last executing test programs: 3.312081779s ago: executing program 1 (id=1729): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close(r0) 3.127479544s ago: executing program 1 (id=1735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000004c0)=[{r1, 0xb046}, {r0, 0x27e2}], 0x2, 0x0, 0x0, 0x0) 2.227688956s ago: executing program 3 (id=1750): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=cp860,gid=ignore,dmode=00000000000\x00\x000000000000,shortad,nostrict,utf8,uid=ignore,novrs,longad,iocharset=cp852,undelete,nostrict,nostrict,uid=ignore,\x00'], 0x5, 0xc87, &(0x7f0000000780)="$eJzs3U1sHNd9APD/G5LiSm5jJk4VJ42DTVukMmO5+oopW4W7qmm2AWRZCMXcAnAlUurCFEmQVCMbbsv00kMPAYqih5yItkKBFA2Mpgh6ZFoXSC4+FDn1RLSwERQ9sEWAAC3SDWb2rbiiSOuDEkXJv59N/Xdn3pt5H6sZiuB/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/96ukjR9MWO/oeQmMAgF1xdvwrR45tdf8HAB5b57f79z8AAAAAAAAAAAAAALBXpCjiqUgxf3Y9TVbvO2pnWgNXr02Mjm1dbX+qavZV5cuv2tFjx0986YWRk914pjX7IfXvt8/E6+PnT9dfmbsyvzC9uDg9VZ+YbV2cm5q+4yPstP5mw9UA1K+8cXXq0qXF+rHnj9+0+9rQB4NPHBw6NfLs4We6ZSdGx8bGN4rUesv333NDOrbL8NgXRRyOFM9958epGRFF7Hwsars795vtrzoxXHViYnSs6shMqzm7VO481x2IIqLeU6nRHaOt5yL6B3a1D9trRCyXzS8bPFx2b3y+udC8MDNdP9dcWGotteZmz6VOa8v+1KOIkyliJSLWBm893EAU0R8pvvXkerqQn/pRjcMXq8Tg7dtRPMA+3oGynfWBiJXiEZizPWwwingtUvzk3UNxMV9nqmvNFyJeK+P3Iq6X8eWIVH4wTkS8v8XniEdTfxTxp+X8n1pPU9X1oHtdOfPV+pdnL831lO1eV+7y/nDLlWIX7g9/ucW2/Zvi7tjj16ZaFNGsrvjr6d6/2QEAAAAAAAAAAAAAAADgftsfRXw6Urz6r79f5RVHlZf+5KmR3xn6xd6c8advc5yy7PMRsVzcWU7uvpwYeC6dS+kh5xJ/lNWiiD/I+X/feNiNAQAAAAAAAAAAAAAAAAAA+Egr4keR4qX3DqWV6F1TvDV7uX6+eWGmsypsd+3f7prp7Xa7XU+d2MhxMsflHFdyXM1xLccocv0cGzlO5ric40onfqx7vrW8Pfpy/RwbOU7muJzjSo6rOa7lGP25fo6NHCdzXM5xJcfVHNdyjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Fim++fX1FCkiGhGT0Ymrgw+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaTAV8d1IUf/dxo1t/RGRqv87DpV/nIjGvjJ+IhojZXw5GqdzbFaxv/GNh9B+dmYgFfHDSDFYe+fGhOf5H+i8u/ExiOtvb7z7TH8n9nV3Dn0w+MTBJ0+NjH3u6e1ep60aMJxi9uq1+sTo2Nh4z+b+fPZP9Gwbyuct7k/XiYjFN996ozkzM71w7y/Kj8A9Vu/O5A7OvpsvUv9Dbur/74FBuLsXsdyZ4b3Snrt7Ef0P7+wP++/FzdeJ2m5fmNgV5f3//UjxG+/9W/eG37n/1+IXOu9u3OHjp3+4cf9/afOB7vD+37+53vCZVnn/L+8EW93/n+rZ9lL+bmSgP6K2dGV+4GBEbfHNtw63rjQvT1+enj1x5MiLIyMvHj8ysC+idqk1M93z6r4MFwAAAAAAAAAAAAAAAMDuSUX8VqRo/nA91SPiWpWvNXRq5NnDz/RFX5VvdVPe9uvj50/XX5m7Mr8wvbg4PVWfmG1dnJuavtPT1ap0r4nRsQfSmdva/4Dbv7/2ytz8mwuty7+3tOX+A7XTFxaXFpoXt94d+6OIaPRuGa4aPDE6VjV6ptWcraqe2zKZ/u4NpCL+PVJcPFFPn8/bcv7/5gz/uP72izc+C8ubD3TP+f+d/L/e/P/PHdjI//t4T9HynCkV8dNI8et/9nR8vmrngbhlzHK5v44Uwyc/m8vFvrJctw2d5wp0MgPLsv8dKf7+ZzeX7eZDPrVR9uhdDe4joJz/JyPFd//k2/EredvNz3/onf+N8Tuw+UD3cf6jJ//zkz3bDtz0vIIdd508/4cjxctPvRO/Wm353w99/kf3iQ2HOoU3ns/xgOb/l3q2DeXz/tr96jwAAAAAAAAAAMAjbCAV8TeR4vtj/emFvO1Ofv9vavOBHtDvf32qZ9vU/Vmv6LYvdjyoAAAAALBHDKQifhQpLi+9cyOH+ub87578z9/cyP8cTZv2Vj/n+1j13ID7+fO/XkP5vJM77zYAAAAAAAAAAAAAAAAAAADsKSkV8UJeT32yyuef2nY99dVI8ep/PpfLpYNlue468EPVn7Wzc7OHT8/MzNViqXlhZro+Pt+8OF3W/WSkWP+rz+a6RbW+ene9+c4a7xtrsS9EirG/7ZbtrMXeXZu8sx54rd2OOFqW/Xik+I+/u7lsXpo6rx1dHfdYWfYvIsXX/nHrsgc3yh4vy347Uvzga/Vu2QNl2e7zUT+1Ufb5i3PFA5gVAAAAAAAAAAAAAAAAAAAAPmoGUhF/HCn+68rKjVz+vP7/QM/byvW3e9b73+Ratc7/ULX+/3av72X9/+q5AsvbnRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4K1LMn11Pq4Pl+47amdbs1WsTo2NbV9ufqpp9Vfnyq3b02PETX3ph5GQ3fnj9++3T8fr4+dP1V+auzC9MLy5OT9UnZlsX56am7/gIO62/2XA1APUrb1ydunRpsX7s+eM37b429MHgEweHTo08e/iZbtmJ0bGx8Z4y/QP3fPZbpG2274si/jxSPPedH6fvD0YUsfOxuM1n50HbX3ViuOrExOhY1ZGZVnN2qdx5rjsQRUS9p1KjO0a3nYv/a7fbu9WVLTQilsvmlw0eLrs3Pt9caF6Yma6fay4stZZac7PnUqe1ZX/qUcTJFLESEWuDtx5uIIp4I1J868n19E+DEX3dcfji2fGvHDm2fTuKB9jHO1C2sz4QsVLcyZyxncEo4h8ixU/ePRT/PBjRH52v+ELEa2X8XsT16Mx3Kj8YJyLe3+JzxKOpP4r4n3L+T62ndwfL60H3unLmq/Uvz16a6ynbva7s8P7Qbrf/qIwP7/6wm/b4takWRfyguuKvp3/x9xoAAAAAAAAAAAAAAABgDynilyPFS+8dSlV+8I2c4tbs5fr55oWZTlpfN/evmzPdbrfb9dSJjRwnc1zOcSXH1RzXcowi18+xUcZauz2Z3y/nuJLjao5rOUZfrt9XpSu2G/n9ZI7LOa7kuJrjWo7Rn+vn2MhxMsflHFdyXM1xLcfYI7l7AAAAAAAAAAAAAAAAAADA46Wo/kvxza+vp/ZgZ33pyejEVeuBPvZ+HgAA//9+4PKL") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) 2.06957369s ago: executing program 1 (id=1751): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x0, 0x6, 0xffff}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.035137941s ago: executing program 1 (id=1753): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') 1.845549315s ago: executing program 1 (id=1755): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 1.665917829s ago: executing program 3 (id=1758): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a091030032980000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x240488d4}, 0x8020) 1.554718713s ago: executing program 4 (id=1760): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) 1.437939355s ago: executing program 3 (id=1763): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) 1.340451507s ago: executing program 4 (id=1765): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x3c, r0, 0x1, 0x71bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e71ae3b5febbf3eeb326c5f66b"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 1.340148377s ago: executing program 3 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xfb}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.263817799s ago: executing program 4 (id=1768): syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x480803) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 1.23619731s ago: executing program 0 (id=1769): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x4) 1.176695281s ago: executing program 3 (id=1770): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006e6f646973636172642c75737271756f74b23194d8726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f726e75652c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c0000000000000000d398e30e7cdc23a1553be48fabf3f19f3ca197da8932a8e170520258e19420036141172352466ff223e87948b103", @ANYRES8], 0x1, 0x62cd, &(0x7f00000042c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.107578473s ago: executing program 4 (id=1771): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x1000400, &(0x7f0000000200)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x1, 0x5cd, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/50, 0x32) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.092834783s ago: executing program 0 (id=1772): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 1.058079724s ago: executing program 0 (id=1773): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 889.603958ms ago: executing program 0 (id=1775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000001400), 0x1, 0x7b0, &(0x7f0000001c00)="$eJzs3c9rXNUeAPDvnSTNj/a95sGD175Ns3qvUDpp+/JaBcGICxEsFHRtGybTEDPJlMykNCELiwiCCFpcCLpx7Y+6cyu69m9wIyItVdNgpaCM3PmRTDL52WSS2nw+cJNz7o8553vvzDln5h5mAjiwBtI/mYjjEfFuEnG0vj6JiK5qqjNiuLbfg4X5XLokUam8/HNS3WdxYT4XTcekDtczxyLi6zcjTmVayy3Nzk2MFAr56Xp+sDx5bbA0O3d6fHJkLD+Wnzp/dmjo3IX/Xzi/e7H++u3ckbvvvfDfz4cfvvGv2+98k8RwHKlva45jtwzEQP2cdKWncIXnd7uwfZbsdwV4JOlLs6P2Ko/jcTQ6qikA4EmW9v8VAOCASfT/AHDAND4HWFyYzzWW/f1EYm/dey4iemrxN+5v1rZ01u/Z9VTvg/Ytpmu6lo7brftdAxHx0Zevfpou0ab7kABref1mRFzpH2ht/5OWOQvbdWYL+wysyjfK791h2cDmvkrHP0+tNf7LLI1/IjqibzFZMTOke43X7qMYiDjUnG8d/2TurHngs7tQeH3890xtblsaaNP4b2nSWn9HPfe3NHMiIsYL+bRt+3tEnIyu7qvjhfzZDco4ef+P++ttax7//XLrtU/S8tP/y3tk7nR2rzxmdKQ8spOYm927GfHvzuW5fQ9a2v+e6lh39fVP113a6IFPLCdffPqtD9fbLY0/jbextMbfXpWPI/4Ta8ffkGw4P3Ewvfxnan/XLuOL7z/oW6/85uufLmn5jfcCeyG9/n0bx9+fNM/XLO1u57x5/Gs//w8lr1TTjcbjxki5PH024lDyUuv6c8vHNvKN/dP4a5Gujj+z4fM/fSd4ZYsxdt796bNHj7+90vhHt3X9t5+4/WCiY73yt3b9h6qpk/U1W2n/tlrBnZw7AAAAAAAAAAAAAAAAAAAAAAAAANiqTEQciSSTXUpnMtls7Te8/xl9mUKxVD51tTgzNRrV38ruj65M46suj9bySeP7T/ub8udW5f8XEf+IiPe7e6v5bK5YGN3v4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7vA6v/+f+rF7v2sHALRNz6Z73M+vyFYqlUob6wMAtN/m/T8A8KTZoP/v3ct6AAB7x/t/ADh49P8AcPDo/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGizSxcvpkvlt4X5XJofvT47M1G8fno0X5rITs7ksrni9LXsWLE4Vshnc8XJzR6vUCxeG4qpmRuD5XypPFianbs8WZyZKl8enxwZy1/Od+1JVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwPaXZuYmRQiE//UQk3o6Ix6Aa7Ugk8VhUo+2J+L110w+nvzu20VG3NnkaD7e/8g8fg1O3k0RvvT1YXrPPDRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX8SfAQAA//+cwCLr") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000) 889.211678ms ago: executing program 4 (id=1776): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="30873fbc8711048bea9eb55574810b5cbc454ced5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90016069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602b80fbbf5d2af3b0c444c5b6315227c272020000000000000040bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e74b8cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10"], 0x21, 0x627f, &(0x7f0000001600)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x2004ca9, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) 734.790142ms ago: executing program 1 (id=1778): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, &(0x7f00000000c0)=0x18) 676.826404ms ago: executing program 2 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 504.445628ms ago: executing program 2 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x64}}, 0x0) 363.615881ms ago: executing program 2 (id=1781): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 274.695933ms ago: executing program 0 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x10}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xec}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 254.301384ms ago: executing program 2 (id=1783): setns(0xc9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 110.263567ms ago: executing program 0 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e00)={[{@mode={'mode', 0x3d, 0x82}}, {@session}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@volume={'volume', 0x3d, 0x1}}, {@shortad}, {@shortad}, {}, {}, {@adinicb}, {@gid_ignore}, {@partition={'partition', 0x3d, 0xe6}}, {@adinicb}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'utf8'}}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, '}-'}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000001800)={0xb6, 0x0, 0x4e}) 92.628617ms ago: executing program 3 (id=1785): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001080)=ANY=[]) 63.239309ms ago: executing program 2 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x4008000) 288.67µs ago: executing program 2 (id=1787): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 0s ago: executing program 4 (id=1788): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='./file1\x00', 0x1800892, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x2be, &(0x7f0000000740)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.904'. [ 123.576400][ T6570] set_capacity_and_notify: 3 callbacks suppressed [ 123.576416][ T6570] loop1: detected capacity change from 0 to 1024 [ 123.847546][ T156] hfsplus: b-tree write err: -5, ino 25 [ 123.853401][ T156] hfsplus: b-tree write err: -5, ino 4 [ 123.874711][ T156] hfsplus: b-tree write err: -5, ino 2 [ 123.918787][ T6566] loop0: detected capacity change from 0 to 40427 [ 123.921213][ T156] hfsplus: b-tree write err: -5, ino 26 [ 123.966684][ T6566] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 123.973064][ T6566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 124.056494][ T6566] F2FS-fs (loop0): invalid crc_offset: 1 [ 124.066574][ T6574] loop2: detected capacity change from 0 to 8192 [ 124.130339][ T6566] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 124.175667][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 124.360203][ T6566] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 124.378431][ T6566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.583564][ T4758] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 124.613634][ T4186] handle_bad_sector: 6 callbacks suppressed [ 124.613652][ T4186] attempt to access beyond end of device [ 124.613652][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 124.698242][ T6608] netlink: 642 bytes leftover after parsing attributes in process `syz.4.922'. [ 124.803452][ T6613] loop4: detected capacity change from 0 to 1024 [ 124.880100][ T6613] EXT4-fs (loop4): Ignoring removed orlov option [ 125.002591][ T4758] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.013942][ T4758] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.024147][ T4758] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.036312][ T6613] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none. [ 125.036634][ T4758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.110196][ T4758] hub 3-1:4.0: USB hub found [ 125.328258][ T6588] loop2: detected capacity change from 0 to 128 [ 125.438725][ T4758] hub 3-1:4.0: 2 ports detected [ 125.443826][ T4758] usb 3-1: selecting invalid altsetting 1 [ 125.461342][ T4758] hub 3-1:4.0: Using single TT (err -22) [ 125.555358][ T6645] loop0: detected capacity change from 0 to 512 [ 125.665886][ T6645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.937: bg 0: block 169: padding at end of block bitmap is not set [ 125.760768][ T6645] Quota error (device loop0): write_blk: dquota write failed [ 125.780839][ T6645] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 125.790822][ T6645] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.937: Failed to acquire dquot type 0 [ 125.796755][ T6647] loop4: detected capacity change from 0 to 32768 [ 125.854506][ T6647] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 125.865754][ T6632] loop3: detected capacity change from 0 to 32768 [ 125.883660][ T6632] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.931 (6632) [ 125.917013][ T6645] EXT4-fs (loop0): 1 truncate cleaned up [ 125.923248][ T6645] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.929893][ T6632] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 125.951781][ T6632] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.962365][ T6632] BTRFS info (device loop3): use zstd compression, level 3 [ 125.966197][ T4758] usb 3-1: USB disconnect, device number 10 [ 125.974978][ T6632] BTRFS info (device loop3): using free space tree [ 125.983428][ T6645] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.987077][ T6632] BTRFS info (device loop3): has skinny extents [ 126.008944][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 126.159444][ T6659] sctp: [Deprecated]: syz.4.939 (pid 6659) Use of int in max_burst socket option. [ 126.159444][ T6659] Use struct sctp_assoc_value instead [ 126.246823][ T6632] BTRFS info (device loop3): enabling ssd optimizations [ 126.319565][ T6675] loop1: detected capacity change from 0 to 128 [ 126.373622][ T26] audit: type=1800 audit(1785437938.725:59): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.931" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 126.438594][ T6675] hpfs: hpfs_map_sector(): read error [ 126.486078][ T6675] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 126.514333][ T6675] hpfs: hpfs_map_sector(): read error [ 126.613962][ T6684] loop0: detected capacity change from 0 to 512 [ 126.960384][ T6684] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.944: invalid indirect mapped block 4294967295 (level 1) [ 126.981791][ T6684] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.944: invalid indirect mapped block 4294967295 (level 1) [ 126.996541][ T6700] netlink: 128 bytes leftover after parsing attributes in process `syz.1.949'. [ 127.005710][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 127.058600][ T6684] EXT4-fs (loop0): 2 truncates cleaned up [ 127.080594][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,i_version,discard,noload,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 127.298757][ T6387] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.314400][ T6713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.495380][ T6705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.954 (6705) [ 127.543731][ T6705] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.554198][ T6705] BTRFS info (device loop2): setting nodatasum [ 127.565236][ T6387] usb 5-1: Using ep0 maxpacket: 16 [ 127.573330][ T6705] BTRFS info (device loop2): force zlib compression, level 3 [ 127.583550][ T6705] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 127.597844][ T6705] BTRFS info (device loop2): use lzo compression, level 0 [ 127.607200][ T6705] BTRFS info (device loop2): turning on flush-on-commit [ 127.618026][ T6705] BTRFS info (device loop2): enabling auto defrag [ 127.628412][ T6705] BTRFS info (device loop2): max_inline at 4096 [ 127.638397][ T6705] BTRFS info (device loop2): using free space tree [ 127.647806][ T6705] BTRFS info (device loop2): has skinny extents [ 127.652179][ T4761] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.697625][ T6387] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 127.714162][ T6387] usb 5-1: config 0 has no interface number 0 [ 127.733261][ T6387] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.772186][ T6387] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.816307][ T6717] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.872047][ T6705] BTRFS info (device loop2): enabling ssd optimizations [ 127.908177][ T6387] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.919014][ T6387] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.927607][ T6387] usb 5-1: Product: syz [ 127.932355][ T6387] usb 5-1: SerialNumber: syz [ 127.938612][ T6387] usb 5-1: config 0 descriptor?? [ 127.984714][ T6387] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 128.003937][ T6387] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 128.074419][ T4761] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.096800][ T4761] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.130981][ T4761] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.140391][ T4761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.199148][ T6715] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.238273][ T6701] udc-core: couldn't find an available UDC or it's busy [ 128.268591][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 128.275650][ T6701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.480017][ T4232] usb 5-1: USB disconnect, device number 8 [ 128.486195][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.486399][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 128.512941][ T4232] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 128.687316][ T6748] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.759565][ T6746] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 128.772392][ T6746] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.826996][ T6754] netlink: 72 bytes leftover after parsing attributes in process `syz.3.963'. [ 129.169437][ T6773] set_capacity_and_notify: 5 callbacks suppressed [ 129.169454][ T6773] loop3: detected capacity change from 0 to 1024 [ 129.262751][ T6773] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.971: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.319982][ T6773] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 129.328227][ T6773] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.971: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.372377][ T6773] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 129.415750][ T6773] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.971: Failed to acquire dquot type 0 [ 129.445080][ T6773] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 129.465133][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 129.492054][ T6773] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.971: mark_inode_dirty error [ 129.507711][ T6788] device hsr0 entered promiscuous mode [ 129.526286][ T6773] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 129.554481][ T6773] EXT4-fs (loop3): 1 orphan inode deleted [ 129.560277][ T6773] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 129.583460][ T156] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.584147][ T156] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 129.659568][ T156] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 129.707729][ T6773] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.971: Invalid inode table block 1 in block_group 0 [ 129.724881][ T6773] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 129.743107][ T6773] EXT4-fs error (device loop3): ext4_setattr:5490: inode #2: comm syz.3.971: mark_inode_dirty error [ 129.845915][ T6794] loop2: detected capacity change from 0 to 256 [ 129.853096][ T156] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.860880][ T6786] loop4: detected capacity change from 0 to 32768 [ 129.874698][ T156] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 129.883629][ T156] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 129.897947][ T4191] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 129.912536][ T4191] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 129.925769][ T4191] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 130.007922][ T7] usb 1-1: USB disconnect, device number 10 [ 130.014397][ T6786] XFS (loop4): Mounting V5 Filesystem [ 130.132404][ T6786] XFS (loop4): Ending clean mount [ 130.145330][ T6786] XFS (loop4): Quotacheck needed: Please wait. [ 130.234659][ T6786] XFS (loop4): Quotacheck: Done. [ 130.342515][ T4194] XFS (loop4): Unmounting Filesystem [ 130.549396][ T6711] block2mtd: error: cannot open device /dev/ [ 130.667041][ T6819] loop8: detected capacity change from 0 to 7 [ 130.704441][ T6819] Dev loop8: unable to read RDB block 7 [ 130.712038][ T6819] loop8: unable to read partition table [ 130.718004][ T6819] loop8: partition table beyond EOD, truncated [ 130.726137][ T6819] loop_reread_partitions: partition scan of loop8 (þèxü^) failed (rc=-5) [ 130.802229][ T4489] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.907905][ T6825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.024886][ T6825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.026747][ T6823] loop4: detected capacity change from 0 to 40427 [ 131.056605][ T6823] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 131.072543][ T4489] usb 3-1: Using ep0 maxpacket: 16 [ 131.086669][ T6823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.108685][ T6823] F2FS-fs (loop4): invalid crc value [ 131.139635][ T6823] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.203193][ T4489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.212138][ T6823] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.219492][ T4489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.221216][ T6823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.236824][ T4489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.253847][ T4489] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.278801][ T4489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.291721][ T4489] usb 3-1: config 0 descriptor?? [ 131.313265][ T6825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.314934][ T6823] attempt to access beyond end of device [ 131.314934][ T6823] loop4: rw=2049, want=45112, limit=40427 [ 131.434617][ T6825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.566479][ T6825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.609521][ T6825] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.629482][ T6825] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.645159][ T6825] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.813120][ T4489] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 131.913804][ T6851] loop1: detected capacity change from 0 to 1024 [ 131.998787][ T6857] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1004'. [ 132.035383][ T4489] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 132.058831][ T6851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.065423][ T4489] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 132.120311][ T4489] microsoft 0003:045E:07DA.000A: no inputs found [ 132.140948][ T4489] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 132.160186][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 132.192495][ T4489] usb 3-1: USB disconnect, device number 11 [ 132.346311][ T6870] loop4: detected capacity change from 0 to 2048 [ 132.383742][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 132.477576][ T6870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.591189][ T154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 132.614775][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.646313][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.646313][ T154] [ 132.666936][ T154] EXT4-fs (loop4): Total free blocks count 0 [ 132.672954][ T154] EXT4-fs (loop4): Free/Dirty block details [ 132.694595][ T154] EXT4-fs (loop4): free_blocks=66060288 [ 132.708193][ T154] EXT4-fs (loop4): dirty_blocks=32 [ 132.713434][ T154] EXT4-fs (loop4): Block reservation details [ 132.725702][ T154] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 132.739498][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 132.772520][ T4489] Bluetooth: hci4: command 0x0411 tx timeout [ 132.777327][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.777327][ T154] [ 132.884560][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1021'. [ 133.167694][ T6918] loop2: detected capacity change from 0 to 256 [ 133.593723][ T6943] loop3: detected capacity change from 0 to 256 [ 133.610516][ T6945] loop0: detected capacity change from 0 to 512 [ 133.708107][ T6943] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.763072][ T6943] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 133.767406][ T6945] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 133.841908][ T6943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.924891][ T6945] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1033: bad orphan inode 15 [ 133.992227][ T6954] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 134.057863][ T6945] ext4_test_bit(bit=14, block=18) = 1 [ 134.063274][ T6945] is_bad_inode(inode)=0 [ 134.076315][ T6943] exFAT-fs (loop3): hint_cluster is invalid (17) [ 134.091011][ T6945] NEXT_ORPHAN(inode)=1023 [ 134.109507][ T6945] max_ino=32 [ 134.112739][ T6945] i_nlink=0 [ 134.137515][ T6943] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 134.162131][ T6943] exFAT-fs (loop3): Filesystem has been set read-only [ 134.181406][ T6940] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.215720][ T6945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1033: bg 0: block 161: padding at end of block bitmap is not set [ 134.248390][ T6931] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1025 (6931) [ 134.312608][ T6945] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.334908][ T6931] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 134.347924][ T6931] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.358724][ T6931] BTRFS info (device loop2): use zstd compression, level 3 [ 134.366560][ T6931] BTRFS info (device loop2): using free space tree [ 134.404829][ T6945] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nolazytime,,errors=continue. Quota mode: none. [ 134.423992][ T6931] BTRFS info (device loop2): has skinny extents [ 134.443330][ T6945] ext2 filesystem being mounted at /161/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 134.584236][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 134.730659][ T6982] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.877367][ T6931] BTRFS info (device loop2): enabling ssd optimizations [ 134.896593][ T6998] set_capacity_and_notify: 3 callbacks suppressed [ 134.896608][ T6998] loop4: detected capacity change from 0 to 64 [ 134.994981][ T26] audit: type=1800 audit(1785437946.779:60): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1025" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 135.034309][ T6998] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 135.124248][ T4228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.299130][ T7011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1053'. [ 135.361456][ T7016] loop4: detected capacity change from 0 to 2048 [ 135.423612][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 135.508861][ T7016] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.559092][ T4180] udevd[4180]: incorrect nilfs2 checksum on /dev/loop4 [ 135.566341][ T4228] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 135.594726][ T7016] NILFS (loop4): mounting unchecked fs [ 135.598836][ T7023] netlink: 'syz.2.1051': attribute type 12 has an invalid length. [ 135.632379][ T7023] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 135.666491][ T7016] NILFS (loop4): recovery complete [ 135.674010][ T7023] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1051'. [ 135.691577][ T7029] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.712939][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 135.734001][ T7030] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.770374][ T7032] loop1: detected capacity change from 0 to 16 [ 135.776919][ T4228] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 135.778658][ T7029] exFAT-fs (loop0): unable to read boot sector [ 135.799868][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.846316][ T7029] exFAT-fs (loop0): failed to read boot sector [ 135.849043][ T4228] usb 4-1: Product: syz [ 135.855787][ T7029] exFAT-fs (loop0): failed to recognize exfat type [ 135.859813][ T4228] usb 4-1: Manufacturer: syz [ 135.881411][ T4228] usb 4-1: SerialNumber: syz [ 135.886353][ T7032] erofs: (device loop1): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 135.927314][ T7032] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.938696][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.960663][ T4228] usb 4-1: config 0 descriptor?? [ 136.013009][ T4228] usb 4-1: bad CDC descriptors [ 136.018320][ T4228] usb 4-1: unsupported MDLM descriptors [ 136.288922][ T7049] kvm [7048]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xfffffffffffffff7 [ 136.321425][ T4231] usb 4-1: USB disconnect, device number 7 [ 136.484743][ T7062] loop4: detected capacity change from 0 to 2048 [ 136.563473][ T7062] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.584168][ T7066] netlink: 'syz.1.1073': attribute type 14 has an invalid length. [ 136.787874][ T7043] loop0: detected capacity change from 0 to 32768 [ 136.832691][ T7043] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1062 (7043) [ 136.917220][ T7043] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 136.927298][ T7079] loop4: detected capacity change from 0 to 1024 [ 136.931070][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.947516][ T7043] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.959892][ T7043] BTRFS info (device loop0): use zstd compression, level 3 [ 136.971939][ T7043] BTRFS info (device loop0): using free space tree [ 136.982496][ T7043] BTRFS info (device loop0): has skinny extents [ 137.056896][ T7079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.211485][ T7043] BTRFS info (device loop0): enabling ssd optimizations [ 137.348099][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.361631][ T26] audit: type=1800 audit(1785437949.005:61): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1062" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 137.374354][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.458646][ T21] usb 3-1: config 0 descriptor?? [ 137.499177][ T21] cp210x 3-1:0.0: cp210x converter detected [ 137.584965][ T7116] loop3: detected capacity change from 0 to 512 [ 137.696928][ T7116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.722134][ T7116] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.895026][ T26] audit: type=1800 audit(1785437949.501:62): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1088" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 137.957399][ T21] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 137.984546][ T7128] loop4: detected capacity change from 0 to 128 [ 137.990520][ T7107] loop1: detected capacity change from 0 to 40427 [ 138.014533][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 138.033881][ T7107] F2FS-fs (loop1): invalid crc value [ 138.124693][ T7107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.274408][ T4231] usb 3-1: USB disconnect, device number 12 [ 138.310096][ T7107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.342908][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.380450][ T4231] cp210x 3-1:0.0: device disconnected [ 138.413854][ T7147] loop3: detected capacity change from 0 to 2048 [ 138.512687][ T7149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.545050][ T4189] attempt to access beyond end of device [ 138.545050][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 139.084189][ T7166] block device autoloading is deprecated and will be removed. [ 139.163880][ T7175] MTRR 1 not used [ 139.389982][ T7178] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 139.399502][ T7178] REISERFS (device loop3): using ordered data mode [ 139.406223][ T7178] reiserfs: using flush barriers [ 139.412577][ T7178] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.430672][ T7178] REISERFS (device loop3): checking transaction log (loop3) [ 139.440666][ T7178] REISERFS (device loop3): Using r5 hash to sort names [ 139.448581][ T7178] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 139.511938][ T7186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 139.820408][ T7195] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 139.858173][ T7198] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.879765][ T7195] UDF-fs: Scanning with blocksize 512 failed [ 139.904201][ T7195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.906176][ T7198] exFAT-fs (loop3): unable to read boot sector [ 139.980916][ T7198] exFAT-fs (loop3): failed to read boot sector [ 140.031213][ T7198] exFAT-fs (loop3): failed to recognize exfat type [ 140.124111][ T7208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.615563][ T7239] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 140.615563][ T7239] The task syz.1.1134 (7239) triggered the difference, watch for misbehavior. [ 140.652974][ T7241] set_capacity_and_notify: 3 callbacks suppressed [ 140.652989][ T7241] loop4: detected capacity change from 0 to 256 [ 140.701384][ T7212] loop0: detected capacity change from 0 to 32768 [ 140.727870][ T7241] exfat: Deprecated parameter 'utf8' [ 140.736166][ T7241] exfat: Deprecated parameter 'namecase' [ 140.740728][ T7212] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1126 (7212) [ 140.797300][ T7241] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 140.823360][ T7212] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 140.847303][ T7212] BTRFS info (device loop0): setting nodatasum [ 140.861900][ T7212] BTRFS info (device loop0): force zlib compression, level 3 [ 140.875906][ T4298] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 140.899848][ T7212] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.952631][ T7212] BTRFS info (device loop0): use lzo compression, level 0 [ 140.979933][ T7212] BTRFS info (device loop0): turning on flush-on-commit [ 140.988511][ T7212] BTRFS info (device loop0): enabling auto defrag [ 140.995431][ T7212] BTRFS info (device loop0): max_inline at 4096 [ 141.010885][ T7212] BTRFS info (device loop0): using free space tree [ 141.046828][ T7212] BTRFS info (device loop0): has skinny extents [ 141.054960][ T7250] loop4: detected capacity change from 0 to 128 [ 141.143151][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 141.153506][ T7250] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.187500][ T7250] hpfs: filesystem error: improperly stopped [ 141.198035][ T7250] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.205947][ T7250] hpfs: You really don't want any checks? You are crazy... [ 141.214036][ T7250] hpfs: hpfs_map_sector(): read error [ 141.225608][ T7250] hpfs: code page support is disabled [ 141.231362][ T7212] BTRFS info (device loop0): enabling ssd optimizations [ 141.232190][ T7250] hpfs: hpfs_map_4sectors(): unaligned read [ 141.270102][ T7250] hpfs: hpfs_map_4sectors(): unaligned read [ 141.271555][ T4298] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 141.361066][ T7250] hpfs: filesystem error: unable to find root dir [ 141.457553][ T4298] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.493610][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.521447][ T7250] hpfs: hpfs_map_4sectors(): unaligned read [ 141.527722][ T4298] usb 3-1: Product: syz [ 141.532572][ T4298] usb 3-1: Manufacturer: syz [ 141.533620][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4180) [ 141.554420][ T7275] program syz.1.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.571041][ T4298] usb 3-1: SerialNumber: syz [ 141.572897][ T7276] loop3: detected capacity change from 0 to 128 [ 141.582935][ T7250] hpfs: hpfs_map_sector(): read error [ 141.603733][ T4298] usb 3-1: config 0 descriptor?? [ 141.650637][ T7276] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.668872][ T4298] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 141.708600][ T4298] usb 3-1: setting power ON [ 141.735517][ T4298] dvb-usb: bulk message failed: -22 (2/0) [ 141.844374][ T4298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.887292][ T7238] dvb-usb: bulk message failed: -22 (3/0) [ 141.926815][ T4298] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 141.942543][ T7238] dvb-usb: bulk message failed: -22 (5/0) [ 141.971341][ T4298] usb 3-1: media controller created [ 142.040496][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.131585][ T4298] usb 3-1: selecting invalid altsetting 6 [ 142.143854][ T7291] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1152'. [ 142.147986][ T4298] usb 3-1: digital interface selection failed (-22) [ 142.185939][ T4298] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 142.250056][ T4298] usb 3-1: setting power OFF [ 142.303496][ T4298] dvb-usb: bulk message failed: -22 (2/0) [ 142.336286][ T4298] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 142.353053][ T4234] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 142.367363][ T4298] (NULL device *): no alternate interface [ 142.387068][ T4234] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.455530][ T4298] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 142.556475][ T4298] usb 3-1: USB disconnect, device number 13 [ 142.572767][ T7310] loop4: detected capacity change from 0 to 1024 [ 142.705940][ T7307] fido_id[7307]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.774822][ T4212] hfsplus: b-tree write err: -5, ino 25 [ 142.789687][ T4212] hfsplus: b-tree write err: -5, ino 4 [ 142.795293][ T4212] hfsplus: b-tree write err: -5, ino 2 [ 143.002183][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 143.105434][ T7331] loop4: detected capacity change from 0 to 128 [ 143.181245][ T7331] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 143.202969][ T7326] loop0: detected capacity change from 0 to 4096 [ 143.236031][ T7331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.254993][ T7326] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 143.381113][ T26] audit: type=1800 audit(1785437954.636:63): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1169" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 143.714418][ T7312] loop3: detected capacity change from 0 to 32768 [ 143.892931][ T7312] JBD2: Ignoring recovery information on journal [ 144.052068][ T7312] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.166659][ T7348] loop0: detected capacity change from 0 to 512 [ 144.222370][ T7348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.274612][ T7348] EXT4-fs (loop0): 1 truncate cleaned up [ 144.296830][ T7348] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,noblock_validity,. Quota mode: none. [ 144.318245][ T7333] loop2: detected capacity change from 0 to 32768 [ 144.346793][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 144.347545][ T7348] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.1175: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 144.392149][ T7348] EXT4-fs (loop0): Remounting filesystem read-only [ 144.404312][ T7348] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 144.422941][ T7348] EXT4-fs (loop0): Remounting filesystem read-only [ 144.447964][ T7348] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.1175: Deleting old file: nlink 4, error=-117 [ 144.478129][ T7333] JBD2: Ignoring recovery information on journal [ 144.529670][ T7325] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 144.639206][ T7325] F2FS-fs (loop1): invalid crc value [ 144.705419][ T7325] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.713072][ T7333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.896120][ T7333] (syz.2.1170,7333,1):ocfs2_remove_inode_range:1797 ERROR: status = -22 [ 144.905444][ T7325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.939654][ T7333] (syz.2.1170,7333,1):__ocfs2_change_file_space:2048 ERROR: status = -22 [ 145.075344][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 145.148519][ T4189] attempt to access beyond end of device [ 145.148519][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 145.333968][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.527535][ T7365] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1181 (7365) [ 145.590325][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 145.606043][ T7365] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 145.653745][ T7365] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.718817][ T21] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.737203][ T7365] BTRFS info (device loop4): use zstd compression, level 3 [ 145.746202][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.765300][ T21] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.780943][ T7365] BTRFS info (device loop4): using free space tree [ 145.787583][ T7365] BTRFS info (device loop4): has skinny extents [ 145.799338][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.810178][ T21] usb 1-1: config 0 descriptor?? [ 145.821430][ T7386] exfat: Deprecated parameter 'utf8' [ 145.843398][ T7386] exfat: Deprecated parameter 'namecase' [ 145.849665][ T7386] exfat: Deprecated parameter 'namecase' [ 145.910833][ T7386] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 146.131995][ T7365] BTRFS info (device loop4): enabling ssd optimizations [ 146.216554][ T26] audit: type=1800 audit(1785437957.283:64): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 146.406381][ T21] mcp2221 0003:04D8:00DD.000C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 146.460333][ T7406] set_capacity_and_notify: 3 callbacks suppressed [ 146.460348][ T7406] loop1: detected capacity change from 0 to 32768 [ 146.697564][ T7406] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.868053][ T4235] usb 1-1: USB disconnect, device number 11 [ 146.967944][ T26] audit: type=1800 audit(1785437957.985:65): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1191" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 147.042042][ T7406] syz.1.1191 (7406) used greatest stack depth: 16064 bytes left [ 147.089153][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 147.158653][ T7433] input: syz1 as /devices/virtual/input/input13 [ 147.881972][ T7460] loop4: detected capacity change from 0 to 4096 [ 147.922766][ T7440] loop3: detected capacity change from 0 to 32768 [ 148.013133][ T7460] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 148.032509][ T7440] XFS (loop3): Mounting V5 Filesystem [ 148.164698][ T7440] XFS (loop3): Ending clean mount [ 148.209649][ T7460] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 148.239061][ T7440] XFS (loop3): Quotacheck needed: Please wait. [ 148.374311][ T7440] XFS (loop3): Quotacheck: Done. [ 148.396064][ T7454] loop0: detected capacity change from 0 to 40427 [ 148.404122][ T4194] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 148.457283][ T4194] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 148.466841][ T7454] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 148.505199][ T7454] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.551175][ T7454] F2FS-fs (loop0): invalid crc value [ 148.578257][ T4191] XFS (loop3): Unmounting Filesystem [ 148.604593][ T7454] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.767344][ T7454] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.768925][ T7484] program syz.4.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.784685][ T7454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 148.913762][ T7478] attempt to access beyond end of device [ 148.913762][ T7478] loop0: rw=2049, want=45104, limit=40427 [ 148.967143][ T7492] loop4: detected capacity change from 0 to 1024 [ 149.041521][ T7492] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 149.102386][ T1111] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.375043][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 149.545971][ T1111] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.598222][ T7505] loop4: detected capacity change from 0 to 512 [ 149.759804][ T1111] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.779759][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.810422][ T1111] usb 3-1: Product: syz [ 149.815170][ T1111] usb 3-1: Manufacturer: syz [ 149.820129][ T1111] usb 3-1: SerialNumber: syz [ 149.884844][ T1111] usb 3-1: config 0 descriptor?? [ 149.931060][ T7488] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.957391][ T1111] hub 3-1:0.0: bad descriptor, ignoring hub [ 149.965466][ T1111] hub: probe of 3-1:0.0 failed with error -5 [ 150.069785][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.177717][ T7518] loop4: detected capacity change from 0 to 8 [ 150.358357][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 150.451888][ T7513] loop0: detected capacity change from 0 to 40427 [ 150.488077][ T7525] loop3: detected capacity change from 0 to 128 [ 150.497477][ T21] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 150.523148][ T7513] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.533167][ T1111] usb 3-1: USB disconnect, device number 14 [ 150.549089][ T7513] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.567132][ T26] audit: type=1800 audit(1785437961.352:66): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1236" name="file1" dev="loop3" ino=1048655 res=0 errno=0 [ 150.608028][ T7525] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 150.610370][ T7513] F2FS-fs (loop0): invalid crc value [ 150.656831][ T7525] FAT-fs (loop3): Filesystem has been set read-only [ 150.668530][ T21] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 150.678099][ T7513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.690388][ T7525] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 150.699632][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.721224][ T21] usb 2-1: Product: syz [ 150.726049][ T21] usb 2-1: Manufacturer: syz [ 150.737166][ T21] usb 2-1: SerialNumber: syz [ 150.767104][ T21] usb 2-1: config 0 descriptor?? [ 150.824815][ T7513] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.833792][ T21] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 150.850772][ T7513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.866418][ T21] usb 2-1: setting power ON [ 150.881906][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 150.915074][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.948265][ T7536] loop3: detected capacity change from 0 to 1024 [ 150.963096][ T21] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 150.975389][ T7536] EXT4-fs (loop3): Ignoring removed bh option [ 150.976350][ T21] usb 2-1: media controller created [ 151.040937][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.064559][ T7511] dvb-usb: bulk message failed: -22 (3/0) [ 151.074984][ T7536] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 151.101347][ T7511] dvb-usb: bulk message failed: -22 (5/0) [ 151.113821][ T7536] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz.3.1239: path /279/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 151.186146][ T7536] EXT4-fs (loop3): Remounting filesystem read-only [ 151.197161][ T21] usb 2-1: selecting invalid altsetting 6 [ 151.219339][ T4191] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 151.223985][ T21] usb 2-1: digital interface selection failed (-22) [ 151.261705][ T21] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 151.300551][ T7532] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1238 (7532) [ 151.310090][ T21] usb 2-1: setting power OFF [ 151.352593][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 151.376469][ T21] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 151.409441][ T21] (NULL device *): no alternate interface [ 151.471311][ T7532] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.487260][ T21] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 151.523935][ T7532] BTRFS info (device loop4): force zlib compression, level 3 [ 151.537264][ T21] usb 2-1: USB disconnect, device number 8 [ 151.571683][ T7532] BTRFS info (device loop4): turning on flush-on-commit [ 151.590924][ T7532] BTRFS info (device loop4): max_inline at 4096 [ 151.597226][ T7532] BTRFS info (device loop4): using free space tree [ 151.620255][ T7532] BTRFS info (device loop4): has skinny extents [ 151.649403][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1246'. [ 151.813663][ T7532] BTRFS info (device loop4): enabling ssd optimizations [ 151.867244][ T7564] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.984337][ T7564] hpfs: filesystem error: improperly stopped [ 151.990372][ T7564] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.068168][ T7578] ubi31: attaching mtd0 [ 152.069727][ T7564] hpfs: You really don't want any checks? You are crazy... [ 152.093262][ T7564] hpfs: hpfs_map_sector(): read error [ 152.098673][ T7564] hpfs: code page support is disabled [ 152.115985][ T7564] hpfs: hpfs_map_4sectors(): unaligned read [ 152.129612][ T7564] hpfs: hpfs_map_4sectors(): unaligned read [ 152.143830][ T7564] hpfs: filesystem error: unable to find root dir [ 152.152454][ T7578] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 152.219126][ T7564] hpfs: hpfs_map_4sectors(): unaligned read [ 152.227804][ T7564] hpfs: hpfs_map_sector(): read error [ 152.375661][ T7576] set_capacity_and_notify: 2 callbacks suppressed [ 152.375677][ T7576] loop0: detected capacity change from 0 to 32768 [ 152.461495][ T7583] loop3: detected capacity change from 0 to 256 [ 152.481489][ T7576] JBD2: Ignoring recovery information on journal [ 152.527499][ T7576] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 152.596270][ T7589] loop2: detected capacity change from 0 to 2048 [ 152.646156][ T4764] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 152.658066][ T7589] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.660950][ T7583] FAT-fs (loop3): Directory bread(block 64) failed [ 152.707266][ T7589] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.707439][ T7583] FAT-fs (loop3): Directory bread(block 65) failed [ 152.733160][ T7589] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 152.751706][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 152.778873][ T7583] FAT-fs (loop3): Directory bread(block 66) failed [ 152.799057][ T7583] FAT-fs (loop3): Directory bread(block 67) failed [ 152.799714][ T7589] UDF-fs: Scanning with blocksize 512 failed [ 152.838106][ T7583] FAT-fs (loop3): Directory bread(block 68) failed [ 152.848681][ T7589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.859594][ T7583] FAT-fs (loop3): Directory bread(block 69) failed [ 152.879013][ T7583] FAT-fs (loop3): Directory bread(block 70) failed [ 152.892162][ T7583] FAT-fs (loop3): Directory bread(block 71) failed [ 152.904120][ T7583] FAT-fs (loop3): Directory bread(block 72) failed [ 152.918735][ T7583] FAT-fs (loop3): Directory bread(block 73) failed [ 152.968653][ T26] audit: type=1800 audit(1785437963.606:67): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1251" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 153.063708][ T7594] loop4: detected capacity change from 0 to 8192 [ 153.095368][ T4764] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.141571][ T7594] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 153.151236][ T4764] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.172191][ T7594] REISERFS (device loop4): using ordered data mode [ 153.179289][ T7594] reiserfs: using flush barriers [ 153.199438][ T7594] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.234297][ T4764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.278925][ T7594] REISERFS (device loop4): checking transaction log (loop4) [ 153.365918][ T7607] loop3: detected capacity change from 0 to 2048 [ 153.437451][ T4764] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 153.447094][ T4764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.452605][ T7607] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x0000000000000003,. Quota mode: none. [ 153.529936][ T7607] EXT4-fs error (device loop3): ext4_find_extent:893: inode #2: comm syz.3.1260: inode has invalid extent depth: 8 [ 153.547932][ T4764] usb 2-1: Product: syz [ 153.558871][ T4764] usb 2-1: Manufacturer: syz [ 153.563491][ T4764] usb 2-1: SerialNumber: syz [ 153.611489][ T4764] usb 2-1: config 0 descriptor?? [ 153.660354][ T7619] loop2: detected capacity change from 0 to 256 [ 153.666836][ T7607] EXT4-fs (loop3): Remounting filesystem read-only [ 153.677669][ T7607] EXT4-fs error (device loop3): ext4_find_extent:893: inode #2: comm syz.3.1260: inode has invalid extent depth: 8 [ 153.701902][ T7607] EXT4-fs (loop3): Remounting filesystem read-only [ 153.720990][ T7594] REISERFS (device loop4): Using rupasov hash to sort names [ 153.729364][ T7594] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 153.775720][ T7621] loop0: detected capacity change from 0 to 1024 [ 153.909887][ T4764] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 153.918500][ T4764] imon 2-1:0.0: unable to initialize intf0, err -90 [ 153.956338][ T4764] imon:imon_probe: failed to initialize context! [ 153.974091][ T4764] imon 2-1:0.0: unable to register, err -19 [ 154.006561][ T4764] usb 2-1: USB disconnect, device number 9 [ 154.151330][ T7632] loop2: detected capacity change from 0 to 256 [ 154.444656][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 154.670527][ T7634] loop3: detected capacity change from 0 to 32768 [ 154.692018][ T7634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1274 (7634) [ 154.730813][ T4764] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.742161][ T7634] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 154.751668][ T7634] BTRFS info (device loop3): using free space tree [ 154.760008][ T7634] BTRFS info (device loop3): has skinny extents [ 154.780240][ T7645] loop0: detected capacity change from 0 to 32768 [ 154.855420][ T7645] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1277 (7645) [ 154.960219][ T6440] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (6440) [ 154.983461][ T7634] BTRFS info (device loop3): enabling ssd optimizations [ 155.013794][ T4764] usb 3-1: Using ep0 maxpacket: 32 [ 155.175397][ T4764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.198360][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4180) [ 155.222076][ T4764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.266987][ T7670] hfsplus: invalid length 1280 has been corrected to 255 [ 155.290429][ T4764] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 155.320763][ T7670] hfsplus: invalid length 1280 has been corrected to 255 [ 155.333388][ T4764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.359785][ T4764] usb 3-1: config 0 descriptor?? [ 155.502028][ T144] hfsplus: invalid length 1280 has been corrected to 255 [ 155.893693][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.930401][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.956706][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.964396][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.981999][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.990258][ T4764] uclogic 0003:2179:0053.000D: unknown main item tag 0x0 [ 155.998615][ T4764] uclogic 0003:2179:0053.000D: No inputs registered, leaving [ 156.038507][ T7696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.044665][ T4764] uclogic 0003:2179:0053.000D: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.2-1/input0 [ 156.082571][ T7700] UBIFS error (pid: 7700): cannot open "c:::", error -22 [ 156.147875][ T7696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.190616][ T4481] usb 3-1: USB disconnect, device number 15 [ 156.218681][ T7703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.240229][ T7705] fido_id[7705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 156.332168][ T7696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.453327][ T7696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.526029][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1297'. [ 156.559544][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1297'. [ 156.583373][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1297'. [ 156.598265][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1297'. [ 156.626877][ T7696] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.677815][ T7696] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.701706][ T7696] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.738814][ T7696] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.870635][ T7711] JBD2: Ignoring recovery information on journal [ 157.004368][ T7711] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 157.259026][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 157.631757][ T7720] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 157.762539][ T7720] JBD2: Ignoring recovery information on journal [ 157.776467][ T7729] set_capacity_and_notify: 7 callbacks suppressed [ 157.776483][ T7729] loop0: detected capacity change from 0 to 40427 [ 157.836287][ T7729] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 157.856347][ T7720] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.857428][ T7732] loop1: detected capacity change from 0 to 32768 [ 157.905041][ T7758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.906026][ T7729] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.969506][ T7732] [ 157.969506][ T7732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.969506][ T7732] [ 158.009935][ T7729] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.022312][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 158.046324][ T7758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.075689][ T4481] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.120576][ T7729] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 158.127769][ T7729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.179769][ T7758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.231492][ T7732] [ 158.231492][ T7732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.231492][ T7732] [ 158.254743][ T7730] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 158.256560][ T7732] [ 158.256560][ T7732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.256560][ T7732] [ 158.312442][ T7732] [ 158.312442][ T7732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.312442][ T7732] [ 158.325176][ T7758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.342004][ T4481] usb 4-1: Using ep0 maxpacket: 32 [ 158.367517][ T278] [ 158.367517][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.367517][ T278] [ 158.432652][ T4189] [ 158.432652][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.432652][ T4189] [ 158.457752][ T4189] [ 158.457752][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.457752][ T4189] [ 158.472729][ T4481] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 158.492721][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.514513][ T4481] usb 4-1: config 0 descriptor?? [ 158.542630][ T7758] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.618149][ T7758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.653885][ T7758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.710896][ T7758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.780629][ T7770] loop0: detected capacity change from 0 to 8192 [ 158.801040][ T7770] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 158.821247][ T7770] REISERFS (device loop0): using ordered data mode [ 158.828072][ T4481] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 158.836054][ T7770] reiserfs: using flush barriers [ 158.845678][ T7770] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.865169][ T7770] REISERFS (device loop0): checking transaction log (loop0) [ 158.877722][ T7770] REISERFS (device loop0): Using r5 hash to sort names [ 158.879370][ T4481] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.899981][ T7770] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 158.924516][ T4481] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 158.987614][ T4481] usb 4-1: media controller created [ 159.046684][ T4481] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.050475][ T7780] loop1: detected capacity change from 0 to 4096 [ 159.055624][ T7755] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 159.119456][ T7780] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 159.146268][ T4481] az6027: usb out operation failed. (-71) [ 159.208407][ T4481] az6027: usb out operation failed. (-71) [ 159.223213][ T7780] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 159.232291][ T4481] stb0899_attach: Driver disabled by Kconfig [ 159.238808][ T4481] az6027: no front-end attached [ 159.238808][ T4481] [ 159.293896][ T4481] az6027: usb out operation failed. (-71) [ 159.299895][ T4481] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 159.308106][ T4189] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 159.325907][ T4189] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 159.347766][ T4481] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 159.375817][ T4481] dvb-usb: schedule remote query interval to 400 msecs. [ 159.400853][ T4481] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 159.435195][ T4481] usb 4-1: USB disconnect, device number 8 [ 159.706193][ T4481] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.717583][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 159.744425][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 159.754008][ T7801] netlink: 'syz.2.1331': attribute type 19 has an invalid length. [ 159.812823][ T7807] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 159.909060][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.956188][ T7807] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.999832][ T7808] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 160.040866][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1334'. [ 160.075004][ T7808] device batadv0 entered promiscuous mode [ 160.197179][ T7822] loop0: detected capacity change from 0 to 512 [ 160.256386][ T7808] bond0: (slave batadv0): Releasing backup interface [ 160.285294][ T7822] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1340: inode has both inline data and extents flags [ 160.354063][ T7822] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1340: couldn't read orphan inode 15 (err -117) [ 160.402163][ T7822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.491116][ T7808] bridge0: port 3(batadv0) entered blocking state [ 160.503772][ T7808] bridge0: port 3(batadv0) entered disabled state [ 160.654265][ T7810] loop2: detected capacity change from 0 to 40427 [ 160.737734][ T7021] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.747766][ T7021] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.760366][ T7810] F2FS-fs (loop2): invalid crc value [ 160.827144][ T7810] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 161.005595][ T7847] netlink: 'syz.1.1350': attribute type 29 has an invalid length. [ 161.027760][ T7847] netlink: 'syz.1.1350': attribute type 29 has an invalid length. [ 161.164648][ T7810] F2FS-fs (loop2): Start checkpoint disabled! [ 161.216146][ T7810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e7 [ 161.263871][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 161.461372][ T3040] attempt to access beyond end of device [ 161.461372][ T3040] loop2: rw=2049, want=45104, limit=40427 [ 161.497589][ T7866] loop4: detected capacity change from 0 to 2048 [ 161.617667][ T7866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.765793][ T7878] netlink: 14752 bytes leftover after parsing attributes in process `syz.1.1366'. [ 161.972317][ T7852] loop0: detected capacity change from 0 to 32768 [ 161.988031][ T7884] loop1: detected capacity change from 0 to 512 [ 162.054190][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.107495][ T4298] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.179657][ T7892] loop2: detected capacity change from 0 to 256 [ 162.191657][ T7884] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1368: invalid indirect mapped block 256 (level 2) [ 162.252307][ T7884] EXT4-fs (loop1): Remounting filesystem read-only [ 162.283316][ T7884] EXT4-fs (loop1): 2 truncates cleaned up [ 162.298996][ T7884] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 162.327239][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 162.378257][ T7892] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 162.473178][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.513922][ T4298] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 162.606876][ T7888] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 162.616866][ T7888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 162.674474][ T7888] F2FS-fs (loop0): invalid crc value [ 162.684858][ T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.694867][ T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.706131][ T4298] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 162.709480][ T7] usb 4-1: Product: syz [ 162.722365][ T7] usb 4-1: Manufacturer: syz [ 162.722467][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.727227][ T7] usb 4-1: SerialNumber: syz [ 162.746145][ T4298] usb 5-1: Product: syz [ 162.750472][ T7888] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 162.761866][ T7] usb 4-1: config 0 descriptor?? [ 162.767166][ T4298] usb 5-1: Manufacturer: syz [ 162.776144][ T4298] usb 5-1: SerialNumber: syz [ 162.781355][ T7876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.804052][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 162.817622][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 162.834348][ T7888] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 162.846505][ T7888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.905156][ T4766] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 162.925597][ T7888] attempt to access beyond end of device [ 162.925597][ T7888] loop0: rw=16812033, want=78672, limit=40427 [ 162.992873][ T4186] attempt to access beyond end of device [ 162.992873][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 163.155163][ T7905] set_capacity_and_notify: 1 callbacks suppressed [ 163.155181][ T7905] loop2: detected capacity change from 0 to 64 [ 163.219563][ T4298] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.253196][ T4298] usb 5-1: unit 2 not found! [ 163.279463][ T4298] disable ehci-hcd to run US-144 [ 163.314924][ T4298] usb 5-1: USB disconnect, device number 9 [ 163.369183][ T4766] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 163.377385][ T4766] usb 2-1: config 0 has no interface number 0 [ 163.428053][ T7909] loop0: detected capacity change from 0 to 1024 [ 163.495852][ T4479] usb 4-1: USB disconnect, device number 9 [ 163.591649][ T7021] hfsplus: b-tree write err: -5, ino 25 [ 163.600349][ T7021] hfsplus: b-tree write err: -5, ino 4 [ 163.613383][ T7021] hfsplus: b-tree write err: -5, ino 2 [ 163.614943][ T4766] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 163.620708][ T7021] hfsplus: b-tree write err: -5, ino 26 [ 163.630596][ T6440] udevd[6440]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.684063][ T4766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.691050][ T7915] loop2: detected capacity change from 0 to 512 [ 163.692512][ T4766] usb 2-1: Product: syz [ 163.704515][ T4766] usb 2-1: Manufacturer: syz [ 163.709190][ T4766] usb 2-1: SerialNumber: syz [ 163.732016][ T4766] usb 2-1: config 0 descriptor?? [ 164.054784][ T4766] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 164.074599][ T4768] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.082683][ T4766] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 164.096043][ T4766] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 164.104028][ T4766] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 164.113417][ T4766] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 164.243992][ T7931] loop4: detected capacity change from 0 to 32768 [ 164.287071][ T7931] [ 164.287071][ T7931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.287071][ T7931] [ 164.344120][ T7931] [ 164.344120][ T7931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.344120][ T7931] [ 164.354751][ T7931] [ 164.354751][ T7931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.354751][ T7931] [ 164.363033][ T4768] usb 1-1: Using ep0 maxpacket: 16 [ 164.365329][ T7931] [ 164.365329][ T7931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.365329][ T7931] [ 164.381687][ T278] [ 164.381687][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.381687][ T278] [ 164.411240][ T4194] [ 164.411240][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.411240][ T4194] [ 164.423366][ T4194] [ 164.423366][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.423366][ T4194] [ 164.503132][ T4768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.514236][ T4768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.525121][ T4768] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 164.539080][ T4768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.549633][ T4768] usb 1-1: config 0 descriptor?? [ 164.644635][ T7939] loop4: detected capacity change from 0 to 4096 [ 164.674781][ T4298] usb 2-1: USB disconnect, device number 10 [ 164.685973][ T4298] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 164.699563][ T4298] keyspan 2-1:0.133: device disconnected [ 164.767514][ T7940] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.806354][ T26] audit: type=1800 audit(1785437974.672:68): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1388" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 164.946992][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 165.028775][ T7950] loop2: detected capacity change from 0 to 256 [ 165.051750][ T4768] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 165.143847][ T7953] loop3: detected capacity change from 0 to 2048 [ 165.235169][ T7953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.279721][ T7959] loop2: detected capacity change from 0 to 256 [ 165.293377][ T4768] corsair 0003:1B1C:1B02.000E: Read invalid backlight brightness: 57. [ 165.381946][ T7966] loop1: detected capacity change from 0 to 256 [ 165.422608][ T7966] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.428106][ T7968] loop3: detected capacity change from 0 to 1024 [ 165.573631][ T7968] hfsplus: xattr searching failed [ 165.587989][ T6387] usb 1-1: USB disconnect, device number 12 [ 165.646064][ T4298] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.695977][ T7021] hfsplus: bad catalog file entry [ 165.706234][ T7970] fido_id[7970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 165.726259][ T7021] hfsplus: b-tree write err: -5, ino 3 [ 165.943807][ T7979] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.974919][ T7979] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.041580][ T4298] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 166.049744][ T4298] usb 5-1: config 0 has no interface number 0 [ 166.102204][ T4298] usb 5-1: config 0 interface 56 has no altsetting 0 [ 166.320011][ T4298] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 166.354961][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.372567][ T4298] usb 5-1: Product: syz [ 166.388861][ T4298] usb 5-1: Manufacturer: syz [ 166.397295][ T4298] usb 5-1: SerialNumber: syz [ 166.408600][ T4298] usb 5-1: config 0 descriptor?? [ 166.687020][ T4235] usb 5-1: USB disconnect, device number 10 [ 166.760386][ T8024] sctp: [Deprecated]: syz.1.1425 (pid 8024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.760386][ T8024] Use struct sctp_sack_info instead [ 166.897404][ T4298] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.970614][ T8038] mmap: syz.1.1432 (8038) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 167.069706][ T8039] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.158746][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 167.241969][ T8050] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 167.367537][ T4298] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 167.399008][ T4298] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 167.416552][ T8055] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 167.578104][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 167.603003][ T8070] netlink: 'syz.3.1446': attribute type 6 has an invalid length. [ 167.634716][ T4298] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.643809][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.684246][ T4298] usb 1-1: Product: syz [ 167.691208][ T4298] usb 1-1: Manufacturer: syz [ 167.726777][ T4298] usb 1-1: SerialNumber: syz [ 167.793813][ T8076] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 168.094351][ T4298] cdc_ncm 1-1:1.0: bind() failure [ 168.103437][ T4298] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 168.129643][ T8090] netlink: 'syz.1.1455': attribute type 5 has an invalid length. [ 168.145513][ T4298] cdc_ncm 1-1:1.1: bind() failure [ 168.190457][ T4298] usb 1-1: USB disconnect, device number 13 [ 168.521872][ T6387] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.679817][ T8122] set_capacity_and_notify: 7 callbacks suppressed [ 168.679833][ T8122] loop4: detected capacity change from 0 to 128 [ 168.698980][ T8109] ntfs3: loop1: failed to convert "0080" to maciceland [ 168.752183][ T8122] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 168.949698][ T6387] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 168.972673][ T6387] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.014106][ T6387] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.097214][ T8140] loop2: detected capacity change from 0 to 2048 [ 169.182092][ T8145] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.206080][ T6387] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.215156][ T6387] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 169.248780][ T6387] usb 4-1: Product: syz [ 169.256371][ T6387] usb 4-1: SerialNumber: syz [ 169.292109][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.327913][ T6387] cdc_ncm 4-1:1.0: skipping garbage [ 169.333158][ T6387] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 169.359546][ T6387] cdc_ncm 4-1:1.0: bind() failure [ 169.425771][ T8132] loop1: detected capacity change from 0 to 32768 [ 169.462739][ T4768] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.559501][ T8154] loop2: detected capacity change from 0 to 4096 [ 169.648022][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.652677][ T8154] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 169.751119][ T4768] usb 1-1: Using ep0 maxpacket: 8 [ 169.901548][ T4768] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.917272][ T6387] usb 4-1: USB disconnect, device number 10 [ 169.934793][ T4768] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.955499][ T4768] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.981149][ T4768] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.013051][ T4768] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.014344][ T8166] loop2: detected capacity change from 0 to 1024 [ 170.028249][ T4768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.099424][ T8169] loop1: detected capacity change from 0 to 256 [ 170.234659][ T8169] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 170.328850][ T4768] usb 1-1: GET_CAPABILITIES returned 0 [ 170.334701][ T4768] usbtmc 1-1:16.0: can't read capabilities [ 170.402217][ T8178] loop2: detected capacity change from 0 to 2048 [ 170.407690][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.465810][ T8181] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.580609][ T1111] usb 1-1: USB disconnect, device number 14 [ 170.593937][ T8185] Invalid ELF header len 1 [ 171.166983][ T8212] program syz.2.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.198174][ T8214] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1514'. [ 171.516559][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.546678][ T8211] loop3: detected capacity change from 0 to 16384 [ 171.550087][ T8220] loop1: detected capacity change from 0 to 4096 [ 171.655486][ T8229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.710105][ T8220] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.723351][ T8231] loop0: detected capacity change from 0 to 1024 [ 171.765324][ T8220] ntfs3: loop1: Failed to load $Extend. [ 171.813157][ T8231] EXT4-fs (loop0): Ignoring removed orlov option [ 171.847627][ T8231] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.910812][ T8231] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.916441][ T4189] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 171.952713][ T4189] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 171.979890][ T8231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1521: Invalid inode table block 0 in block_group 0 [ 172.039700][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.046741][ T8231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 172.067475][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.078068][ T8231] EXT4-fs error (device loop0): ext4_quota_write:6648: inode #3: comm syz.0.1521: mark_inode_dirty error [ 172.111043][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.150825][ T8231] Quota error (device loop0): write_blk: dquota write failed [ 172.172345][ T8231] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 172.194840][ T8231] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1521: Failed to acquire dquot type 0 [ 172.217653][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.236190][ T8231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1521: Invalid inode table block 0 in block_group 0 [ 172.289920][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.297035][ T8231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 172.333530][ T8216] F2FS-fs (loop2): invalid crc value [ 172.348105][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.364041][ T8216] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 172.396744][ T8231] EXT4-fs error (device loop0): ext4_ext_truncate:4487: inode #15: comm syz.0.1521: mark_inode_dirty error [ 172.444662][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.461295][ T8231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1521: Invalid inode table block 0 in block_group 0 [ 172.499102][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.505655][ T8231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 172.531483][ T8228] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 172.580709][ T8228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.597587][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.604148][ T8231] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 172.627362][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.643543][ T8228] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 172.651822][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.658519][ T8216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.669229][ T8231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1521: Invalid inode table block 0 in block_group 0 [ 172.742927][ T8228] F2FS-fs (loop4): invalid crc value [ 172.751651][ T8216] attempt to access beyond end of device [ 172.751651][ T8216] loop2: rw=2049, want=45104, limit=40427 [ 172.770149][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.778662][ T8228] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 172.797975][ T8231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 172.832990][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.839567][ T8231] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.1521: mark_inode_dirty error [ 172.872131][ T8258] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.894325][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.899892][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.929517][ T8231] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 172.941575][ T4197] attempt to access beyond end of device [ 172.941575][ T4197] loop2: rw=2049, want=45112, limit=40427 [ 172.951023][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 172.989841][ T8231] EXT4-fs (loop0): 1 truncate cleaned up [ 173.005864][ T8231] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,errors=remount-ro,lazytime,data_err=ignore,noblock_validity,minixdf,orlov,. Quota mode: writeback. [ 173.033880][ T8228] F2FS-fs (loop4): Start checkpoint disabled! [ 173.120052][ T8228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 173.127133][ T8228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 173.191577][ T8231] EXT4-fs (loop0): shut down requested (2) [ 173.219023][ T8228] attempt to access beyond end of device [ 173.219023][ T8228] loop4: rw=10241, want=45104, limit=40427 [ 173.335583][ T144] attempt to access beyond end of device [ 173.335583][ T144] loop4: rw=2049, want=45112, limit=40427 [ 173.476389][ T8275] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.717420][ T6387] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.777928][ T8277] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.782849][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.804869][ T8282] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.848662][ T8282] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 174.118418][ T6387] usb 1-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 174.149894][ T6387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.258379][ T4768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.259850][ T6387] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.279834][ T8294] set_capacity_and_notify: 6 callbacks suppressed [ 174.279844][ T8294] loop3: detected capacity change from 0 to 4096 [ 174.292869][ T6387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.300960][ T6387] usb 1-1: SerialNumber: syz [ 174.438642][ T8300] loop2: detected capacity change from 0 to 512 [ 174.467951][ T4235] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.549539][ T8300] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1551: inode has both inline data and extents flags [ 174.582972][ T8300] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1551: couldn't read orphan inode 15 (err -117) [ 174.599505][ T8308] loop1: detected capacity change from 0 to 128 [ 174.609191][ T6387] usb 1-1: 0:2 : does not exist [ 174.609528][ T8300] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.614242][ T6387] usb 1-1: unit 111 not found! [ 174.683107][ T6387] usb 1-1: unit 99 not found! [ 174.688008][ T6387] usb 1-1: unit 229 not found! [ 174.701711][ T8312] loop3: detected capacity change from 0 to 512 [ 174.733752][ T8308] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 174.754475][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 174.763864][ T6387] usb 1-1: USB disconnect, device number 15 [ 174.803171][ T8312] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.869688][ T8312] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.891929][ T4235] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 174.938215][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.027872][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.064565][ T4235] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 175.073814][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.109329][ T4235] usb 5-1: Product: syz [ 175.113537][ T4235] usb 5-1: Manufacturer: syz [ 175.130516][ T4235] usb 5-1: SerialNumber: syz [ 175.146508][ T4235] usb 5-1: config 0 descriptor?? [ 175.195906][ T4235] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 175.221141][ T4235] dvb-usb: bulk message failed: -22 (2/0) [ 175.274869][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.333687][ T8333] loop3: detected capacity change from 0 to 128 [ 175.342704][ T4235] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 175.361622][ T4235] usb 5-1: media controller created [ 175.403272][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.415059][ T8296] cxusb: i2c rd: len=80 is too big! [ 175.415059][ T8296] [ 175.430171][ T8333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.486834][ T8333] hpfs: filesystem error: improperly stopped [ 175.502195][ T4235] usb 5-1: selecting invalid altsetting 7 [ 175.511747][ T8333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.519034][ T4235] cxusb: set interface failed [ 175.555734][ T8333] hpfs: You really don't want any checks? You are crazy... [ 175.568320][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 175.596743][ T8333] hpfs: hpfs_map_sector(): read error [ 175.615584][ T8333] hpfs: code page support is disabled [ 175.634937][ T4235] DVB: Unable to find symbol lgdt330x_attach() [ 175.637101][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 175.641265][ T4235] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 175.673076][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 175.699174][ T8333] hpfs: filesystem error: unable to find root dir [ 175.815589][ T8361] loop1: detected capacity change from 0 to 4096 [ 175.855599][ T4235] rc_core: IR keymap rc-dvico-portable not found [ 175.864401][ T4235] Registered IR keymap rc-empty [ 175.871225][ T8361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.899381][ T4235] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 175.937276][ T4235] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 175.948918][ T8361] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 175.993775][ T4235] dvb-usb: schedule remote query interval to 100 msecs. [ 176.000915][ T6387] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 176.093707][ T4235] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 176.136991][ T4768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.168974][ T4235] usb 5-1: USB disconnect, device number 11 [ 176.177817][ T8378] loop4: detected capacity change from 0 to 256 [ 176.203373][ T8379] loop3: detected capacity change from 0 to 4096 [ 176.209695][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.261212][ T8378] FAT-fs (loop4): Directory bread(block 64) failed [ 176.276247][ T8378] FAT-fs (loop4): Directory bread(block 65) failed [ 176.286532][ T8378] FAT-fs (loop4): Directory bread(block 66) failed [ 176.300071][ T8379] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.304554][ T6387] usb 1-1: Using ep0 maxpacket: 16 [ 176.318526][ T8378] FAT-fs (loop4): Directory bread(block 67) failed [ 176.336150][ T8378] FAT-fs (loop4): Directory bread(block 68) failed [ 176.337269][ T4235] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 176.354502][ T8378] FAT-fs (loop4): Directory bread(block 69) failed [ 176.361843][ T8378] FAT-fs (loop4): Directory bread(block 70) failed [ 176.368467][ T8378] FAT-fs (loop4): Directory bread(block 71) failed [ 176.375258][ T8378] FAT-fs (loop4): Directory bread(block 72) failed [ 176.381968][ T1111] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.393541][ T8378] FAT-fs (loop4): Directory bread(block 73) failed [ 176.475680][ T4479] Bluetooth: hci1: command 0x0406 tx timeout [ 176.482002][ T6387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.503115][ T6387] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.544020][ T6387] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.561229][ T6387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.580636][ T4479] Bluetooth: hci2: command 0x0406 tx timeout [ 176.587664][ T4479] Bluetooth: hci3: command 0x0406 tx timeout [ 176.594161][ T6387] usb 1-1: config 0 descriptor?? [ 176.657778][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 176.718446][ T8390] i2c i2c-0: new_device: Can't parse I2C address [ 176.833571][ T1111] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.844164][ T1111] usb 3-1: config 0 has no interface number 0 [ 176.953149][ T8397] loop4: detected capacity change from 0 to 2048 [ 177.003089][ T8397] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: none. [ 177.018386][ T8397] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.048762][ T8397] fs-verity (loop4, inode 18): Unknown hash algorithm number: 0 [ 177.092370][ T1111] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 177.101737][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.110538][ T1111] usb 3-1: Product: syz [ 177.114704][ T1111] usb 3-1: Manufacturer: syz [ 177.129894][ T1111] usb 3-1: SerialNumber: syz [ 177.149955][ T1111] usb 3-1: config 0 descriptor?? [ 177.194802][ T1111] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.334482][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.419010][ T1111] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 177.431685][ T1111] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 177.525708][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1593'. [ 177.565966][ T4764] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.700840][ T8416] program syz.3.1595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.833307][ T4764] usb 2-1: Using ep0 maxpacket: 16 [ 177.884221][ T1111] usb 3-1: USB disconnect, device number 16 [ 177.908142][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 177.918222][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.940786][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.954446][ T1111] quatech2 3-1:0.51: device disconnected [ 177.982996][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.994953][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.005208][ T4764] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 178.014346][ T4764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.024709][ T4764] usb 2-1: config 0 descriptor?? [ 178.414455][ T8427] loop4: detected capacity change from 0 to 128 [ 178.442943][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.563650][ T4764] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 178.601432][ T8433] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.603366][ T8427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.623990][ T8427] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.796063][ T4764] corsair 0003:1B1C:1B02.000F: Read invalid backlight brightness: 57. [ 179.052001][ T6387] usbhid 1-1:0.0: can't add hid device: -71 [ 179.058050][ T6387] usbhid: probe of 1-1:0.0 failed with error -71 [ 179.102662][ T6387] usb 1-1: USB disconnect, device number 16 [ 179.133081][ T4235] usb 2-1: USB disconnect, device number 11 [ 179.402827][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.445986][ T8457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.488792][ T8456] attempt to access beyond end of device [ 179.488792][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 179.513868][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 179.536693][ T8456] attempt to access beyond end of device [ 179.536693][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 179.555776][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 179.568889][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.595414][ T8456] attempt to access beyond end of device [ 179.595414][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 179.607588][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 179.623770][ T8445] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 179.652490][ T8456] attempt to access beyond end of device [ 179.652490][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 179.682781][ T8445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.726485][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 179.738030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.752469][ T8445] F2FS-fs (loop4): invalid crc value [ 179.795572][ T8445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.898447][ T8456] attempt to access beyond end of device [ 179.898447][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 179.971453][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.010822][ T8445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.035608][ T8456] attempt to access beyond end of device [ 180.035608][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 180.047511][ T8445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.110340][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.130306][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'. [ 180.148221][ T8456] attempt to access beyond end of device [ 180.148221][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 180.179384][ T8469] attempt to access beyond end of device [ 180.179384][ T8469] loop4: rw=2049, want=45104, limit=40427 [ 180.185150][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.233755][ T8445] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 180.278588][ T8445] CPU: 0 PID: 8445 Comm: syz.4.1604 Not tainted syzkaller #0 [ 180.286003][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.296070][ T8445] Call Trace: [ 180.299349][ T8445] [ 180.302273][ T8445] dump_stack_lvl+0x188/0x250 [ 180.306967][ T8445] ? show_regs_print_info+0x20/0x20 [ 180.312158][ T8445] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 180.317961][ T8445] ? unlock_page+0x17c/0x1f0 [ 180.322544][ T8445] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 180.327908][ T8445] f2fs_map_blocks+0xc34/0x3630 [ 180.332781][ T8445] ? f2fs_force_buffered_io+0x680/0x680 [ 180.338324][ T8445] ? xa_load+0x276/0x2a0 [ 180.342561][ T8445] f2fs_mpage_readpages+0xcaf/0x22a0 [ 180.347860][ T8445] ? dquot_release_reservation_block+0xa0/0xa0 [ 180.354016][ T8445] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 180.360162][ T8445] ? f2fs_readahead+0x163/0x2f0 [ 180.365001][ T8445] ? f2fs_set_data_page_dirty+0xae0/0xae0 [ 180.370723][ T8445] read_pages+0x172/0x920 [ 180.375067][ T8445] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 180.380710][ T8445] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 180.386174][ T8445] page_cache_ra_unbounded+0x7f4/0x8f0 [ 180.391649][ T8445] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 180.398144][ T8445] ? blk_cgroup_congested+0x30b/0x390 [ 180.403517][ T8445] f2fs_readdir+0x496/0xd90 [ 180.408033][ T8445] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 180.413223][ T8445] ? end_current_label_crit_section+0x14b/0x170 [ 180.419458][ T8445] ? iterate_dir+0x10d/0x550 [ 180.424042][ T8445] ? down_read_killable+0x1ce/0x340 [ 180.429233][ T8445] ? fsnotify_perm+0x254/0x560 [ 180.433989][ T8445] iterate_dir+0x213/0x550 [ 180.438396][ T8445] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 180.443611][ T8445] __se_sys_getdents64+0xf2/0x270 [ 180.449586][ T8445] ? __x64_sys_getdents64+0x80/0x80 [ 180.454769][ T8445] ? filldir+0x700/0x700 [ 180.459007][ T8445] ? lockdep_hardirqs_on+0x94/0x140 [ 180.464201][ T8445] do_syscall_64+0x4c/0xa0 [ 180.468612][ T8445] ? clear_bhb_loop+0x30/0x80 [ 180.473276][ T8445] ? clear_bhb_loop+0x30/0x80 [ 180.477952][ T8445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.483848][ T8445] RIP: 0033:0x7f2cd9b62019 [ 180.488256][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.507857][ T8445] RSP: 002b:00007f2cd7dba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 180.516272][ T8445] RAX: ffffffffffffffda RBX: 00007f2cd9de9fa0 RCX: 00007f2cd9b62019 [ 180.524240][ T8445] RDX: 000000000000005e RSI: 0000200000000280 RDI: 0000000000000005 [ 180.532203][ T8445] RBP: 00007f2cd9bf900c R08: 0000000000000000 R09: 0000000000000000 [ 180.540165][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.548124][ T8445] R13: 00007f2cd9dea038 R14: 00007f2cd9de9fa0 R15: 00007fff9c9f12c8 [ 180.556101][ T8445] [ 180.571946][ T8486] set_capacity_and_notify: 4 callbacks suppressed [ 180.571960][ T8486] loop2: detected capacity change from 0 to 4096 [ 180.578455][ T8456] attempt to access beyond end of device [ 180.578455][ T8456] loop3: rw=0, want=281474976710724, limit=2048 [ 180.597265][ T8445] attempt to access beyond end of device [ 180.597265][ T8445] loop4: rw=524288, want=45072, limit=40427 [ 180.608113][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.618155][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.633255][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.644741][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.660034][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.675146][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.699472][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.708286][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.723686][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.735300][ T8456] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 180.748601][ T26] audit: type=1800 audit(1785437989.582:69): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1612" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 180.825059][ T8495] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.799173][ T8499] loop3: detected capacity change from 0 to 131072 [ 181.815723][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.840084][ T8494] loop1: detected capacity change from 0 to 32768 [ 181.938575][ T4235] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 181.953115][ T8499] F2FS-fs (loop3): invalid crc value [ 181.960962][ T8494] JBD2: Ignoring recovery information on journal [ 181.979646][ T8514] loop4: detected capacity change from 0 to 136 [ 182.007029][ T8499] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.039086][ T8499] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 182.068576][ T8494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.082989][ T8499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 182.126717][ T8514] Attempt to read inode for relocated directory [ 182.205853][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 182.235190][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 182.334168][ T4235] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.367084][ T4235] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 182.406774][ T4235] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 182.427828][ T4235] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.460982][ T8507] loop0: detected capacity change from 0 to 40427 [ 182.531793][ T8507] F2FS-fs (loop0): invalid crc value [ 182.548019][ T4235] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.590340][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.607646][ T8507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.633778][ T4235] usb 3-1: SerialNumber: syz [ 182.640552][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.654994][ T8509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.691115][ T8529] loop4: detected capacity change from 0 to 4096 [ 182.695308][ T8509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.740984][ T4235] hub 3-1:1.0: bad descriptor, ignoring hub [ 182.747149][ T4235] hub: probe of 3-1:1.0 failed with error -5 [ 182.766772][ T8532] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.794602][ T8507] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 182.821787][ T8534] loop1: detected capacity change from 0 to 512 [ 182.828881][ T8507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 182.890665][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.000655][ T8509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.029081][ T8509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.065539][ T8534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.098700][ T8534] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.317595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.358410][ T8551] overlayfs: failed to clone upperpath [ 183.543495][ T8559] loop3: detected capacity change from 0 to 64 [ 183.563208][ T4235] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 183.665639][ T4191] hfs: node 4:3 still has 1 user(s)! [ 183.800591][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1653'. [ 183.916520][ T4764] usb 3-1: USB disconnect, device number 17 [ 183.923713][ T4764] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 183.942433][ T4235] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.010917][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.185797][ T8592] loop3: detected capacity change from 0 to 256 [ 184.237735][ T8592] exfat: Deprecated parameter 'utf8' [ 184.298860][ T8592] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 184.322419][ T4481] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.397660][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.493633][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.525429][ T4235] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.531810][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.535467][ T4235] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 184.579010][ T4481] usb 5-1: Using ep0 maxpacket: 8 [ 184.629081][ T4235] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 184.691635][ T4235] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 184.707451][ T4481] usb 5-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.727393][ T4235] usb 1-1: config 1 interface 1 has no altsetting 0 [ 184.736294][ T4481] usb 5-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.769989][ T4481] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.791610][ T4481] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 184.811916][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.845606][ T4481] usb 5-1: config 0 descriptor?? [ 184.870508][ T8627] loop1: detected capacity change from 0 to 256 [ 184.934307][ T8627] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 185.017533][ T4235] usb 1-1: string descriptor 0 read error: -22 [ 185.027712][ T4235] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 185.063865][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.079973][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 185.089484][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 185.101349][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 185.110644][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 185.120138][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.224048][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.373392][ T6387] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.392598][ T4481] hid (null): unknown global tag 0xe [ 185.406181][ T4481] redragon 0003:0C45:760B.0010: unknown main item tag 0x2 [ 185.414967][ T4481] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 185.422530][ T4481] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 185.431313][ T4481] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 185.439820][ T4481] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 185.447754][ T4481] redragon 0003:0C45:760B.0010: unknown global tag 0xe [ 185.454623][ T4481] redragon 0003:0C45:760B.0010: item 0 0 1 14 parsing failed [ 185.469756][ T4481] redragon: probe of 0003:0C45:760B.0010 failed with error -22 [ 185.629186][ T4481] usb 5-1: USB disconnect, device number 12 [ 185.637668][ T6387] usb 4-1: Using ep0 maxpacket: 32 [ 185.711767][ T8657] F2FS-fs (loop1): invalid crc value [ 185.726526][ T8657] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.787453][ T6387] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 185.795894][ T6387] usb 4-1: config 0 has no interface number 0 [ 185.797752][ T8657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.891886][ T4189] handle_bad_sector: 10 callbacks suppressed [ 185.891903][ T4189] attempt to access beyond end of device [ 185.891903][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 185.914793][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.969097][ T6387] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 185.978393][ T6387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.987065][ T6387] usb 4-1: Product: syz [ 185.991898][ T6387] usb 4-1: Manufacturer: syz [ 185.996585][ T6387] usb 4-1: SerialNumber: syz [ 186.009416][ T6387] usb 4-1: config 0 descriptor?? [ 186.056548][ T6387] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 186.097067][ T4235] usb 1-1: USB disconnect, device number 17 [ 186.158111][ T8663] set_capacity_and_notify: 1 callbacks suppressed [ 186.158126][ T8663] loop2: detected capacity change from 0 to 256 [ 186.225610][ T4481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.271891][ T8636] udc-core: couldn't find an available UDC or it's busy [ 186.292268][ T8663] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 186.300419][ T8636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.364598][ T8671] loop1: detected capacity change from 0 to 4096 [ 186.478747][ T8676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.511358][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 186.524450][ T8678] netlink: 'syz.2.1691': attribute type 29 has an invalid length. [ 186.533623][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 186.629706][ T8682] program syz.2.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.678238][ T1111] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.735793][ T8684] loop1: detected capacity change from 0 to 1024 [ 186.753287][ T6387] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 186.761177][ T8691] loop2: detected capacity change from 0 to 128 [ 186.776451][ T6387] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 186.801280][ T8693] loop0: detected capacity change from 0 to 128 [ 186.804853][ T8691] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 186.838494][ T8684] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1694'. [ 186.854146][ T8691] hpfs: filesystem error: improperly stopped [ 186.866464][ T8691] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 186.880111][ T8691] hpfs: You really don't want any checks? You are crazy... [ 186.887525][ T8691] hpfs: hpfs_map_sector(): read error [ 186.893239][ T8691] hpfs: code page support is disabled [ 186.904882][ T8691] hpfs: hpfs_map_4sectors(): unaligned read [ 186.913843][ T8691] hpfs: hpfs_map_4sectors(): unaligned read [ 186.925383][ T8691] hpfs: filesystem error: unable to find root dir [ 186.968226][ T4764] usb 4-1: USB disconnect, device number 11 [ 186.974407][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 186.984441][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 186.999080][ T8691] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 186.999512][ T4764] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 187.032894][ T4764] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 187.051536][ T4764] quatech2 4-1:0.51: device disconnected [ 187.236375][ T8703] loop2: detected capacity change from 0 to 512 [ 187.260616][ T8703] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 187.269996][ T8703] EXT4-fs (loop2): inline encryption not supported [ 187.276638][ T8703] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 187.308552][ T8703] EXT4-fs (loop2): 1 truncate cleaned up [ 187.314375][ T8703] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,quota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 187.333487][ T1111] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 187.337532][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.376157][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.390915][ T8703] EXT4-fs warning (device loop2): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 187.418762][ T1111] usb 5-1: Product: syz [ 187.437236][ T1111] usb 5-1: Manufacturer: syz [ 187.442156][ T1111] usb 5-1: SerialNumber: syz [ 187.453853][ T1111] usb 5-1: config 0 descriptor?? [ 187.498907][ T1111] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 187.529608][ T1111] dvb-usb: bulk message failed: -22 (2/0) [ 187.535410][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.577238][ T8707] loop2: detected capacity change from 0 to 1024 [ 187.584704][ T1111] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 187.615192][ T4764] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 187.622895][ T1111] usb 5-1: media controller created [ 187.643784][ T8707] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 187.655890][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.664597][ T8707] hfsplus: failed to load root directory [ 187.676897][ T1111] dvb-usb: bulk message failed: -22 (1/0) [ 187.683565][ T1111] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 187.716456][ T8675] udc-core: couldn't find an available UDC or it's busy [ 187.724470][ T8675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.735304][ T1111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 187.749532][ T1111] dvb-usb: schedule remote query interval to 50 msecs. [ 187.772567][ T1111] dvb-usb: bulk message failed: -22 (2/0) [ 187.778644][ T1111] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 187.813706][ T1111] usb 5-1: USB disconnect, device number 13 [ 187.866973][ T4235] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 187.874656][ T8711] loop2: detected capacity change from 0 to 256 [ 187.903778][ T4764] usb 1-1: Using ep0 maxpacket: 16 [ 187.938471][ T1111] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 188.064289][ T4764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.071032][ T4764] usb 1-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 188.083505][ T4764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.093601][ T4764] usb 1-1: config 0 descriptor?? [ 188.163790][ T8720] loop2: detected capacity change from 0 to 512 [ 188.208128][ T8720] EXT4-fs (loop2): Ignoring removed nobh option [ 188.214798][ T8720] EXT4-fs (loop2): Ignoring removed orlov option [ 188.221242][ T8720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.255069][ T8720] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.1710: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 188.274837][ T8720] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1710: couldn't read orphan inode 16 (err -117) [ 188.290461][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.293883][ T8720] EXT4-fs (loop2): 1 orphan inode deleted [ 188.307714][ T8720] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 188.311116][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.363263][ T4235] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 188.392061][ T8720] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.415564][ T8720] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 188.423618][ T8720] overlayfs: failed to verify index dir 'upper' xattr [ 188.430478][ T8720] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 188.453153][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.470678][ T4235] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.489012][ T8723] loop4: detected capacity change from 0 to 256 [ 188.495539][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.504058][ T4235] usb 4-1: SerialNumber: syz [ 188.547098][ T4235] hub 4-1:1.0: bad descriptor, ignoring hub [ 188.553233][ T4235] hub: probe of 4-1:1.0 failed with error -5 [ 188.567214][ T8723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 188.585525][ T4235] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 188.609921][ T4235] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 188.639454][ T4764] wacom 0003:056A:0304.0011: unknown main item tag 0x2 [ 188.648740][ T4764] wacom 0003:056A:0304.0011: unknown main item tag 0x6 [ 188.669666][ T4764] wacom 0003:056A:0304.0011: ignoring exceeding usage max [ 188.698262][ T4764] wacom 0003:056A:0304.0011: hidraw0: USB HID v0.81 Device [HID 056a:0304] on usb-dummy_hcd.0-1/input0 [ 188.756783][ T8725] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.821337][ T8725] NILFS (loop2): mounting unchecked fs [ 188.833044][ T8725] NILFS (loop2): recovery required for readonly filesystem [ 188.846956][ T4764] usb 1-1: USB disconnect, device number 18 [ 188.853112][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop2 [ 188.864197][ T8725] NILFS (loop2): write access will be enabled during recovery [ 188.913780][ T8725] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 188.914376][ T8729] fido_id[8729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 188.930233][ T4479] usb 4-1: USB disconnect, device number 12 [ 188.969935][ T6440] udevd[6440]: incorrect nilfs2 checksum on /dev/loop2 [ 189.131718][ T8735] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.180194][ T8735] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 189.194876][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.245561][ T8735] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 189.565372][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.006123][ T8770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.028169][ T8770] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.158520][ T8779] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 190.174446][ T8779] REISERFS (device loop4): using ordered data mode [ 190.189299][ T8779] reiserfs: using flush barriers [ 190.197811][ T8779] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.216047][ T8779] REISERFS (device loop4): checking transaction log (loop4) [ 190.424427][ T8779] REISERFS (device loop4): Using tea hash to sort names [ 190.438723][ T8802] program syz.3.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.443946][ T8779] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 190.533625][ T8779] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 190.678508][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.686663][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.724337][ T4241] tipc: Subscription rejected, illegal request [ 190.831226][ T8810] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 190.908012][ T8810] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.040566][ T8816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.218697][ T4189] hfs: node 4:3 still has 1 user(s)! [ 191.337714][ T26] audit: type=1326 audit(1785437999.488:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.1755" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dc05a7019 code=0x0 [ 191.523523][ T8840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.785019][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.874602][ T8859] set_capacity_and_notify: 7 callbacks suppressed [ 191.874620][ T8859] loop4: detected capacity change from 0 to 1024 [ 192.228623][ T8869] loop0: detected capacity change from 0 to 2048 [ 192.356720][ T8869] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.1775: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 192.448312][ T8869] EXT4-fs (loop0): get root inode failed [ 192.500731][ T8869] EXT4-fs (loop0): mount failed [ 192.513117][ T8873] loop4: detected capacity change from 0 to 32768 [ 192.580646][ T8873] add_index: next_index = 0. Resetting! [ 192.590675][ T8873] find_entry called with index >= next_index [ 192.596692][ T8873] find_entry called with index >= next_index [ 192.631848][ T8873] find_entry called with index >= next_index [ 192.640272][ T8861] loop3: detected capacity change from 0 to 32768 [ 192.664820][ T8873] find_entry called with index >= next_index [ 192.758320][ T8873] find_entry called with index >= next_index [ 192.815013][ T8873] find_entry called with index >= next_index [ 192.838041][ T8873] find_entry called with index >= next_index [ 192.857172][ T8873] read_mapping_page failed! [ 192.861831][ T8873] ERROR: (device loop4): txCommit: [ 192.861831][ T8873] [ 192.893836][ T8873] ERROR: (device loop4): remounting filesystem as read-only [ 192.901547][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.966902][ T8893] loop0: detected capacity change from 0 to 2048 [ 193.000674][ T278] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 193.003469][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 193.020951][ T278] ------------[ cut here ]------------ [ 193.042421][ T278] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 193.048638][ T8893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.056636][ T278] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 193.063484][ T278] CPU: 1 PID: 278 Comm: jfsCommit Not tainted syzkaller #0 [ 193.070682][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.080736][ T278] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 193.085681][ T278] Code: c9 80 e2 06 0f 0b e8 42 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba a4 03 00 00 48 c7 c1 00 5d 62 8a e8 a3 80 e2 06 <0f> 0b e8 1c 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba [ 193.105288][ T278] RSP: 0018:ffffc90002d7fd30 EFLAGS: 00010246 [ 193.111355][ T278] RAX: 0000000000000037 RBX: 0000000000000000 RCX: b4a09554990d2f00 [ 193.119317][ T278] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 193.127271][ T278] RBP: ffff88805daa39b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 193.135225][ T278] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900028d2120 [ 193.143180][ T278] R13: dffffc0000000000 R14: 0000000000000024 R15: ffff888079951a94 [ 193.151135][ T278] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 193.160048][ T278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.166623][ T278] CR2: 00007fff9c9efee0 CR3: 000000007d3ea000 CR4: 00000000003526e0 [ 193.174581][ T278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.182533][ T278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.190484][ T278] Call Trace: [ 193.193743][ T278] [ 193.196657][ T278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 193.202195][ T278] ? lockdep_hardirqs_on+0x94/0x140 [ 193.207375][ T278] jfs_lazycommit+0x598/0xb60 [ 193.212037][ T278] ? txFreelock+0x5a0/0x5a0 [ 193.216517][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 193.222393][ T278] ? sched_dynamic_update+0x210/0x210 [ 193.227749][ T278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.233626][ T278] ? __kthread_parkme+0x14e/0x1b0 [ 193.238630][ T278] kthread+0x42e/0x520 [ 193.242683][ T278] ? txFreelock+0x5a0/0x5a0 [ 193.247165][ T278] ? kthread_blkcg+0xd0/0xd0 [ 193.251735][ T278] ret_from_fork+0x1f/0x30 [ 193.256139][ T278] [ 193.259162][ T278] Modules linked in: [ 193.266840][ T278] ---[ end trace 3c2c8ecb38840e13 ]--- [ 193.272428][ T278] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 193.277497][ T278] Code: c9 80 e2 06 0f 0b e8 42 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba a4 03 00 00 48 c7 c1 00 5d 62 8a e8 a3 80 e2 06 <0f> 0b e8 1c 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba [ 193.305231][ T278] RSP: 0018:ffffc90002d7fd30 EFLAGS: 00010246 [ 193.311329][ T278] RAX: 0000000000000037 RBX: 0000000000000000 RCX: b4a09554990d2f00 [ 193.319979][ T278] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 193.345248][ T278] RBP: ffff88805daa39b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 193.353298][ T278] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900028d2120 [ 193.361580][ T278] R13: dffffc0000000000 R14: 0000000000000024 R15: ffff888079951a94 [ 193.369874][ T278] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 193.379684][ T278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.386337][ T278] CR2: 00007fb7ba45b4b8 CR3: 000000007eae5000 CR4: 00000000003506e0 [ 193.401098][ T278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.430617][ T278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.439317][ T278] Kernel panic - not syncing: Fatal exception [ 193.445590][ T278] Kernel Offset: disabled [ 193.449906][ T278] Rebooting in 86400 seconds..