last executing test programs: 4.162563325s ago: executing program 0 (id=740): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 3.822246423s ago: executing program 0 (id=743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3.688803544s ago: executing program 3 (id=745): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 3.550368075s ago: executing program 0 (id=747): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="070a5c536f1b6659b1608c071f3cd60d", 0x10) 3.503406119s ago: executing program 3 (id=748): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 3.312540444s ago: executing program 0 (id=749): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@autodefrag}, {@space_cache_v2}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x142) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4, 0xef}) 2.970453211s ago: executing program 2 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.73866777s ago: executing program 2 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 2.460745902s ago: executing program 2 (id=755): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.123520879s ago: executing program 1 (id=757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2) 2.064678394s ago: executing program 2 (id=758): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") getdents(r0, 0x0, 0x0) 1.891921818s ago: executing program 1 (id=759): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x10080, 0x4) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "67daf28d9a372f44ab9869aa26764d12"}) 1.657978257s ago: executing program 2 (id=760): syz_read_part_table(0x632, &(0x7f0000000000)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x204000000000075f, 0x10b042) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x7, 0x12, 0xf, 0xc, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6caadd6d126cfbc0c92fc817d44dcdecf900", [0x6, 0x1e0a]}) 1.444588174s ago: executing program 0 (id=761): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x7, 0x6e153d75, 0x4924924, 0xd235}) 1.098982422s ago: executing program 1 (id=762): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={0x0, &(0x7f0000000e00), 0x0, 0x0, 0x3c3c3c3c3c3c417, 0x0, 0x0, 0x0, r1}) 1.009019149s ago: executing program 2 (id=763): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14967e, 0x40) fallocate(r0, 0x1, 0x9, 0x10000) 920.774806ms ago: executing program 3 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}}], {0x14}}, 0xac}}, 0x0) 705.829074ms ago: executing program 1 (id=765): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000440)=0x1) 576.562624ms ago: executing program 3 (id=766): r0 = socket$inet(0x2b, 0x801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000008}) 376.729739ms ago: executing program 1 (id=767): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2890}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0xcc844}, 0x0) 261.989479ms ago: executing program 3 (id=768): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) 123.22201ms ago: executing program 0 (id=769): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x8, 0x1, 0x0, 0x4, 0xcc7, 0x8, 0x8000007, 0xa, 0x4, 0x1000, 0x4, 0x8, 0x1, 0x6, 0x103, 0x1, 0x1a449, 0x3, 0x6, 0x89, 0x2, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x40000008, 0x6, 0x350c, 0xfffffff8]}) 8.709749ms ago: executing program 1 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x5ffffff, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) 0s ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 84.498576][ T5777] cgroup: Unknown subsys name 'net' [ 84.670756][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.539500][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.817741][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.827800][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.827817][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.847138][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.856691][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.871008][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.879225][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.889447][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.897498][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.903621][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.921010][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.930842][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.939462][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.949232][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.958184][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.966793][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.983035][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.996034][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.023157][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.045669][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.061647][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.083172][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.091902][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.099401][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.671425][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.685475][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.764018][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 89.807703][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 89.945877][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954688][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.964914][ T5787] bridge_slave_0: entered allmulticast mode [ 89.973628][ T5787] bridge_slave_0: entered promiscuous mode [ 89.988710][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.998131][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.006772][ T5788] bridge_slave_0: entered allmulticast mode [ 90.015496][ T5788] bridge_slave_0: entered promiscuous mode [ 90.048007][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.056813][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.067372][ T5787] bridge_slave_1: entered allmulticast mode [ 90.076340][ T5787] bridge_slave_1: entered promiscuous mode [ 90.091306][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.100458][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.108732][ T5788] bridge_slave_1: entered allmulticast mode [ 90.118543][ T5788] bridge_slave_1: entered promiscuous mode [ 90.145516][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.155136][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.164951][ T5789] bridge_slave_0: entered allmulticast mode [ 90.176049][ T5789] bridge_slave_0: entered promiscuous mode [ 90.218398][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.227515][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.236967][ T5789] bridge_slave_1: entered allmulticast mode [ 90.245844][ T5789] bridge_slave_1: entered promiscuous mode [ 90.298775][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.328230][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.342320][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.373533][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.387929][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.404162][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.429412][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.438425][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.448429][ T5801] bridge_slave_0: entered allmulticast mode [ 90.457081][ T5801] bridge_slave_0: entered promiscuous mode [ 90.508729][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.516729][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.525945][ T5801] bridge_slave_1: entered allmulticast mode [ 90.534046][ T5801] bridge_slave_1: entered promiscuous mode [ 90.567649][ T5787] team0: Port device team_slave_0 added [ 90.578829][ T5787] team0: Port device team_slave_1 added [ 90.605222][ T5788] team0: Port device team_slave_0 added [ 90.615608][ T5788] team0: Port device team_slave_1 added [ 90.624798][ T5789] team0: Port device team_slave_0 added [ 90.670993][ T5789] team0: Port device team_slave_1 added [ 90.695084][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.704779][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.739047][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.755196][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.771449][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.793940][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.801376][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.828860][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.860136][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.867503][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.895480][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.919604][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.929641][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.958277][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.001921][ T5796] Bluetooth: hci2: command tx timeout [ 91.015151][ T5801] team0: Port device team_slave_0 added [ 91.022626][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.030768][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.060037][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.074422][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.082350][ T5796] Bluetooth: hci0: command tx timeout [ 91.082948][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.091102][ T5796] Bluetooth: hci1: command tx timeout [ 91.123763][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.137236][ T5801] team0: Port device team_slave_1 added [ 91.165512][ T5796] Bluetooth: hci3: command tx timeout [ 91.252017][ T5789] hsr_slave_0: entered promiscuous mode [ 91.262089][ T5789] hsr_slave_1: entered promiscuous mode [ 91.271252][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.279338][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.309751][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.328735][ T5788] hsr_slave_0: entered promiscuous mode [ 91.337573][ T5788] hsr_slave_1: entered promiscuous mode [ 91.345292][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.354154][ T5788] Cannot create hsr debugfs directory [ 91.380334][ T5787] hsr_slave_0: entered promiscuous mode [ 91.388198][ T5787] hsr_slave_1: entered promiscuous mode [ 91.398012][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.409357][ T5787] Cannot create hsr debugfs directory [ 91.417235][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.424825][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.453839][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.555332][ T5801] hsr_slave_0: entered promiscuous mode [ 91.564420][ T5801] hsr_slave_1: entered promiscuous mode [ 91.572148][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.583342][ T5801] Cannot create hsr debugfs directory [ 92.010341][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.028463][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.042014][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.056341][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.128181][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.143797][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.166232][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.177943][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.272498][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.302525][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.323988][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.339731][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.429326][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.452070][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.468709][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.496003][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.594234][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.664744][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.679376][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.700474][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.708395][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.746102][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.753883][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.833509][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.863977][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.888755][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.896793][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.937763][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.945735][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.980695][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.006826][ T967] cfg80211: failed to load regulatory.db [ 93.024886][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.058069][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.082058][ T5796] Bluetooth: hci2: command tx timeout [ 93.096807][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.104073][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.126547][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.134279][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.145471][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.153575][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.160350][ T5796] Bluetooth: hci1: command tx timeout [ 93.162377][ T50] Bluetooth: hci0: command tx timeout [ 93.203243][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.211164][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.242186][ T50] Bluetooth: hci3: command tx timeout [ 93.448791][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.594099][ T5789] veth0_vlan: entered promiscuous mode [ 93.645749][ T5789] veth1_vlan: entered promiscuous mode [ 93.739443][ T5789] veth0_macvtap: entered promiscuous mode [ 93.769141][ T5789] veth1_macvtap: entered promiscuous mode [ 93.867576][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.889402][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.928100][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.961352][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.972961][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.984697][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.996772][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.068867][ T5801] veth0_vlan: entered promiscuous mode [ 94.094773][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.130485][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.147777][ T5801] veth1_vlan: entered promiscuous mode [ 94.274331][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.287200][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354608][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.365517][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.368387][ T5787] veth0_vlan: entered promiscuous mode [ 94.392281][ T5801] veth0_macvtap: entered promiscuous mode [ 94.406600][ T5801] veth1_macvtap: entered promiscuous mode [ 94.453231][ T5788] veth0_vlan: entered promiscuous mode [ 94.502899][ T5787] veth1_vlan: entered promiscuous mode [ 94.515894][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.530654][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.544586][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.556785][ T5788] veth1_vlan: entered promiscuous mode [ 94.624762][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.638154][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.662343][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.704180][ T5787] veth0_macvtap: entered promiscuous mode [ 94.738102][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750395][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.764347][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.764411][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.784818][ T5787] veth1_macvtap: entered promiscuous mode [ 94.809559][ T5788] veth0_macvtap: entered promiscuous mode [ 94.856943][ T5788] veth1_macvtap: entered promiscuous mode [ 94.941179][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.958822][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.978646][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.991258][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.021760][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.057253][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.077644][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.082653][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.098822][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.115576][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.128518][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.154523][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.164232][ T50] Bluetooth: hci2: command tx timeout [ 95.184061][ T5885] syz.2.7[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.204020][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.218584][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.232134][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.242805][ T50] Bluetooth: hci1: command tx timeout [ 95.250546][ T50] Bluetooth: hci0: command tx timeout [ 95.266299][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.320295][ T50] Bluetooth: hci3: command tx timeout [ 95.355390][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.376979][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.396280][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.419928][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.438281][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.457145][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.471441][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.503260][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.524219][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.556914][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.577561][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.589189][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.598543][ T5885] loop2: detected capacity change from 0 to 32768 [ 95.607746][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.638592][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.657639][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.672615][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.735174][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.765621][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.776583][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786877][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.023775][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.065296][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.263435][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.280488][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.330557][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.366762][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.474044][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 96.572474][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.603169][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.792066][ T5893] loop1: detected capacity change from 0 to 4096 [ 96.816289][ T5893] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.012924][ T5900] loop0: detected capacity change from 0 to 1024 [ 97.069050][ T5904] loop3: detected capacity change from 0 to 512 [ 97.085165][ T5900] EXT4-fs: Ignoring removed bh option [ 97.139076][ T5900] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 97.236245][ T5904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.257314][ T5893] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.258246][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.288406][ T50] Bluetooth: hci2: command tx timeout [ 97.321216][ T50] Bluetooth: hci0: command tx timeout [ 97.327893][ T50] Bluetooth: hci1: command tx timeout [ 97.334263][ T5904] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.385294][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.406989][ T50] Bluetooth: hci3: command tx timeout [ 97.588916][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.771767][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.783656][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.793166][ T5919] loop0: detected capacity change from 0 to 256 [ 98.580710][ T5937] loop2: detected capacity change from 0 to 64 [ 98.748916][ T5937] fuse: Unexpected value for 'default_permissions' [ 98.994073][ T5947] loop2: detected capacity change from 0 to 256 [ 99.044736][ T5949] loop1: detected capacity change from 0 to 65 [ 99.142426][ T5949] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 99.440004][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.532540][ T5957] loop1: detected capacity change from 0 to 512 [ 99.553656][ T5957] ======================================================= [ 99.553656][ T5957] WARNING: The mand mount option has been deprecated and [ 99.553656][ T5957] and is ignored by this kernel. Remove the mand [ 99.553656][ T5957] option from the mount to silence this warning. [ 99.553656][ T5957] ======================================================= [ 99.554939][ T5932] loop3: detected capacity change from 0 to 40427 [ 99.671836][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.684777][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.703950][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.704860][ T5957] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.714072][ T23] usb 1-1: Product: syz [ 99.734923][ T23] usb 1-1: Manufacturer: syz [ 99.743253][ T23] usb 1-1: SerialNumber: syz [ 99.748664][ T5932] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.815388][ T23] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 99.888872][ T5838] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.936936][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.971438][ T5932] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.293606][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.329981][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.348291][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.357075][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.365938][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.376436][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.386648][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.406117][ T5801] syz-executor: attempt to access beyond end of device [ 100.406117][ T5801] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.408247][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.453719][ T9] usb 1-1: USB disconnect, device number 2 [ 100.460987][ T5801] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.466354][ T5971] loop1: detected capacity change from 0 to 1024 [ 100.479207][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.497017][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.560080][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.568537][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.608225][ T5971] hfsplus: keylen 65060 too large [ 100.615456][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.624122][ T5971] hfsplus: xattr searching failed [ 100.632754][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.659980][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.679644][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.689648][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.734782][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.759317][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.794591][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.812856][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.824737][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.835013][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.854002][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.870427][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.879233][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.892311][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.903680][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.915003][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.928304][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.961199][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.970198][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 100.978828][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.007791][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.020118][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.028853][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.053518][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.067987][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.110146][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.118640][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.158217][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.176828][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.197531][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.210130][ T5978] loop3: detected capacity change from 0 to 64 [ 101.240703][ T5838] usb 1-1: Service connection timeout for: 256 [ 101.247021][ T5838] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 101.270075][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.284903][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.317457][ T5838] ath9k_htc: Failed to initialize the device [ 101.326598][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.327561][ T5978] fuse: Unexpected value for 'default_permissions' [ 101.339296][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.343637][ T5981] netlink: 332 bytes leftover after parsing attributes in process `syz.1.42'. [ 101.380118][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 101.383090][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.408619][ T5981] netlink: 'syz.1.42': attribute type 9 has an invalid length. [ 101.427010][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.1.42'. [ 101.440633][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.448943][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.458816][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 101.476909][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.506992][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.526549][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.536017][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.600029][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.630646][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.638950][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.700116][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.724633][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.741747][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.755733][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.769435][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.783104][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.788538][ T5990] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 101.796352][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.819375][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.829173][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.856636][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.895414][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.908039][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.930529][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.939556][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.981428][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 101.992614][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.004057][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.014157][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.029466][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.050964][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.088313][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.098572][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.108957][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.133061][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.151533][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.188508][ T23] hid-generic 0000:0002:FFFFFFFE.0001: unknown main item tag 0x0 [ 102.224176][ T23] hid-generic 0000:0002:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.608794][ T6004] fido_id[6004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.682211][ T6012] loop0: detected capacity change from 0 to 256 [ 102.703761][ T6012] exfat: Deprecated parameter 'namecase' [ 102.740011][ T6012] exfat: Deprecated parameter 'utf8' [ 102.799956][ T6012] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 103.456604][ T6010] loop3: detected capacity change from 0 to 32768 [ 103.669692][ T6014] loop1: detected capacity change from 0 to 32768 [ 104.014344][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.62'. [ 104.030241][ T6016] loop2: detected capacity change from 0 to 32768 [ 104.118310][ T6031] capability: warning: `syz.3.64' uses deprecated v2 capabilities in a way that may be insecure [ 104.187897][ T6016] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 104.507592][ T6016] XFS (loop2): Starting recovery (logdev: internal) [ 104.694538][ T6016] XFS (loop2): Ending recovery (logdev: internal) [ 105.027340][ T5789] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 105.435113][ T6065] loop3: detected capacity change from 0 to 2048 [ 105.553903][ T6065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.690491][ T28] audit: type=1800 audit(1755659389.968:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.78" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 106.036852][ T6080] loop2: detected capacity change from 0 to 1024 [ 106.168769][ T6085] xt_policy: neither incoming nor outgoing policy selected [ 106.250050][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.405365][ T6092] loop1: detected capacity change from 0 to 1024 [ 106.411194][ T6089] loop2: detected capacity change from 0 to 2048 [ 106.459643][ T5858] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.487112][ T6089] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 106.500078][ T5858] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.524539][ T6089] UDF-fs: Scanning with blocksize 512 failed [ 106.542412][ T5858] usb 1-1: config 2 interface 0 has no altsetting 0 [ 106.583607][ T5858] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 106.604959][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.620857][ T6089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.680734][ T1079] hfsplus: b-tree write err: -5, ino 4 [ 106.706654][ T28] audit: type=1800 audit(1755659390.978:3): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.89" name="bus" dev="loop2" ino=830 res=0 errno=0 [ 107.060122][ T6105] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 ! [ 107.138498][ T5858] apple 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 107.156352][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 107.302840][ T23] usb 1-1: USB disconnect, device number 3 [ 107.327523][ T6112] loop3: detected capacity change from 0 to 64 [ 107.437697][ T6110] fido_id[6110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.203666][ T6134] loop3: detected capacity change from 0 to 2364 [ 108.483599][ T6144] loop3: detected capacity change from 0 to 64 [ 108.514586][ T6144] hfs: unable to locate alternate MDB [ 108.545271][ T6144] hfs: continuing without an alternate MDB [ 108.807888][ T6153] loop2: detected capacity change from 0 to 16 [ 108.857591][ T6153] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.120923][ T6162] loop2: detected capacity change from 0 to 256 [ 109.225803][ T6162] FAT-fs (loop2): Directory bread(block 64) failed [ 109.251317][ T6162] FAT-fs (loop2): Directory bread(block 65) failed [ 109.258174][ T6162] FAT-fs (loop2): Directory bread(block 66) failed [ 109.310114][ T6162] FAT-fs (loop2): Directory bread(block 67) failed [ 109.317566][ T6162] FAT-fs (loop2): Directory bread(block 68) failed [ 109.371436][ T6162] FAT-fs (loop2): Directory bread(block 69) failed [ 109.378597][ T6162] FAT-fs (loop2): Directory bread(block 70) failed [ 109.434190][ T6162] FAT-fs (loop2): Directory bread(block 71) failed [ 109.459168][ T6162] FAT-fs (loop2): Directory bread(block 72) failed [ 109.490352][ T6162] FAT-fs (loop2): Directory bread(block 73) failed [ 109.511762][ T6171] loop0: detected capacity change from 0 to 512 [ 109.592252][ T6167] loop3: detected capacity change from 0 to 8192 [ 109.646186][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.691651][ T6171] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.715412][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.128: corrupted inode contents [ 109.775272][ T6171] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #4: comm syz.0.128: mark_inode_dirty error [ 109.845199][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.128: corrupted inode contents [ 109.902467][ T6171] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.128: mark_inode_dirty error [ 109.990481][ T6171] Quota error (device loop0): write_blk: dquota write failed [ 110.034517][ T6171] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 110.054450][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 110.090549][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 110.094054][ T6171] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.128: Failed to acquire dquot type 1 [ 110.115192][ T6180] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.128: corrupted inode contents [ 110.177932][ T6180] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #4: comm syz.0.128: mark_inode_dirty error [ 110.330576][ T6180] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.128: corrupted inode contents [ 110.346805][ T6180] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.128: mark_inode_dirty error [ 110.366165][ T6180] Quota error (device loop0): write_blk: dquota write failed [ 110.389177][ T6180] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 110.422256][ T6180] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 110.460070][ T6180] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.128: Failed to acquire dquot type 1 [ 110.531979][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.590507][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.758141][ T6198] loop3: detected capacity change from 0 to 2048 [ 110.788579][ T6198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.817266][ T23] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 110.838354][ T23] usb 3-1: config 0 has no interface number 0 [ 110.895146][ T23] usb 3-1: config 0 interface 98 has no altsetting 0 [ 110.932953][ T23] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 110.950432][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.961094][ T23] usb 3-1: Product: syz [ 110.974843][ T23] usb 3-1: Manufacturer: syz [ 110.979592][ T23] usb 3-1: SerialNumber: syz [ 111.017456][ T23] usb 3-1: config 0 descriptor?? [ 111.105940][ T6190] loop1: detected capacity change from 0 to 32768 [ 111.126605][ T6190] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.135 (6190) [ 111.236445][ T6190] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.288713][ T6190] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 111.298854][ T23] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 111.336418][ T6190] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 111.366402][ T6190] BTRFS info (device loop1): use lzo compression, level 0 [ 111.384973][ T6190] BTRFS info (device loop1): using free space tree [ 111.651322][ T6190] BTRFS info (device loop1): enabling ssd optimizations [ 111.658806][ T6190] BTRFS info (device loop1): auto enabling async discard [ 111.788744][ T28] audit: type=1800 audit(1755659396.068:4): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 111.890142][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.001768][ T23] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 112.070771][ T6236] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.151'. [ 112.081794][ T6236] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 112.113889][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 112.137619][ T5838] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 112.166572][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.176315][ T5787] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.210397][ T5838] usb 1-1: config 0 descriptor?? [ 112.259475][ T6238] loop3: detected capacity change from 0 to 512 [ 112.281468][ T6238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.311262][ T6238] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.355979][ T6238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 112.398326][ T6238] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 112.430249][ T6238] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 112.453619][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.460679][ T23] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 112.486202][ T6238] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.152: dx entry: limit 65535 != root limit 120 [ 112.505234][ T6238] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.152: Corrupt directory, running e2fsck is recommended [ 112.575461][ T23] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 112.580763][ T6238] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.152: path /41/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 112.594765][ T23] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 112.615667][ T786] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 112.646970][ T786] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 112.669742][ T23] usb 3-1: USB disconnect, device number 2 [ 112.770548][ T5838] logitech 0003:046D:C295.0003: unbalanced delimiter at end of report description [ 112.810792][ T5838] logitech 0003:046D:C295.0003: parse failed [ 112.813142][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.829096][ T5838] logitech: probe of 0003:046D:C295.0003 failed with error -22 [ 112.990208][ T5858] usb 1-1: USB disconnect, device number 4 [ 113.556436][ T6261] Bluetooth: MGMT ver 1.22 [ 113.738390][ T6265] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 114.470524][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.553156][ T6290] loop0: detected capacity change from 0 to 64 [ 114.675842][ T5858] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.690217][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.699303][ T5858] usb 2-1: Product: syz [ 114.709220][ T5858] usb 2-1: Manufacturer: syz [ 114.736508][ T5858] usb 2-1: SerialNumber: syz [ 114.807010][ T5858] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.861788][ T967] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.865326][ T6294] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 114.897218][ T6294] bond0: option packets_per_slave: allowed values 0 - 65535 [ 115.148995][ T6300] loop3: detected capacity change from 0 to 512 [ 115.158627][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 115.192329][ T6300] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.219181][ T6300] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 115.275975][ T6300] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 115.313614][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.489306][ T6309] loop0: detected capacity change from 0 to 4096 [ 115.549899][ T6309] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 115.564558][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.624608][ T5858] usb 2-1: USB disconnect, device number 2 [ 115.963874][ T967] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 115.980249][ T967] ath9k_htc: Failed to initialize the device [ 116.029498][ T5858] usb 2-1: ath9k_htc: USB layer deinitialized [ 116.340792][ T6327] loop0: detected capacity change from 0 to 256 [ 116.361251][ T6327] exfat: Deprecated parameter 'utf8' [ 116.447931][ T6327] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 116.581359][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.789925][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 116.799306][ T967] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 116.825302][ T967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.855716][ T967] usb 4-1: config 0 has no interface number 0 [ 116.874899][ T967] usb 4-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.933071][ T967] usb 4-1: config 0 interface 135 has no altsetting 0 [ 116.952973][ T967] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 116.974533][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.993679][ T967] usb 4-1: Product: syz [ 116.998497][ T967] usb 4-1: Manufacturer: syz [ 117.019910][ T967] usb 4-1: SerialNumber: syz [ 117.100235][ T967] usb 4-1: config 0 descriptor?? [ 117.121517][ T967] em28xx 4-1:0.135: audio device (0ccd:10af): interface 135, class 1 [ 117.327208][ T23] usb 4-1: USB disconnect, device number 2 [ 117.478092][ T6362] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.572312][ T5838] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.790109][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 117.802985][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 117.830241][ T5838] usb 1-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 117.874049][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.903275][ T5838] usb 1-1: config 0 descriptor?? [ 118.354348][ T5838] smartjoyplus 0003:6666:8802.0004: hidraw0: USB HID v0.03 Device [HID 6666:8802] on usb-dummy_hcd.0-1/input0 [ 118.390024][ T5838] smartjoyplus 0003:6666:8802.0004: no output reports found [ 118.529414][ T5838] usb 1-1: USB disconnect, device number 5 [ 118.642151][ T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.842391][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 118.875177][ T967] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.895759][ T967] usb 3-1: config 0 has no interface number 0 [ 118.907232][ T967] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.924275][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.938244][ T967] usb 3-1: Product: syz [ 118.942812][ T967] usb 3-1: Manufacturer: syz [ 118.947713][ T967] usb 3-1: SerialNumber: syz [ 118.959326][ T967] usb 3-1: config 0 descriptor?? [ 118.980192][ T967] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.259499][ T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 119.349087][ T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 119.506610][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 119.560170][ T6410] netlink: 'syz.0.227': attribute type 28 has an invalid length. [ 119.707247][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 119.709538][ T5838] usb 3-1: USB disconnect, device number 3 [ 119.810029][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 119.847341][ T6414] overlayfs: missing 'workdir' [ 119.856830][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 119.909571][ T5838] quatech2 3-1:0.51: device disconnected [ 120.168192][ T6422] loop1: detected capacity change from 0 to 1024 [ 120.359644][ T6424] loop3: detected capacity change from 0 to 2048 [ 120.405742][ T6424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.190080][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.440843][ T5838] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.461735][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.483009][ T5838] usb 2-1: config 0 descriptor?? [ 121.491392][ T5838] cp210x 2-1:0.0: cp210x converter detected [ 122.108509][ T5838] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 122.117670][ T5838] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 122.143858][ T5838] usb 2-1: cp210x converter now attached to ttyUSB0 [ 122.161667][ T5838] usb 2-1: USB disconnect, device number 3 [ 122.176302][ T6467] loop0: detected capacity change from 0 to 512 [ 122.191148][ T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 122.204871][ T5838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.224371][ T5838] cp210x 2-1:0.0: device disconnected [ 122.271520][ T6467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.392644][ T6467] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 12: comm syz.0.254: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0 [ 122.422222][ T27] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 122.434329][ T27] usb 4-1: config 0 has no interface number 0 [ 122.452614][ T27] usb 4-1: config 0 interface 41 has no altsetting 0 [ 122.468382][ T27] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 122.498484][ T6476] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 12: comm syz.0.254: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0 [ 122.518774][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.541549][ T27] usb 4-1: Product: syz [ 122.546009][ T27] usb 4-1: Manufacturer: syz [ 122.553191][ T27] usb 4-1: SerialNumber: syz [ 122.566212][ T27] usb 4-1: config 0 descriptor?? [ 122.670510][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.883667][ T6483] delete_channel: no stack [ 123.222905][ T27] CoreChips: probe of 4-1:0.41 failed with error -71 [ 123.254363][ T27] usb 4-1: USB disconnect, device number 3 [ 123.307977][ T6492] loop0: detected capacity change from 0 to 1024 [ 123.318119][ T6492] EXT4-fs: Ignoring removed orlov option [ 123.356297][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.467891][ T6492] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2797: inode #12: comm syz.0.264: corrupted in-inode xattr: bad magic number in in-inode xattr [ 123.546169][ T6492] EXT4-fs (loop0): Remounting filesystem read-only [ 123.565495][ T6492] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 123.676023][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.671458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.165573][ T6537] loop2: detected capacity change from 0 to 256 [ 125.259065][ T6537] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 125.299550][ T6543] loop1: detected capacity change from 0 to 1024 [ 125.331588][ T6543] ext4: Unknown parameter 'dont_measure' [ 125.371646][ T6537] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 125.410480][ T6537] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 125.453413][ T6537] UDF-fs: Scanning with blocksize 512 failed [ 125.524479][ T6537] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 125.592956][ T6537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.645844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.720624][ T6549] [U] ¹éMÙ­õáq&’Ù Kœ4 [ 125.727830][ T28] audit: type=1800 audit(1755659410.008:5): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="file2" dev="loop2" ino=66 res=0 errno=0 [ 125.826377][ T6554] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 126.095443][ T6562] loop3: detected capacity change from 0 to 1764 [ 126.208382][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.365080][ T6569] [U] ¹ [ 126.420112][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 126.458038][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.478678][ T27] usb 2-1: config 4 interface 0 has no altsetting 0 [ 126.504442][ T27] usb 2-1: string descriptor 0 read error: -22 [ 126.532178][ T27] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.578265][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.603960][ T27] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.664683][ T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.720528][ T27] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.728380][ T27] usb 2-1: media controller created [ 126.821253][ T6556] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 126.834898][ T28] audit: type=1326 audit(1755659411.118:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33acf8ebe9 code=0x0 [ 126.841812][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.971605][ T27] zl10353_read_register: readreg error (reg=127, ret==0) [ 127.104970][ T27] usb 2-1: USB disconnect, device number 4 [ 127.561177][ T6599] loop1: detected capacity change from 0 to 256 [ 127.659568][ T6600] [U] ¦ [ 127.738289][ T6599] FAT-fs (loop1): Directory bread(block 64) failed [ 127.756346][ T6599] FAT-fs (loop1): Directory bread(block 65) failed [ 127.765262][ T6599] FAT-fs (loop1): Directory bread(block 66) failed [ 127.773078][ T6599] FAT-fs (loop1): Directory bread(block 67) failed [ 127.820112][ T6599] FAT-fs (loop1): Directory bread(block 68) failed [ 127.826853][ T6599] FAT-fs (loop1): Directory bread(block 69) failed [ 127.860136][ T6599] FAT-fs (loop1): Directory bread(block 70) failed [ 127.877232][ T6599] FAT-fs (loop1): Directory bread(block 71) failed [ 127.887832][ T6599] FAT-fs (loop1): Directory bread(block 72) failed [ 127.896004][ T6599] FAT-fs (loop1): Directory bread(block 73) failed [ 128.369138][ T6619] team0: Device ip6tnl2 is of different type [ 128.858292][ T6639] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.297161][ T6655] loop0: detected capacity change from 0 to 8 [ 129.380117][ T6656] loop1: detected capacity change from 0 to 2048 [ 129.419956][ T6655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.337'. [ 129.473089][ T6656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.512963][ T6663] Bluetooth: MGMT ver 1.22 [ 129.692134][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.783856][ T6669] loop0: detected capacity change from 0 to 512 [ 129.798030][ T6669] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.920151][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.130044][ T6673] loop2: detected capacity change from 0 to 4096 [ 130.140326][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 130.156884][ T6673] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 130.159439][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 130.221059][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.261534][ T9] usb 4-1: config 0 descriptor?? [ 130.284157][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 130.602667][ T6683] loop2: detected capacity change from 0 to 64 [ 130.642007][ T6683] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 130.890934][ T9] gspca_vc032x: reg_w err -71 [ 130.896334][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.909607][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.940056][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.945628][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.984219][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.989630][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.009959][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.015497][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.040190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.045667][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.068499][ T6675] loop1: detected capacity change from 0 to 32768 [ 131.074824][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.088371][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.101623][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.117577][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.123301][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.134578][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.150149][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.165966][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.181849][ T9] gspca_vc032x: Unknown sensor... [ 131.194339][ T9] vc032x: probe of 4-1:0.0 failed with error -22 [ 131.225856][ T9] usb 4-1: USB disconnect, device number 4 [ 131.500150][ T6681] loop0: detected capacity change from 0 to 40427 [ 131.513114][ T6681] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 131.526531][ T6681] F2FS-fs (loop0): Image doesn't support compression [ 131.547709][ T6681] F2FS-fs (loop0): Image doesn't support compression [ 131.577904][ T6681] F2FS-fs (loop0): invalid crc value [ 131.627121][ T6681] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.841656][ T6681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.065552][ T6701] loop3: detected capacity change from 0 to 128 [ 132.073028][ T5788] syz-executor: attempt to access beyond end of device [ 132.073028][ T5788] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.102384][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 132.137956][ T6701] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.215241][ T6701] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.280023][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.406391][ T5801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.482461][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.526388][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.560314][ T27] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 132.569659][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.609689][ T27] usb 3-1: config 0 descriptor?? [ 132.784313][ T6699] loop1: detected capacity change from 0 to 32768 [ 132.822156][ T6699] XFS (loop1): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 133.061274][ T27] hid (null): report_id 0 is invalid [ 133.086608][ T27] hid-steam 0003:28DE:1142.0005: report_id 0 is invalid [ 133.129992][ T27] hid-steam 0003:28DE:1142.0005: item 0 1 1 8 parsing failed [ 133.138569][ T27] hid-steam 0003:28DE:1142.0005: steam_probe:parse of hid interface failed [ 133.167631][ T6699] XFS (loop1): Ending clean mount [ 133.172768][ T27] hid-steam: probe of 0003:28DE:1142.0005 failed with error -22 [ 133.229200][ T6723] loop0: detected capacity change from 0 to 1024 [ 133.280133][ T27] usb 3-1: USB disconnect, device number 4 [ 133.345042][ T5787] XFS (loop1): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 133.735704][ T6731] netlink: 'syz.1.365': attribute type 13 has an invalid length. [ 133.769957][ T6731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.365'. [ 133.779534][ T6731] : renamed from syz_tun (while UP) [ 133.834477][ T6731] : refused to change device tx_queue_len [ 133.857873][ T6731] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 133.896347][ T6733] loop3: detected capacity change from 0 to 1764 [ 133.965783][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.972908][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.246909][ T6744] loop0: detected capacity change from 0 to 512 [ 134.290079][ T6744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.389989][ T6744] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.374: invalid indirect mapped block 4294967295 (level 1) [ 134.415467][ T6744] EXT4-fs (loop0): Remounting filesystem read-only [ 134.450953][ T6744] EXT4-fs (loop0): 2 truncates cleaned up [ 134.459092][ T6744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.671456][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.797368][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.379'. [ 135.032288][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.149664][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 135.171452][ T6767] netlink: 'syz.0.382': attribute type 5 has an invalid length. [ 135.240532][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 135.262782][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 135.305917][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 135.336060][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.363632][ T9] usb 4-1: config 0 descriptor?? [ 135.817692][ T6785] loop1: detected capacity change from 0 to 512 [ 135.833515][ T6785] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.842348][ T9] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 135.870540][ T6785] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.391: invalid indirect mapped block 10 (level 1) [ 135.872467][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 135.896709][ T6785] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.391: invalid indirect mapped block 8 (level 1) [ 135.903804][ T9] logitech 0003:046D:C20E.0006: unknown main item tag 0x0 [ 135.911996][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 135.930493][ T6785] EXT4-fs (loop1): 1 truncate cleaned up [ 135.944475][ T6787] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 135.957279][ T6785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.965677][ T9] logitech 0003:046D:C20E.0006: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0 [ 136.066793][ T9] usb 4-1: USB disconnect, device number 5 [ 136.158619][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.196075][ T6793] fido_id[6793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.265546][ T6797] sp0: Synchronizing with TNC [ 136.316607][ T6796] [U] è [ 136.436366][ T6799] loop0: detected capacity change from 0 to 4096 [ 137.277379][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 137.410698][ T6801] loop1: detected capacity change from 0 to 32768 [ 137.440180][ T6801] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.396 (6801) [ 137.511566][ T6801] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.529605][ T6801] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 137.548144][ T6801] BTRFS info (device loop1): using free space tree [ 137.770731][ T6801] BTRFS info (device loop1): enabling ssd optimizations [ 137.777910][ T6801] BTRFS info (device loop1): auto enabling async discard [ 137.924447][ T28] audit: type=1800 audit(1755659422.208:7): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.396" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 137.959627][ T6850] bridge1: entered promiscuous mode [ 137.977957][ T6850] bridge1: entered allmulticast mode [ 138.054265][ T6850] team0: Port device bridge1 added [ 138.090155][ T5787] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.225857][ T6873] loop1: detected capacity change from 0 to 4096 [ 139.252835][ T6875] loop2: detected capacity change from 0 to 4096 [ 139.375322][ T6875] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 139.517339][ T6879] loop0: detected capacity change from 0 to 4096 [ 139.968020][ T6885] warning: `syz.0.430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.247826][ T6887] loop2: detected capacity change from 0 to 4096 [ 140.330102][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.503974][ T6905] loop3: detected capacity change from 0 to 47 [ 140.637439][ T6887] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.431: corrupted inode contents [ 140.709777][ T6908] loop0: detected capacity change from 0 to 47 [ 140.723891][ T6887] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #15: comm syz.2.431: mark_inode_dirty error [ 140.780395][ T6887] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.431: corrupted inode contents [ 140.881867][ T6887] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.431: mark_inode_dirty error [ 140.913386][ T6887] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.431: corrupted inode contents [ 140.957212][ T6887] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.431: mark_inode_dirty error [ 141.020609][ T6887] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.431: corrupted inode contents [ 141.082622][ T6887] EXT4-fs error (device loop2): ext4_truncate:4288: inode #15: comm syz.2.431: mark_inode_dirty error [ 141.131002][ T6887] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 141.140045][ T6917] netlink: 'syz.1.443': attribute type 29 has an invalid length. [ 141.149357][ T6917] netlink: 'syz.1.443': attribute type 29 has an invalid length. [ 141.167943][ T6887] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.431: corrupted inode contents [ 141.171890][ T6917] netlink: 'syz.1.443': attribute type 29 has an invalid length. [ 141.216555][ T6887] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 141.333902][ T6921] loop1: detected capacity change from 0 to 64 [ 141.402043][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.440522][ T28] audit: type=1800 audit(1755659425.718:8): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.446" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 141.629230][ T6928] loop3: detected capacity change from 0 to 64 [ 141.638130][ T6928] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 141.825514][ T6928] block device autoloading is deprecated and will be removed. [ 142.027344][ T6936] loop1: detected capacity change from 0 to 4096 [ 142.052282][ T6936] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 142.164394][ T6936] ntfs3: loop1: ino=0, attr_set_size [ 142.176026][ T6936] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 142.206455][ T6942] ntfs3: loop1: MFT: r=0, expect seq=0 instead of 1! [ 142.690468][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.880023][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 142.896506][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.920404][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.930885][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.945819][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.960285][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.974606][ T23] usb 4-1: config 0 descriptor?? [ 143.299990][ T6956] loop2: detected capacity change from 0 to 40427 [ 143.329931][ T6956] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 143.338276][ T6956] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.356825][ T6956] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 143.368435][ T6956] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 143.400174][ T6956] F2FS-fs (loop2): invalid crc value [ 143.414752][ T6956] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.431681][ T5838] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.471066][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input6 [ 143.564905][ T23] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 143.616758][ T5859] usb 4-1: USB disconnect, device number 6 [ 143.641191][ T6956] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.669656][ T6956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.685675][ T5838] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.717841][ T5838] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.753234][ T5838] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.766458][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.790498][ T6965] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.836656][ T5838] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 143.854801][ T6971] fido_id[6971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 144.004146][ T28] audit: type=1326 audit(1755659428.288:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.090393][ T28] audit: type=1326 audit(1755659428.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.162479][ T28] audit: type=1326 audit(1755659428.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.185847][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.243098][ T28] audit: type=1326 audit(1755659428.348:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.300348][ T28] audit: type=1326 audit(1755659428.348:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.324058][ T28] audit: type=1326 audit(1755659428.348:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.347585][ T28] audit: type=1326 audit(1755659428.348:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d1d8ebe9 code=0x7ffc0000 [ 144.374635][ T5838] usb 1-1: USB disconnect, device number 6 [ 144.696694][ T6984] netlink: 'syz.3.475': attribute type 6 has an invalid length. [ 144.719181][ T6984] netlink: 'syz.3.475': attribute type 6 has an invalid length. [ 144.736715][ T6984] Zero length message leads to an empty skb [ 144.845045][ T6988] loop2: detected capacity change from 0 to 512 [ 144.858236][ T6988] EXT4-fs: Ignoring removed orlov option [ 144.884912][ T6988] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 144.932125][ T6988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 145.003266][ T6988] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.476: corrupted in-inode xattr: e_value size too large [ 145.061252][ T6988] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.476: couldn't read orphan inode 15 (err -117) [ 145.072383][ T6996] loop0: detected capacity change from 0 to 1024 [ 145.118242][ T6988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.118351][ T6996] hfsplus: bad catalog entry type [ 145.344624][ T2966] hfsplus: b-tree write err: -5, ino 4 [ 145.453705][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.708892][ T7002] loop1: detected capacity change from 0 to 8192 [ 145.755675][ T7002] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.806751][ T7002] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 145.817806][ T7002] REISERFS (device loop1): using ordered data mode [ 145.829188][ T7016] loop0: detected capacity change from 0 to 128 [ 145.844346][ T7002] reiserfs: using flush barriers [ 145.868202][ T7002] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.946772][ T7002] REISERFS (device loop1): checking transaction log (loop1) [ 146.008042][ T7002] REISERFS (device loop1): Using r5 hash to sort names [ 146.038275][ T7002] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.349370][ T7022] loop2: detected capacity change from 0 to 4096 [ 146.517470][ T7022] NILFS (loop2): invalid segment: Checksum error in segment payload [ 146.541991][ T7022] NILFS (loop2): trying rollback from an earlier position [ 146.691665][ T7022] NILFS (loop2): recovery complete [ 146.751293][ T7036] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.175771][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 147.543799][ T7063] loop3: detected capacity change from 0 to 256 [ 147.640735][ T5838] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 147.705434][ T7063] FAT-fs (loop3): Directory bread(block 64) failed [ 147.741149][ T7063] FAT-fs (loop3): Directory bread(block 65) failed [ 147.759421][ T7063] FAT-fs (loop3): Directory bread(block 66) failed [ 147.786225][ T7063] FAT-fs (loop3): Directory bread(block 67) failed [ 147.809008][ T7063] FAT-fs (loop3): Directory bread(block 68) failed [ 147.821991][ T7063] FAT-fs (loop3): Directory bread(block 69) failed [ 147.834562][ T7063] FAT-fs (loop3): Directory bread(block 70) failed [ 147.844185][ T7063] FAT-fs (loop3): Directory bread(block 71) failed [ 147.852834][ T7063] FAT-fs (loop3): Directory bread(block 72) failed [ 147.859647][ T7063] FAT-fs (loop3): Directory bread(block 73) failed [ 147.865704][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.886619][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.901022][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.916134][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.927080][ T5838] usb 3-1: Product: syz [ 147.960230][ T5838] usb 3-1: Manufacturer: syz [ 147.965209][ T5838] usb 3-1: SerialNumber: syz [ 147.995422][ T7067] loop0: detected capacity change from 0 to 8192 [ 148.012922][ T7067] FAT-fs (loop0): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value [ 148.060347][ T6246] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.210478][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.245360][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.295415][ T5838] usb 3-1: 0:2 : does not exist [ 148.391945][ T5838] usb 3-1: USB disconnect, device number 5 [ 148.478859][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.534787][ T7077] loop3: detected capacity change from 0 to 764 [ 148.544763][ T7075] loop1: detected capacity change from 0 to 1024 [ 148.574474][ T7075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.591400][ T7077] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.634900][ T7075] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 148.685486][ T7075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.748564][ T7075] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.516: missing EA_INODE flag [ 148.788830][ T7079] loop0: detected capacity change from 0 to 8192 [ 148.798645][ T7075] EXT4-fs (loop1): Remounting filesystem read-only [ 148.920526][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.410911][ T7092] loop3: detected capacity change from 0 to 1764 [ 150.588122][ T7094] loop0: detected capacity change from 0 to 32768 [ 150.605232][ T7094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (7094) [ 150.707426][ T7094] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.749627][ T7094] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.777452][ T7094] BTRFS info (device loop0): using free space tree [ 151.084714][ T7094] BTRFS info (device loop0): enabling ssd optimizations [ 151.091869][ T7137] loop2: detected capacity change from 0 to 512 [ 151.098016][ T7137] EXT4-fs: Ignoring removed nobh option [ 151.140079][ T7094] BTRFS info (device loop0): auto enabling async discard [ 151.165888][ T7137] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 151.226770][ T7137] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 151.236386][ T7094] capability: warning: `syz.0.524' uses 32-bit capabilities (legacy support in use) [ 151.261724][ T7137] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.537: casefold flag without casefold feature [ 151.349045][ T7141] loop1: detected capacity change from 0 to 512 [ 151.356047][ T7137] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.537: couldn't read orphan inode 13 (err -117) [ 151.388617][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.420804][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.447179][ T7141] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.538: Invalid inode bitmap blk 4 in block_group 0 [ 151.497805][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.498332][ T7107] loop3: detected capacity change from 0 to 40427 [ 151.563282][ T7107] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (4285726721, 24) [ 151.564972][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.629889][ T28] audit: type=1800 audit(1755659435.908:16): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 151.633987][ T7107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.696395][ T7107] F2FS-fs (loop3): heap/no_heap options were deprecated [ 151.771202][ T7107] F2FS-fs (loop3): invalid crc value [ 151.809270][ T7107] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.852002][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.956243][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 152.070723][ T7107] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.099691][ T7107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.282914][ T7107] F2FS-fs (loop3): Corrupted max_depth of 3: 127 [ 152.384156][ T7157] loop0: detected capacity change from 0 to 256 [ 152.497123][ T7157] FAT-fs (loop0): Directory bread(block 64) failed [ 152.522262][ T7157] FAT-fs (loop0): Directory bread(block 65) failed [ 152.529370][ T7157] FAT-fs (loop0): Directory bread(block 66) failed [ 152.569040][ T7157] FAT-fs (loop0): Directory bread(block 67) failed [ 152.597072][ T7161] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.547'. [ 152.607702][ T7157] FAT-fs (loop0): Directory bread(block 68) failed [ 152.617657][ T7157] FAT-fs (loop0): Directory bread(block 69) failed [ 152.638779][ T7157] FAT-fs (loop0): Directory bread(block 70) failed [ 152.680590][ T7157] FAT-fs (loop0): Directory bread(block 71) failed [ 152.687622][ T7157] FAT-fs (loop0): Directory bread(block 72) failed [ 152.723501][ T7157] FAT-fs (loop0): Directory bread(block 73) failed [ 152.942039][ T7166] tmpfs: Too few inodes for current use [ 153.940135][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 154.132266][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.150121][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 154.153015][ T7195] loop0: detected capacity change from 0 to 512 [ 154.169897][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.193057][ T9] usb 2-1: config 0 descriptor?? [ 154.241825][ T7186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.264375][ T7195] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.562: invalid indirect mapped block 10 (level 1) [ 154.390106][ T7195] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.562: invalid indirect mapped block 8 (level 1) [ 154.487137][ T7195] EXT4-fs (loop0): 1 truncate cleaned up [ 154.494874][ T7195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.640215][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.699168][ T9] belkin 0003:050D:3201.0008: unbalanced collection at end of report description [ 154.714739][ T9] belkin 0003:050D:3201.0008: parse failed [ 154.715424][ T7188] loop3: detected capacity change from 0 to 40427 [ 154.721834][ T9] belkin: probe of 0003:050D:3201.0008 failed with error -22 [ 154.772687][ T7188] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 154.814281][ T7188] F2FS-fs (loop3): Image doesn't support compression [ 154.829340][ T7204] loop0: detected capacity change from 0 to 256 [ 154.866642][ T7188] F2FS-fs (loop3): invalid crc value [ 154.869109][ T7204] FAT-fs (loop0): Directory bread(block 64) failed [ 154.892305][ T7188] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.907731][ T9] usb 2-1: USB disconnect, device number 5 [ 154.930141][ T7204] FAT-fs (loop0): Directory bread(block 65) failed [ 154.948089][ T7204] FAT-fs (loop0): Directory bread(block 66) failed [ 154.980670][ T7204] FAT-fs (loop0): Directory bread(block 67) failed [ 155.016981][ T7204] FAT-fs (loop0): Directory bread(block 68) failed [ 155.038815][ T7204] FAT-fs (loop0): Directory bread(block 69) failed [ 155.070301][ T7204] FAT-fs (loop0): Directory bread(block 70) failed [ 155.077673][ T7188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.103274][ T7204] FAT-fs (loop0): Directory bread(block 71) failed [ 155.111138][ T7204] FAT-fs (loop0): Directory bread(block 72) failed [ 155.119101][ T7204] FAT-fs (loop0): Directory bread(block 73) failed [ 155.305753][ T5801] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 155.339272][ T5801] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 155.881126][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 156.283958][ T7237] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 156.552128][ T7249] loop1: detected capacity change from 0 to 256 [ 156.651522][ T7249] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 156.757177][ T7249] syz.1.586: attempt to access beyond end of device [ 156.757177][ T7249] loop1: rw=0, sector=311, nr_sectors = 1 limit=256 [ 157.457837][ T7271] program syz.0.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.576304][ T7245] loop3: detected capacity change from 0 to 32768 [ 157.667414][ T7245] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.709394][ T7277] netlink: 'syz.1.600': attribute type 11 has an invalid length. [ 157.861989][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 157.871689][ T7245] XFS (loop3): Ending clean mount [ 158.047158][ T7290] loop2: detected capacity change from 0 to 1024 [ 158.054140][ T7291] netlink: 'syz.1.604': attribute type 7 has an invalid length. [ 158.082532][ T7291] netlink: 'syz.1.604': attribute type 8 has an invalid length. [ 158.269943][ T5801] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.290335][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 158.529365][ T7301] loop2: detected capacity change from 0 to 512 [ 158.641546][ T7301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.730209][ T7301] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.863830][ T7301] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 158.922350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 158.989000][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.040877][ T7313] vlan2: entered allmulticast mode [ 159.060245][ T7313] macsec0: entered allmulticast mode [ 159.088872][ T7313] veth1_macvtap: entered allmulticast mode [ 159.107667][ T7316] tipc: Started in network mode [ 159.120409][ T7316] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 159.149214][ T7316] tipc: Enabling of bearer rejected, failed to enable media [ 159.439105][ T7328] loop2: detected capacity change from 0 to 512 [ 159.471144][ T7328] EXT4-fs: inline encryption not supported [ 159.522398][ T7328] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.544722][ T967] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.599242][ T7328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.612549][ T7328] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.641967][ T7328] EXT4-fs (loop2): orphan cleanup on readonly fs [ 159.664059][ T7328] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.620: inode #13: comm syz.2.620: iget: illegal inode # [ 159.678059][ T7328] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.620: couldn't read orphan inode 13 (err -117) [ 159.695656][ T7328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.760498][ T7328] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.620: resize_inode disabled but reserved GDT blocks non-zero [ 159.778488][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 159.786289][ T967] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 159.809685][ T967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 159.827124][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.625'. [ 159.848243][ T967] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 159.881844][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.889418][ T7340] loop0: detected capacity change from 0 to 8 [ 159.904957][ T7340] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 159.920963][ T967] usb 2-1: config 0 descriptor?? [ 159.943810][ T6169] udevd[6169]: incorrect cramfs checksum on /dev/loop0 [ 159.962450][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.166097][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 160.382600][ T967] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 160.404577][ T967] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 160.417552][ T967] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 160.425755][ T967] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 160.437810][ T967] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 160.460238][ T967] saitek 0003:06A3:0621.0009: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 160.603373][ T5859] usb 2-1: USB disconnect, device number 6 [ 160.627622][ T7353] fido_id[7353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 161.241854][ T7352] loop2: detected capacity change from 0 to 32768 [ 161.474560][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 161.702559][ T7376] loop3: detected capacity change from 0 to 64 [ 161.731098][ T7372] loop2: detected capacity change from 0 to 2048 [ 161.789260][ T7372] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 161.810956][ T7376] syz.3.643: attempt to access beyond end of device [ 161.810956][ T7376] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 161.856125][ T7372] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 161.866547][ T7376] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 161.880103][ T7372] UDF-fs: Scanning with blocksize 512 failed [ 161.991159][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.310004][ T967] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 162.512153][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 162.534352][ T967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.566631][ T967] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 162.590077][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.619122][ T967] usb 2-1: config 0 descriptor?? [ 162.639642][ T7380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.683898][ T7397] binder: 7396:7397 ioctl 400c620e 2000000014c0 returned -22 [ 163.081471][ T967] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 163.108172][ T967] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 163.117890][ T7395] loop3: detected capacity change from 0 to 32768 [ 163.121761][ T967] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 163.149995][ T967] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 163.159983][ T967] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 163.187018][ T967] logitech 0003:046D:C293.000A: hidraw0: USB HID v0.1e Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 163.216837][ T7405] loop0: detected capacity change from 0 to 128 [ 163.226142][ T967] logitech 0003:046D:C293.000A: no inputs found [ 163.239128][ T7405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.274110][ T7405] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.289601][ T7405] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.309562][ T967] usb 2-1: USB disconnect, device number 7 [ 163.315073][ T7395] overlayfs: upper fs needs to support d_type. [ 163.352981][ T7395] overlayfs: upper fs does not support tmpfile. [ 163.453224][ T7395] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.502978][ T7395] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 163.502978][ T7395] [ 163.548942][ T7395] ERROR: (device loop3): remounting filesystem as read-only [ 163.581177][ T7395] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 163.657605][ T7411] fido_id[7411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 163.744674][ T7405] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 163.871623][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.277868][ T7427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.666'. [ 164.309878][ T28] audit: type=1326 audit(1755659448.588:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33acf8ebe9 code=0x7ffc0000 [ 164.403202][ T28] audit: type=1326 audit(1755659448.588:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33acf8ebe9 code=0x7ffc0000 [ 164.502828][ T28] audit: type=1326 audit(1755659448.598:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33acf8ebe9 code=0x7ffc0000 [ 164.533460][ T28] audit: type=1326 audit(1755659448.598:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33acf8ebe9 code=0x7ffc0000 [ 164.956290][ T7443] loop3: detected capacity change from 0 to 64 [ 165.029078][ T7443] MINIX-fs: mounting file system with errors, running fsck is recommended [ 165.338220][ T7431] loop2: detected capacity change from 0 to 32768 [ 165.525112][ T7450] loop3: detected capacity change from 0 to 1764 [ 165.554757][ T7431] JBD2: Ignoring recovery information on journal [ 165.621910][ T7431] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 165.650025][ T7450] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 165.680485][ T7431] JBD2: bad block at offset 32 [ 165.812344][ T7431] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.900310][ T7462] netlink: 'syz.1.681': attribute type 4 has an invalid length. [ 165.908147][ T5801] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 165.957593][ T5801] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 166.012665][ T7464] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 166.098597][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 166.672723][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 167.341343][ T7507] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 167.484000][ T7511] overlayfs: conflicting options: nfs_export=on,index=off [ 168.186038][ T7502] loop3: detected capacity change from 0 to 32768 [ 168.250243][ T7502] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.330229][ T7535] loop0: detected capacity change from 0 to 24 [ 168.413080][ T7535] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 168.475912][ T7535] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 168.499036][ T7517] loop1: detected capacity change from 0 to 32768 [ 168.593560][ T7517] ialloc: diAlloc returned -5! [ 168.601948][ T7502] XFS (loop3): Ending clean mount [ 168.668878][ T7502] XFS (loop3): Quotacheck needed: Please wait. [ 168.716286][ T111] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 168.716286][ T111] [ 168.751191][ T111] ERROR: (device loop1): remounting filesystem as read-only [ 168.910730][ T7502] XFS (loop3): Quotacheck: Done. [ 169.091806][ T7545] loop0: detected capacity change from 0 to 1024 [ 169.117768][ T5801] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.155315][ T7545] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.304500][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 169.837264][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 170.454510][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.552678][ T7588] netlink: 'syz.0.738': attribute type 4 has an invalid length. [ 170.669193][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.687202][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.708326][ T23] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 170.728804][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.750120][ T23] usb 2-1: config 0 descriptor?? [ 170.861576][ T7595] loop0: detected capacity change from 0 to 512 [ 170.953283][ T7595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.969551][ T7595] ext4 filesystem being mounted at /208/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 171.109556][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.171819][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.179613][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.240824][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.248365][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.293835][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.330878][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.369115][ T23] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0 [ 171.411587][ T23] cypress 0003:04B4:DE61.000B: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 171.482515][ T23] usb 2-1: USB disconnect, device number 8 [ 171.648056][ T7613] fido_id[7613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 171.724153][ T7609] loop2: detected capacity change from 0 to 8192 [ 171.737728][ T7609] ntfs3: Invalid value for uid. [ 171.800377][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.001036][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 172.029731][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.068156][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.082610][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.094334][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.146958][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.181614][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.205571][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.234253][ T9] usb 4-1: Manufacturer: syz [ 172.244442][ T9] usb 4-1: config 0 descriptor?? [ 172.436346][ T7615] loop0: detected capacity change from 0 to 32768 [ 172.462761][ T7615] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.749 (7615) [ 172.497924][ T7615] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.514750][ T7629] loop2: detected capacity change from 0 to 256 [ 172.543881][ T7615] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 172.560113][ T7615] BTRFS info (device loop0): enabling auto defrag [ 172.569906][ T7615] BTRFS info (device loop0): doing ref verification [ 172.584184][ T7615] BTRFS info (device loop0): max_inline at 0 [ 172.609559][ T7629] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 172.622688][ T7615] BTRFS info (device loop0): force clearing of disk cache [ 172.636690][ T7629] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 172.637594][ T9] rc_core: IR keymap rc-hauppauge not found [ 172.679986][ T7615] BTRFS info (device loop0): turning on sync discard [ 172.691385][ T9] Registered IR keymap rc-empty [ 172.696932][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 172.714612][ T7615] BTRFS info (device loop0): using free space tree [ 172.760793][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 172.813286][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 172.852759][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 172.894290][ T7615] BTRFS info (device loop0): enabling ssd optimizations [ 172.941959][ T7615] BTRFS info (device loop0): rebuilding free space tree [ 172.974834][ T7650] loop2: detected capacity change from 0 to 164 [ 172.990535][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.041488][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.096572][ T7650] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.100341][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.155753][ T7650] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.169003][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.210085][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.214058][ T7654] loop1: detected capacity change from 0 to 512 [ 173.273787][ T7654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.275503][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.321580][ T7654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.379981][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.386202][ T7654] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.759: invalid indirect mapped block 4294967295 (level 1) [ 173.416982][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.436283][ T7654] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.759: invalid indirect mapped block 4294967295 (level 1) [ 173.466932][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.510012][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.520973][ T7654] EXT4-fs (loop1): 2 truncates cleaned up [ 173.545601][ T7659] loop2: detected capacity change from 0 to 2048 [ 173.552052][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 173.564414][ T7654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.571397][ T9] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 173.653920][ T7659] loop2: p1 < > p3 [ 173.662563][ T9] usb 4-1: USB disconnect, device number 7 [ 173.686549][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.698262][ T7659] loop2: p3 size 134217728 extends beyond EOD, truncated [ 173.831542][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.089127][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.144390][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 174.173334][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 174.311700][ T7669] loop0: detected capacity change from 0 to 1024 [ 174.422158][ T7669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.500935][ T7669] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.869294][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.932852][ T786] ------------[ cut here ]------------ [ 174.939142][ T786] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 174.954670][ T786] WARNING: CPU: 1 PID: 786 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 174.965223][ T786] Modules linked in: [ 174.969271][ T786] CPU: 1 PID: 786 Comm: kworker/1:2 Not tainted 6.6.102-syzkaller #0 [ 174.978157][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.990423][ T786] Workqueue: events request_firmware_work_func [ 174.997311][ T786] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 175.003749][ T786] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 fa d1 c9 ff 49 8b 17 48 c7 c7 00 b3 ba 8a 48 89 de e8 88 0b 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 8a 72 ff [ 175.024595][ T786] RSP: 0018:ffffc90003877800 EFLAGS: 00010246 [ 175.031518][ T786] RAX: 074b1da9c3be7300 RBX: ffffffff8b214da0 RCX: ffff888020dcbc00 [ 175.040146][ T786] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 175.048829][ T786] RBP: dffffc0000000000 R08: ffffc90003877407 R09: 1ffff9200070ee80 [ 175.058666][ T786] R10: dffffc0000000000 R11: fffff5200070ee81 R12: 1ffffffff16429b8 [ 175.067250][ T786] R13: 0000000000000001 R14: ffff88805fb811f0 R15: ffff88802fc91008 [ 175.075683][ T786] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 175.085699][ T786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.093060][ T786] CR2: 000055558b0c05c8 CR3: 0000000030c1e000 CR4: 00000000003506e0 [ 175.101257][ T786] Call Trace: [ 175.104680][ T786] [ 175.107742][ T786] ? sysfs_unmerge_group+0x10d/0x130 [ 175.113437][ T786] device_del+0x251/0x900 [ 175.117840][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.123931][ T786] ? kill_device+0x160/0x160 [ 175.128656][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.134951][ T786] ? _raw_spin_unlock+0x40/0x40 [ 175.140233][ T786] ? complete_all+0x2d/0x1d0 [ 175.145147][ T786] ? __fw_load_abort+0x8b/0x1a0 [ 175.150322][ T786] firmware_fallback_sysfs+0x682/0x940 [ 175.156350][ T786] _request_firmware+0xed9/0x1510 [ 175.161812][ T786] ? request_firmware+0x50/0x50 [ 175.166946][ T786] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 175.173339][ T786] ? read_lock_is_recursive+0x20/0x20 [ 175.178869][ T786] request_firmware_work_func+0xb0/0x1b0 [ 175.184955][ T786] ? process_scheduled_works+0x957/0x15b0 [ 175.192020][ T786] process_scheduled_works+0xa45/0x15b0 [ 175.198272][ T786] ? assign_work+0x400/0x400 [ 175.203023][ T786] ? assign_work+0x39e/0x400 [ 175.207863][ T786] worker_thread+0xa55/0xfc0 [ 175.212887][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.219245][ T786] ? _raw_spin_unlock+0x40/0x40 [ 175.224319][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.230654][ T786] kthread+0x2fa/0x390 [ 175.234978][ T786] ? pr_cont_work+0x560/0x560 [ 175.240419][ T786] ? kthread_blkcg+0xd0/0xd0 [ 175.245151][ T786] ret_from_fork+0x48/0x80 [ 175.250016][ T786] ? kthread_blkcg+0xd0/0xd0 [ 175.254845][ T786] ret_from_fork_asm+0x11/0x20 [ 175.259687][ T786] [ 175.263084][ T786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.270587][ T786] CPU: 1 PID: 786 Comm: kworker/1:2 Not tainted 6.6.102-syzkaller #0 [ 175.278700][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.287731][ T7665] loop2: detected capacity change from 0 to 32768 [ 175.296071][ T786] Workqueue: events request_firmware_work_func [ 175.302304][ T786] Call Trace: [ 175.305720][ T786] [ 175.308702][ T786] dump_stack_lvl+0x16c/0x230 [ 175.313642][ T786] ? show_regs_print_info+0x20/0x20 [ 175.319679][ T786] ? load_image+0x3b0/0x3b0 [ 175.324525][ T786] panic+0x2c0/0x710 [ 175.328746][ T786] ? bpf_jit_dump+0xd0/0xd0 [ 175.333401][ T786] ? ret_from_fork_asm+0x11/0x20 [ 175.338590][ T786] __warn+0x2e0/0x470 [ 175.342599][ T786] ? sysfs_remove_group+0x178/0x2a0 [ 175.348015][ T786] ? sysfs_remove_group+0x178/0x2a0 [ 175.353224][ T786] report_bug+0x2be/0x4f0 [ 175.357570][ T786] ? sysfs_remove_group+0x178/0x2a0 [ 175.362866][ T786] ? sysfs_remove_group+0x178/0x2a0 [ 175.368249][ T786] ? sysfs_remove_group+0x17a/0x2a0 [ 175.373488][ T786] handle_bug+0xcf/0x120 [ 175.377751][ T786] exc_invalid_op+0x1a/0x50 [ 175.382450][ T786] asm_exc_invalid_op+0x1a/0x20 [ 175.387674][ T786] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 175.393801][ T786] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 fa d1 c9 ff 49 8b 17 48 c7 c7 00 b3 ba 8a 48 89 de e8 88 0b 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 8a 72 ff [ 175.414034][ T786] RSP: 0018:ffffc90003877800 EFLAGS: 00010246 [ 175.420730][ T786] RAX: 074b1da9c3be7300 RBX: ffffffff8b214da0 RCX: ffff888020dcbc00 [ 175.429259][ T786] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 175.437245][ T786] RBP: dffffc0000000000 R08: ffffc90003877407 R09: 1ffff9200070ee80 [ 175.445259][ T786] R10: dffffc0000000000 R11: fffff5200070ee81 R12: 1ffffffff16429b8 [ 175.453621][ T786] R13: 0000000000000001 R14: ffff88805fb811f0 R15: ffff88802fc91008 [ 175.461625][ T786] ? sysfs_unmerge_group+0x10d/0x130 [ 175.467193][ T786] device_del+0x251/0x900 [ 175.471635][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.477898][ T786] ? kill_device+0x160/0x160 [ 175.482790][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.489581][ T786] ? _raw_spin_unlock+0x40/0x40 [ 175.494747][ T786] ? complete_all+0x2d/0x1d0 [ 175.499642][ T786] ? __fw_load_abort+0x8b/0x1a0 [ 175.504610][ T786] firmware_fallback_sysfs+0x682/0x940 [ 175.510118][ T786] _request_firmware+0xed9/0x1510 [ 175.515575][ T786] ? request_firmware+0x50/0x50 [ 175.520543][ T786] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 175.526627][ T786] ? read_lock_is_recursive+0x20/0x20 [ 175.532998][ T786] request_firmware_work_func+0xb0/0x1b0 [ 175.538829][ T786] ? process_scheduled_works+0x957/0x15b0 [ 175.544605][ T786] process_scheduled_works+0xa45/0x15b0 [ 175.550627][ T786] ? assign_work+0x400/0x400 [ 175.555241][ T786] ? assign_work+0x39e/0x400 [ 175.560662][ T786] worker_thread+0xa55/0xfc0 [ 175.565300][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 175.571853][ T786] ? _raw_spin_unlock+0x40/0x40 [ 175.577113][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 175.583337][ T786] kthread+0x2fa/0x390 [ 175.587599][ T786] ? pr_cont_work+0x560/0x560 [ 175.592574][ T786] ? kthread_blkcg+0xd0/0xd0 [ 175.597184][ T786] ret_from_fork+0x48/0x80 [ 175.601634][ T786] ? kthread_blkcg+0xd0/0xd0 [ 175.606240][ T786] ret_from_fork_asm+0x11/0x20 [ 175.611211][ T786] [ 175.614814][ T786] Kernel Offset: disabled [ 175.619512][ T786] Rebooting in 86400 seconds..