last executing test programs: 10m15.284186482s ago: executing program 3 (id=4773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x4844}, 0x0) 10m15.021256761s ago: executing program 3 (id=4775): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd7000fbfbdf250900020073797a3100000000080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 10m14.310968963s ago: executing program 3 (id=4782): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x380, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000a00)=@v={0x93, 0x4, 0x80, 0x13, @generic=0xfe, 0x80, 0x68c}) 10m13.958125754s ago: executing program 3 (id=4787): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000009140)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@namecase}, {@keep_last_dots}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 10m13.574885541s ago: executing program 3 (id=4791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 10m12.394354934s ago: executing program 3 (id=4803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 10m11.842999178s ago: executing program 32 (id=4803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 6m59.448988845s ago: executing program 5 (id=7820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a3000000000050001"], 0x34}}, 0x0) 6m59.131557684s ago: executing program 5 (id=7825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6m57.841621116s ago: executing program 5 (id=7846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1, 0xfffdfdbe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x24004006}, 0x20008044) 6m57.421988517s ago: executing program 5 (id=7850): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m56.83554329s ago: executing program 5 (id=7860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 6m56.063823716s ago: executing program 5 (id=7875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f00028004001300050009"], 0x40}}, 0x0) 6m55.705076765s ago: executing program 33 (id=7875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f00028004001300050009"], 0x40}}, 0x0) 45.926401246s ago: executing program 7 (id=13791): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, {0xa, 0x4e24, 0x40, @mcast2, 0x3}, r1, 0x7}}, 0x48) 45.744813951s ago: executing program 7 (id=13792): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 45.587220128s ago: executing program 7 (id=13794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 45.443808333s ago: executing program 7 (id=13795): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 44.691410022s ago: executing program 7 (id=13802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 44.348677713s ago: executing program 7 (id=13807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x1000, 0x2) 43.847058845s ago: executing program 34 (id=13807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x1000, 0x2) 18.498867419s ago: executing program 6 (id=14110): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 17.37766096s ago: executing program 6 (id=14124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) 16.304800654s ago: executing program 6 (id=14134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="29000300010003", 0x7) 15.683044593s ago: executing program 6 (id=14141): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$eJzs3M9rHFUcAPDvTLJpY6qJtf5q/RGtYhFNmrZqDx5UFDxUEBTU45LEUptWaSLYEjD1UE8ignfx6L/gSS8ingSvepdCkV5sPa3Mzkyym2w22XQ3W93PB7b9vvmR974783bfzNvdAAbWZPZPErEvIn6PiPG82LzBZP7fjevLszevL88mUau99VdS3+7v68uz5ablfmONhUjiUIt6Fy9eOltdWJi/UJSnl859NL148dKzZ85VT8+fnj9/7OTJE8dnXnj+2HNdyXMs0iJ6/b2v3jj1RVP+6/Loksl2K5+s1bpcXX/d2RAP97EddGaoOF6Vev8fj6GGozcer322Wvi0Tw0EeqZWq9XGNl+9UgP+x5JoLuvyMCjKN/ry+rfVdfBLPRt99N+1l/MLoCzvG8UjXzO8esegsu76tpsmI+LdlX++yR7Rm/sQAABNfsjGP89ko53l2WzssTb+SOO+hu3uKuaGJiLi7ojYHxH3xPk4EBH3RtS3vT8iHuiw/oZJkvowc+P4J7264+S2IRv/vVjMbTWP/8rRX0wM1UsX80JUkvfPLMwfLZ6TI1HZk5Vn2tTx46u/fbnZusbxX/bI6i/HgkU7rg7vad5nrrpU3XnGza5djjg43Cr/ZHUmIImIByPiYKs/kG5dx5mnv3tos3Vb599GFyaaat9GPJUf/5VYl38paT8/Ob03FuaPTpdnxUa//Hrlzc3qX5f/3ugk/y7Ijv8dLc//1fwnksb52sXO67jyx+ebXtNMVoqgg/N/pbpUHUnerscjxbJPqktLF2YiRpJTeaMblx9b27csl9tn+R853Lr/74+1Z+JQRGQn8cMR8UhEPFocu8ci4vGIONwm/59feeKD9ctGy/xv5fzvgiz/uY6O/1owEs1L0hbbZMHQ2Z++b6p0Yi0s8r/Z/vXvRD06UizZzuvfxla0Dm71+QMAAID/gjQi9kWSTq3GaTo1lX+G/0A+9Z35+Pxc/h2Biaik5Z2u8Yb7oTPFZX1evhwR+UcLyvXHI63fN/56aLRenpr9cGGur5kDY5v0/8yfQ/1uHdBzvrAFg0v/h8HVtv9Xdq8dwO7b0P/b9vk9PW0LsLtavP+P9qMdwO5rNf73ez8wGNb1f9N+MEDc/4fBpf/D4NL/YSAtjsbWX5JvG5R/aYe7bxWMR+y8hRGx0uX2bDuISh8q3cUg0p5XMdLbU6tnQbKzNidxOzS+oe9s4Z02PxwOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwu/g3AAD//0C6yvY=") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 14.628648262s ago: executing program 6 (id=14146): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 14.000324908s ago: executing program 6 (id=14154): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x30428, 0x0) 13.266682523s ago: executing program 35 (id=14154): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x30428, 0x0) 4.494446555s ago: executing program 4 (id=14241): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000057a2000000000000a6020000f8040000b803000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 4.188388735s ago: executing program 4 (id=14243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r1, 0x1, 0x70bd2c, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x29, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x0) 3.84710013s ago: executing program 4 (id=14246): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.532840766s ago: executing program 4 (id=14248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 3.095210313s ago: executing program 4 (id=14252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.837142336s ago: executing program 0 (id=14254): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2000000, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 2.636814375s ago: executing program 8 (id=14256): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x6, 0x2, 0xcc7, 0x5, 0x7, 0x1, 0xfd, 0x2, 0x1, 0x9, 0x6, 0x6, 0x5, 0x800, 0x9, 0x44, 0x51, 0x89, 0x809, 0xf27, 0x3, 0x8008, 0x181, 0x9, 0x400004, 0xa, 0x10000, 0x2]}) 2.543637133s ago: executing program 4 (id=14257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.074483664s ago: executing program 36 (id=14257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.035448191s ago: executing program 0 (id=14260): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.032455239s ago: executing program 8 (id=14262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 1.723620311s ago: executing program 2 (id=14265): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.555645792s ago: executing program 2 (id=14266): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "71c54bc5"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.463598392s ago: executing program 1 (id=14267): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.187608745s ago: executing program 2 (id=14268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xfffffffc, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000884}, 0x20000840) 1.186813353s ago: executing program 1 (id=14269): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x3, 0x9100, 0x3) 1.015435057s ago: executing program 8 (id=14270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000008000500"], 0x24}}, 0x0) 935.820872ms ago: executing program 0 (id=14271): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0x4, 0x8) 896.076526ms ago: executing program 1 (id=14272): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 878.315683ms ago: executing program 2 (id=14273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 759.184087ms ago: executing program 8 (id=14274): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) 647.827426ms ago: executing program 0 (id=14275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4091, 0xffb}], 0x1}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 647.581882ms ago: executing program 1 (id=14276): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x6020400) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', 0x0, 0x0) 635.390975ms ago: executing program 2 (id=14277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008800000b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 482.180761ms ago: executing program 1 (id=14278): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001040)=0x2001) 368.91537ms ago: executing program 0 (id=14279): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 348.54136ms ago: executing program 2 (id=14280): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x102}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0, 0xe}], 0x3}, 0x3}], 0x2, 0x82, 0x0) 287.351234ms ago: executing program 8 (id=14281): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/90, 0x5a}], 0x1}, 0x60) 164.182988ms ago: executing program 1 (id=14282): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) 105.656276ms ago: executing program 0 (id=14283): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x100) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="3ead9c9ebe21", 0x0, 0x6, 0x30010, 0x1, 0x0}) 0s ago: executing program 8 (id=14284): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) prlimit64(r0, 0x0, &(0x7f00000032c0), 0x0) kernel console output (not intermixed with test programs): led [ 1058.883230][ T3844] FAT-fs (loop4): Directory bread(block 69) failed [ 1058.887063][ T3849] loop6: detected capacity change from 0 to 4096 [ 1058.889883][ T3844] FAT-fs (loop4): Directory bread(block 70) failed [ 1058.939595][ T3849] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1058.972117][ T3849] ntfs3(loop6): ino=3, mi_enum_attr [ 1059.008178][ T3844] FAT-fs (loop4): Directory bread(block 71) failed [ 1059.023024][ T6002] gspca_sq930x: ucbus_write failed -71 [ 1059.044415][ T3844] FAT-fs (loop4): Directory bread(block 72) failed [ 1059.053882][ T3844] FAT-fs (loop4): Directory bread(block 73) failed [ 1059.169686][ T3855] loop7: detected capacity change from 0 to 4096 [ 1059.258583][ T6002] gspca_sq930x: Sensor ov9630 not yet treated [ 1059.271766][ T3857] loop6: detected capacity change from 0 to 256 [ 1059.278266][ T6002] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 1059.307561][ T3857] exfat: Deprecated parameter 'utf8' [ 1059.331421][ T6002] usb 1-1: USB disconnect, device number 118 [ 1059.342928][ T3857] exfat: Deprecated parameter 'namecase' [ 1059.355752][ T3857] exfat: Deprecated parameter 'namecase' [ 1059.361435][ T3857] exfat: Deprecated parameter 'utf8' [ 1059.492335][ T3837] loop1: detected capacity change from 0 to 32768 [ 1059.526037][ T3857] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1059.569012][ T3857] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1059.614162][ T3837] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1059.725317][ T3866] netlink: 'syz.7.13328': attribute type 5 has an invalid length. [ 1059.781307][ T3837] XFS (loop1): Ending clean mount [ 1059.888221][ T3837] XFS (loop1): Quotacheck needed: Please wait. [ 1060.017802][ T3837] XFS (loop1): Quotacheck: Done. [ 1060.289222][ T5821] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1060.461739][ T3890] netlink: 1039 bytes leftover after parsing attributes in process `syz.6.13339'. [ 1060.524666][ T3853] loop2: detected capacity change from 0 to 32768 [ 1060.616949][ T3853] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1060.664968][ T3873] loop0: detected capacity change from 0 to 32768 [ 1060.668802][ T3853] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1060.722187][ T3853] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1060.804076][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1060.815377][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1061.160939][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 323ms [ 1061.200838][ T31] audit: type=1326 audit(1008.673:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3908 comm="syz.0.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234bb9bf79 code=0x7ffc0000 [ 1061.224193][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 1061.267229][ T3853] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1061.295925][ T31] audit: type=1326 audit(1008.682:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3908 comm="syz.0.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f234bb9bf79 code=0x7ffc0000 [ 1061.363493][ T31] audit: type=1326 audit(1008.682:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3908 comm="syz.0.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234bb9bf79 code=0x7ffc0000 [ 1061.393950][ T3905] loop6: detected capacity change from 0 to 4096 [ 1061.447679][ T3905] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1061.520675][ T31] audit: type=1326 audit(1008.682:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3908 comm="syz.0.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234bb9bf79 code=0x7ffc0000 [ 1061.545563][ T3905] ntfs3(loop6): ino=1a, mi_enum_attr [ 1061.560060][ T3905] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1061.605873][ T3918] bond5: Unable to set down delay as MII monitoring is disabled [ 1061.695118][ T3905] ntfs3(loop6): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1061.711437][ T3918] bond5 (unregistering): Released all slaves [ 1061.948262][T30902] ntfs3(loop6): ino=1e, ntfs3_write_inode failed, -22. [ 1062.411662][ T5912] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1062.603536][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1062.635991][ T5912] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1062.644283][ T5912] usb 7-1: config 179 has no interface number 0 [ 1062.677567][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1062.708269][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1062.728830][ T3961] squashfs: Unknown parameter '00000000000000000000' [ 1062.753324][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1062.790477][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1062.830031][ T5912] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1062.844133][ T29] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1062.887708][ T5912] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1062.914434][ T5912] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1062.945152][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.017387][ T5912] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input73 [ 1063.046623][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1063.065210][ T29] usb 2-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 1063.075502][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.104439][ T29] usb 2-1: config 0 descriptor?? [ 1063.131359][ T5170] input input73: unable to receive magic message: -110 [ 1063.150165][ T5170] input input73: unable to receive magic message: -32 [ 1063.256289][ T5170] input input73: unable to receive magic message: -32 [ 1063.309479][ T5170] input input73: unable to receive magic message: -32 [ 1063.380515][ T5170] input input73: unable to receive magic message: -32 [ 1063.442978][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13382'. [ 1063.468763][ T5170] input input73: unable to receive magic message: -32 [ 1063.486594][T25816] usb 7-1: USB disconnect, device number 34 [ 1063.486702][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1063.501155][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1063.556038][ T3988] set_capacity_and_notify: 1 callbacks suppressed [ 1063.556060][ T3988] loop0: detected capacity change from 0 to 512 [ 1063.579713][ T29] hid_parser_main: 8 callbacks suppressed [ 1063.579737][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.620876][ T3988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1063.651223][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.667712][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.699027][ T3988] EXT4-fs (loop0): 1 orphan inode deleted [ 1063.726484][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.733542][ T3988] EXT4-fs (loop0): 1 truncate cleaned up [ 1063.753799][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.764126][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.800019][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.819876][ T29] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 1063.887651][ T29] ntrig 0003:1B96:0013.0002: hidraw0: USB HID v0.f2 Device [HID 1b96:0013] on usb-dummy_hcd.1-1/input0 [ 1063.939703][ T29] usb 2-1: USB disconnect, device number 121 [ 1063.988481][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.100056][ T3999] fido_id[3999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1064.188568][ T4003] option changes via remount are deprecated (pid=4002 comm=syz.7.13390) [ 1064.226892][ T4005] loop0: detected capacity change from 0 to 128 [ 1064.328493][ T4005] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1064.442044][ T3982] loop4: detected capacity change from 0 to 32768 [ 1064.587527][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.265447][ T5912] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1065.468784][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1065.480812][ T5912] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1065.489490][ T5912] usb 1-1: config 0 has no interface number 0 [ 1065.513913][ T5912] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1065.537548][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.555851][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13413'. [ 1065.581828][ T5912] usb 1-1: Product: syz [ 1065.586026][ T5912] usb 1-1: Manufacturer: syz [ 1065.607526][ T5912] usb 1-1: SerialNumber: syz [ 1065.625431][ T4058] loop2: detected capacity change from 0 to 512 [ 1065.633967][ T4058] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (18771!=2687) [ 1065.643822][ T4058] EXT4-fs (loop2): group descriptors corrupted! [ 1065.664830][ T5912] usb 1-1: config 0 descriptor?? [ 1065.672193][ T6002] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1065.702799][ T5912] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1065.828393][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13416'. [ 1065.882039][ T6002] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1065.905163][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1065.915735][ T4066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.930944][ T4062] loop4: detected capacity change from 0 to 4096 [ 1065.941280][ T4062] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1065.950501][ T6002] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1065.950535][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.982059][ T6002] usb 2-1: config 0 descriptor?? [ 1065.996254][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1066.039140][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1066.123722][ T4062] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1066.166494][ T4062] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1066.395788][ T4048] loop6: detected capacity change from 0 to 32768 [ 1066.416420][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1066.419782][T25816] usb 1-1: USB disconnect, device number 119 [ 1066.430273][T30904] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 1066.440823][ T5825] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1066.467314][ T5825] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1066.474923][ T6002] kye 0003:0458:0138.0003: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 1066.494515][ T5825] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1066.506846][T30902] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 1066.527872][ T4074] loop7: detected capacity change from 0 to 64 [ 1066.541619][T25816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1066.660049][T25816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1066.705521][ T6002] usb 2-1: USB disconnect, device number 122 [ 1066.741569][T25816] quatech2 1-1:0.51: device disconnected [ 1066.886381][ T4077] fido_id[4077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1067.675317][ T4116] loop2: detected capacity change from 0 to 512 [ 1067.724563][ T4116] EXT4-fs: Ignoring removed oldalloc option [ 1067.815512][ T31] audit: type=1326 audit(1014.865:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.6.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1067.906268][ T6002] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1067.917392][ T31] audit: type=1326 audit(1014.865:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.6.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1067.968350][ T31] audit: type=1326 audit(1015.005:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.6.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8e73d399 code=0x7ffc0000 [ 1067.990910][ T4116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.13440: Parent and EA inode have the same ino 15 [ 1068.013091][ T4116] loop2: lost filesystem error report for type 5 error -117 [ 1068.023621][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1068.037428][ C0] EXT4-fs (loop2): initial error at time 1015: ext4_xattr_inode_iget:437 [ 1068.045892][ C0] EXT4-fs (loop2): last error at time 1015: ext4_xattr_inode_iget:437 [ 1068.051094][ T31] audit: type=1326 audit(1015.005:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.6.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1068.132849][ T6002] usb 2-1: Using ep0 maxpacket: 32 [ 1068.140014][ T6002] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.149008][ T31] audit: type=1326 audit(1015.005:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4113 comm="syz.6.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1068.162857][ T4131] loop0: detected capacity change from 0 to 256 [ 1068.184274][ T6002] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.207103][ T6002] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1068.213749][ T6002] usb 2-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 1068.262811][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.304214][ T6002] usb 2-1: config 0 descriptor?? [ 1068.361418][ T4131] FAT-fs (loop0): Directory bread(block 64) failed [ 1068.383641][ T4116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.13440: Parent and EA inode have the same ino 15 [ 1068.399963][ T4131] FAT-fs (loop0): Directory bread(block 65) failed [ 1068.430830][ T4131] FAT-fs (loop0): Directory bread(block 66) failed [ 1068.437400][ T4131] FAT-fs (loop0): Directory bread(block 67) failed [ 1068.440521][ T4116] loop2: lost filesystem error report for type 5 error -117 [ 1068.455921][ T4116] EXT4-fs (loop2): 1 orphan inode deleted [ 1068.497320][ T4131] FAT-fs (loop0): Directory bread(block 68) failed [ 1068.523794][ T4131] FAT-fs (loop0): Directory bread(block 69) failed [ 1068.563832][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.571852][ T4131] FAT-fs (loop0): Directory bread(block 70) failed [ 1068.590460][ T4131] FAT-fs (loop0): Directory bread(block 71) failed [ 1068.597268][ T4131] FAT-fs (loop0): Directory bread(block 72) failed [ 1068.606413][ T4131] FAT-fs (loop0): Directory bread(block 73) failed [ 1068.738600][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.755450][ T6002] evision 0003:320F:5041.0004: collection stack underflow [ 1068.765815][ T4147] loop7: detected capacity change from 0 to 1024 [ 1068.787491][ T6002] evision 0003:320F:5041.0004: item 0 1 0 12 parsing failed [ 1068.839731][ T6002] evision 0003:320F:5041.0004: probe with driver evision failed with error -22 [ 1068.986511][ T6002] usb 2-1: USB disconnect, device number 123 [ 1069.306810][ T4163] loop4: detected capacity change from 0 to 128 [ 1069.318166][ T4163] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1069.395178][ T4163] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1069.413949][ T5912] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1069.577628][T30904] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1069.599213][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1069.643154][ T5912] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 1069.669109][ T4177] loop6: detected capacity change from 0 to 512 [ 1069.677330][ T5912] usb 1-1: config 0 has no interface number 0 [ 1069.720498][ T5912] usb 1-1: config 0 interface 182 has no altsetting 0 [ 1069.737470][ T4177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.789805][ T5912] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1069.822553][ T5922] IPVS: starting estimator thread 0... [ 1069.828558][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.858374][ T31] audit: type=1800 audit(1016.773:633): pid=4177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13470" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1069.915834][ T5912] usb 1-1: Product: syz [ 1069.920027][ T5912] usb 1-1: Manufacturer: syz [ 1069.953073][ T5912] usb 1-1: SerialNumber: syz [ 1069.969788][ T4186] IPVS: using max 26 ests per chain, 62400 per kthread [ 1069.993080][ T5912] usb 1-1: config 0 descriptor?? [ 1070.025353][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.030134][ T5912] hub 1-1:0.182: bad descriptor, ignoring hub [ 1070.076568][ T5912] hub 1-1:0.182: probe with driver hub failed with error -5 [ 1070.244928][ T5912] kaweth 1-1:0.182: Firmware present in device. [ 1070.266457][ T4202] loop1: detected capacity change from 0 to 64 [ 1070.389842][ T4202] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1070.432972][ T4202] hfs: filesystem is marked locked, mounting read-only. [ 1070.453246][ T5912] kaweth 1-1:0.182: Statistics collection: 0 [ 1070.483995][ T5912] kaweth 1-1:0.182: Multicast filter limit: 0 [ 1070.525741][ T5912] kaweth 1-1:0.182: MTU: 0 [ 1070.536260][ T5912] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1070.661072][ T4210] loop4: detected capacity change from 0 to 4096 [ 1070.669339][ T5912] kaweth 1-1:0.182: probe with driver kaweth failed with error -5 [ 1070.729632][ T4217] overlay: Unknown parameter '\yzkaller' [ 1070.736257][ T5912] usb 1-1: USB disconnect, device number 120 [ 1070.742889][ T4218] loop6: detected capacity change from 0 to 128 [ 1070.771879][ T4219] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1071.109504][ T4230] loop2: detected capacity change from 0 to 1764 [ 1071.637696][ T5912] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1071.712099][ T5922] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1071.834552][ T5912] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1071.840558][ T4257] loop6: detected capacity change from 0 to 16 [ 1071.853814][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.871516][ T4225] loop7: detected capacity change from 0 to 32768 [ 1071.872839][ T5912] usb 5-1: Product: syz [ 1071.896306][ T4257] erofs (device loop6): mounted with root inode @ nid 36. [ 1071.903497][ T5912] usb 5-1: Manufacturer: syz [ 1071.912565][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1071.920714][ T5912] usb 5-1: SerialNumber: syz [ 1071.924716][ T5922] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1071.952000][ T5922] usb 3-1: config 0 has no interface number 0 [ 1071.979212][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.990879][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1072.002922][ T5922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1072.014817][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1072.019921][ T4225] JBD2: Ignoring recovery information on journal [ 1072.028115][ T5922] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1072.043510][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.044919][ T5912] usb 5-1: config 0 descriptor?? [ 1072.057743][ T5922] usb 3-1: config 0 descriptor?? [ 1072.093129][ T5922] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1072.111628][ T5912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1072.166217][ T4260] loop0: detected capacity change from 0 to 4096 [ 1072.204243][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1072.247407][ T5912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1072.251745][ T4225] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1072.292851][ T5912] usb 5-1: media controller created [ 1072.298317][ T5922] usb 3-1: USB disconnect, device number 121 [ 1072.354992][ T5922] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1072.378457][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.611743][ T5912] DVB: Unable to find symbol mt352_attach() [ 1072.680215][T23806] ocfs2: Unmounting device (7,7) on (node local) [ 1072.785808][ T5912] DVB: Unable to find symbol nxt6000_attach() [ 1072.799560][ T5912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1072.868028][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input74 [ 1072.874044][ T5912] dvb-usb: schedule remote query interval to 1000 msecs. [ 1072.874069][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1072.874089][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 1072.874126][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 1072.906625][ T5912] usb 5-1: USB disconnect, device number 120 [ 1073.099312][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1073.216626][ T4287] bond4: (slave batadv0): Device is not bonding slave [ 1073.216653][ T4287] bond4: option active_slave: invalid value (batadv0) [ 1073.232017][ T4287] bond4 (unregistering): Released all slaves [ 1073.540615][ T4292] loop2: detected capacity change from 0 to 8192 [ 1073.889831][ T4306] sp0: Synchronizing with TNC [ 1073.973766][ T4305] [U] è` [ 1074.108779][ T4317] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1074.164303][ T4317] ntfs3(loop6): ino=1a, mi_enum_attr [ 1074.185616][ T4317] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1074.235917][ T4317] ntfs3(loop6): ino=1a, mi_enum_attr [ 1074.241246][ T4317] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1074.922994][ T4346] set_capacity_and_notify: 2 callbacks suppressed [ 1074.923015][ T4346] loop0: detected capacity change from 0 to 2048 [ 1075.008736][ T4346] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1075.028102][ T6346] udevd[6346]: incorrect nilfs2 checksum on /dev/loop0 [ 1075.039250][ T4354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1075.281631][ T4363] loop2: detected capacity change from 0 to 1024 [ 1075.372731][ T4363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.406866][ T4366] loop0: detected capacity change from 0 to 1024 [ 1075.504091][ T31] audit: type=1326 audit(1022.058:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1075.546351][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.548153][ T31] audit: type=1326 audit(1022.077:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1075.715763][ T31] audit: type=1326 audit(1022.086:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1075.815460][ T31] audit: type=1326 audit(1022.086:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1075.892758][ T31] audit: type=1326 audit(1022.086:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1075.964555][ T4388] loop6: detected capacity change from 0 to 512 [ 1075.974692][ T31] audit: type=1326 audit(1022.086:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1076.022149][ T4390] loop1: detected capacity change from 0 to 128 [ 1076.053699][ T5922] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1076.075961][ T4390] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1076.095324][ T31] audit: type=1326 audit(1022.086:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1076.117356][ T31] audit: type=1326 audit(1022.086:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1076.139706][ T31] audit: type=1326 audit(1022.086:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1076.162804][ T31] audit: type=1326 audit(1022.086:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.7.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d99bf79 code=0x7ffc0000 [ 1076.219320][ T4397] netlink: 'syz.2.13568': attribute type 10 has an invalid length. [ 1076.228765][ T4397] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13568'. [ 1076.234382][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1076.290780][ T4399] CUSE: unknown device info "" [ 1076.295774][ T4399] CUSE: unknown device info "Ö" [ 1076.300828][ T4399] CUSE: unknown device info "" [ 1076.305673][ T4399] CUSE: unknown device info "" [ 1076.307459][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.310940][ T4399] CUSE: unknown device info "ðÿÿÿ" [ 1076.326826][ T4399] CUSE: unknown device info "" [ 1076.331725][ T4399] CUSE: unknown device info "" [ 1076.336573][ T4399] CUSE: unknown device info "" [ 1076.360097][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.376006][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1076.389148][ T4399] CUSE: unknown device info "" [ 1076.389165][ T4399] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1076.389179][ T4399] CUSE: unknown device info "ÿÿÿÿ" [ 1076.389191][ T4399] CUSE: unknown device info "" [ 1076.389203][ T4399] CUSE: unknown device info "€" [ 1076.398563][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.432245][ T4399] CUSE: DEVNAME unspecified [ 1076.444199][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1076.457094][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.510986][ T5922] usb 1-1: config 0 descriptor?? [ 1076.663153][ T4408] loop7: detected capacity change from 0 to 136 [ 1076.683667][ T4408] Attempt to read inode for relocated directory [ 1076.779450][ T5843] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1076.980123][ T5922] microsoft 0003:045E:07DA.0005: unknown main item tag 0x6 [ 1076.999358][ T5922] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1077.046550][ T5922] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 1077.080905][ T5922] microsoft 0003:045E:07DA.0005: item 0 4 0 11 parsing failed [ 1077.124803][ T5922] microsoft 0003:045E:07DA.0005: parse failed [ 1077.131021][ T5922] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 1077.167974][ T4416] loop7: detected capacity change from 0 to 4096 [ 1077.215291][ T5922] usb 1-1: USB disconnect, device number 121 [ 1077.822683][ T4446] netlink: 'syz.4.13591': attribute type 4 has an invalid length. [ 1077.914804][ T4446] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13591'. [ 1077.932194][ T4449] loop1: detected capacity change from 0 to 512 [ 1078.067782][ T4449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.098423][ T4458] loop2: detected capacity change from 0 to 764 [ 1078.167862][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.208653][ T4458] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1078.265372][T25761] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1078.365127][ T5922] IPVS: starting estimator thread 0... [ 1078.448819][T25761] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1078.484155][T25761] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1078.503690][ T4465] IPVS: using max 27 ests per chain, 64800 per kthread [ 1078.543213][T25761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.581191][T25761] usb 1-1: Product: syz [ 1078.595664][T25761] usb 1-1: Manufacturer: syz [ 1078.611207][T25761] usb 1-1: SerialNumber: syz [ 1078.814484][ T4475] loop1: detected capacity change from 0 to 4096 [ 1078.879941][T25761] usb 1-1: 2:1 : invalid channels 0 [ 1079.037970][T25761] usb 1-1: USB disconnect, device number 122 [ 1079.159337][ T6346] udevd[6346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1079.271239][ T5922] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1079.454433][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.499267][ T5922] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1079.530577][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.596236][ T5922] usb 5-1: config 0 descriptor?? [ 1079.754207][ T4515] tipc: Started in network mode [ 1079.764493][ T4515] tipc: Node identity , cluster identity 4711 [ 1079.770720][ T4515] tipc: Failed to obtain node identity [ 1079.782486][ T4515] tipc: Enabling of bearer rejected, failed to enable media [ 1079.901502][ T4519] Bluetooth: MGMT ver 1.23 [ 1080.099082][ T5922] konepure 0003:1E7D:2DB4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 1080.234245][ T4528] macsec1: entered allmulticast mode [ 1080.252951][ T4528] macsec0: entered allmulticast mode [ 1080.267191][ T4528] veth1_macvtap: entered allmulticast mode [ 1080.324959][T25761] usb 5-1: USB disconnect, device number 121 [ 1080.396096][ T4529] fido_id[4529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1080.916551][ T5922] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1081.105449][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1081.125858][ T5922] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1081.136497][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.163585][ T5922] usb 3-1: config 0 descriptor?? [ 1081.247997][T25761] IPVS: starting estimator thread 0... [ 1081.387280][ T4571] IPVS: using max 28 ests per chain, 67200 per kthread [ 1081.639281][ T5922] hid-alps 0003:044E:121E.0007: item fetching failed at offset 2/5 [ 1081.672265][ T5922] hid-alps 0003:044E:121E.0007: parse failed [ 1081.686799][ T5922] hid-alps 0003:044E:121E.0007: probe with driver hid-alps failed with error -22 [ 1081.745406][ T4585] loop6: detected capacity change from 0 to 2048 [ 1081.771355][ T4585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1081.785865][ T4555] loop7: detected capacity change from 0 to 32768 [ 1081.901637][ T5922] usb 3-1: USB disconnect, device number 122 [ 1082.381233][ T5922] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1082.562996][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 1082.589246][ T5922] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1082.621564][ T5922] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.653890][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.681952][ T5922] usb 8-1: Product: syz [ 1082.686161][ T5922] usb 8-1: Manufacturer: syz [ 1082.699974][ T5922] usb 8-1: SerialNumber: syz [ 1082.716983][ T5922] usb 8-1: config 0 descriptor?? [ 1082.722844][ T4593] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1082.860053][ T5922] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1082.867386][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13670'. [ 1082.869117][ T5922] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1082.884982][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13670'. [ 1082.885344][ T5922] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1082.909703][ T4620] nbd: socks must be embedded in a SOCK_ITEM attr [ 1082.916948][ T5922] hid-generic 0004:0004:FFFF0001.0008: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 1082.973150][T25761] usb 8-1: USB disconnect, device number 19 [ 1083.118364][ T4623] fido_id[4623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1083.246608][ T4625] loop6: detected capacity change from 0 to 4096 [ 1083.408004][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13677'. [ 1083.726264][ T4643] loop6: detected capacity change from 0 to 64 [ 1084.183370][ T4662] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1084.226236][ T4664] proc: Bad value for 'gid' [ 1084.309315][ T4666] dummy0: entered promiscuous mode [ 1084.399798][ T4666] dummy0: left promiscuous mode [ 1084.429807][ T4672] loop1: detected capacity change from 0 to 256 [ 1084.441376][ T4674] loop2: detected capacity change from 0 to 1024 [ 1084.556547][ T4670] loop6: detected capacity change from 0 to 4096 [ 1084.607566][ T4672] FAT-fs (loop1): Directory bread(block 64) failed [ 1084.614111][ T4672] FAT-fs (loop1): Directory bread(block 65) failed [ 1084.621024][ T4670] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1084.663752][ T4672] FAT-fs (loop1): Directory bread(block 66) failed [ 1084.700487][ T4672] FAT-fs (loop1): Directory bread(block 67) failed [ 1084.708009][ T4670] ntfs3(loop6): ino=1a, mi_enum_attr [ 1084.744071][ T4670] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1084.755772][ T4672] FAT-fs (loop1): Directory bread(block 68) failed [ 1084.780349][ T4672] FAT-fs (loop1): Directory bread(block 69) failed [ 1084.820984][ T4672] FAT-fs (loop1): Directory bread(block 70) failed [ 1084.895229][ T4672] FAT-fs (loop1): Directory bread(block 71) failed [ 1084.901878][ T4672] FAT-fs (loop1): Directory bread(block 72) failed [ 1084.932737][ T4672] FAT-fs (loop1): Directory bread(block 73) failed [ 1084.953012][ T4686] loop0: detected capacity change from 0 to 16 [ 1084.979590][T30902] ntfs3(loop6): ino=1e, ntfs3_write_inode failed, -22. [ 1085.066014][ T4686] erofs (device loop0): mounted with root inode @ nid 36. [ 1085.100252][ T4688] loop7: detected capacity change from 0 to 1024 [ 1085.141667][ T4688] EXT4-fs: Ignoring removed orlov option [ 1085.156064][ T4694] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1085.194846][ T4688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.214590][ T4694] ALSA: mixer_oss: invalid index 1374389 [ 1085.334918][ T4699] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13709'. [ 1085.509057][ T4703] loop1: detected capacity change from 0 to 64 [ 1085.570297][T23806] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.627083][ T4707] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1085.745936][ T4707] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1085.843359][ T5912] Process accounting resumed [ 1085.869841][T30904] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1086.335473][ T4692] (syz.2.13706,4692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1086.350047][ T4692] (syz.2.13706,4692,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1086.429576][ T4692] JBD2: Ignoring recovery information on journal [ 1086.436183][ T6002] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1086.615380][ T6002] usb 5-1: Using ep0 maxpacket: 32 [ 1086.626362][ T4692] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1086.652956][ T6002] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1086.681933][ T6002] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1086.734067][ T6002] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1086.775271][ T6002] usb 5-1: config 1 has no interface number 0 [ 1086.781407][ T6002] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.840578][ T6002] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1086.877169][ T6002] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1086.893209][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.925267][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 1086.965270][ T4754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1086.979294][ T6002] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1087.121177][ T4754] EXT4-fs (loop7): 1 truncate cleaned up [ 1087.162098][ T4754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.220226][ T6002] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1087.254906][ T4759] set_capacity_and_notify: 3 callbacks suppressed [ 1087.254924][ T4759] loop1: detected capacity change from 0 to 1024 [ 1087.402690][T23806] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.414974][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1087.431825][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1087.462537][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1087.700220][T25761] usb 5-1: USB disconnect, device number 122 [ 1087.724881][T25761] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1087.737190][ T4771] loop2: detected capacity change from 0 to 2048 [ 1087.758638][ T4771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1087.876665][ T4751] loop0: detected capacity change from 0 to 32768 [ 1087.912131][ T4751] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1087.974460][ T4785] IPVS: Error connecting to the multicast addr [ 1087.987813][ T4751] XFS (loop0): Ending clean mount [ 1088.000682][ T4751] XFS (loop0): Quotacheck needed: Please wait. [ 1088.150619][ T4751] XFS (loop0): Quotacheck: Done. [ 1088.338422][ T5822] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1088.658806][ T4810] loop2: detected capacity change from 0 to 64 [ 1089.285993][ T4834] bridge_slave_1: default FDB implementation only supports local addresses [ 1089.430461][ T4841] loop4: detected capacity change from 0 to 256 [ 1089.523863][ T4849] comedi comedi3: 8255: I/O port conflict (0x1000405,4) [ 1089.538604][ T4841] FAT-fs (loop4): Directory bread(block 64) failed [ 1089.556700][ T4841] FAT-fs (loop4): Directory bread(block 65) failed [ 1089.596073][ T4841] FAT-fs (loop4): Directory bread(block 66) failed [ 1089.617075][ T4841] FAT-fs (loop4): Directory bread(block 67) failed [ 1089.644920][ T4841] FAT-fs (loop4): Directory bread(block 68) failed [ 1089.675414][ T4841] FAT-fs (loop4): Directory bread(block 69) failed [ 1089.682005][ T4841] FAT-fs (loop4): Directory bread(block 70) failed [ 1089.715053][ T6002] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1089.725686][ T4841] FAT-fs (loop4): Directory bread(block 71) failed [ 1089.749851][ T4841] FAT-fs (loop4): Directory bread(block 72) failed [ 1089.767652][ T4841] FAT-fs (loop4): Directory bread(block 73) failed [ 1089.886137][ T6002] usb 7-1: Using ep0 maxpacket: 16 [ 1089.902070][ T6002] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.938398][ T6002] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.963256][ T6002] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1089.982432][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.096014][ T4863] loop1: detected capacity change from 0 to 4096 [ 1090.137446][ T4863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.233366][ T4873] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13784'. [ 1090.243028][ T4873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13784'. [ 1090.469676][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.476159][ T6002] mcp2221 0003:04D8:00DD.0009: unexpected long global item [ 1090.532028][ T6002] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 1090.552228][ T6002] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 1090.639261][T25761] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1090.701773][ T4882] loop0: detected capacity change from 0 to 8192 [ 1090.715675][ T6002] usb 7-1: USB disconnect, device number 35 [ 1090.743903][ T4882] loop0: p1 p2[DM] p4 [ 1090.757188][ T4882] loop0: p1 size 196608 extends beyond EOD, truncated [ 1090.818159][ T29] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1090.837182][ T4882] loop0: p2 start 4292936063 is beyond EOD, truncated [ 1090.854049][ T4882] loop0: p4 size 50331648 extends beyond EOD, truncated [ 1090.870988][T25761] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1090.885654][T25761] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1090.899962][T25761] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1090.912345][ T5912] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1090.925216][T25761] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1090.934626][T25761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.942610][T25761] usb 5-1: Product: syz [ 1090.947354][T25761] usb 5-1: Manufacturer: syz [ 1090.962211][T25761] usb 5-1: SerialNumber: syz [ 1090.984667][T25761] usb 5-1: config 0 descriptor?? [ 1090.998531][ T4877] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1091.005782][ T4877] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1091.014191][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1091.033996][T25761] usb 5-1: ucan: probing device on interface #0 [ 1091.050091][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.062510][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.077386][ T29] usb 3-1: New USB device found, idVendor=056a, idProduct=1200, bcdDevice= 0.00 [ 1091.089196][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.101581][ T5912] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1091.111395][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.149210][ T5912] usb 2-1: config 0 descriptor?? [ 1091.155766][ T29] usb 3-1: config 0 descriptor?? [ 1091.192277][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1091.294157][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1091.309667][ T5970] udevd[5970]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1091.444727][ T4899] loop7: detected capacity change from 0 to 2048 [ 1091.474919][ T4899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1091.601282][ T4899] overlayfs: upper fs needs to support d_type. [ 1091.635430][ T29] wacom 0003:056A:1200.000A: unbalanced delimiter at end of report description [ 1091.659555][ T29] wacom 0003:056A:1200.000A: parse failed [ 1091.680741][ T4899] overlayfs: cleanup of 'work/#1' failed (-2) [ 1091.693088][ T29] wacom 0003:056A:1200.000A: probe with driver wacom failed with error -22 [ 1091.708250][T25761] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 1091.719215][ T4909] loop6: detected capacity change from 0 to 1024 [ 1091.724666][ T4899] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1091.747398][T25761] usb 5-1: USB disconnect, device number 123 [ 1091.759641][ T4899] overlayfs: failed to set xattr on upper [ 1091.776360][ T4899] overlayfs: ...falling back to redirect_dir=nofollow. [ 1091.787433][ T4899] overlayfs: ...falling back to index=off. [ 1091.794386][ T4899] overlayfs: ...falling back to uuid=null. [ 1091.811319][ T5912] gspca_sunplus: reg_w_riv err -71 [ 1091.820031][ T5912] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1091.855242][ T4909] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.880401][ T5912] usb 2-1: USB disconnect, device number 124 [ 1091.891920][ T29] usb 3-1: USB disconnect, device number 123 [ 1092.012791][T23806] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 1092.033102][T23806] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 1092.065429][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1092.347005][ T4919] loop6: detected capacity change from 0 to 4096 [ 1092.441785][ T4926] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1092.508820][ T4919] syz.6.13804 (4919) used greatest stack depth: 17928 bytes left [ 1092.615917][T17040] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.753605][T17040] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.906708][T17040] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.141620][ T4939] loop6: detected capacity change from 0 to 256 [ 1093.203928][ T4939] exfat: Deprecated parameter 'utf8' [ 1093.215096][ T4947] loop4: detected capacity change from 0 to 256 [ 1093.224064][ T4943] loop1: detected capacity change from 0 to 1024 [ 1093.237017][ T4943] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1093.260761][T31651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1093.271958][T31651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.278013][ T4939] exfat: Deprecated parameter 'namecase' [ 1093.285164][ T4943] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1093.301729][T31651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1093.312531][T17040] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.324264][T31651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1093.332579][T31651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1093.332678][ T4939] exfat: Deprecated parameter 'namecase' [ 1093.365362][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1093.376625][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.384153][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1093.395452][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1093.403645][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1093.412285][ T4939] exfat: Deprecated parameter 'utf8' [ 1093.428331][ T4947] FAT-fs (loop4): Directory bread(block 64) failed [ 1093.435019][ T4947] FAT-fs (loop4): Directory bread(block 65) failed [ 1093.449806][ T4943] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1093.457403][ T4954] ucma_write: process 4760 (syz.0.13821) changed security contexts after opening file descriptor, this is not allowed. [ 1093.460158][ T4947] FAT-fs (loop4): Directory bread(block 66) failed [ 1093.478705][ T4943] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1093.485064][ T4947] FAT-fs (loop4): Directory bread(block 67) failed [ 1093.491819][ T4947] FAT-fs (loop4): Directory bread(block 68) failed [ 1093.498370][ T4947] FAT-fs (loop4): Directory bread(block 69) failed [ 1093.505033][ T4947] FAT-fs (loop4): Directory bread(block 70) failed [ 1093.514687][ T4939] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1093.514926][ T4947] FAT-fs (loop4): Directory bread(block 71) failed [ 1093.533819][ T4947] FAT-fs (loop4): Directory bread(block 72) failed [ 1093.540393][ T4947] FAT-fs (loop4): Directory bread(block 73) failed [ 1093.554506][ T4943] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.13818: Inode bitmap for bg 0 marked uninitialized [ 1093.590761][ T4939] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1093.595676][ T4943] loop1: lost filesystem error report for type 5 error -117 [ 1093.599545][ T4943] EXT4-fs (loop1): Remounting filesystem read-only [ 1093.606920][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1093.606943][ C0] EXT4-fs (loop1): initial error at time 1038: ext4_read_inode_bitmap:167 [ 1093.606973][ C0] EXT4-fs (loop1): last error at time 1038: ext4_read_inode_bitmap:167 [ 1093.640902][ T4956] loop2: detected capacity change from 0 to 256 [ 1093.654913][ T4948] lo speed is unknown, defaulting to 1000 [ 1093.679637][ T4956] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1093.705786][ T4943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1093.752869][ T4956] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1093.852175][ T4956] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1093.896925][ T4956] UDF-fs: Scanning with blocksize 512 failed [ 1093.929453][ T4956] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1093.983589][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.012910][ T4956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.045016][ T4966] loop4: detected capacity change from 0 to 128 [ 1094.096332][ T4966] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1094.339799][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1094.500625][T17040] bridge_slave_1: left allmulticast mode [ 1094.526939][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13836'. [ 1094.529437][T17040] bridge_slave_1: left promiscuous mode [ 1094.581141][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.725271][T17040] bridge_slave_0: left allmulticast mode [ 1094.772283][T17040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.034798][ T4995] IPVS: Scheduler module ip_vs_sip not found [ 1095.389574][ T5012] loop2: detected capacity change from 0 to 128 [ 1095.432213][ T5012] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.459429][ T4978] loop0: detected capacity change from 0 to 32768 [ 1095.493833][ T5018] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1095.556486][ T4978] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1095.676852][ T4978] XFS (loop0): Ending clean mount [ 1095.680409][T31651] Bluetooth: hci4: command tx timeout [ 1095.794481][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1095.870622][ T5822] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1095.892899][ T5034] sctp: [Deprecated]: syz.1.13854 (pid 5034) Use of int in maxseg socket option. [ 1095.892899][ T5034] Use struct sctp_assoc_value instead [ 1096.529151][ T5054] loop1: detected capacity change from 0 to 1024 [ 1096.607653][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13865'. [ 1096.639161][T17040] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.652640][T17040] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.666802][T17040] .` (unregistering): Released all slaves [ 1096.680446][T17040] bond1 (unregistering): Released all slaves [ 1096.700906][T17040] bond0 (unregistering): Released all slaves [ 1096.856448][ T5922] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1097.047326][ T5922] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 1097.080215][ T5922] usb 3-1: config 0 has no interface number 0 [ 1097.100221][ T5922] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 1097.142850][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.151017][ T4948] chnl_net:caif_netlink_parms(): no params data found [ 1097.195861][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1097.195882][ T31] audit: type=1326 audit(1042.328:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.6.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1097.224669][ T5922] usb 3-1: config 0 descriptor?? [ 1097.240696][ T5922] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 1097.306634][ T31] audit: type=1326 audit(1042.328:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.6.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1097.387808][ T31] audit: type=1326 audit(1042.347:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.6.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1097.519379][ T31] audit: type=1326 audit(1042.347:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.6.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1097.588481][ T31] audit: type=1326 audit(1042.347:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.6.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e79bf79 code=0x7ffc0000 [ 1097.905604][ T5922] gspca_ov534_9: reg_w failed -71 [ 1097.913972][T31651] Bluetooth: hci4: command tx timeout [ 1098.113830][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.149156][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.160968][ T4948] bridge_slave_0: entered allmulticast mode [ 1098.168851][ T4948] bridge_slave_0: entered promiscuous mode [ 1098.180728][ T5110] loop4: detected capacity change from 0 to 2048 [ 1098.196548][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.224972][ T5922] gspca_ov534_9: Unknown sensor 0000 [ 1098.225069][ T5922] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 1098.225474][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.225707][ T4948] bridge_slave_1: entered allmulticast mode [ 1098.227746][ T4948] bridge_slave_1: entered promiscuous mode [ 1098.307616][ T5922] usb 3-1: USB disconnect, device number 124 [ 1098.363244][ T5110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.423822][T17040] team0: Port device wlan1 removed [ 1098.478739][ T31] audit: type=1800 audit(1043.544:652): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13882" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1098.610788][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.640848][ T4948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.794474][ T4948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.830597][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13887'. [ 1098.849030][ T5127] loop4: detected capacity change from 0 to 64 [ 1098.942497][ T5132] loop6: detected capacity change from 0 to 128 [ 1098.992398][ T5132] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1099.056893][ T4948] team0: Port device team_slave_0 added [ 1099.188419][ T5140] loop2: detected capacity change from 0 to 256 [ 1099.198589][ T5140] exfat: Deprecated parameter 'utf8' [ 1099.223844][ T4948] team0: Port device team_slave_1 added [ 1099.257498][ T5140] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1099.298805][T16890] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1099.575202][T17040] hsr_slave_0: left promiscuous mode [ 1099.600516][T17040] hsr_slave_1: left promiscuous mode [ 1099.631266][T17040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.661769][T17040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.687839][T17040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.726835][T17040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.764034][T25761] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1099.774628][T17040] veth1_macvtap: left promiscuous mode [ 1099.790489][T17040] veth0_macvtap: left promiscuous mode [ 1099.807045][T17040] veth1_vlan: left promiscuous mode [ 1099.891075][ T5176] loop0: detected capacity change from 0 to 512 [ 1099.919775][ T5176] EXT4-fs: Ignoring removed oldalloc option [ 1099.939201][T25761] usb 5-1: Using ep0 maxpacket: 16 [ 1099.954026][ T5176] EXT4-fs (loop0): 1 truncate cleaned up [ 1099.964916][ T5176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.968654][T25761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.046903][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.073487][T25761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.127980][T31651] Bluetooth: hci4: command tx timeout [ 1100.136057][T25761] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1100.178062][T25761] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1100.193516][T25761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.207800][T25761] usb 5-1: config 0 descriptor?? [ 1100.593131][ T5197] loop0: detected capacity change from 0 to 512 [ 1100.639572][ T5197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.686370][T25761] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 1100.717087][T25761] appleir 0003:05AC:8241.000B: item fetching failed at offset 4/5 [ 1100.738175][T25761] appleir 0003:05AC:8241.000B: parse failed [ 1100.744197][T25761] appleir 0003:05AC:8241.000B: probe with driver appleir failed with error -22 [ 1100.851538][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.914663][ T24] usb 5-1: USB disconnect, device number 124 [ 1100.968792][T17040] team0 (unregistering): Port device team_slave_1 removed [ 1101.026630][T17040] team0 (unregistering): Port device team_slave_0 removed [ 1101.121394][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13914'. [ 1101.291007][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.314567][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.368388][ T4948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.447473][ T29] lo speed is unknown, defaulting to 1000 [ 1101.475931][ T29] infiniband syz0: ib_query_port failed (-19) [ 1101.518770][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.525737][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.589898][ T4948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.756662][ T5919] kworker/1:6 (5919) used greatest stack depth: 13768 bytes left [ 1101.789848][ T5222] loop6: detected capacity change from 0 to 4096 [ 1101.799090][ T5229] netlink: 'syz.4.13920': attribute type 10 has an invalid length. [ 1101.831799][ T4948] hsr_slave_0: entered promiscuous mode [ 1101.877304][ T5222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.898738][ T4948] hsr_slave_1: entered promiscuous mode [ 1101.979678][ T31] audit: type=1326 audit(1046.828:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.2.13924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e7979bf79 code=0x0 [ 1102.035176][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.058661][ T31] audit: type=1800 audit(1046.865:654): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13919" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1102.091374][ T5229] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1102.251574][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.362408][T31651] Bluetooth: hci4: command tx timeout [ 1102.437231][ T6002] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1102.628572][ T5247] loop6: detected capacity change from 0 to 4096 [ 1102.668599][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.701375][ T6002] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1102.717299][ T5250] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.749546][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.804539][ T6002] usb 2-1: config 0 descriptor?? [ 1103.221934][ T5244] loop4: detected capacity change from 0 to 32768 [ 1103.288416][ T4948] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1103.313984][ T6002] steelseries 0003:1038:12B6.000C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 1103.314312][ T5244] JBD2: Ignoring recovery information on journal [ 1103.386705][ T4948] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1103.484871][ T5270] loop0: detected capacity change from 0 to 512 [ 1103.519095][ T5270] EXT4-fs: Ignoring removed bh option [ 1103.522294][ T4948] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1103.525432][ T5275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13939'. [ 1103.547667][ T6002] steelseries 0003:1038:12B6.000C: hid_hw_raw_request() failed with -71 [ 1103.557827][ T5270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1103.575573][ T5244] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1103.593253][ T4948] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1103.595569][ T5273] loop2: detected capacity change from 0 to 4096 [ 1103.611172][ T6002] usb 2-1: USB disconnect, device number 125 [ 1103.614575][ T5270] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #11: block 1: comm syz.0.13937: lblock 0 mapped to illegal pblock 1 (length 1) [ 1103.700654][ T5273] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1103.709229][ T5270] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1103.710361][ T5270] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1103.719750][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1103.719773][ C0] EXT4-fs (loop0): initial error at time 1048: ext4_map_blocks:776: inode 11: block 1 [ 1103.719821][ C0] EXT4-fs (loop0): last error at time 1048: ext4_map_blocks:776: inode 11: block 1 [ 1103.773473][ T5270] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.13937: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1103.852147][ T5270] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1103.859988][ T5270] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.13937: ea_inode dec ref err=-117 [ 1104.003615][ T5270] EXT4-fs (loop0): 1 orphan inode deleted [ 1104.012848][ T5825] ocfs2: Unmounting device (7,4) on (node local) [ 1104.048604][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1104.210073][ T5270] overlay: filesystem on ./file0 is read-only [ 1104.250265][ T4948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.297950][ T5287] fido_id[5287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1104.386456][ T4948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.410398][ T5293] loop2: detected capacity change from 0 to 512 [ 1104.443234][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.450403][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.451334][ T5293] EXT4-fs: Ignoring removed oldalloc option [ 1104.502762][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.514811][ T5293] EXT4-fs: Ignoring removed bh option [ 1104.530043][T30902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.537227][T30902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.577047][ T5293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 1104.655126][ T4948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.696765][ T5293] System zones: 1-12 [ 1104.735747][ T5293] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.13942: corrupted in-inode xattr: e_value size too large [ 1104.800297][ T5293] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1104.805629][ T5293] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.13942: couldn't read orphan inode 15 (err -117) [ 1104.814866][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1104.814891][ C1] EXT4-fs (loop2): initial error at time 1049: ext4_iget_extra_inode:5025: inode 15 [ 1104.814930][ C1] EXT4-fs (loop2): last error at time 1049: ext4_iget_extra_inode:5025: inode 15 [ 1104.930280][ T5293] loop2: lost filesystem error report for type 5 error -117 [ 1104.945399][ T5293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.172847][ T5311] loop4: detected capacity change from 0 to 4096 [ 1105.279445][ T4948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.289835][ T5311] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1105.483839][ T5311] ntfs3(loop4): ino=1a, mi_enum_attr [ 1105.501835][ T5311] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1105.507502][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.558444][ T5311] ntfs3(loop4): ino=1a, mi_enum_attr [ 1105.564015][ T5311] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1105.757182][ T5329] netlink: 58 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1105.849681][ T5331] loop1: detected capacity change from 0 to 1024 [ 1105.857125][ T5331] EXT4-fs: Ignoring removed nobh option [ 1105.910697][ T5331] EXT4-fs: Ignoring removed bh option [ 1106.034531][ T5331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0002-000000000000 r/w without journal. Quota mode: writeback. [ 1106.382713][ T4948] veth0_vlan: entered promiscuous mode [ 1106.396433][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0002-000000000000. [ 1106.437164][ T4948] veth1_vlan: entered promiscuous mode [ 1106.480481][ T5357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13961'. [ 1106.590654][ T4948] veth0_macvtap: entered promiscuous mode [ 1106.613033][ T4948] veth1_macvtap: entered promiscuous mode [ 1106.741230][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.806560][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.869518][T17040] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.917096][T17040] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.937587][ T5371] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.13965'. [ 1106.972495][T17040] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.007805][T17040] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.227525][ T5382] loop4: detected capacity change from 0 to 1024 [ 1107.273047][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.281202][T25816] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1107.312977][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.377233][ T147] hfsplus: b-tree write err: -5, ino 25 [ 1107.394082][ T147] hfsplus: b-tree write err: -5, ino 4 [ 1107.414931][ T147] hfsplus: b-tree write err: -5, ino 2 [ 1107.424637][T30904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.439371][T30904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.477214][T25816] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1107.509230][T25816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.535789][T25816] usb 1-1: config 0 descriptor?? [ 1107.797462][ T5388] loop1: detected capacity change from 0 to 8192 [ 1107.830435][T25816] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1107.882358][ T5388] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1108.046221][T25816] [drm:udl_init] *ERROR* Selecting channel failed [ 1108.139166][ T5400] loop4: detected capacity change from 0 to 256 [ 1108.211811][T25816] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1108.273553][T25816] [drm] Initialized udl on minor 2 [ 1108.312338][T25816] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1108.326886][ T5400] FAT-fs (loop4): Directory bread(block 64) failed [ 1108.359099][T25816] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1108.374068][ T5922] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1108.384763][ T5400] FAT-fs (loop4): Directory bread(block 65) failed [ 1108.412309][ T5400] FAT-fs (loop4): Directory bread(block 66) failed [ 1108.425123][T25816] usb 1-1: USB disconnect, device number 123 [ 1108.442797][ T5922] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1108.452913][ T5400] FAT-fs (loop4): Directory bread(block 67) failed [ 1108.495983][ T5922] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1108.507757][ T5400] FAT-fs (loop4): Directory bread(block 68) failed [ 1108.544067][ T5400] FAT-fs (loop4): Directory bread(block 69) failed [ 1108.576961][ T5400] FAT-fs (loop4): Directory bread(block 70) failed [ 1108.583519][ T5400] FAT-fs (loop4): Directory bread(block 71) failed [ 1108.658923][ T5400] FAT-fs (loop4): Directory bread(block 72) failed [ 1108.705050][ T5400] FAT-fs (loop4): Directory bread(block 73) failed [ 1108.717634][ T5393] loop2: detected capacity change from 0 to 131072 [ 1108.733748][ T5393] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 1108.755956][ T5393] F2FS-fs (loop2): invalid crc value [ 1108.761765][ T5393] F2FS-fs (loop2): invalid crc value [ 1108.767732][ T5393] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1108.906543][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13976'. [ 1109.011548][T25816] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1109.050105][ T5419] loop0: detected capacity change from 0 to 512 [ 1109.079846][ T5419] EXT4-fs: Ignoring removed oldalloc option [ 1109.085783][ T5419] EXT4-fs: Ignoring removed orlov option [ 1109.111106][ T5419] EXT4-fs: Invalid want_extra_isize 8 [ 1109.187858][T25816] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1109.210936][T25816] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1109.294669][T25816] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.332306][T25816] usb 9-1: config 220 has no interface number 2 [ 1109.347426][T25816] usb 9-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1109.377318][ T5424] trusted_key: encrypted_key: insufficient parameters specified [ 1109.389386][T25816] usb 9-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1109.439275][T25816] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1109.446089][T25816] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1109.483737][T25816] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1109.500155][T25816] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1109.512704][T25816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.524055][T25816] usb 9-1: Product: syz [ 1109.529348][T25816] usb 9-1: Manufacturer: syz [ 1109.534295][T25816] usb 9-1: SerialNumber: syz [ 1109.599894][ T5433] tipc: Started in network mode [ 1109.621176][ T5433] tipc: Node identity e0000001, cluster identity 4711 [ 1109.646534][ T5433] tipc: Enabling of bearer rejected, failed to enable media [ 1109.719283][ T5437] macsec1: entered promiscuous mode [ 1109.724513][ T5437] bridge0: entered promiscuous mode [ 1109.772013][T25816] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1109.800351][T25816] uvcvideo 9-1:220.0: No valid video chain found. [ 1109.818904][ T5441] tipc: Started in network mode [ 1109.828112][ T5441] tipc: Node identity 0000005331f9b4, cluster identity 4711 [ 1109.849672][T25816] usb 9-1: selecting invalid altsetting 0 [ 1109.869662][ T5441] tipc: Enabling of bearer rejected, failed to enable media [ 1109.909864][ T5443] loop0: detected capacity change from 0 to 1024 [ 1109.921929][T25816] usb 9-1: selecting invalid altsetting 0 [ 1109.941652][T25816] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1109.950798][ T5443] hfsplus: found bad thread record in catalog [ 1109.996768][T25816] usb 9-1: USB disconnect, device number 2 [ 1110.149748][ T60] hfsplus: b-tree write err: -5, ino 25 [ 1110.160365][ T60] hfsplus: b-tree write err: -5, ino 4 [ 1110.173203][ T60] hfsplus: b-tree write err: -5, ino 2 [ 1110.866310][ T5469] team0: Device gtp1 is of different type [ 1110.955064][ T5435] loop1: detected capacity change from 0 to 32768 [ 1111.050451][ T5435] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1111.195288][ T5473] loop2: detected capacity change from 0 to 4096 [ 1111.228070][ T5473] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1111.271186][ T5435] XFS (loop1): Ending clean mount [ 1111.355134][ T31] audit: type=1800 audit(1055.592:655): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13990" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 1111.470825][ T5821] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1112.037043][ T5514] CUSE: DEVNAME unspecified [ 1112.073128][ T5495] loop8: detected capacity change from 0 to 32768 [ 1112.150025][ T5495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14012 (5495) [ 1112.207408][ T5495] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1112.247234][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14026'. [ 1112.250636][ T5495] BTRFS info (device loop8): using sha256 checksum algorithm [ 1112.392156][ T5495] BTRFS info (device loop8): enabling ssd optimizations [ 1112.440954][ T5495] BTRFS info (device loop8): turning on async discard [ 1112.484658][ T5495] BTRFS info (device loop8): enabling free space tree [ 1112.610380][ T4948] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1112.876606][ T5542] loop4: detected capacity change from 0 to 4096 [ 1112.955999][ T5556] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1112.987697][ T5556] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1113.023049][ T5559] random: crng reseeded on system resumption [ 1113.055818][ T5556] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1113.231699][ T5542] ntfs3(loop4): failed to convert "0000" to iso8859-2 [ 1113.252488][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14037'. [ 1113.293930][ T5567] loop6: detected capacity change from 0 to 512 [ 1113.304305][ T5542] ntfs3(loop4): ino=1b, Correct links count -> 1. [ 1113.304391][ T5542] ntfs3(loop4): failed to convert name for inode 1e. [ 1113.304995][ T5542] ntfs3(loop4): ino=1f, mi_enum_attr [ 1113.305065][ T5542] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1113.341936][ T5567] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1113.390482][ T5567] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 1: comm syz.6.14038: invalid block [ 1113.390519][ T5567] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1113.400590][ T5567] EXT4-fs (loop6): Remounting filesystem read-only [ 1113.402604][ T5567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.583165][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.004269][ T5588] loop1: detected capacity change from 0 to 128 [ 1114.056568][ T5588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1114.120783][ T5588] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.14046: reserved inode found cleared - inode=2 [ 1114.145073][ T5598] netlink: 'syz.4.14050': attribute type 2 has an invalid length. [ 1114.198435][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14050'. [ 1114.252871][ T5605] vivid-000: disconnect [ 1114.259439][ T5601] vivid-000: reconnect [ 1114.276991][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1115.373726][ T5652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14073'. [ 1115.426132][ T5652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14073'. [ 1115.607257][ T5607] loop8: detected capacity change from 0 to 40427 [ 1115.640088][ T5607] F2FS-fs (loop8): Image doesn't support compression [ 1115.661380][ T5607] F2FS-fs (loop8): build fault injection type: 0x35f7 [ 1115.685003][ T5607] F2FS-fs (loop8): invalid crc value [ 1115.845212][ T5670] netlink: 'syz.2.14080': attribute type 5 has an invalid length. [ 1116.073036][ T5607] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1116.134308][ T5607] F2FS-fs (loop8): Start checkpoint disabled! [ 1116.178324][ T5607] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1116.210464][ T5607] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1116.297373][ T5912] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1116.440677][ T147] kworker/u8:7: attempt to access beyond end of device [ 1116.440677][ T147] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1116.506436][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.506483][ T147] Tainted: [L]=SOFTLOCKUP [ 1116.506493][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1116.506510][ T147] Workqueue: writeback wb_workfn (flush-7:8) [ 1116.506561][ T147] Call Trace: [ 1116.506571][ T147] [ 1116.506582][ T147] dump_stack_lvl+0xe8/0x150 [ 1116.506622][ T147] f2fs_handle_critical_error+0x37c/0x540 [ 1116.506665][ T147] f2fs_write_end_io+0xcdb/0xff0 [ 1116.506727][ T147] __submit_merged_bio+0x256/0x700 [ 1116.506770][ T147] __submit_merged_write_cond+0x3c9/0x4e0 [ 1116.506815][ T147] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1116.506865][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.506907][ T147] f2fs_write_data_pages+0x2975/0x35e0 [ 1116.506944][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.506974][ T147] ? lock_release+0x4b/0x3d0 [ 1116.507045][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1116.507099][ T147] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1116.507165][ T147] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1116.507224][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.507275][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.507309][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1116.507367][ T147] do_writepages+0x32e/0x550 [ 1116.507409][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.507438][ T147] ? reacquire_held_locks+0x104/0x190 [ 1116.507480][ T147] ? writeback_sb_inodes+0x43d/0x19a0 [ 1116.507518][ T147] __writeback_single_inode+0x133/0x11a0 [ 1116.507551][ T147] ? do_raw_spin_unlock+0xf5/0x210 [ 1116.507582][ T147] writeback_sb_inodes+0x944/0x19a0 [ 1116.507619][ T147] ? ret_from_fork_asm+0x1a/0x30 [ 1116.507669][ T147] ? __lock_acquire+0x6b5/0x2cf0 [ 1116.507708][ T147] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1116.507736][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 1116.507807][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.507838][ T147] ? rcu_is_watching+0x15/0xb0 [ 1116.507873][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.507913][ T147] wb_writeback+0x456/0xb70 [ 1116.507948][ T147] ? queue_io+0x231/0x4a0 [ 1116.507987][ T147] ? __pfx_wb_writeback+0x10/0x10 [ 1116.508014][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 1116.508059][ T147] wb_workfn+0x414/0xf50 [ 1116.508102][ T147] ? look_up_lock_class+0x57/0x110 [ 1116.508146][ T147] ? __pfx_wb_workfn+0x10/0x10 [ 1116.508189][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508219][ T147] ? do_raw_spin_lock+0x12b/0x2f0 [ 1116.508248][ T147] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.508274][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508311][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508345][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508377][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508410][ T147] ? process_scheduled_works+0xa25/0x1830 [ 1116.508448][ T147] ? process_scheduled_works+0xa25/0x1830 [ 1116.508483][ T147] process_scheduled_works+0xb02/0x1830 [ 1116.508550][ T147] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.508591][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508620][ T147] ? assign_work+0x3d5/0x5e0 [ 1116.508659][ T147] worker_thread+0xa50/0xfc0 [ 1116.508713][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508754][ T147] kthread+0x388/0x470 [ 1116.508779][ T147] ? __pfx_worker_thread+0x10/0x10 [ 1116.508811][ T147] ? __pfx_kthread+0x10/0x10 [ 1116.508838][ T147] ret_from_fork+0x51e/0xb90 [ 1116.508876][ T147] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.508907][ T147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.508936][ T147] ? __switch_to+0xc7d/0x1450 [ 1116.508970][ T147] ? __pfx_kthread+0x10/0x10 [ 1116.508997][ T147] ret_from_fork_asm+0x1a/0x30 [ 1116.509055][ T147] [ 1116.509066][ T147] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1116.538232][ T5912] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1116.582779][ T5696] tipc: Started in network mode [ 1116.693999][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.871989][ T5696] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1116.876745][ T5912] usb 2-1: Product: syz [ 1116.896261][ T5696] tipc: Enabling of bearer rejected, failed to enable media [ 1116.916311][ T5912] usb 2-1: Manufacturer: syz [ 1116.936003][ T5912] usb 2-1: SerialNumber: syz [ 1116.956203][ T5912] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1116.973617][ T29] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1117.254019][T25816] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1117.324764][ T5713] loop0: detected capacity change from 0 to 512 [ 1117.355011][ T5713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1117.394187][ T5713] EXT4-fs (loop0): Remounting filesystem read-only [ 1117.403474][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1117.409916][ C0] EXT4-fs (loop0): initial error at time 1061: ext4_mb_generate_buddy:1315 [ 1117.418578][ C0] EXT4-fs (loop0): last error at time 1061: ext4_mb_generate_buddy:1315 [ 1117.430573][ T5713] EXT4-fs (loop0): 1 truncate cleaned up [ 1117.439850][ T5713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.442173][T25816] usb 5-1: Using ep0 maxpacket: 8 [ 1117.502400][T25816] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1117.542741][T25816] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1117.551800][T25816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.606825][T25816] usb 5-1: Product: syz [ 1117.610996][T25816] usb 5-1: Manufacturer: syz [ 1117.622785][T25816] usb 5-1: SerialNumber: syz [ 1117.633864][T25816] usb 5-1: config 0 descriptor?? [ 1117.667505][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.694244][ T5912] usb 2-1: USB disconnect, device number 126 [ 1117.731796][T25816] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1117.775747][T25816] usb 5-1: setting power ON [ 1117.789206][T25816] dvb-usb: bulk message failed: -22 (2/0) [ 1117.814524][ T5727] loop0: detected capacity change from 0 to 512 [ 1117.823041][T25816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1117.853343][ T5727] msdos: Unknown parameter 'nfs#·ïçùeqoA©' [ 1117.857185][T25816] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1117.906635][T25816] usb 5-1: media controller created [ 1117.987193][T25816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.040825][ T5731] loop8: detected capacity change from 0 to 256 [ 1118.067537][T25816] usb 5-1: selecting invalid altsetting 6 [ 1118.105662][T25816] usb 5-1: digital interface selection failed (-22) [ 1118.112471][ T29] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1118.121693][T25816] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1118.148619][ T29] ath9k_htc: Failed to initialize the device [ 1118.154600][T25816] usb 5-1: setting power OFF [ 1118.154708][T25816] dvb-usb: bulk message failed: -22 (2/0) [ 1118.154751][T25816] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1118.154768][T25816] (NULL device *): no alternate interface [ 1118.168527][ T5731] FAT-fs (loop8): Directory bread(block 64) failed [ 1118.195530][ T5731] FAT-fs (loop8): Directory bread(block 65) failed [ 1118.250701][T25816] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1118.270043][ T5731] FAT-fs (loop8): Directory bread(block 66) failed [ 1118.274650][T25816] usb 5-1: USB disconnect, device number 125 [ 1118.281181][ T5731] FAT-fs (loop8): Directory bread(block 67) failed [ 1118.316386][ T5731] FAT-fs (loop8): Directory bread(block 68) failed [ 1118.348426][ T5731] FAT-fs (loop8): Directory bread(block 69) failed [ 1118.355066][ T5912] usb 2-1: ath9k_htc: USB layer deinitialized [ 1118.391494][ T5731] FAT-fs (loop8): Directory bread(block 70) failed [ 1118.444737][ T5731] FAT-fs (loop8): Directory bread(block 71) failed [ 1118.473816][ T5731] FAT-fs (loop8): Directory bread(block 72) failed [ 1118.508355][ T5731] FAT-fs (loop8): Directory bread(block 73) failed [ 1118.592233][ T5747] loop0: detected capacity change from 0 to 512 [ 1118.617799][ T5747] EXT4-fs: Ignoring removed nobh option [ 1118.659272][ T5747] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1118.761204][ T5747] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.14112: iget: bad i_size value: -3674898675588399094 [ 1118.829065][ T5747] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1118.836031][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1118.851638][ C0] EXT4-fs (loop0): initial error at time 1062: ext4_orphan_get:1391: inode 15 [ 1118.860540][ C0] EXT4-fs (loop0): last error at time 1062: ext4_orphan_get:1391: inode 15 [ 1118.882870][ T5747] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14112: couldn't read orphan inode 15 (err -117) [ 1118.932960][ T5747] loop0: lost filesystem error report for type 5 error -117 [ 1118.941044][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.022902][ T5760] loop2: detected capacity change from 0 to 1024 [ 1119.033687][ T5747] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1119.095408][ T5760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.200552][ T5597] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1119.250066][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.416036][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.451155][ T5775] loop6: detected capacity change from 0 to 512 [ 1119.463402][ T5780] loop0: detected capacity change from 0 to 128 [ 1119.543507][ T5775] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1119.553588][ T5780] EXT4-fs: inline encryption not supported [ 1119.574330][ T5781] loop1: detected capacity change from 0 to 2048 [ 1119.592510][ T5775] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1119.602827][ T5780] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1119.640984][ T5775] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.14124: Block bitmap for bg 0 marked uninitialized [ 1119.657429][ T5775] loop6: lost filesystem error report for type 5 error -117 [ 1119.659058][ T5775] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1119.659213][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1119.673604][ T5781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.675125][ C0] EXT4-fs (loop6): initial error at time 1063: ext4_read_block_bitmap_nowait:517 [ 1119.702581][ C0] EXT4-fs (loop6): last error at time 1063: ext4_read_block_bitmap_nowait:517 [ 1119.765478][ T5775] loop6: lost filesystem error report for type 5 error -117 [ 1119.766535][ T5775] EXT4-fs (loop6): 1 orphan inode deleted [ 1119.782997][ T5780] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1119.799595][ T5789] loop8: detected capacity change from 0 to 512 [ 1119.810904][ T5775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1119.871220][ T31] audit: type=1800 audit(1063.552:656): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14122" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 1119.949308][ T5789] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1119.957247][ T5789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1119.978154][ T5775] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1120.013598][ T5789] System zones: 0-1, 15-15, 18-18, 34-34 [ 1120.019593][ T5789] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1120.082839][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1120.092006][ T5789] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 1120.095866][ T5775] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1120.110290][ T5789] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1120.136335][ T5775] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.14124: Block bitmap for bg 0 marked uninitialized [ 1120.154230][ T5789] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1120.164822][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.176310][ T5789] EXT4-fs (loop8): 1 truncate cleaned up [ 1120.210426][ T5789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1120.376593][ T5789] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 1120.411767][ T5808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.451865][ T5820] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 1120.453172][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.555738][ T5808] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 3: comm syz.2.14133: lblock 8 mapped to illegal pblock 3 (length 26) [ 1120.609251][ T5827] SQUASHFS error: Unable to read directory block [2c0:35] [ 1120.794684][ T4948] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.999086][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.004844][ T5840] set_capacity_and_notify: 2 callbacks suppressed [ 1121.004863][ T5840] loop0: detected capacity change from 0 to 256 [ 1121.080259][ T5840] exfat: Deprecated parameter 'namecase' [ 1121.120385][ T5845] loop6: detected capacity change from 0 to 512 [ 1121.134809][ T5840] exfat: Deprecated parameter 'utf8' [ 1121.173795][ T5847] loop4: detected capacity change from 0 to 512 [ 1121.222724][ T5840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1121.243100][ T5845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1121.294962][ T5912] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1121.297289][ T5847] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1121.316977][ T29] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1121.369997][ T5845] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1121.447894][ T5845] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.14141: bad orphan inode 131083 [ 1121.517440][ T5847] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1121.547802][ T29] usb 2-1: config 0 interface 0 altsetting 188 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.583947][ T5912] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1121.593025][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.607281][ T5845] loop6: lost filesystem error report for type 5 error -117 [ 1121.609714][ T5845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.611491][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1121.638467][ T5847] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1121.654570][ T5912] usb 9-1: Product: syz [ 1121.659869][ T5912] usb 9-1: Manufacturer: syz [ 1121.664556][ T5912] usb 9-1: SerialNumber: syz [ 1121.671808][ T29] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1121.675220][ T5872] loop0: detected capacity change from 0 to 256 [ 1121.690248][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.700368][ T5912] usb 9-1: config 0 descriptor?? [ 1121.738442][ T29] usb 2-1: config 0 descriptor?? [ 1121.768686][ T5872] FAT-fs (loop0): Directory bread(block 1285) failed [ 1121.786461][ T5872] FAT-fs (loop0): Directory bread(block 1286) failed [ 1121.805662][ T5845] overlayfs: upper fs needs to support d_type. [ 1121.825230][ T5872] FAT-fs (loop0): Directory bread(block 1287) failed [ 1121.832217][ T5860] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1121.841848][ T5872] FAT-fs (loop0): Directory bread(block 1288) failed [ 1121.885036][ T5860] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1121.902004][ T5872] FAT-fs (loop0): Directory bread(block 1285) failed [ 1121.913292][ T5900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1121.930718][ T5872] FAT-fs (loop0): Directory bread(block 1286) failed [ 1121.932763][ T5912] usb 9-1: ignoring: probably an ADSL modem [ 1121.938833][ T5872] FAT-fs (loop0): Directory bread(block 1287) failed [ 1121.951060][ T5900] netlink: 51 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1121.964630][ T5860] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1121.990831][ T5900] netlink: 'syz.2.14145': attribute type 4 has an invalid length. [ 1121.998847][ T5872] FAT-fs (loop0): Directory bread(block 1288) failed [ 1122.019022][ T5872] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 1122.073050][ T5872] FAT-fs (loop0): Directory bread(block 1285) failed [ 1122.168163][ T5912] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1122.195218][ T29] elecom 0003:056E:010C.000D: hidraw0: USB HID v0.04 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 1122.204228][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14147'. [ 1122.235317][ T5912] usb 9-1: USB disconnect, device number 3 [ 1122.274281][ T5825] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1122.463826][T25816] usb 2-1: USB disconnect, device number 127 [ 1122.509663][ T5905] fido_id[5905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1122.536541][T16890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.758609][ T5933] loop4: detected capacity change from 0 to 128 [ 1122.841845][ T5933] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1122.878794][ T5933] hpfs: filesystem error: improperly stopped [ 1122.934985][ T5933] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1122.952287][ T5933] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1122.998986][ T5933] hpfs: You really don't want any checks? You are crazy... [ 1123.021617][ T5933] hpfs: hpfs_map_sector(): read error [ 1123.043053][ T5933] hpfs: code page support is disabled [ 1123.061243][ T5933] hpfs: hpfs_map_4sectors(): unaligned read [ 1123.067227][ T5933] hpfs: hpfs_map_4sectors(): unaligned read [ 1123.092694][ T5933] hpfs: filesystem error: unable to find root dir [ 1123.507642][ T5930] loop0: detected capacity change from 0 to 32768 [ 1123.537011][ T5950] loop2: detected capacity change from 0 to 22 [ 1123.579058][ T5950] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1123.616294][ T5950] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1123.692337][ T5950] binfmt_misc: register: failed to install interpreter file ./file0 [ 1123.846436][T30904] bridge_slave_1: left allmulticast mode [ 1123.871600][T30904] bridge_slave_1: left promiscuous mode [ 1123.908135][T30904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.992422][T30904] bridge_slave_0: left allmulticast mode [ 1123.998106][T30904] bridge_slave_0: left promiscuous mode [ 1124.013841][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.029260][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.038138][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.046459][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.054294][T30904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.062080][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.075240][ T5832] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1124.245651][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 1124.268078][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.280067][ T5974] loop1: detected capacity change from 0 to 256 [ 1124.303453][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.339356][ T5832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1124.382080][ T5832] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1124.464919][ T5974] FAT-fs (loop1): Directory bread(block 64) failed [ 1124.479564][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.492132][ T5974] FAT-fs (loop1): Directory bread(block 65) failed [ 1124.498758][ T5974] FAT-fs (loop1): Directory bread(block 66) failed [ 1124.508054][ T5832] usb 9-1: config 0 descriptor?? [ 1124.559337][ T5974] FAT-fs (loop1): Directory bread(block 67) failed [ 1124.578253][ T5974] FAT-fs (loop1): Directory bread(block 68) failed [ 1124.616896][ T5974] FAT-fs (loop1): Directory bread(block 69) failed [ 1124.647235][ T5974] FAT-fs (loop1): Directory bread(block 70) failed [ 1124.654481][ T5974] FAT-fs (loop1): Directory bread(block 71) failed [ 1124.665264][ T5974] FAT-fs (loop1): Directory bread(block 72) failed [ 1124.689953][ T5974] FAT-fs (loop1): Directory bread(block 73) failed [ 1124.990612][ T5832] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 1125.033906][ T5832] microsoft 0003:045E:07DA.000E: report is too long [ 1125.055083][ T5832] microsoft 0003:045E:07DA.000E: item 0 4 0 11 parsing failed [ 1125.071340][ T5832] microsoft 0003:045E:07DA.000E: parse failed [ 1125.086455][ T5985] loop0: detected capacity change from 0 to 2048 [ 1125.094496][ T5832] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 1125.134226][ T5968] loop4: detected capacity change from 0 to 32768 [ 1125.171992][T30904] bridge0 (unregistering): left promiscuous mode [ 1125.179825][ T5970] Alternate GPT is invalid, using primary GPT. [ 1125.196762][ T5970] loop0: p1 p2 p3 [ 1125.225066][ T5970] loop0: partition table partially beyond EOD, truncated [ 1125.249362][ T5912] usb 9-1: USB disconnect, device number 4 [ 1125.321723][ T31] audit: type=1326 audit(1068.650:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.365830][ T31] audit: type=1326 audit(1068.650:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.393288][ T31] audit: type=1326 audit(1068.650:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.402192][ T5991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1125.417467][ T31] audit: type=1326 audit(1068.650:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.439385][ T5985] Alternate GPT is invalid, using primary GPT. [ 1125.450051][ T31] audit: type=1326 audit(1068.650:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.482155][ T31] audit: type=1326 audit(1068.650:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.506006][ T31] audit: type=1326 audit(1068.650:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.536122][ T5985] loop0: p1 p2 p3 [ 1125.560591][ T5985] loop0: partition table partially beyond EOD, truncated [ 1125.582390][ T31] audit: type=1326 audit(1068.650:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.606886][ T31] audit: type=1326 audit(1068.650:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.642359][ T31] audit: type=1326 audit(1068.650:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.2.14168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7fc00000 [ 1125.718547][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1126.166012][ T6004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.192155][ T6346] udevd[6346]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1126.201081][ T6004] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 3: comm syz.2.14175: lblock 8 mapped to illegal pblock 3 (length 26) [ 1126.202806][T30904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.243159][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1126.261699][ T6054] udevd[6054]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1126.275671][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 1126.298849][T31651] Bluetooth: hci2: command tx timeout [ 1126.316271][T30904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.344401][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14179'. [ 1126.345670][T30904] bond0 (unregistering): Released all slaves [ 1126.439067][T30904] bond1 (unregistering): Released all slaves [ 1126.477281][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.534791][T30904] bond2 (unregistering): Released all slaves [ 1126.860196][ T6029] set_capacity_and_notify: 2 callbacks suppressed [ 1126.860217][ T6029] loop4: detected capacity change from 0 to 512 [ 1126.893849][ T6029] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1126.897996][ T6031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1126.965826][ T6029] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1126.992090][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.999598][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.019195][ T6029] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.14187: Block bitmap for bg 0 marked uninitialized [ 1127.050510][ T6034] loop0: detected capacity change from 0 to 1024 [ 1127.090763][ T6029] loop4: lost filesystem error report for type 5 error -117 [ 1127.091249][ T6029] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1127.107325][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1127.107365][ C0] EXT4-fs (loop4): initial error at time 1070: ext4_read_block_bitmap_nowait:517 [ 1127.107395][ C0] EXT4-fs (loop4): last error at time 1070: ext4_read_block_bitmap_nowait:517 [ 1127.142744][ T6029] loop4: lost filesystem error report for type 5 error -117 [ 1127.143290][ T6029] EXT4-fs (loop4): 1 orphan inode deleted [ 1127.190234][ T6029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1127.212597][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.305760][ T6029] EXT4-fs: Ignoring removed orlov option [ 1127.317285][ T6029] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1127.332551][ T6040] autofs: Bad value for 'fd' [ 1127.443346][ T6034] EXT4-fs (loop0): can't enable nombcache during remount [ 1127.450536][ T6029] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1127.470475][ T6029] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1127.562635][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.573627][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.797120][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.828669][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.113443][T30904] æÿîÿ: left promiscuous mode [ 1128.140451][ T5922] syz2: Port: 1 Link DOWN [ 1128.149251][T30902] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.181056][T30902] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.224027][T30902] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.271840][T17040] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.281026][ T29] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1128.479342][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1128.486537][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.522478][T31651] Bluetooth: hci2: command tx timeout [ 1128.529680][ T6075] loop1: detected capacity change from 0 to 128 [ 1128.543811][ T29] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1128.556015][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.576586][ T29] usb 5-1: config 0 descriptor?? [ 1128.604116][ T6075] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1128.666097][ T6075] hpfs: filesystem error: improperly stopped [ 1128.686389][ T6075] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1128.727030][ T6079] loop0: detected capacity change from 0 to 2048 [ 1128.760040][ T6075] hpfs: You really don't want any checks? You are crazy... [ 1128.778238][ T6075] hpfs: hpfs_map_sector(): read error [ 1128.826848][ T6075] hpfs: code page support is disabled [ 1128.847319][ T6075] hpfs: hpfs_map_4sectors(): unaligned read [ 1128.858919][ T6085] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1128.881838][ T6075] hpfs: hpfs_map_4sectors(): unaligned read [ 1128.890286][ T6075] hpfs: filesystem error: unable to find root dir [ 1129.053575][ T29] uclogic 0003:28BD:0071.000F: interface is invalid, ignoring [ 1129.186450][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14213'. [ 1129.294817][ T29] usb 5-1: USB disconnect, device number 126 [ 1129.337065][ T6098] Invalid ELF header magic: != ELF [ 1129.367979][ T6096] loop0: detected capacity change from 0 to 1024 [ 1129.395208][ T6096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1129.471233][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.661032][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.702608][T30904] hsr_slave_0: left promiscuous mode [ 1129.742922][T30904] hsr_slave_1: left promiscuous mode [ 1129.757682][T30904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.793995][ T6002] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1129.819578][T30904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.975899][ T6002] usb 3-1: Using ep0 maxpacket: 8 [ 1129.993837][ T6002] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1130.038172][ T6002] usb 3-1: config 0 has no interface number 0 [ 1130.061820][ T6002] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1130.128955][ T6002] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1130.185817][ T6002] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1130.221166][ T6002] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1130.258174][ T6002] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1130.299635][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.327096][ T6002] usb 3-1: config 0 descriptor?? [ 1130.364773][ T6002] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1130.528590][ T6137] loop8: detected capacity change from 0 to 256 [ 1130.756146][T31651] Bluetooth: hci2: command tx timeout [ 1130.781191][ T6142] loop4: detected capacity change from 0 to 512 [ 1130.846171][T30904] team0 (unregistering): Port device team_slave_1 removed [ 1130.872189][ T6142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.14229: bg 0: block 5: invalid block bitmap [ 1130.915491][ T6142] loop4: lost filesystem error report for type 5 error -117 [ 1130.916599][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1130.930397][ C1] EXT4-fs (loop4): initial error at time 1073: ext4_validate_block_bitmap:432 [ 1130.939309][ C1] EXT4-fs (loop4): last error at time 1073: ext4_validate_block_bitmap:432 [ 1130.969663][ T6142] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1130.991393][ T6142] loop4: lost filesystem error report for type 5 error -117 [ 1130.995520][ T6142] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.14229: invalid indirect mapped block 3 (level 2) [ 1131.049418][T30904] team0 (unregistering): Port device C removed [ 1131.121226][ T6142] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1131.122693][ T6142] EXT4-fs (loop4): 1 orphan inode deleted [ 1131.190937][ T6142] EXT4-fs (loop4): 1 truncate cleaned up [ 1131.203874][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.217293][ T6126] loop0: detected capacity change from 0 to 32768 [ 1131.380994][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.517429][T25816] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1131.697628][T25816] usb 9-1: Using ep0 maxpacket: 32 [ 1131.726348][T25816] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1131.750887][T30904] team0 (unregistering): Port device dummy0 removed [ 1131.764707][T25816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.801494][T25816] usb 9-1: Product: syz [ 1131.817476][T25816] usb 9-1: Manufacturer: syz [ 1131.823495][T25816] usb 9-1: SerialNumber: syz [ 1131.844823][T25816] usb 9-1: config 0 descriptor?? [ 1131.877955][T25816] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1131.907045][T25816] dvb-usb: bulk message failed: -22 (2/0) [ 1131.948563][T25816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1131.962634][T25816] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1132.004377][ T6159] ipvlan2: entered promiscuous mode [ 1132.026068][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 1132.036610][T25816] usb 9-1: media controller created [ 1132.042096][ T6002] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1132.158801][T25816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.234296][ T6002] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1132.267947][ T6002] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1132.278528][T25816] usb 9-1: selecting invalid altsetting 7 [ 1132.300449][T25816] cxusb: set interface failed [ 1132.317880][T25816] dvb-usb: bulk message failed: -22 (1/0) [ 1132.325205][ T6002] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1132.361850][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.363496][ T6174] loop0: detected capacity change from 0 to 512 [ 1132.403020][ T6162] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1132.421653][ T6174] EXT4-fs (loop0): 1 orphan inode deleted [ 1132.434985][T30910] __quota_error: 2 callbacks suppressed [ 1132.435003][T30910] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1132.468769][ T6002] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.482731][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.514785][T30910] EXT4-fs error (device loop0): ext4_release_dquot:7039: comm kworker/u8:10: Failed to release dquot type 1 [ 1132.529625][T30910] loop0: lost filesystem error report for type 5 error -117 [ 1132.625401][T25816] DVB: Unable to find symbol lgdt330x_attach() [ 1132.635938][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14243'. [ 1132.713549][ T5912] usb 3-1: USB disconnect, device number 125 [ 1132.745643][ T5912] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1132.750136][T25816] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1132.790395][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.830477][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.837731][ T5963] bridge_slave_0: entered allmulticast mode [ 1132.902428][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.929077][ T5963] bridge_slave_0: entered promiscuous mode [ 1132.955701][ T6002] usb 2-1: USB disconnect, device number 2 [ 1132.969284][T31651] Bluetooth: hci2: command tx timeout [ 1132.981126][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.988256][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.065666][ T5963] bridge_slave_1: entered allmulticast mode [ 1133.110563][ T5963] bridge_slave_1: entered promiscuous mode [ 1133.119486][T25816] rc_core: IR keymap rc-dvico-portable not found [ 1133.127363][T25816] Registered IR keymap rc-empty [ 1133.167183][T25816] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1133.220451][T25816] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input77 [ 1133.296837][T25816] dvb-usb: schedule remote query interval to 100 msecs. [ 1133.316592][ T6191] mkiss: ax0: crc mode is auto. [ 1133.326487][T25816] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1133.336308][ T31] audit: type=1326 audit(1076.162:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.14249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7ffc0000 [ 1133.390927][T25816] usb 9-1: USB disconnect, device number 5 [ 1133.407398][ T31] audit: type=1326 audit(1076.162:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.14249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7ffc0000 [ 1133.445565][ T6195] loop0: detected capacity change from 0 to 4096 [ 1133.454342][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.499530][ T31] audit: type=1326 audit(1076.162:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.14249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2e7979bf79 code=0x7ffc0000 [ 1133.633229][ T31] audit: type=1326 audit(1076.162:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.14249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7979bf79 code=0x7ffc0000 [ 1133.723909][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.791684][T25816] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1134.158392][ T5963] team0: Port device team_slave_0 added [ 1134.193324][ T6219] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1134.320148][T30904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.388803][ T5963] team0: Port device team_slave_1 added [ 1134.511304][T30904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.579500][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.588930][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.619083][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.697457][ T31] audit: type=1326 audit(1077.424:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.8.14262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea3b19bf79 code=0x0 [ 1134.732135][T30904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.793141][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.805571][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14263'. [ 1134.818047][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.887924][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.922925][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.935961][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.948095][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1134.956331][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1134.964312][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1135.052226][T30904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.246405][ T5963] hsr_slave_0: entered promiscuous mode [ 1135.254074][ T5963] hsr_slave_1: entered promiscuous mode [ 1135.258352][ T6245] loop2: detected capacity change from 0 to 1024 [ 1135.261054][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 1135.273058][ T5963] Cannot create hsr debugfs directory [ 1135.339573][ T6245] hfsplus: bad catalog entry type [ 1135.449921][T30910] hfsplus: b-tree write err: -5, ino 25 [ 1135.457029][T30910] hfsplus: b-tree write err: -5, ino 4 [ 1135.470956][T30910] hfsplus: b-tree write err: -5, ino 2 [ 1135.667780][ T6255] nbd: must specify a size in bytes for the device [ 1135.746324][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14270'. [ 1136.383196][T30904] veth0_to_bridge: left allmulticast mode [ 1136.388951][T30904] veth0_to_bridge: left promiscuous mode [ 1136.414298][T30904] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1136.510184][T30904] bridge_slave_1: left allmulticast mode [ 1136.515859][T30904] bridge_slave_1: left promiscuous mode [ 1136.552053][T30904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.651153][T17040] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 1136.651694][T30904] bridge_slave_0: left allmulticast mode [ 1136.663237][T17040] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 1136.663261][T17040] CPU: 0 UID: 0 PID: 17040 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.663294][T17040] Tainted: [L]=SOFTLOCKUP [ 1136.663304][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.663323][T17040] Workqueue: krdsd rds_tcp_accept_worker [ 1136.663363][T17040] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 1136.663397][T17040] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d3 1f 3c f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 1136.663419][T17040] RSP: 0018:ffffc9000411f960 EFLAGS: 00010212 [ 1136.663442][T17040] RAX: 1ffff1100ed1f733 RBX: 0000000000000012 RCX: 0000000000000000 [ 1136.663461][T17040] RDX: 0000000000000006 RSI: ffffffff8deed5f0 RDI: 00000000ffffffff [ 1136.663480][T17040] RBP: ffffc9000411fad8 R08: ffffffff90114fb7 R09: 1ffffffff20229f6 [ 1136.663500][T17040] R10: dffffc0000000000 R11: fffffbfff20229f7 R12: ffff888079184000 [ 1136.663520][T17040] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92000823f34 [ 1136.663542][T17040] FS: 0000000000000000(0000) GS:ffff88812546f000(0000) knlGS:0000000000000000 [ 1136.663564][T17040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.663583][T17040] CR2: 0000001b30618ff8 CR3: 000000000e54c000 CR4: 0000000000350ef0 [ 1136.663604][T17040] Call Trace: [ 1136.663615][T17040] [ 1136.663630][T17040] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1136.663663][T17040] ? do_raw_spin_lock+0x12b/0x2f0 [ 1136.663697][T17040] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1136.663722][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.663756][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.663789][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.663820][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.663854][T17040] rds_tcp_accept_worker+0x1d/0x70 [ 1136.663885][T17040] ? process_scheduled_works+0xa25/0x1830 [ 1136.663918][T17040] process_scheduled_works+0xb02/0x1830 [ 1136.663966][T17040] ? __pfx_process_scheduled_works+0x10/0x10 [ 1136.664002][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.664032][T17040] ? assign_work+0x3d5/0x5e0 [ 1136.664066][T17040] worker_thread+0xa50/0xfc0 [ 1136.664100][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.664140][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.664175][T17040] kthread+0x388/0x470 [ 1136.664199][T17040] ? __pfx_worker_thread+0x10/0x10 [ 1136.664231][T17040] ? __pfx_kthread+0x10/0x10 [ 1136.664256][T17040] ret_from_fork+0x51e/0xb90 [ 1136.664291][T17040] ? __pfx_ret_from_fork+0x10/0x10 [ 1136.664323][T17040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1136.664353][T17040] ? __switch_to+0xc7d/0x1450 [ 1136.664383][T17040] ? __pfx_kthread+0x10/0x10 [ 1136.664408][T17040] ret_from_fork_asm+0x1a/0x30 [ 1136.664456][T17040] [ 1136.664467][T17040] Modules linked in: [ 1136.665894][T17040] ---[ end trace 0000000000000000 ]--- [ 1136.718253][T30904] bridge_slave_0: left promiscuous mode [ 1136.756518][T17040] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 1136.821708][T30904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.860256][T17040] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d3 1f 3c f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 1136.935667][ T5843] Bluetooth: hci2: command tx timeout [ 1136.940355][T17040] RSP: 0018:ffffc9000411f960 EFLAGS: 00010212 [ 1137.016237][T17040] RAX: 1ffff1100ed1f733 RBX: 0000000000000012 RCX: 0000000000000000 [ 1137.024780][T17040] RDX: 0000000000000006 RSI: ffffffff8deed5f0 RDI: 00000000ffffffff [ 1137.034816][T17040] RBP: ffffc9000411fad8 R08: ffffffff90114fb7 R09: 1ffffffff20229f6 [ 1137.042901][T17040] R10: dffffc0000000000 R11: fffffbfff20229f7 R12: ffff888079184000 [ 1137.050903][T17040] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92000823f34 [ 1137.058936][T17040] FS: 0000000000000000(0000) GS:ffff88812556f000(0000) knlGS:0000000000000000 [ 1137.068138][T17040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1137.074770][T17040] CR2: 00007fea3b3e6ad8 CR3: 0000000034b17000 CR4: 0000000000350ef0 [ 1137.082763][T17040] Kernel panic - not syncing: Fatal exception [ 1137.089082][T17040] Kernel Offset: disabled [ 1137.093389][T17040] Rebooting in 86400 seconds..