094][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.056327][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.056327][ T9] [ 112.071265][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 112.072623][ T9] EXT4-fs (loop2): Free/Dirty block details [ 112.073697][ T9] EXT4-fs (loop2): free_blocks=2415919104 [ 112.074755][ T9] EXT4-fs (loop2): dirty_blocks=32 [ 112.075677][ T9] EXT4-fs (loop2): Block reservation details [ 112.076758][ T9] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 112.090200][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 112.145389][ T7041] XFS (loop3): Mounting V5 Filesystem [ 112.169477][ T7041] XFS (loop3): Ending clean mount [ 112.487757][ T4338] XFS (loop3): Unmounting Filesystem [ 112.506124][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.517181][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.610626][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.790592][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 112.793132][ T24] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 112.794570][ T24] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 112.796131][ T24] usb 1-1: config 8 has no interface number 0 [ 112.797191][ T24] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 112.803154][ T24] usb 1-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.812215][ T24] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 112.813987][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.815375][ T24] usb 1-1: Product: syz [ 112.816144][ T24] usb 1-1: Manufacturer: syz [ 112.818131][ T24] usb 1-1: SerialNumber: syz [ 113.060593][ T24] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 113.070192][ T24] usb 1-1: USB disconnect, device number 13 [ 113.103988][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.126131][ T7083] loop2: detected capacity change from 0 to 256 [ 113.190752][ T7087] loop2: detected capacity change from 0 to 512 [ 113.198610][ T7087] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.203365][ T7087] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.909: inode has both inline data and extents flags [ 113.205725][ T7087] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.909: couldn't read orphan inode 15 (err -117) [ 113.207874][ T7087] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.291089][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 113.641813][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 113.643814][ T7093] bond0: Unable to set up delay as MII monitoring is disabled [ 114.344301][ T7108] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.345930][ T7108] F2FS-fs (loop3): Unable to read 1th superblock [ 114.347078][ T7108] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.348476][ T7108] F2FS-fs (loop3): Unable to read 2th superblock [ 114.369613][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 114.514256][ T4412] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 114.866100][ T7116] loop2: detected capacity change from 0 to 32768 [ 114.940571][ T4412] usb 1-1: Using ep0 maxpacket: 32 [ 114.943421][ T4412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.945165][ T4412] usb 1-1: config 0 has no interfaces? [ 114.948997][ T4412] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 114.950935][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.952656][ T4412] usb 1-1: Product: syz [ 114.953371][ T4412] usb 1-1: Manufacturer: syz [ 114.958577][ T4412] usb 1-1: SerialNumber: syz [ 114.964275][ T4412] usb 1-1: config 0 descriptor?? [ 114.974921][ T7116] XFS (loop2): Mounting V5 Filesystem [ 114.987149][ T7116] XFS (loop2): Ending clean mount [ 115.381915][ T7146] loop3: detected capacity change from 0 to 512 [ 115.389726][ T7146] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.391215][ T4327] XFS (loop2): Unmounting Filesystem [ 115.407008][ T7146] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.928: inode has both inline data and extents flags [ 115.416261][ T7146] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.928: couldn't read orphan inode 15 (err -117) [ 115.418975][ T7146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.236480][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 116.447817][ T7169] device syz_tun entered promiscuous mode [ 116.454569][ T7169] device syz_tun left promiscuous mode [ 116.457837][ T7171] loop3: detected capacity change from 0 to 128 [ 116.488589][ T7171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.523008][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 116.896541][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 117.159247][ T7193] loop4: detected capacity change from 0 to 512 [ 117.172423][ T7193] EXT4-fs (loop4): Test dummy encryption mode enabled [ 117.183420][ T7193] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.944: inode has both inline data and extents flags [ 117.185779][ T7193] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.944: couldn't read orphan inode 15 (err -117) [ 117.189354][ T7193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.303056][ T4667] usb 1-1: USB disconnect, device number 14 [ 117.347420][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.678442][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.790699][ T4667] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 118.045970][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 118.152030][ T4667] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 118.153975][ T4667] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 118.155768][ T4667] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.162974][ T4667] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 118.164562][ T4667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 118.166074][ T4667] usb 1-1: Product: syz [ 118.166813][ T4667] usb 1-1: Manufacturer: syz [ 118.168724][ T4667] usb 1-1: SerialNumber: syz [ 118.179228][ T4667] usb 1-1: config 0 descriptor?? [ 118.184209][ T4667] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 118.186320][ T4667] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 118.187921][ T4667] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 118.262147][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.264725][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.335255][ T7229] loop3: detected capacity change from 0 to 1024 [ 118.336860][ T7229] hfsplus: unable to parse mount options [ 118.371369][ T4634] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.256118][ T7254] loop2: detected capacity change from 0 to 512 [ 119.270668][ T7254] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.288424][ T7254] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.968: invalid indirect mapped block 256 (level 2) [ 119.297941][ T7254] EXT4-fs (loop2): 2 truncates cleaned up [ 119.301061][ T7254] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.394024][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 119.416178][ T7266] loop3: detected capacity change from 0 to 16 [ 119.422219][ T7266] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 119.425595][ T7266] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 119.427405][ T7266] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 119.429362][ T7266] erofs: DAX unsupported by block device. Turning off DAX. [ 119.498376][ T7272] netlink: 128 bytes leftover after parsing attributes in process `syz.2.974'. [ 119.562998][ T4643] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.666155][ T7266] loop3: detected capacity change from 0 to 8192 [ 119.672545][ T7280] loop2: detected capacity change from 0 to 2048 [ 119.686962][ T7280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.691905][ T7280] EXT4-fs (loop2): shut down requested (2) [ 119.704213][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 119.710724][ T7266] loop3: p1 p2 p3 p4[EZD] [ 119.715714][ T7266] loop3: p2 size 150998528 extends beyond EOD, truncated [ 119.717487][ T7266] loop3: p3 start 1610612736 is beyond EOD, truncated [ 119.718664][ T7266] loop3: p4 size 33555584 extends beyond EOD, truncated [ 119.788637][ T4643] udevd[4643]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 119.792774][ T7284] device bond0 entered promiscuous mode [ 119.793858][ T7284] device bond_slave_0 entered promiscuous mode [ 119.795074][ T7284] device bond_slave_1 entered promiscuous mode [ 119.797994][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 119.804548][ T4634] udevd[4634]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 119.850999][ T7284] device batadv0 entered promiscuous mode [ 120.341095][ T24] usb 1-1: USB disconnect, device number 15 [ 120.435377][ T7299] loop0: detected capacity change from 0 to 512 [ 120.465261][ T7299] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.497976][ T7299] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.985: inode has both inline data and extents flags [ 120.506037][ T7299] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.985: couldn't read orphan inode 15 (err -117) [ 120.518258][ T7299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.721748][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.988'. [ 121.209320][ T7294] loop2: detected capacity change from 0 to 40427 [ 121.216952][ T7294] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 121.218292][ T7294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.220254][ T7294] F2FS-fs (loop2): invalid crc value [ 121.222404][ T7294] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 121.265957][ T7315] loop4: detected capacity change from 0 to 2048 [ 121.268665][ T7294] F2FS-fs (loop2): Start checkpoint disabled! [ 121.276511][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 121.297135][ T7294] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.298402][ T7294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.321599][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.334834][ T7315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.991: bg 0: block 345: padding at end of block bitmap is not set [ 121.340741][ T7315] EXT4-fs (loop4): Remounting filesystem read-only [ 121.393829][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 121.848329][ T7344] loop4: detected capacity change from 0 to 2048 [ 121.859365][ T7347] loop3: detected capacity change from 0 to 128 [ 121.870872][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 121.884250][ T7344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.912527][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 121.923751][ T4316] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.932150][ T7347] loop3: detected capacity change from 0 to 512 [ 121.933555][ T7347] ext4: Unknown parameter 'nouser_xattr' [ 121.996610][ T7353] loop2: detected capacity change from 0 to 7 [ 121.999724][ T7353] Dev loop2: unable to read RDB block 7 [ 122.003477][ T7353] loop2: unable to read partition table [ 122.005037][ T7353] loop2: partition table beyond EOD, truncated [ 122.006277][ T7353] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.350747][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 122.353716][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.355560][ T24] usb 1-1: config 0 has no interfaces? [ 122.358101][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 122.359724][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.361607][ T24] usb 1-1: Product: syz [ 122.362452][ T24] usb 1-1: Manufacturer: syz [ 122.363202][ T24] usb 1-1: SerialNumber: syz [ 122.364953][ T24] usb 1-1: config 0 descriptor?? [ 123.489118][ T7379] loop3: detected capacity change from 0 to 32768 [ 123.495592][ T7379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1016 (7379) [ 123.603280][ T7383] loop2: detected capacity change from 0 to 1024 [ 123.609538][ T7379] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.611310][ T7379] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 123.612788][ T7379] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 123.614220][ T7379] BTRFS info (device loop3): use zstd compression, level 3 [ 123.615429][ T7379] BTRFS info (device loop3): turning on async discard [ 123.616443][ T7379] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 123.618102][ T7379] BTRFS info (device loop3): trying to use backup root at mount time [ 123.619474][ T7379] BTRFS info (device loop3): enabling auto defrag [ 123.620708][ T7379] BTRFS info (device loop3): use no compression [ 123.621753][ T7379] BTRFS info (device loop3): using free space tree [ 124.268940][ T4379] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 124.271606][ T7379] BTRFS error (device loop3): failed to load root extent [ 124.272829][ T7379] BTRFS warning (device loop3): try to load backup roots slot 1 [ 124.274461][ T4379] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 124.276840][ T7379] BTRFS warning (device loop3): couldn't read tree root [ 124.278156][ T7379] BTRFS warning (device loop3): try to load backup roots slot 2 [ 124.279786][ T7379] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 124.281820][ T7379] BTRFS warning (device loop3): couldn't read tree root [ 124.282946][ T7379] BTRFS warning (device loop3): try to load backup roots slot 3 [ 124.284721][ T7383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.300924][ T7379] BTRFS info (device loop3): enabling ssd optimizations [ 124.303169][ T7379] BTRFS info (device loop3): rebuilding free space tree [ 124.314216][ T7379] BTRFS info (device loop3): checking UUID tree [ 124.382555][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 124.421602][ T4338] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.554188][ T4634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4634) [ 125.356607][ T4588] usb 1-1: USB disconnect, device number 16 [ 125.398934][ T7452] loop2: detected capacity change from 0 to 136 [ 125.404949][ T7452] Attempt to read inode for relocated directory [ 125.931586][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932801][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.975376][ T7474] loop4: detected capacity change from 0 to 128 [ 126.261932][ T7474] loop4: detected capacity change from 0 to 512 [ 126.263356][ T7474] ext4: Unknown parameter 'nouser_xattr' [ 126.302102][ T4634] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.404504][ T4336] block nbd2: Receive control failed (result -32) [ 126.404836][ T7460] block nbd2: shutting down sockets [ 126.795408][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 126.799859][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 126.843576][ T7497] loop3: detected capacity change from 0 to 512 [ 126.847267][ T7497] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.794406][ T7519] input: syz0 as /devices/virtual/input/input6 [ 128.105123][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.106661][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.236113][ T7530] loop3: detected capacity change from 0 to 4096 [ 128.241497][ T7530] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 128.250135][ T7530] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 128.580552][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 128.760854][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 128.773550][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 128.776290][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.779873][ T24] usb 1-1: Product: syz [ 128.780621][ T24] usb 1-1: Manufacturer: syz [ 128.782826][ T24] usb 1-1: SerialNumber: syz [ 128.787248][ T24] usb 1-1: config 0 descriptor?? [ 128.809626][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.814682][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.960282][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 129.001538][ T7554] loop4: detected capacity change from 0 to 4096 [ 129.006067][ T7554] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 129.015621][ T7554] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.083717][ T7555] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 129.094237][ T7555] ntfs3: loop4: ino=5, "/" directory corrupted [ 129.627404][ T7579] 9pnet_fd: Insufficient options for proto=fd [ 129.975316][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.978071][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.251565][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.264562][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.690212][ T7599] loop4: detected capacity change from 0 to 32768 [ 130.695836][ T7599] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 130.741633][ T4643] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 130.751227][ T7604] loop4: detected capacity change from 0 to 512 [ 130.758295][ T7604] EXT4-fs: Ignoring removed i_version option [ 130.759359][ T7604] EXT4-fs: Ignoring removed nobh option [ 130.768302][ T7604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.772159][ T7604] EXT4-fs (loop4): 1 truncate cleaned up [ 130.773089][ T7604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.923526][ T24] gspca_ov534_9: reg_r err -71 [ 131.205496][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 131.207024][ T7613] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 131.208344][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 131.290686][ T24] gspca_ov534_9: Unknown sensor 0000 [ 131.290725][ T24] ov534_9: probe of 1-1:0.0 failed with error -22 [ 131.295498][ T24] usb 1-1: USB disconnect, device number 17 [ 131.448722][ T7621] loop3: detected capacity change from 0 to 512 [ 131.470292][ T7621] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 131.499076][ T7621] EXT4-fs (loop3): invalid journal inode [ 131.502471][ T7621] EXT4-fs (loop3): can't get journal size [ 131.518877][ T7621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 131.526062][ T7621] System zones: 1-12, 13-13 [ 131.538852][ T7621] EXT4-fs (loop3): 1 truncate cleaned up [ 131.549823][ T7621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.625218][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 131.748556][ T7632] loop4: detected capacity change from 0 to 512 [ 131.762141][ T7632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.777510][ T7630] loop0: detected capacity change from 0 to 4096 [ 131.794000][ T7632] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1102: iget: bad i_size value: 38620345925642 [ 131.796499][ T7632] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1102: couldn't read orphan inode 15 (err -117) [ 131.798957][ T7632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.825175][ T7632] EXT4-fs (loop4): shut down requested (1) [ 131.841255][ T7630] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 131.871377][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 131.894595][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.896073][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.902766][ T7630] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 131.942702][ T4326] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 131.944346][ T4326] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 132.101856][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 132.178017][ T7649] loop2: detected capacity change from 0 to 64 [ 132.199365][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.206905][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.515559][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.530573][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.539884][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.541674][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.543442][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.544518][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.548476][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.549626][ T7649] hfs: request for non-existent node 131072 in B*Tree [ 132.655314][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.657848][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.866086][ T7658] loop4: detected capacity change from 0 to 256 [ 132.874222][ T7658] exfat: Deprecated parameter 'namecase' [ 132.875379][ T7658] exfat: Deprecated parameter 'namecase' [ 132.882746][ T7658] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 133.266309][ T7689] loop4: detected capacity change from 0 to 512 [ 133.267758][ T7689] EXT4-fs: Ignoring removed i_version option [ 133.268764][ T7689] EXT4-fs: Ignoring removed nobh option [ 133.272252][ T7689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.385396][ T7702] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1127'. [ 133.609527][ T7689] EXT4-fs (loop4): 1 truncate cleaned up [ 133.610994][ T7689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.097095][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 134.139222][ T7716] loop2: detected capacity change from 0 to 256 [ 134.162483][ T7716] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 134.785660][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.787135][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.789336][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.794883][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.923052][ T7741] loop3: detected capacity change from 0 to 512 [ 134.933468][ T7741] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.954423][ T7741] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 134.956250][ T7741] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 135.000757][ T7745] loop3: detected capacity change from 0 to 2048 [ 135.025123][ T7745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.163280][ T7754] loop0: detected capacity change from 0 to 512 [ 135.168905][ T7754] EXT4-fs: Ignoring removed i_version option [ 135.170013][ T7754] EXT4-fs: Ignoring removed nobh option [ 135.231511][ T7755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1144'. [ 135.457921][ T7754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.469787][ T7754] EXT4-fs (loop0): 1 truncate cleaned up [ 135.472990][ T7754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.024899][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 136.096682][ T7774] loop3: detected capacity change from 0 to 32768 [ 136.103170][ T7774] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.110160][ T7774] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 136.122446][ T7774] BTRFS error (device loop3): superblock checksum mismatch [ 136.127680][ T7774] BTRFS error (device loop3): open_ctree failed: -22 [ 136.247667][ T4643] udevd[4643]: incorrect btrfs checksum on /dev/loop3 [ 137.040625][ T7804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1162'. [ 137.313152][ T7814] loop4: detected capacity change from 0 to 512 [ 137.321079][ T7814] EXT4-fs: Ignoring removed i_version option [ 137.322266][ T7814] EXT4-fs: Ignoring removed nobh option [ 137.324160][ T7814] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.343147][ T7814] EXT4-fs (loop4): 1 truncate cleaned up [ 137.345234][ T7814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.802670][ T7823] loop3: detected capacity change from 0 to 256 [ 137.807406][ T7823] exfat: Deprecated parameter 'namecase' [ 137.808211][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.810042][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.825944][ T7825] syz.2.1170: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 137.829468][ T7825] CPU: 1 PID: 7825 Comm: syz.2.1170 Not tainted syzkaller #0 [ 137.830695][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 137.832378][ T7825] Call trace: [ 137.832913][ T7825] dump_backtrace+0x1c4/0x1f0 [ 137.833733][ T7825] show_stack+0x2c/0x3c [ 137.834410][ T7825] __dump_stack+0x30/0x40 [ 137.835148][ T7825] dump_stack_lvl+0xf4/0x15c [ 137.835969][ T7825] dump_stack+0x1c/0x5c [ 137.836716][ T7825] warn_alloc+0x214/0x324 [ 137.837486][ T7825] __vmalloc_node_range+0x118/0xe70 [ 137.838391][ T7825] vmalloc+0x9c/0xd4 [ 137.839012][ T7825] dvb_dvr_do_ioctl+0x120/0x1f8 [ 137.839779][ T7825] dvb_usercopy+0x248/0x45c [ 137.840537][ T7825] dvb_dvr_ioctl+0x3c/0x54 [ 137.841249][ T7825] __arm64_sys_ioctl+0x14c/0x1c8 [ 137.842104][ T7825] invoke_syscall+0x98/0x290 [ 137.842870][ T7825] el0_svc_common+0x13c/0x258 [ 137.843600][ T7825] do_el0_svc+0x5c/0x134 [ 137.844344][ T7825] el0_svc+0x58/0x128 [ 137.845028][ T7825] el0t_64_sync_handler+0x84/0xf0 [ 137.845868][ T7825] el0t_64_sync+0x18c/0x190 [ 137.850997][ T7825] Mem-Info: [ 137.851583][ T7825] active_anon:8417 inactive_anon:0 isolated_anon:0 [ 137.851583][ T7825] active_file:5465 inactive_file:2200 isolated_file:0 [ 137.851583][ T7825] unevictable:768 dirty:80 writeback:0 [ 137.851583][ T7825] slab_reclaimable:14701 slab_unreclaimable:92368 [ 137.851583][ T7825] mapped:32513 shmem:3919 pagetables:697 [ 137.851583][ T7825] sec_pagetables:0 bounce:0 [ 137.851583][ T7825] kernel_misc_reclaimable:0 [ 137.851583][ T7825] free:1449338 free_pcp:2202 free_cma:7360 [ 137.859458][ T7825] Node 0 active_anon:33668kB inactive_anon:0kB active_file:21860kB inactive_file:8800kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130052kB dirty:320kB writeback:0kB shmem:15676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9340kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 137.862706][ T7823] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 137.865818][ T7825] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 137.878989][ T7825] lowmem_reserve[]: 0 0 3551 3551 3551 [ 137.880233][ T7825] Node 0 Normal free:2719872kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:33668kB inactive_anon:0kB active_file:21860kB inactive_file:8800kB unevictable:3072kB writepending:320kB present:5242880kB managed:3640316kB mlocked:0kB bounce:0kB free_pcp:9104kB local_pcp:816kB free_cma:0kB [ 137.891957][ T7825] lowmem_reserve[]: 0 0 0 0 0 [ 137.892837][ T7825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 137.895319][ T7825] Node 0 Normal: 10*4kB (UM) 359*8kB (UME) 562*16kB (UME) 398*32kB (UME) 281*64kB (UME) 82*128kB (UME) 51*256kB (UME) 51*512kB (UME) 18*1024kB (UME) 16*2048kB (UME) 629*4096kB (M) = 2719872kB [ 137.906007][ T7825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.907716][ T7825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 137.913593][ T7825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 137.915339][ T7825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 137.917506][ T7825] 11542 total pagecache pages [ 137.918690][ T7825] 0 pages in swap cache [ 137.919423][ T7825] Free swap = 124740kB [ 137.920447][ T7825] Total swap = 124996kB [ 137.921959][ T7825] 2097152 pages RAM [ 137.924015][ T7825] 0 pages HighMem/MovableOnly [ 137.924909][ T7825] 417025 pages reserved [ 137.925685][ T7825] 8192 pages cma reserved [ 137.926536][ T7825] 1 pages hwpoisoned [ 138.025339][ T7836] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1175'. [ 138.160069][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 138.390550][ T4588] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 138.805371][ T4588] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 138.807226][ T4588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.808665][ T4588] usb 1-1: Product: syz [ 138.809452][ T4588] usb 1-1: Manufacturer: syz [ 138.810303][ T4588] usb 1-1: SerialNumber: syz [ 138.831549][ T4588] usb 1-1: config 0 descriptor?? [ 138.835757][ T4588] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 139.672698][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.674361][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.676935][ T7870] loop3: detected capacity change from 0 to 16 [ 139.691912][ T7870] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.780867][ T7874] loop2: detected capacity change from 0 to 512 [ 139.785928][ T7874] EXT4-fs: Ignoring removed i_version option [ 139.787430][ T7874] EXT4-fs: Ignoring removed nobh option [ 139.789627][ T7874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.794461][ T7874] EXT4-fs (loop2): 1 truncate cleaned up [ 139.795500][ T7874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.263206][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.264960][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.307494][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.309197][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.467146][ T4588] gspca_sunplus: reg_w_riv err -71 [ 140.469141][ T4588] sunplus: probe of 1-1:0.0 failed with error -71 [ 140.471395][ T4588] usb 1-1: USB disconnect, device number 18 [ 140.808256][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 141.169414][ T7905] loop4: detected capacity change from 0 to 4096 [ 141.230248][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.234242][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.352907][ T7913] loop0: detected capacity change from 0 to 512 [ 141.369141][ T7913] EXT4-fs: Ignoring removed i_version option [ 141.370254][ T7913] EXT4-fs: Ignoring removed nobh option [ 141.377316][ T7913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.401065][ T7913] EXT4-fs (loop0): 1 truncate cleaned up [ 141.402077][ T7913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.894892][ T7923] loop4: detected capacity change from 0 to 512 [ 141.901138][ T7923] EXT4-fs: Ignoring removed i_version option [ 141.902200][ T7923] EXT4-fs: Ignoring removed nobh option [ 141.907706][ T7923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.931435][ T7923] EXT4-fs (loop4): 1 truncate cleaned up [ 141.932567][ T7923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.391505][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 142.505761][ T7939] loop0: detected capacity change from 0 to 512 [ 142.512323][ T7939] EXT4-fs (loop0): Test dummy encryption mode enabled [ 142.515717][ T7939] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1211: inode has both inline data and extents flags [ 142.518229][ T7939] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1211: couldn't read orphan inode 15 (err -117) [ 142.520515][ T7939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.877786][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 142.938558][ T7951] loop4: detected capacity change from 0 to 64 [ 142.948908][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.950335][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.955767][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.957015][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.959136][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.960236][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.971700][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 142.977748][ T7951] hfs: request for non-existent node 131072 in B*Tree [ 143.075345][ T7963] loop4: detected capacity change from 0 to 1024 [ 143.089335][ T7963] __quota_error: 2 callbacks suppressed [ 143.089345][ T7963] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 143.093481][ T7963] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 143.098526][ T7963] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1218: Failed to acquire dquot type 0 [ 143.101919][ T7963] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 143.105780][ T7963] EXT4-fs (loop4): 1 truncate cleaned up [ 143.106712][ T7963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.131331][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 143.581380][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 144.454364][ T7984] loop4: detected capacity change from 0 to 164 [ 144.529938][ T7987] loop4: detected capacity change from 0 to 64 [ 144.537260][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.538528][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.540055][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.541285][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.543004][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.544130][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.545528][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.546627][ T7987] hfs: request for non-existent node 131072 in B*Tree [ 144.663409][ T7989] (syz.4.1227,7989,0):ocfs2_read_locked_inode:536 ERROR: bug expression: !!(fe->i_flags & cpu_to_le32(OCFS2_SYSTEM_FL)) != !!(args->fi_flags & OCFS2_FI_FLAG_SYSFILE) [ 144.666243][ T7989] (syz.4.1227,7989,0):ocfs2_read_locked_inode:536 ERROR: Inode 73: system file state is ambiguous [ 144.668111][ T7989] ------------[ cut here ]------------ [ 144.668983][ T7989] kernel BUG at fs/ocfs2/inode.c:536! [ 144.669995][ T7989] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 144.671208][ T7989] Modules linked in: [ 144.671836][ T7989] CPU: 0 PID: 7989 Comm: syz.4.1227 Not tainted syzkaller #0 [ 144.673050][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 144.674673][ T7989] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 144.675947][ T7989] pc : ocfs2_iget+0x179c/0x19a8 [ 144.676819][ T7989] lr : ocfs2_iget+0x1798/0x19a8 [ 144.677705][ T7989] sp : ffff8000219b6b20 [ 144.678418][ T7989] x29: ffff8000219b6d40 x28: ffff8000219b6b40 x27: 0000000000000000 [ 144.679834][ T7989] x26: dfff800000000000 x25: ffff700004336d68 x24: ffff0000d9152000 [ 144.681134][ T7989] x23: 0000000000000000 x22: ffff000100ba4200 x21: 00000000000000f8 [ 144.682505][ T7989] x20: 1000000000000000 x19: ffff800014d1238e x18: 1fffe00033e7ff7e [ 144.683721][ T7989] x17: 3a33372065646f6e x16: ffff800011b3e320 x15: 203633353a65646f [ 144.685080][ T7989] x14: 0000000000000001 x13: 1fffe00033e7ffa3 x12: 0000000000080000 [ 144.686518][ T7989] x11: 000000000002a78c x10: ffff80002cbad000 x9 : 0a77ce1fe051df00 [ 144.687927][ T7989] x8 : 0a77ce1fe051df00 x7 : 0000000000000001 x6 : 0000000000000001 [ 144.689336][ T7989] x5 : ffff8000219b64b8 x4 : ffff800015414e60 x3 : ffff8000085404d8 [ 144.690681][ T7989] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000005f [ 144.692100][ T7989] Call trace: [ 144.692670][ T7989] ocfs2_iget+0x179c/0x19a8 [ 144.693384][ T7989] ocfs2_get_system_file_inode+0x2e8/0x68c [ 144.694468][ T7989] ocfs2_mount_volume+0x2a4/0x126c [ 144.695347][ T7989] ocfs2_fill_super+0x2d8c/0x4198 [ 144.696241][ T7989] mount_bdev+0x264/0x35c [ 144.696957][ T7989] ocfs2_mount+0x44/0x58 [ 144.697737][ T7989] legacy_get_tree+0xd8/0x174 [ 144.698537][ T7989] vfs_get_tree+0x90/0x278 [ 144.699278][ T7989] do_new_mount+0x228/0x804 [ 144.700052][ T7989] path_mount+0x5ac/0xe6c [ 144.700773][ T7989] __arm64_sys_mount+0x4a0/0x5a0 [ 144.701569][ T7989] invoke_syscall+0x98/0x290 [ 144.702279][ T7989] el0_svc_common+0x13c/0x258 [ 144.703033][ T7989] do_el0_svc+0x5c/0x134 [ 144.703754][ T7989] el0_svc+0x58/0x128 [ 144.704377][ T7989] el0t_64_sync_handler+0x84/0xf0 [ 144.705222][ T7989] el0t_64_sync+0x18c/0x190 [ 144.705983][ T7989] Code: 52804302 f900a3f4 9404b8a0 39009335 (d4210000) [ 144.707200][ T7989] ---[ end trace 0000000000000000 ]--- [ 144.978413][ T7989] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 144.979548][ T7989] SMP: stopping secondary CPUs [ 144.980386][ T7989] Kernel Offset: disabled [ 144.981151][ T7989] CPU features: 0x0a0000,000f0097,a65bfea7 [ 144.982129][ T7989] Memory Limit: none [ 145.250245][ T7989] Rebooting in 86400 seconds..