last executing test programs: 3.95073034s ago: executing program 4 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0xc048aeca, &(0x7f0000000080)=0x7) 3.655995718s ago: executing program 4 (id=2525): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.482260908s ago: executing program 3 (id=2526): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ustat(0x7, &(0x7f0000000040)) 3.202579634s ago: executing program 2 (id=2528): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r0) 3.078814491s ago: executing program 4 (id=2529): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0xfffff000) 3.077383491s ago: executing program 0 (id=2539): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {0x5, 0x0, 0xa, 0xa}, {0x85, 0x0, 0x0, 0x25}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d0000000000000000090000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 2.898901011s ago: executing program 4 (id=2530): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="270502070000000006ad7723936dbcf706060000170000000645f491bdd54ec5ff113a3ac4b8", 0x26}], 0x1}, 0x9cdc2384056b48b8) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.898073521s ago: executing program 2 (id=2541): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.512356944s ago: executing program 3 (id=2531): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001f80)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 2.41328441s ago: executing program 3 (id=2532): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8) 2.41238219s ago: executing program 0 (id=2533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x6) 1.403463989s ago: executing program 3 (id=2536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) 1.191218301s ago: executing program 1 (id=2537): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x48, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.104032575s ago: executing program 1 (id=2538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 771.280305ms ago: executing program 0 (id=2540): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01080000000000001e000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee339084eeef16f162471f4000000050009000100000005000200000000000800030005ac0f"], 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0) 770.944125ms ago: executing program 1 (id=2542): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x3c4, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x3b0, 0x1, [@m_skbmod={0x16c, 0x1f, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x5, 0x1, 0x8a}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xc5, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf59389a9d5a25e4c66da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x134, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x105, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffffff, 0xffffffffffffffff, 0x9, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x3, 0xa2d5, 0x1}, @rand_addr=0x64010100, @private=0xa010102, 0xff000000, 0x1}}]}, {0x39, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a7e3928486948fe0d47d2df6a88cb91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x3c4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 770.231555ms ago: executing program 2 (id=2543): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 730.692417ms ago: executing program 4 (id=2544): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x1, 0x210, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 585.039506ms ago: executing program 1 (id=2545): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x404}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) 583.341746ms ago: executing program 0 (id=2546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003780)={0x258, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23a, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @device_b, @device_a, @initial, {0x0, 0xd}}, 0x204a, 0x65, @random=0xfffc, @val, @void, [{0xdd, 0x37, "5b5cae234b8ce56abc191b68049f7d276bd34c8f03065783a7ab71e1cc9252e84585d510e2eba3f91996ec8df59ad0078c4679db2a5ea7"}, {0xdd, 0x88, "87de6529def0970547bb1d47c048a129f7ac6a1ff09028023472175f004911f96fd24ac84e1097caea208d511961272720e556d55d77147045ea1f801f09888a67d188b0e028a0c2d1499c616032033145903f7377c84fc24b807623a72bba5b8cd502a562d85d75a56d7410c48a22641bd2f25bbe5d1480c04b3d7a3fcc249ff0c6396b805ae9e3"}, {0xdd, 0x19, "f0f4c70d44b30e08cbf65048a63c3d3b066d803bc26c6498e9"}, {0xdd, 0xca, "e3e920f541b413fdfa1f62ae8b1efccdb42c3477d0f21958001bb8dc0e295d3125d99e9176e2e86767ef2486abc99e39a4064cc366deb2f6d18dfd054c43fda6a369a4591e0d1a37b9f27e3858ef47fe0e7275f462da5d98ca17f5a2d246e968d5a55ba6f465563508085e11277e113d9248c9544b010d6b07489857ad9df7a0d61130587bd5d7ac34caaa298d3227b04b4ff461e1d74796c0238f5530b8a2aa1c05ff0c7cfd77dc99d0c5a9aa117cca2b36b3c252b0f08825ec5735418863e2a0f8b99ec3da53945b4b"}, {0xdd, 0x20, "87c3c506b068c3fe0046c4b9c7c6d69ec06b381b7b5bd7efae26326490a9d101"}, {0xdd, 0x48, "4f41e6a549aab8fac88e7610612155b314e82dfde6e0adfc320b4dae69f00475108189a89e008cd51bbcf9dabc8371513d86322538f27e27065b7866ff5ab5439be2f3baf97a8166"}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) 552.456048ms ago: executing program 2 (id=2547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01"], 0xc8}}, 0x0) 389.541968ms ago: executing program 0 (id=2549): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='numa_maps\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ceph\x00', 0x0, 0x0) 324.003681ms ago: executing program 3 (id=2550): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 291.026253ms ago: executing program 2 (id=2551): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72f46e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7f54653b33118a4e01fcfe3a2329576bf6a45353bf9f720cea11bf481ed7ed0979416e75e6fa5f6b699749e9d4446c849ed79650b35dd0bd6e1955fe9b0c09861cf61fd57be7ba905990ed7a4c5b3793959636630d74ecc23264ea54d4d2cc4f112f49319943f00"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x20) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 241.094936ms ago: executing program 4 (id=2552): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) 240.153906ms ago: executing program 1 (id=2562): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x880}], 0x1, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 57.249286ms ago: executing program 0 (id=2553): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 57.048267ms ago: executing program 2 (id=2554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x3, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xe}, {0xeeed5000}, {0xdddd1000, 0x2}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}) 32.436068ms ago: executing program 3 (id=2555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) 0s ago: executing program 1 (id=2556): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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") open(&(0x7f0000000040)='./file2\x00', 0x64842, 0x21) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000020"], 0x0) kernel console output (not intermixed with test programs): dev loop6, logical block 0, async page read [ 239.511264][ T8198] ldm_validate_partition_table(): Disk read failed. [ 239.537152][ T8198] Dev loop6: unable to read RDB block 0 [ 239.561322][ T8198] loop6: unable to read partition table [ 239.578407][ T8198] loop6: partition table beyond EOD, truncated [ 239.617505][ T8198] loop_reread_partitions: partition scan of loop6 (u0Aj$UX ȿ`LA89>iDK#U[fW7ؖgv) failed (rc=-5) [ 239.805670][ T8210] loop3: detected capacity change from 0 to 128 [ 239.833877][ T8210] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 239.867583][ T8210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.207602][ T8221] loop0: detected capacity change from 0 to 512 [ 240.235820][ T8220] loop3: detected capacity change from 0 to 2048 [ 240.249781][ T8193] loop1: detected capacity change from 0 to 32768 [ 240.257138][ T8221] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.308892][ T8221] EXT4-fs (loop0): 1 truncate cleaned up [ 240.333597][ T8221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.375653][ T8220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.457371][ T8220] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.552233][ T27] audit: type=1800 audit(1739878450.628:46): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1450" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 240.633862][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 240.713738][ T8207] loop2: detected capacity change from 0 to 32768 [ 240.776990][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 240.845785][ T27] audit: type=1800 audit(1739878450.918:47): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1446" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 241.158169][ T8243] loop1: detected capacity change from 0 to 512 [ 241.268215][ T8243] EXT4-fs (loop1): 1 orphan inode deleted [ 241.312669][ T56] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 241.359206][ T8243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.381751][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 1 [ 241.435555][ T8243] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.699611][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 241.732194][ T8258] netlink: 'syz.2.1455': attribute type 1 has an invalid length. [ 241.769137][ T8258] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1455'. [ 241.962924][ T8267] loop0: detected capacity change from 0 to 128 [ 241.966774][ T8264] loop1: detected capacity change from 0 to 1024 [ 242.009821][ T8267] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 242.109096][ T8267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.435575][ T8273] loop2: detected capacity change from 0 to 8192 [ 242.627667][ T8252] loop4: detected capacity change from 0 to 32768 [ 242.648284][ T8252] XFS: ikeep mount option is deprecated. [ 242.742612][ T8252] XFS (loop4): Mounting V5 Filesystem [ 243.055846][ T8252] XFS (loop4): Ending clean mount [ 243.284880][ T4249] XFS (loop4): Unmounting Filesystem [ 243.574013][ T8315] loop2: detected capacity change from 0 to 1024 [ 243.649571][ T8319] loop1: detected capacity change from 0 to 1024 [ 243.662823][ T8315] hfsplus: catalog searching failed [ 243.829601][ T46] hfsplus: b-tree write err: -5, ino 4 [ 243.924943][ T8317] loop0: detected capacity change from 0 to 8192 [ 244.134230][ T4903] hfsplus: b-tree write err: -5, ino 4 [ 244.318791][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 244.368883][ T8335] device veth0_to_team entered promiscuous mode [ 244.433712][ T8331] loop2: detected capacity change from 0 to 4096 [ 244.508330][ T8331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.551408][ T8331] EXT4-fs (loop2): unmounting filesystem. [ 244.598408][ T8339] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1486'. [ 244.611686][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1486'. [ 244.886118][ T8347] loop2: detected capacity change from 0 to 256 [ 244.996764][ T8347] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x43518cac, utbl_chksum : 0xe619d30d) [ 246.214405][ T8377] loop4: detected capacity change from 0 to 4096 [ 246.252244][ T8377] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 246.294885][ T8377] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 246.344031][ T6505] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 246.522883][ T4249] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 246.553123][ T6505] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.571964][ T5058] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.580226][ T6505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.603592][ T6505] usb 1-1: config 0 descriptor?? [ 246.626256][ T6505] cp210x 1-1:0.0: cp210x converter detected [ 246.754910][ T8391] loop4: detected capacity change from 0 to 1024 [ 246.777315][ T8391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.784715][ T5058] usb 4-1: Using ep0 maxpacket: 8 [ 246.799610][ T5058] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 246.829232][ T5058] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.844484][ T8371] loop2: detected capacity change from 0 to 32768 [ 246.852662][ T5058] usb 4-1: config 0 has no interface number 1 [ 246.858851][ T5058] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 246.913374][ T5058] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 246.935810][ T8391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.969870][ T8389] loop1: detected capacity change from 0 to 8192 [ 246.981535][ T5058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.992938][ T5058] usb 4-1: Product: syz [ 246.997161][ T5058] usb 4-1: Manufacturer: syz [ 247.001990][ T5058] usb 4-1: SerialNumber: syz [ 247.005872][ T8389] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.018917][ T5058] usb 4-1: config 0 descriptor?? [ 247.025927][ T8371] XFS (loop2): Mounting V5 Filesystem [ 247.029827][ T6505] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 247.045802][ T5058] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 247.067948][ T6505] usb 1-1: cp210x converter now attached to ttyUSB0 [ 247.136989][ T8371] XFS (loop2): Ending clean mount [ 247.236875][ T4252] XFS (loop2): Unmounting Filesystem [ 247.249494][ T6505] usb 1-1: USB disconnect, device number 8 [ 247.269364][ T6505] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 247.294426][ T6505] cp210x 1-1:0.0: device disconnected [ 247.325000][ T2309] pvrusb2: Invalid write control endpoint [ 247.326963][ T5058] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 247.376711][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 247.378496][ T2309] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 247.407413][ T2309] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 247.645516][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 247.719509][ T6505] usb 4-1: USB disconnect, device number 6 [ 248.373635][ T8423] loop4: detected capacity change from 0 to 64 [ 248.684558][ T4249] hfs: node 4:3 still has 2 user(s)! [ 248.714771][ T8433] loop0: detected capacity change from 0 to 256 [ 248.821772][ T8433] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 248.985445][ T8439] loop3: detected capacity change from 0 to 4096 [ 249.162903][ T8447] loop4: detected capacity change from 0 to 256 [ 249.808396][ T8469] loop4: detected capacity change from 0 to 256 [ 249.829506][ T8472] loop3: detected capacity change from 0 to 512 [ 249.906921][ T8472] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 249.928684][ T8476] input: syz1 as /devices/virtual/input/input16 [ 249.951701][ T8472] UDF-fs: Scanning with blocksize 512 failed [ 250.005146][ T8472] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 250.039940][ T8472] UDF-fs: Scanning with blocksize 1024 failed [ 250.066671][ T8472] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 250.111216][ T8472] UDF-fs: Scanning with blocksize 2048 failed [ 250.148897][ T8472] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 250.179938][ T8472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.878800][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.919540][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.956239][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.997577][ T8504] net_ratelimit: 66 callbacks suppressed [ 250.997599][ T8504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.018635][ T8510] loop1: detected capacity change from 0 to 128 [ 251.078488][ T8510] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 251.127690][ T8510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.923293][ T8525] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1567'. [ 251.984581][ T8506] loop3: detected capacity change from 0 to 32768 [ 252.129831][ T8506] XFS (loop3): Mounting V5 Filesystem [ 252.333560][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'. [ 252.349630][ T8506] XFS (loop3): Ending clean mount [ 252.352617][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'. [ 252.378740][ T8506] XFS (loop3): Quotacheck needed: Please wait. [ 252.472807][ T8506] XFS (loop3): Quotacheck: Done. [ 252.709583][ T4257] XFS (loop3): Unmounting Filesystem [ 253.002645][ T27] audit: type=1326 audit(1739878463.078:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.044135][ T8549] loop2: detected capacity change from 0 to 4096 [ 253.097394][ T27] audit: type=1326 audit(1739878463.098:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.206376][ T27] audit: type=1326 audit(1739878463.098:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.300740][ T27] audit: type=1326 audit(1739878463.098:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.423496][ T27] audit: type=1326 audit(1739878463.098:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.489113][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 253.501516][ T27] audit: type=1326 audit(1739878463.118:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8d98cde9 code=0x7ffc0000 [ 253.562634][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 253.604015][ T27] audit: type=1326 audit(1739878463.118:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca8d983da7 code=0x7ffc0000 [ 253.739870][ T27] audit: type=1326 audit(1739878463.118:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca8d928fb9 code=0x7ffc0000 [ 253.849260][ T27] audit: type=1326 audit(1739878463.118:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca8d983da7 code=0x7ffc0000 [ 253.898472][ T8567] loop0: detected capacity change from 0 to 4096 [ 253.950141][ T27] audit: type=1326 audit(1739878463.118:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.4.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca8d928fb9 code=0x7ffc0000 [ 254.026832][ T8577] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 254.039959][ T8578] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.141731][ T8567] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 254.184203][ T8567] Remounting filesystem read-only [ 254.302385][ T8586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1589'. [ 254.397756][ T8588] loop2: detected capacity change from 0 to 128 [ 254.421953][ T8588] EXT4-fs: Ignoring removed nobh option [ 254.482198][ T8588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.529173][ T8588] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.653720][ T8588] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 254.756508][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 255.679211][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.693813][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700210][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.709556][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.751242][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.764798][ T8626] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 255.833854][ T5058] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 255.993766][ T8633] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1608'. [ 256.051781][ T5058] usb 2-1: Using ep0 maxpacket: 8 [ 256.066217][ T5058] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.130348][ T5058] usb 2-1: config 179 has no interface number 0 [ 256.137384][ T5058] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.168455][ T5058] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.207980][ T8640] loop3: detected capacity change from 0 to 8 [ 256.215383][ T5058] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.225506][ T8640] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 256.281855][ T5058] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.311934][ T5058] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.336414][ T5058] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.351739][ T8644] CUSE: unknown device info "workdir" [ 256.357183][ T8644] CUSE: DEVNAME unspecified [ 256.368464][ T5058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.441685][ T8620] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.553971][ T8648] loop3: detected capacity change from 0 to 512 [ 256.579637][ T8648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.788165][ T5058] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 256.871425][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 256.939608][ T14] usb 2-1: USB disconnect, device number 8 [ 256.939657][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 256.954108][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 257.029019][ T14] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 257.318773][ T8666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1617'. [ 257.542800][ T8637] loop4: detected capacity change from 0 to 40427 [ 257.591193][ T8637] F2FS-fs (loop4): build fault injection attr: rate: 691, type: 0x3ffff [ 257.627055][ T8637] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 257.699258][ T8637] F2FS-fs (loop4): invalid crc value [ 257.729011][ T8637] F2FS-fs (loop4): Found nat_bits in checkpoint [ 257.988002][ T8637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.202637][ T8637] syz.4.1609: attempt to access beyond end of device [ 258.202637][ T8637] loop4: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 258.413756][ T8703] loop1: detected capacity change from 0 to 64 [ 258.964167][ T8718] loop0: detected capacity change from 0 to 64 [ 260.103383][ T8756] autofs4:pid:8756:autofs_fill_super: called with bogus options [ 260.377583][ T8764] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 260.383994][ T8763] binder: 8762:8763 ioctl 400c620e 0 returned -14 [ 260.393913][ T8764] syzkaller0: linktype set to 512 [ 260.836654][ T8752] loop2: detected capacity change from 0 to 32768 [ 260.879232][ T8752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1650 (8752) [ 260.922299][ T5495] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 260.950020][ T8752] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.973167][ T8752] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 260.990945][ T8752] BTRFS info (device loop2): setting nodatacow, compression disabled [ 260.999825][ T8752] BTRFS info (device loop2): max_inline at 0 [ 261.015073][ T8752] BTRFS info (device loop2): enabling disk space caching [ 261.054155][ T8752] BTRFS info (device loop2): turning off barriers [ 261.060656][ T8752] BTRFS info (device loop2): turning on flush-on-commit [ 261.081544][ T8752] BTRFS info (device loop2): doing ref verification [ 261.091709][ T8752] BTRFS info (device loop2): force clearing of disk cache [ 261.109227][ T8752] BTRFS info (device loop2): enabling ssd optimizations [ 261.127310][ T8752] BTRFS info (device loop2): max_inline at 4096 [ 261.134707][ T5495] usb 5-1: Using ep0 maxpacket: 32 [ 261.142095][ T5495] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 261.161522][ T8752] BTRFS info (device loop2): disk space caching is enabled [ 261.187118][ T5058] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 261.196190][ T5495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.241817][ T5495] usb 5-1: config 0 descriptor?? [ 261.339932][ T8752] BTRFS info (device loop2): rebuilding free space tree [ 261.362046][ T8752] BTRFS info (device loop2): disabling free space tree [ 261.369022][ T8752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 261.379824][ T8752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 261.393686][ T5058] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.432215][ T5058] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.454303][ T5495] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 261.473452][ T5058] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.497018][ T5495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.518926][ T5058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.538250][ T5058] usb 2-1: SerialNumber: syz [ 261.546013][ T5495] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 261.562297][ T5495] usb 5-1: media controller created [ 261.618860][ T5495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.666305][ T4252] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.785123][ T5058] usb 2-1: 0:2 : does not exist [ 261.911066][ T5058] usb 2-1: USB disconnect, device number 9 [ 261.934527][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1666'. [ 262.092347][ T5495] az6027: usb out operation failed. (-71) [ 262.098138][ T5495] stb0899_attach: Driver disabled by Kconfig [ 262.139716][ T5495] az6027: no front-end attached [ 262.139716][ T5495] [ 262.174442][ T5495] az6027: usb out operation failed. (-71) [ 262.180248][ T5495] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 262.221863][ T5495] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 262.235273][ T4566] udevd[4566]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.262216][ T5495] dvb-usb: schedule remote query interval to 400 msecs. [ 262.281601][ T5495] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.344231][ T5495] usb 5-1: USB disconnect, device number 10 [ 262.505935][ T5495] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 262.970481][ T8806] loop0: detected capacity change from 0 to 32768 [ 263.017788][ T3623] loop0: p1 p2 p3 < p5 p6 > [ 263.034798][ T3623] loop0: p1 size 242222080 extends beyond EOD, truncated [ 263.051649][ T5495] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 263.071391][ T3623] loop0: p2 start 4294967295 is beyond EOD, truncated [ 263.150183][ T4931] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.213399][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 263.215708][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 263.235246][ T8820] udevd[8820]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 263.236936][ T4931] udevd[4931]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 263.271551][ T5495] usb 5-1: Using ep0 maxpacket: 16 [ 263.279337][ T5495] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.404645][ T8829] loop2: detected capacity change from 0 to 512 [ 263.477927][ T8829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.588882][ T8829] EXT4-fs (loop2): 1 truncate cleaned up [ 263.596865][ T8829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.741353][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 263.741370][ T27] audit: type=1800 audit(1739878473.818:70): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1678" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 263.783160][ T8829] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1678: corrupted in-inode xattr [ 263.874346][ T8829] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1723: inode #15: comm syz.2.1678: unable to update i_inline_off [ 263.897049][ T8831] loop3: detected capacity change from 0 to 4096 [ 263.909228][ T8835] loop0: detected capacity change from 0 to 2048 [ 263.932870][ T8831] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.962714][ T8829] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1678: corrupted in-inode xattr [ 264.021648][ T8835] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 264.081959][ T8835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.101352][ T8831] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 264.205849][ T8831] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 264.261332][ T8831] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.307615][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 264.320942][ T5495] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 264.336837][ T8831] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 264.386888][ T8828] loop1: detected capacity change from 0 to 131072 [ 264.400282][ T5495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.408969][ T5495] usb 5-1: Product: syz [ 264.413898][ T5495] usb 5-1: Manufacturer: syz [ 264.418543][ T5495] usb 5-1: SerialNumber: syz [ 264.431951][ T5495] usb 5-1: config 0 descriptor?? [ 264.446238][ T5495] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 264.449340][ T8831] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 264.558885][ T8831] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 264.641736][ T8831] ntfs: volume version 3.1. [ 264.646832][ T8831] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 264.672945][ T8828] F2FS-fs (loop1): Test dummy encryption mode enabled [ 264.685402][ T8831] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 264.718704][ T8828] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.784600][ T8828] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 265.289987][ T5495] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 265.310230][ T5495] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 265.330229][ T5495] usb 5-1: USB disconnect, device number 11 [ 265.923872][ T4891] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 266.120953][ T4891] usb 3-1: Using ep0 maxpacket: 16 [ 266.138280][ T4891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.175941][ T4891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.188857][ T4891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.200030][ T4891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.231373][ T4891] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.285632][ T4891] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.322355][ T4891] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.340893][ T4891] usb 3-1: Manufacturer: syz [ 266.359205][ T4891] usb 3-1: config 0 descriptor?? [ 266.796780][ T4891] rc_core: IR keymap rc-hauppauge not found [ 266.805836][ T4891] Registered IR keymap rc-empty [ 266.825002][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 266.861522][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 266.902391][ T4891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 266.924368][ T4891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 266.928880][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 266.958560][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 266.996191][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.034635][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.081220][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.121056][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.161566][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.201132][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.230989][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.261088][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.290977][ T4891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 267.322781][ T4891] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 267.340470][ T4891] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 267.373019][ T4891] usb 3-1: USB disconnect, device number 11 [ 267.500632][ T8902] loop0: detected capacity change from 0 to 128 [ 268.023407][ T5495] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 268.048161][ T8917] loop0: detected capacity change from 0 to 1024 [ 268.135105][ T8917] hfsplus: catalog searching failed [ 268.241537][ T5495] usb 5-1: Using ep0 maxpacket: 32 [ 268.250433][ T5495] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 268.288601][ T5495] usb 5-1: config 0 has no interface number 0 [ 268.306660][ T5495] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 268.328882][ T5495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.346793][ T5495] usb 5-1: Product: syz [ 268.355747][ T5495] usb 5-1: Manufacturer: syz [ 268.377051][ T5495] usb 5-1: SerialNumber: syz [ 268.392269][ T5495] usb 5-1: config 0 descriptor?? [ 268.408473][ T5495] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.606900][ T5495] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 268.642975][ T5495] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 268.813161][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.851231][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.938151][ T8936] loop0: detected capacity change from 0 to 16 [ 268.972831][ T8936] erofs: (device loop0): mounted with root inode @ nid 36. [ 269.055960][ T8936] syz.0.1721: attempt to access beyond end of device [ 269.055960][ T8936] loop0: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 269.074696][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 269.086338][ T4737] usb 5-1: USB disconnect, device number 12 [ 269.102172][ T8936] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1440] out[1677] [ 269.116690][ T4737] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 269.130503][ T8936] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 87 of nid 36 [ 269.169995][ T4737] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 269.215166][ T4737] quatech2 5-1:0.51: device disconnected [ 269.348993][ T8926] loop3: detected capacity change from 0 to 32768 [ 269.465304][ T8926] XFS (loop3): Mounting V5 Filesystem [ 269.576425][ T8926] XFS (loop3): Ending clean mount [ 269.597252][ T8926] XFS (loop3): User initiated shutdown received. [ 269.605158][ T8926] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 269.643134][ T8926] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 269.730613][ T4257] XFS (loop3): Unmounting Filesystem [ 269.806088][ T8959] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 269.828928][ T8958] ceph: missing cluster fsid [ 269.834907][ T8958] ceph: separator ':' missing in source [ 270.046178][ T8961] loop1: detected capacity change from 0 to 128 [ 270.587996][ T8954] loop0: detected capacity change from 0 to 32768 [ 270.612892][ T8976] loop2: detected capacity change from 0 to 2048 [ 270.658149][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 270.658164][ T27] audit: type=1800 audit(1739878480.728:77): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1725" name="file2" dev="loop0" ino=7 res=0 errno=0 [ 270.732059][ T8976] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1733: bad orphan inode 8192 [ 270.777904][ T8976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 271.640121][ T8998] loop3: detected capacity change from 0 to 4096 [ 271.690565][ T8998] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 271.781078][ T8998] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 271.835258][ T8998] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 271.903128][ T8998] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 271.933687][ T8998] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 271.944745][ T8998] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 271.958894][ T8998] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 271.979807][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 272.015125][ T8998] ntfs: volume version 3.1. [ 272.019790][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.020148][ T8998] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 272.068597][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.077121][ T8998] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 272.100743][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.131920][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.116154][ T9029] tap0: tun_chr_ioctl cmd 1074025677 [ 273.128285][ T9029] tap0: linktype set to 1 [ 274.006861][ T9057] loop4: detected capacity change from 0 to 1024 [ 274.158920][ T9057] syz.4.1768: attempt to access beyond end of device [ 274.158920][ T9057] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 274.242294][ T9057] syz.4.1768: attempt to access beyond end of device [ 274.242294][ T9057] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 274.281632][ T9057] Buffer I/O error on dev loop4, logical block 2889, async page read [ 274.313469][ T9057] syz.4.1768: attempt to access beyond end of device [ 274.313469][ T9057] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 275.841519][ T5495] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 275.965795][ T9063] loop0: detected capacity change from 0 to 40427 [ 276.038398][ T9063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 276.050897][ T5495] usb 5-1: Using ep0 maxpacket: 32 [ 276.058634][ T5495] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.096047][ T9074] loop1: detected capacity change from 0 to 32768 [ 276.126323][ T9063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 276.137872][ T5495] usb 5-1: config 0 has no interface number 0 [ 276.166455][ T5495] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.251651][ T9063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.273760][ T5495] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.340037][ T5495] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 276.406996][ T5495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.477735][ T5495] usb 5-1: config 0 descriptor?? [ 276.697940][ T9063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.737474][ T9063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.123409][ T5495] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.000C/input/input20 [ 277.367426][ T5495] uclogic 0003:28BD:0094.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 277.471371][ T5495] usb 5-1: USB disconnect, device number 13 [ 277.761007][ T4737] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 277.951564][ T4737] usb 3-1: Using ep0 maxpacket: 16 [ 277.965812][ T4737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 278.024118][ T4737] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.041984][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.058298][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 278.058879][ T4737] usb 3-1: Product: syz [ 278.131522][ T4737] usb 3-1: Manufacturer: syz [ 278.136183][ T4737] usb 3-1: SerialNumber: syz [ 278.184526][ T4737] usb 3-1: config 0 descriptor?? [ 278.205834][ T4737] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.226451][ T4737] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 278.276402][ T9112] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 278.303451][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 278.337388][ T9112] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 278.729400][ T9122] loop0: detected capacity change from 0 to 8 [ 278.817674][ T4737] em28xx 3-1:0.0: chip ID is em2874 [ 278.956314][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.091785][ T4737] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 279.100551][ T4737] em28xx 3-1:0.0: board has no eeprom [ 279.147566][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.260921][ T4737] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 279.286884][ T4737] em28xx 3-1:0.0: dvb set to bulk mode. [ 279.297540][ T6675] em28xx 3-1:0.0: Binding DVB extension [ 279.341135][ T4737] usb 3-1: USB disconnect, device number 12 [ 279.347770][ T4737] em28xx 3-1:0.0: Disconnecting em28xx [ 279.370249][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.498388][ T6675] em28xx 3-1:0.0: Registering input extension [ 279.607040][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.731079][ T6675] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 279.737653][ T6675] Registered IR keymap rc-empty [ 279.795804][ T6675] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 279.842569][ T6675] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 279.883434][ T9124] loop1: detected capacity change from 0 to 32768 [ 280.012769][ T6675] em28xx 3-1:0.0: Input extension successfully initialized [ 280.088940][ T4737] em28xx 3-1:0.0: Closing input extension [ 280.186164][ T11] tipc: Left network mode [ 280.209580][ T4903] read_mapping_page failed! [ 280.241137][ T4903] ERROR: (device loop1): txCommit: [ 280.241137][ T4903] [ 280.305223][ T4903] jfs_write_inode: jfs_commit_inode failed! [ 280.377336][ T9126] loop3: detected capacity change from 0 to 40427 [ 280.424154][ T9126] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 280.468442][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.481361][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.489950][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.501183][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.508936][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.516815][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.522704][ T9126] F2FS-fs (loop3): invalid crc value [ 280.556402][ T4737] em28xx 3-1:0.0: Freeing device [ 280.609352][ T9126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.615438][ T9143] syzkaller0 speed is unknown, defaulting to 1000 [ 280.890289][ T9126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 281.063428][ T4257] syz-executor: attempt to access beyond end of device [ 281.063428][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.889304][ T9143] chnl_net:caif_netlink_parms(): no params data found [ 282.392631][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.418502][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.450337][ T9143] device bridge_slave_0 entered promiscuous mode [ 282.584871][ T4259] Bluetooth: hci0: command 0x0409 tx timeout [ 282.757793][ T9201] loop1: detected capacity change from 0 to 4096 [ 283.466612][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.479001][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.562179][ T9143] device bridge_slave_1 entered promiscuous mode [ 283.634633][ T9234] loop0: detected capacity change from 0 to 16 [ 283.722896][ T9234] erofs: (device loop0): mounted with root inode @ nid 36. [ 283.756025][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.812690][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.035458][ T9143] team0: Port device team_slave_0 added [ 284.098675][ T9143] team0: Port device team_slave_1 added [ 284.275796][ T11] device hsr_slave_0 left promiscuous mode [ 284.293176][ T11] device hsr_slave_1 left promiscuous mode [ 284.327710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.350984][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.381163][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.388672][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.402388][ T11] device bridge_slave_1 left promiscuous mode [ 284.412120][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.503029][ T11] device bridge_slave_0 left promiscuous mode [ 284.511466][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.645023][ T11] device veth1_macvtap left promiscuous mode [ 284.651024][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 284.727245][ T11] device veth0_macvtap left promiscuous mode [ 284.762119][ T11] device veth1_vlan left promiscuous mode [ 284.768720][ T11] device veth0_vlan left promiscuous mode [ 284.937083][ T9242] loop3: detected capacity change from 0 to 32768 [ 284.984350][ T9242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1836 (9242) [ 285.070238][ T9242] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.100348][ T9242] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 285.139442][ T9242] BTRFS info (device loop3): using free space tree [ 285.341589][ T9242] BTRFS info (device loop3): enabling ssd optimizations [ 285.573069][ T4257] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.371661][ T11] team0 (unregistering): Port device team_slave_1 removed [ 286.439601][ T11] team0 (unregistering): Port device team_slave_0 removed [ 286.524259][ T9299] loop3: detected capacity change from 0 to 256 [ 286.530746][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.552715][ T9299] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 286.564024][ T9299] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 286.581403][ T9299] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 286.589829][ T9299] UDF-fs: Scanning with blocksize 512 failed [ 286.628879][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.635110][ T9299] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 286.655739][ T9299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.739023][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 287.535587][ T11] bond0 (unregistering): Released all slaves [ 287.629886][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.637795][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.664470][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.677295][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.685190][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.722480][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.899749][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.916447][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 287.975233][ T9143] device hsr_slave_0 entered promiscuous mode [ 287.995309][ T9143] device hsr_slave_1 entered promiscuous mode [ 288.059799][ T9143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.079424][ T9143] Cannot create hsr debugfs directory [ 288.359224][ T9323] loop0: detected capacity change from 0 to 512 [ 288.513993][ T9323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 288.534502][ T9323] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.592453][ T9323] EXT4-fs (loop0): shut down requested (0) [ 288.811856][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 288.989243][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 289.023251][ T1212] __quota_error: 12 callbacks suppressed [ 289.023273][ T1212] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 289.159507][ T9318] loop1: detected capacity change from 0 to 32768 [ 289.324533][ T9318] XFS (loop1): Mounting V5 Filesystem [ 289.444893][ T9318] XFS (loop1): Ending clean mount [ 289.463875][ T9318] XFS (loop1): Quotacheck needed: Please wait. [ 289.537169][ T9318] XFS (loop1): Quotacheck: Done. [ 289.708233][ T9143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.746259][ T9143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.775964][ T4250] XFS (loop1): Unmounting Filesystem [ 289.791612][ T9143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.869071][ T9143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.953353][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 289.988041][ T9368] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1865'. [ 290.185328][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.214432][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.234070][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.270248][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.305688][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.327224][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.368969][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.376209][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.492379][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.525356][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.556153][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.596535][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.603772][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.666559][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.694302][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.730299][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.760006][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.852523][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.857167][ T9387] loop0: detected capacity change from 0 to 512 [ 290.867211][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.905488][ T4263] Bluetooth: hci0: command 0x0405 tx timeout [ 290.922384][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.951549][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.960218][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.975259][ T9143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.001902][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.018120][ T4931] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.030305][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.039882][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.707545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.734189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.767343][ T9381] loop1: detected capacity change from 0 to 32768 [ 291.773192][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.879820][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.904001][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.965976][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.997410][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.038532][ T9143] device veth0_vlan entered promiscuous mode [ 293.050741][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.073036][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.098844][ T9143] device veth1_vlan entered promiscuous mode [ 293.234002][ T9143] device veth0_macvtap entered promiscuous mode [ 293.274738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.292403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.298624][ T9461] loop1: detected capacity change from 0 to 256 [ 293.332726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.375486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.405631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.437659][ T9143] device veth1_macvtap entered promiscuous mode [ 293.509499][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.540367][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.560341][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.579570][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.590330][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.606195][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.618454][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.630172][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.650128][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.683729][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.710554][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.734627][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.744673][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.776110][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.817151][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.856418][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.914257][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.938655][ T9143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.998335][ T9143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.026007][ T9143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.051911][ T9143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.075518][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.105398][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.144473][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 294.158983][ T9482] tipc: Started in network mode [ 294.168641][ T9482] tipc: Node identity memory.en, cluster identity 8 [ 294.407015][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.431022][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.481559][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.499680][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.526758][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.580030][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.187878][ T9498] loop4: detected capacity change from 0 to 40427 [ 295.200978][ T9498] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 295.207985][ T9498] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 295.231153][ T9498] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 295.239777][ T9498] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 295.278865][ T9498] F2FS-fs (loop4): invalid crc value [ 295.332601][ T9498] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.407445][ T9498] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 295.417997][ T9498] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.485405][ T9498] F2FS-fs (loop4): switch discard_unit option is not allowed [ 295.668070][ T9525] sp0: Synchronizing with TNC [ 295.881421][ T6675] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 296.076587][ T6675] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.096346][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.137086][ T6675] usb 1-1: config 0 descriptor?? [ 296.156707][ T6675] cp210x 1-1:0.0: cp210x converter detected [ 296.381542][ T5495] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.566081][ T6675] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 296.588098][ T6675] usb 1-1: cp210x converter now attached to ttyUSB0 [ 296.601476][ T5495] usb 3-1: Using ep0 maxpacket: 8 [ 296.608458][ T5495] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 296.671473][ T5495] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.702933][ T5495] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.731554][ T5495] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.751631][ T5495] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.775687][ T5495] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.786681][ T6675] usb 1-1: USB disconnect, device number 9 [ 296.792721][ T5495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.843524][ T6675] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 296.875038][ T6675] cp210x 1-1:0.0: device disconnected [ 297.038310][ T5495] usb 3-1: GET_CAPABILITIES returned 0 [ 297.061038][ T5495] usbtmc 3-1:16.0: can't read capabilities [ 297.123113][ T9547] loop3: detected capacity change from 0 to 40427 [ 297.139879][ T9547] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 297.172208][ T9547] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 297.199053][ T9547] F2FS-fs (loop3): Found nat_bits in checkpoint [ 297.253276][ T9547] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 297.260608][ T9547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 297.282453][ T5495] usb 3-1: USB disconnect, device number 13 [ 297.399657][ T9547] syz.3.1909: attempt to access beyond end of device [ 297.399657][ T9547] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 297.498094][ T4257] syz-executor: attempt to access beyond end of device [ 297.498094][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.896958][ T9573] loop0: detected capacity change from 0 to 256 [ 298.076317][ T9578] tap0: tun_chr_ioctl cmd 1074812118 [ 298.316040][ T9587] loop0: detected capacity change from 0 to 1024 [ 298.410889][ T27] audit: type=1800 audit(1739878508.478:88): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1927" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 298.456350][ T9587] hfsplus: request for non-existent node 1280 in B*Tree [ 298.480138][ T27] audit: type=1800 audit(1739878508.488:89): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1927" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 298.507355][ T9587] hfsplus: request for non-existent node 1280 in B*Tree [ 298.587368][ T9590] loop1: detected capacity change from 0 to 4096 [ 298.759266][ T9590] ntfs: volume version 3.1. [ 299.770426][ T9601] loop4: detected capacity change from 0 to 40427 [ 299.798685][ T9601] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 299.818897][ T9601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 299.916643][ T9601] F2FS-fs (loop4): Found nat_bits in checkpoint [ 299.966334][ T9637] Process accounting resumed [ 299.995505][ T9637] kernel write not supported for file /814/clear_refs (pid: 9637 comm: syz.2.1949) [ 300.061794][ T9601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 300.068944][ T9601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.190206][ T9601] syz.4.1933: attempt to access beyond end of device [ 300.190206][ T9601] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 300.244627][ T27] audit: type=1326 audit(1739878510.318:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.1.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00e838cde9 code=0x0 [ 300.295779][ T9143] syz-executor: attempt to access beyond end of device [ 300.295779][ T9143] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.862541][ T9650] loop0: detected capacity change from 0 to 2048 [ 300.884771][ T9650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.350114][ T9666] tipc: Started in network mode [ 301.359584][ T9666] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.391136][ T9666] tipc: Enabling of bearer rejected, failed to enable media [ 301.550944][ T5058] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 301.746105][ T5058] usb 2-1: Using ep0 maxpacket: 16 [ 301.754119][ T5058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.783683][ T5058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.822881][ T5058] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 301.839507][ T5058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.860134][ T5058] usb 2-1: config 0 descriptor?? [ 302.328993][ T5058] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 302.463822][ T9671] loop0: detected capacity change from 0 to 40427 [ 302.478665][ T9671] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384) [ 302.522797][ T5058] corsair 0003:1B1C:1B02.000D: Read invalid backlight brightness: 56. [ 302.546513][ T9671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 302.616328][ T9671] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.744471][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 302.751046][ T5495] usb 2-1: USB disconnect, device number 10 [ 302.806126][ T9671] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 302.821454][ T9671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 302.948586][ T9671] syz.0.1964: attempt to access beyond end of device [ 302.948586][ T9671] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 303.039389][ T9707] loop3: detected capacity change from 0 to 64 [ 303.094913][ T4251] syz-executor: attempt to access beyond end of device [ 303.094913][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.384683][ T4257] Trying to free block not in datazone [ 303.416751][ T4257] Trying to free block not in datazone [ 303.458364][ T4257] Trying to free block not in datazone [ 303.480925][ T4257] Trying to free block not in datazone [ 303.496681][ T4257] Trying to free block not in datazone [ 303.529557][ T4257] Trying to free block not in datazone [ 303.556962][ T4257] minix_free_inode: bit 6 already cleared [ 303.580661][ T4257] Trying to free block not in datazone [ 303.600351][ T4257] minix_free_inode: bit 7 already cleared [ 303.718477][ T9723] input: syz1 as /devices/virtual/input/input22 [ 304.029010][ T9736] [U]  [ 304.051787][ T9736] [U] K{ [ 304.055192][ T9736] [U] T 1ŠFFˊ`GJǘGO/MC [ 304.083808][ T9736] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 304.163625][ T9736] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 304.186782][ T9736] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 304.222509][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.394919][ T9736] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 304.497437][ T9736] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 304.517598][ T9736] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 304.589051][ T9736] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 304.796906][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.920123][ T9736] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 304.938011][ T9736] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 304.958368][ T9736] [U] 22Ʃ۩X?0;3U [ 305.007475][ T9736] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 305.032565][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.069238][ T9736] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 305.086953][ T9736] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 305.098211][ T9736] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 305.143837][ T9736] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 305.167012][ T9736] [U] EC [ 305.170717][ T9736] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 305.213525][ T9736] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 305.596199][ T9778] loop1: detected capacity change from 0 to 128 [ 305.654361][ T9778] ufs: You didn't specify the type of your ufs filesystem [ 305.654361][ T9778] [ 305.654361][ T9778] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 305.654361][ T9778] [ 305.654361][ T9778] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 305.837679][ T9758] loop3: detected capacity change from 0 to 40427 [ 305.857494][ T9778] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 305.944724][ T9758] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.086567][ T9794] loop4: detected capacity change from 0 to 64 [ 306.155040][ T9758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 306.226091][ T5495] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 306.327728][ T9143] hfs: node 4:3 still has 1 user(s)! [ 306.422183][ T5495] usb 2-1: Using ep0 maxpacket: 16 [ 306.429404][ T5495] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 306.467241][ T5495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.501503][ T5495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12160, setting to 1024 [ 306.527166][ T4257] syz-executor: attempt to access beyond end of device [ 306.527166][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.540877][ T5495] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 306.594577][ T5495] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.629290][ T5495] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 306.656386][ T5495] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 306.665856][ T5495] usb 2-1: Manufacturer: syz [ 306.683122][ T5495] usb 2-1: config 0 descriptor?? [ 307.052004][ T5495] rc_core: IR keymap rc-hauppauge not found [ 307.058335][ T5495] Registered IR keymap rc-empty [ 307.079060][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.146877][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.206558][ T5495] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 307.252248][ T5495] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 307.277708][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.322872][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.362036][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.411755][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.471692][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.479862][ T9805] loop0: detected capacity change from 0 to 32768 [ 307.511856][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.553469][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.588291][ T9831] netlink: 110 bytes leftover after parsing attributes in process `syz.2.2031'. [ 307.609053][ T9805] XFS (loop0): Mounting V5 Filesystem [ 307.615658][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.651034][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2031'. [ 307.667812][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.730603][ T9805] XFS (loop0): Ending clean mount [ 307.737685][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.781988][ T5495] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 307.790651][ T9805] XFS (loop0): Quotacheck needed: Please wait. [ 307.832917][ T5495] mceusb 2-1:0.0: Registered ፞ with mce emulator interface version 1c [ 307.852838][ T5495] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 307.907825][ T5495] usb 2-1: USB disconnect, device number 11 [ 307.911726][ T9805] XFS (loop0): Quotacheck: Done. [ 308.039512][ T9845] netlink: 'syz.2.2038': attribute type 19 has an invalid length. [ 308.065148][ T4251] XFS (loop0): Unmounting Filesystem [ 308.335515][ T9851] ALSA: mixer_oss: invalid OSS volume '' [ 308.722345][ T9859] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 308.761625][ T9859] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2046'. [ 309.029960][ T9827] loop3: detected capacity change from 0 to 40427 [ 309.082716][ T9827] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 309.104130][ T9869] netlink: 368 bytes leftover after parsing attributes in process `syz.2.2050'. [ 309.124436][ T9827] F2FS-fs (loop3): invalid crc value [ 309.150478][ T9827] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.229443][ T9867] loop4: detected capacity change from 0 to 4096 [ 309.294988][ T9867] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 309.318281][ T9827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.344218][ T9875] loop0: detected capacity change from 0 to 4096 [ 309.363993][ T9867] ntfs3: loop4: Failed to load $Extend. [ 309.384457][ T9875] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 309.409939][ T9867] ntfs3: loop4: ino=21, "blkio.bfq.io_queued_recursive" mmap(write) compressed not supported [ 309.686142][ T9143] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 310.318183][ T9893] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 310.410454][ T9893] CIFS mount error: No usable UNC path provided in device string! [ 310.410454][ T9893] [ 310.439240][ T9893] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 310.489517][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 310.524998][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 310.687740][ T9879] loop1: detected capacity change from 0 to 40427 [ 310.733898][ T9879] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 310.763107][ T9879] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 310.806359][ T9879] F2FS-fs (loop1): invalid crc value [ 310.887043][ T9886] loop4: detected capacity change from 0 to 32768 [ 310.903481][ T9879] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 311.088028][ T9879] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 311.095928][ T9879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.192622][ T9901] f2fs_ckpt-7:1: attempt to access beyond end of device [ 311.192622][ T9901] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.666980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 311.687710][ T9916] loop4: detected capacity change from 0 to 2048 [ 311.755689][ T9916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.899798][ T9916] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 311.921335][ T9916] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 311.970954][ T9916] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.970954][ T9916] [ 312.017334][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 312.049035][ T9916] EXT4-fs (loop4): Total free blocks count 0 [ 312.057607][ T9916] EXT4-fs (loop4): Free/Dirty block details [ 312.070128][ T2309] pvrusb2: Failure uploading firmware1 [ 312.096459][ T2309] pvrusb2: Device initialization was not successful. [ 312.124925][ T9916] EXT4-fs (loop4): free_blocks=2415919104 [ 312.132829][ T9924] loop6: detected capacity change from 0 to 524287999 [ 312.140327][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.149735][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.151636][ T9916] EXT4-fs (loop4): dirty_blocks=48 [ 312.157698][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 312.170949][ T9916] EXT4-fs (loop4): Block reservation details [ 312.189718][ T9916] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 312.191595][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.204901][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.208684][ T9923] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 312.226359][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 312.226760][ T6505] pvrusb2: Device being rendered inoperable [ 312.242734][ T2309] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 312.270862][ T2309] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 312.285863][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.295208][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.372482][ T9927] loop6: detected capacity change from 524287999 to 0 [ 312.400108][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.409384][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.431272][ T9924] ldm_validate_partition_table(): Disk read failed. [ 312.437947][ T9924] Dev loop6: unable to read RDB block 0 [ 312.478990][ T9924] loop6: unable to read partition table [ 312.506631][ T9924] loop6: partition table beyond EOD, truncated [ 312.543428][ T9924] loop_reread_partitions: partition scan of loop6 (u0Aj$UX ȿ`LA89>iDK#U[fW7ؖgv) failed (rc=-5) [ 312.700681][ T9937] loop1: detected capacity change from 0 to 512 [ 312.744803][ T9937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.775632][ T9935] loop4: detected capacity change from 0 to 2048 [ 312.818549][ T9937] EXT4-fs (loop1): 1 truncate cleaned up [ 312.827233][ T9937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.839425][ T9935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.848700][ T9935] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.958178][ T27] audit: type=1800 audit(1739878523.028:91): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2073" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 313.044428][ T9944] loop3: detected capacity change from 0 to 256 [ 313.105915][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 313.138910][ T9143] EXT4-fs (loop4): unmounting filesystem. [ 313.151307][ T27] audit: type=1800 audit(1739878523.208:92): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2076" name="bus" dev="loop3" ino=1048673 res=0 errno=0 [ 313.586051][ T9954] loop1: detected capacity change from 0 to 1024 [ 313.681518][ T9954] hfsplus: catalog searching failed [ 313.848134][ T4903] hfsplus: b-tree write err: -5, ino 4 [ 314.025200][ T9961] loop4: detected capacity change from 0 to 1024 [ 314.915760][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 315.079382][ T9989] loop0: detected capacity change from 0 to 4096 [ 315.202767][ T9989] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 315.371558][ T9989] ntfs3: loop0: Failed to load $Extend. [ 315.512168][T10011] ptrace attach of "./syz-executor exec"[4252] was attempted by "./syz-executor exec"[10011] [ 315.528103][T10005] loop1: detected capacity change from 0 to 4096 [ 315.590106][T10005] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 315.602103][T10008] loop4: detected capacity change from 0 to 4096 [ 315.636961][T10008] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 315.724714][T10008] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 315.758214][T10005] overlayfs: upper fs does not support tmpfile. [ 315.819065][T10005] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.870368][T10005] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 315.932434][T10005] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 315.939625][T10005] overlayfs: failed to verify upper root origin [ 316.267731][T10028] loop1: detected capacity change from 0 to 256 [ 316.325440][T10024] loop3: detected capacity change from 0 to 4096 [ 316.343938][T10028] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x43518cac, utbl_chksum : 0xe619d30d) [ 316.376071][T10024] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 316.746206][T10035] device veth0_to_team entered promiscuous mode [ 317.135481][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.537346][T10026] loop4: detected capacity change from 0 to 40427 [ 317.562174][T10047] loop1: detected capacity change from 0 to 32768 [ 317.573784][T10047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2125 (10047) [ 317.594563][T10047] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.605221][T10047] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 317.614758][T10047] BTRFS info (device loop1): using free space tree [ 317.624502][T10026] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 317.728185][T10026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 317.800929][T10047] BTRFS info (device loop1): enabling ssd optimizations [ 317.802854][T10026] F2FS-fs (loop4): invalid crc value [ 317.950008][T10071] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2127'. [ 317.960353][T10026] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.002108][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2127'. [ 318.045886][ T4250] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.218009][T10038] loop3: detected capacity change from 0 to 32768 [ 318.252259][T10038] XFS: ikeep mount option is deprecated. [ 318.270546][T10026] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 318.288560][T10026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.512347][T10038] XFS (loop3): Mounting V5 Filesystem [ 318.601580][ T27] audit: type=1326 audit(1739878528.668:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e838cde9 code=0x7ffc0000 [ 318.714494][T10038] XFS (loop3): Ending clean mount [ 318.762492][ T56] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 318.770288][ T27] audit: type=1326 audit(1739878528.668:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e838cde9 code=0x7ffc0000 [ 318.824395][T10089] Bluetooth: MGMT ver 1.22 [ 318.833935][ T56] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 318.920983][ T27] audit: type=1326 audit(1739878528.698:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00e838cde9 code=0x7ffc0000 [ 319.011526][ T27] audit: type=1326 audit(1739878528.698:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00e838ce23 code=0x7ffc0000 [ 319.047221][ T4257] XFS (loop3): Unmounting Filesystem [ 319.167285][T10074] loop0: detected capacity change from 0 to 40427 [ 319.222249][ T27] audit: type=1326 audit(1739878529.298:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00e838b89f code=0x7ffc0000 [ 319.320487][T10074] F2FS-fs (loop0): Found nat_bits in checkpoint [ 319.512254][T10074] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 319.823676][ T27] audit: type=1326 audit(1739878529.898:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00e838ce77 code=0x7ffc0000 [ 319.857945][ T4251] syz-executor: attempt to access beyond end of device [ 319.857945][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.935642][ T27] audit: type=1326 audit(1739878530.008:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00e838b750 code=0x7ffc0000 [ 319.936178][T10087] loop1: detected capacity change from 0 to 32768 [ 320.009495][ T27] audit: type=1326 audit(1739878530.008:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00e838c9eb code=0x7ffc0000 [ 320.146253][T10087] XFS: noikeep mount option is deprecated. [ 320.153184][ T27] audit: type=1326 audit(1739878530.218:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00e838ba4a code=0x7ffc0000 [ 320.328615][ T27] audit: type=1326 audit(1739878530.218:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00e838ba4a code=0x7ffc0000 [ 320.397851][T10087] XFS (loop1): Mounting V5 Filesystem [ 320.552218][T10087] XFS (loop1): Ending clean mount [ 320.587879][T10087] XFS (loop1): Quotacheck needed: Please wait. [ 320.781835][T10087] XFS (loop1): Quotacheck: Done. [ 321.048828][T10101] loop4: detected capacity change from 0 to 131072 [ 321.056949][T10101] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 321.058513][ T4250] XFS (loop1): Unmounting Filesystem [ 321.065437][T10101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 321.123387][T10101] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.226065][T10101] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 321.233607][T10101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 321.278605][T10099] loop3: detected capacity change from 0 to 40427 [ 321.343093][T10099] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 321.381376][T10099] F2FS-fs (loop3): invalid crc value [ 321.417567][T10099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.601965][ T5057] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 321.627158][T10099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 321.791489][ T5057] usb 3-1: Using ep0 maxpacket: 8 [ 321.798602][ T5057] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 321.810300][ T5057] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.821120][ T5057] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.833773][ T5057] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.844683][ T5057] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.863292][ T5057] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.875701][ T5057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.897618][ T4257] syz-executor: attempt to access beyond end of device [ 321.897618][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 321.914725][ T5058] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 322.108345][ T5057] usb 3-1: usb_control_msg returned -32 [ 322.117683][ T5057] usbtmc 3-1:16.0: can't read capabilities [ 322.126791][ T5058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.145175][ T5058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.196219][ T5058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.215733][ T5058] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.232674][ T5058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.255982][ T5058] usb 1-1: config 0 descriptor?? [ 322.674080][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.686828][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.699799][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.708608][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.717669][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.728423][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.746895][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.758562][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.766966][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.775097][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.783294][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.791371][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.799310][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.812619][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.829527][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.847102][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.859634][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.867722][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.876468][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.884825][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.896225][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.921518][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.928989][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.940469][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.949161][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.957714][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.980901][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 322.988377][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.009615][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.020221][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.028502][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.038899][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.046945][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.054981][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.063031][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.070462][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.078361][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.086151][ T5058] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 323.094936][ T5058] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 323.108957][ T5058] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 323.127531][ T5058] usb 1-1: USB disconnect, device number 10 [ 323.174228][T10129] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 323.202143][T10129] netlink: 'syz.3.2139': attribute type 2 has an invalid length. [ 323.571027][T10149] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 324.139249][T10174] loop0: detected capacity change from 0 to 512 [ 324.183426][T10174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2158: inode #1: comm syz.0.2158: iget: illegal inode # [ 324.208099][T10174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2158: error while reading EA inode 1 err=-117 [ 324.221715][T10174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2158: inode #1: comm syz.0.2158: iget: illegal inode # [ 324.243005][T10174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2158: error while reading EA inode 1 err=-117 [ 324.259057][T10174] EXT4-fs (loop0): 1 orphan inode deleted [ 324.266377][T10174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 324.390710][ T4744] usb 3-1: USB disconnect, device number 14 [ 324.425001][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 324.685113][T10187] loop0: detected capacity change from 0 to 4096 [ 324.712497][T10187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 324.738249][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 324.738265][ T27] audit: type=1326 audit(1739878534.808:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.2.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3b98cde9 code=0x0 [ 324.739424][T10187] EXT4-fs (loop0): unmounting filesystem. [ 325.074461][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 325.088435][T10201] ksmbd: Unknown IPC event: 0, ignore. [ 325.104975][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.135825][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.144356][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.152422][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.160042][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.168293][T10203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 325.946843][T10222] loop4: detected capacity change from 0 to 2048 [ 325.964336][T10222] EXT4-fs: Ignoring removed oldalloc option [ 326.027883][T10222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 326.069713][T10222] EXT4-fs (loop4): shut down requested (2) [ 326.242260][ T9143] EXT4-fs (loop4): unmounting filesystem. [ 326.275783][T10233] loop1: detected capacity change from 0 to 512 [ 326.338057][T10233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 326.352855][T10233] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.558667][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 326.652635][T10239] loop0: detected capacity change from 0 to 4096 [ 326.841584][ T4300] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 326.902833][T10251] loop3: detected capacity change from 0 to 8 [ 326.917935][T10251] squashfs: Unknown parameter '0x0000000000000000' [ 326.971765][ T4931] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.043755][ T4300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.091656][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.123306][ T4300] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.168499][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.188777][ T4300] usb 5-1: SerialNumber: syz [ 327.418018][ T4300] usb 5-1: 0:2 : does not exist [ 327.497785][ T4300] usb 5-1: USB disconnect, device number 14 [ 327.555052][ T4931] udevd[4931]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.596917][T10263] loop3: detected capacity change from 0 to 4096 [ 327.646401][T10263] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 327.699695][T10263] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 327.946852][ T4257] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 328.284270][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2201'. [ 328.547838][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 328.793847][T10301] loop4: detected capacity change from 0 to 1024 [ 328.818080][T10301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.866665][T10301] EXT4-fs (loop4): Test dummy encryption mode enabled [ 328.952042][T10301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.318613][T10318] loop1: detected capacity change from 0 to 256 [ 329.366236][T10318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 329.574046][T10301] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 329.670470][ T9143] EXT4-fs (loop4): unmounting filesystem. [ 329.780019][T10337] netlink: 'syz.4.2223': attribute type 11 has an invalid length. [ 330.501584][T10362] tipc: Started in network mode [ 330.506510][T10362] tipc: Node identity 7, cluster identity 4711 [ 330.571792][T10362] tipc: Node number set to 7 [ 330.796763][T10368] loop4: detected capacity change from 0 to 2048 [ 330.807371][T10368] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 330.840110][T10368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.915780][T10374] netlink: 'syz.0.2242': attribute type 28 has an invalid length. [ 331.543853][T10399] loop0: detected capacity change from 0 to 1024 [ 331.557001][ T5058] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 331.558684][T10399] EXT4-fs: Ignoring removed orlov option [ 331.590883][T10399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.609202][T10399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.647723][T10399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 331.657515][T10399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 331.778434][ T5058] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 331.794552][ T5058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.805406][ T5058] usb 5-1: config 0 descriptor?? [ 331.855175][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 332.097656][T10414] loop1: detected capacity change from 0 to 2048 [ 332.158853][T10414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 332.197986][T10418] loop0: detected capacity change from 0 to 1024 [ 332.218671][T10418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.237638][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 332.249942][ T5058] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 332.313947][T10418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 332.464057][ T6675] usb 5-1: USB disconnect, device number 15 [ 332.518659][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 332.622101][ T5058] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 332.823415][ T5058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.847833][ T5058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.878967][ T5058] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 332.898652][ T5058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.910112][ T5058] usb 2-1: config 0 descriptor?? [ 333.156586][T10444] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2271'. [ 333.377742][ T5058] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 333.401667][ T5058] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 333.436870][ T5058] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0010/input/input24 [ 333.493262][ T5058] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 333.553681][ T33] Bluetooth: (null): Invalid header checksum [ 333.560337][ T33] Bluetooth: (null): Invalid header checksum [ 333.589688][ T5058] usb 2-1: USB disconnect, device number 12 [ 333.658681][ T9] Bluetooth: (null): Invalid header checksum [ 333.723233][ T6675] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 333.765906][ T56] Bluetooth: (null): Invalid header checksum [ 333.776471][T10442] loop4: detected capacity change from 0 to 32768 [ 333.857403][T10442] XFS (loop4): Mounting V5 Filesystem [ 333.877343][ T9] Bluetooth: (null): Invalid header checksum [ 333.910944][ T6675] usb 3-1: Using ep0 maxpacket: 8 [ 333.933884][ T6675] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.965263][ T6675] usb 3-1: no configurations [ 333.974687][ T6675] usb 3-1: can't read configurations, error -22 [ 334.055680][T10442] XFS (loop4): Ending clean mount [ 334.221871][ T9143] XFS (loop4): Unmounting Filesystem [ 334.289711][T10471] loop0: detected capacity change from 0 to 512 [ 334.310264][T10471] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 334.319518][T10473] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 334.330688][T10471] UDF-fs: Scanning with blocksize 512 failed [ 334.337769][T10473] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 334.355614][T10471] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 334.364595][T10471] UDF-fs: Scanning with blocksize 1024 failed [ 334.381415][T10471] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 334.394105][T10471] UDF-fs: Scanning with blocksize 2048 failed [ 334.423896][T10471] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 334.456765][T10471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.519035][T10478] loop3: detected capacity change from 0 to 64 [ 334.978905][T10490] loop1: detected capacity change from 0 to 256 [ 335.597557][T10505] loop3: detected capacity change from 0 to 128 [ 335.597632][T10492] loop0: detected capacity change from 0 to 32768 [ 335.747819][T10492] XFS (loop0): Mounting V5 Filesystem [ 335.747887][T10505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.801079][T10505] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.941785][T10521] input: syz1 as /devices/virtual/input/input25 [ 335.972574][T10492] XFS (loop0): Ending clean mount [ 335.985002][T10492] XFS (loop0): Quotacheck needed: Please wait. [ 336.077506][T10492] XFS (loop0): Quotacheck: Done. [ 336.184722][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 336.269701][ T4251] XFS (loop0): Unmounting Filesystem [ 336.716091][T10544] loop1: detected capacity change from 0 to 512 [ 336.765188][T10544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.810591][T10544] EXT4-fs (loop1): 1 truncate cleaned up [ 336.839654][T10544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.017419][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 337.159177][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.167894][ T27] audit: type=1326 audit(1739878547.228:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.2.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3b98cde9 code=0x0 [ 337.205456][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.219949][T10555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.231325][T10555] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 337.786712][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2322'. [ 337.796083][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2322'. [ 338.078366][T10585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 338.085820][T10585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.107070][T10585] vhci_hcd vhci_hcd.0: Device attached [ 338.121287][T10586] vhci_hcd: connection closed [ 338.126039][ T56] vhci_hcd: stop threads [ 338.149380][ T56] vhci_hcd: release socket [ 338.155496][ T56] vhci_hcd: disconnect device [ 338.795784][T10607] syz.1.2335[10607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.795952][T10607] syz.1.2335[10607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.527546][T10642] loop0: detected capacity change from 0 to 8 [ 340.547322][ T5057] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 340.619774][T10642] SQUASHFS error: lzo decompression failed, data probably corrupt [ 340.639641][T10642] SQUASHFS error: Failed to read block 0x91: -5 [ 340.671711][T10642] SQUASHFS error: Unable to read metadata cache entry [8f] [ 340.682665][T10642] SQUASHFS error: Unable to read inode 0x11f [ 340.753183][ T5057] usb 2-1: Using ep0 maxpacket: 8 [ 340.760592][ T5057] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 340.799681][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.853891][ T5057] usb 2-1: config 0 has no interface number 1 [ 340.860063][ T5057] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 340.904297][ T5057] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 340.924465][ T5057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.952289][ T5057] usb 2-1: Product: syz [ 340.968601][ T5057] usb 2-1: Manufacturer: syz [ 340.974616][ T5057] usb 2-1: SerialNumber: syz [ 341.003256][ T5057] usb 2-1: config 0 descriptor?? [ 341.027826][ T5057] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 341.046608][T10652] device bond0 entered promiscuous mode [ 341.110222][T10652] device bond_slave_0 entered promiscuous mode [ 341.119838][T10652] device bond_slave_1 entered promiscuous mode [ 341.245555][ T5057] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 341.366317][ T6675] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 341.397948][T10660] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 341.576289][ T6675] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 341.601634][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.618399][ T6675] usb 1-1: config 0 descriptor?? [ 341.646814][ T6675] cp210x 1-1:0.0: cp210x converter detected [ 341.691436][ T4330] usb 2-1: USB disconnect, device number 13 [ 341.698144][ T4330] pvrusb2: Device being rendered inoperable [ 341.732158][ T4330] pvrusb2: Device being rendered inoperable [ 341.814583][T10668] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 342.036885][ T6675] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 342.265572][ T6675] usb 1-1: cp210x converter now attached to ttyUSB0 [ 342.465824][ T6675] usb 1-1: USB disconnect, device number 11 [ 342.474754][T10677] loop1: detected capacity change from 0 to 512 [ 342.512745][ T6675] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 342.525296][T10677] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 342.540678][ T6675] cp210x 1-1:0.0: device disconnected [ 342.566693][T10677] EXT4-fs (loop1): group descriptors corrupted! [ 342.644581][T10683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2368'. [ 342.928231][ T4931] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.415111][T10695] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2373'. [ 343.959404][T10711] loop1: detected capacity change from 0 to 128 [ 343.986008][T10711] EXT4-fs: Ignoring removed nobh option [ 344.028492][T10715] CUSE: unknown device info "workdir" [ 344.043887][T10715] CUSE: DEVNAME unspecified [ 344.070688][T10711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.106030][T10711] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.250010][T10711] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 344.385372][T10727] loop0: detected capacity change from 0 to 512 [ 344.418056][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 344.433169][T10727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 344.657830][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 345.043127][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.050175][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.050338][T10750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.080454][T10750] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 345.404883][T10763] loop0: detected capacity change from 0 to 8 [ 345.432234][T10763] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 346.807174][T10777] loop4: detected capacity change from 0 to 40427 [ 346.834660][T10777] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 346.905665][T10777] F2FS-fs (loop4): invalid crc value [ 346.992797][T10777] F2FS-fs (loop4): Found nat_bits in checkpoint [ 347.211911][T10777] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 347.300149][T10777] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1d0/0xb90 [ 347.472498][T10821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2413'. [ 347.499124][ T9143] syz-executor: attempt to access beyond end of device [ 347.499124][ T9143] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 347.827332][T10829] hub 9-0:1.0: USB hub found [ 347.873253][T10803] loop1: detected capacity change from 0 to 40427 [ 347.877345][T10829] hub 9-0:1.0: 1 port detected [ 347.906023][T10803] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x3ffff [ 347.947629][T10803] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 348.014929][T10803] F2FS-fs (loop1): invalid crc value [ 348.026710][T10803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 348.184723][T10803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 348.250714][T10841] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 348.417018][T10803] syz.1.2408: attempt to access beyond end of device [ 348.417018][T10803] loop1: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 348.757761][T10859] loop4: detected capacity change from 0 to 64 [ 349.863934][T10883] syzkaller0 speed is unknown, defaulting to 1000 [ 349.902494][T10892] syzkaller0 speed is unknown, defaulting to 1000 [ 350.433238][T10911] loop4: detected capacity change from 0 to 64 [ 350.478140][T10910] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 351.513404][T10940] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2464'. [ 351.547197][T10940] nbd: couldn't find a device at index 1986356271 [ 351.838453][T10949] loop3: detected capacity change from 0 to 512 [ 351.915989][T10949] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 351.983833][T10949] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 351.992515][T10949] System zones: 0-1, 15-15, 18-18, 34-34 [ 351.999444][T10949] EXT4-fs (loop3): orphan cleanup on readonly fs [ 352.006759][T10949] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 352.017797][T10949] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 352.033092][T10949] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 352.071678][T10949] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2470: bad orphan inode 16 [ 352.177665][T10949] ext4_test_bit(bit=15, block=18) = 1 [ 352.189952][T10949] is_bad_inode(inode)=0 [ 352.208858][T10949] NEXT_ORPHAN(inode)=0 [ 352.228285][T10949] max_ino=32 [ 352.232184][T10949] i_nlink=2 [ 352.235414][T10949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.317459][T10949] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 352.362652][T10949] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 352.385646][T10961] binder: 10960:10961 ioctl 400c620e 0 returned -14 [ 352.443186][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 352.647400][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.655030][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.681641][ T4330] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.891720][ T4330] usb 3-1: Using ep0 maxpacket: 8 [ 352.898918][ T4330] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.920641][ T4330] usb 3-1: config 179 has no interface number 0 [ 352.932565][T10973] loop1: detected capacity change from 0 to 512 [ 352.950372][ T4330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.964332][T10976] autofs4:pid:10976:autofs_fill_super: called with bogus options [ 352.982512][T10973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 353.011599][ T4330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 353.071604][ T4330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 353.111662][ T4330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 353.133958][T10973] EXT4-fs (loop1): 1 truncate cleaned up [ 353.141426][ T4330] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 353.172930][ T4330] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 353.181332][T10973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.191128][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.225243][T10964] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.334635][T10984] loop4: detected capacity change from 0 to 1024 [ 353.368200][T10984] EXT4-fs: Ignoring removed orlov option [ 353.423350][T10984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.527186][T10984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 353.551467][ T5058] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 353.793172][ T5058] usb 3-1: USB disconnect, device number 17 [ 353.799234][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.807546][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.830113][ T5058] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 353.874902][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 353.903565][ T9143] EXT4-fs (loop4): unmounting filesystem. [ 353.936151][T10996] loop0: detected capacity change from 0 to 256 [ 354.287787][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2493'. [ 354.464764][T11009] loop1: detected capacity change from 0 to 512 [ 354.549428][T11009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 354.605217][T11009] EXT4-fs (loop1): 1 truncate cleaned up [ 354.620572][T11009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 354.717818][ T27] audit: type=1800 audit(1739878564.788:117): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2495" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 354.841081][ T6675] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 354.893400][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 355.030930][ T6675] usb 3-1: Using ep0 maxpacket: 32 [ 355.038158][ T6675] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 355.061652][ T6675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.087027][ T6675] usb 3-1: config 0 descriptor?? [ 355.327544][ T6675] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 355.362863][ T6675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 355.424750][ T6675] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 355.444565][ T4892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 355.470313][ T6675] usb 3-1: media controller created [ 355.550177][ T6675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.643040][ T4892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.684021][ T4892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.726079][ T4892] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 355.767176][ T4892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 355.811820][ T4892] usb 5-1: SerialNumber: syz [ 356.067885][ T4892] usb 5-1: 0:2 : does not exist [ 356.081245][ T6675] az6027: usb out operation failed. (-71) [ 356.087114][ T6675] stb0899_attach: Driver disabled by Kconfig [ 356.111897][T11025] loop0: detected capacity change from 0 to 131072 [ 356.123421][T11025] F2FS-fs (loop0): Test dummy encryption mode enabled [ 356.147836][T11025] F2FS-fs (loop0): Found nat_bits in checkpoint [ 356.147993][ T6675] az6027: no front-end attached [ 356.147993][ T6675] [ 356.201041][ T4892] usb 5-1: USB disconnect, device number 16 [ 356.224981][T11025] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 356.315026][ T6675] az6027: usb out operation failed. (-71) [ 356.338706][ T6675] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 356.357766][ T6675] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 356.374198][ T6675] dvb-usb: schedule remote query interval to 400 msecs. [ 356.382206][ T6675] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 356.435858][ T6675] usb 3-1: USB disconnect, device number 18 [ 356.539637][ T6675] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 356.588222][T11031] loop1: detected capacity change from 0 to 32768 [ 356.613028][T11031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2503 (11031) [ 356.680908][T11031] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.710165][T11031] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 356.739686][T11031] BTRFS info (device loop1): setting nodatacow, compression disabled [ 356.797246][T11031] BTRFS info (device loop1): max_inline at 0 [ 356.812570][T11031] BTRFS info (device loop1): enabling disk space caching [ 356.819684][T11031] BTRFS info (device loop1): turning off barriers [ 356.892912][T11031] BTRFS info (device loop1): turning on flush-on-commit [ 356.899956][T11031] BTRFS info (device loop1): doing ref verification [ 356.971571][T11031] BTRFS info (device loop1): force clearing of disk cache [ 356.995491][T11031] BTRFS info (device loop1): enabling ssd optimizations [ 357.020158][T11031] BTRFS info (device loop1): max_inline at 4096 [ 357.043808][T11031] BTRFS info (device loop1): disk space caching is enabled [ 357.348091][T11031] BTRFS info (device loop1): rebuilding free space tree [ 357.378865][T11031] BTRFS info (device loop1): disabling free space tree [ 357.431425][T11031] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 357.456636][T11031] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 357.795228][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.858235][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'. [ 358.871218][T11112] loop1: detected capacity change from 0 to 4096 [ 358.879833][T11112] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 358.900309][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.915530][T11112] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 358.948913][T11112] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 358.966609][T11112] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 358.981611][ T5495] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 358.987179][T11112] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 358.998544][T11112] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 359.011960][T11112] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 359.037875][T11112] ntfs: volume version 3.1. [ 359.043659][T11112] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 359.051356][T11099] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 359.061134][T11112] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 359.171664][ T5495] usb 3-1: Using ep0 maxpacket: 16 [ 359.194416][ T5495] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.225856][ T27] audit: type=1326 audit(1739878569.298:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425278cde9 code=0x7ffc0000 [ 359.227553][ T5495] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 359.277473][ T5495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.281028][T11099] usb 5-1: Using ep0 maxpacket: 16 [ 359.286978][ T5495] usb 3-1: Product: syz [ 359.295472][ T5495] usb 3-1: Manufacturer: syz [ 359.300193][ T5495] usb 3-1: SerialNumber: syz [ 359.303156][T11099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.321528][T11099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.333816][T11099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.343116][ T5495] usb 3-1: config 0 descriptor?? [ 359.353449][T11099] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 359.364615][T11099] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.376516][ T5495] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 359.399731][T11099] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.430189][T11099] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.453583][T11099] usb 5-1: Manufacturer: syz [ 359.460193][T11099] usb 5-1: config 0 descriptor?? [ 359.478635][T11121] loop1: detected capacity change from 0 to 1024 [ 359.554450][T11121] hfsplus: catalog searching failed [ 359.620976][ T6509] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 359.790929][T11099] rc_core: IR keymap rc-hauppauge not found [ 359.797739][T11099] Registered IR keymap rc-empty [ 359.802979][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.811313][ T6509] usb 1-1: Using ep0 maxpacket: 16 [ 359.819817][ T6509] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.831087][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.838353][ T6509] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.848466][ T6509] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.862251][T11099] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 359.875751][ T6509] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.886473][T11099] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 359.900554][ T6509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.909058][ T6509] usb 1-1: SerialNumber: syz [ 359.928683][ T6509] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 359.937286][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.947507][ T6509] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 359.981052][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.011895][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.041054][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.071033][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.101119][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.141749][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.176968][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.180421][ T5495] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 360.213746][ T5495] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 360.217503][ T6509] usb 1-1: USB disconnect, device number 12 [ 360.241753][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.248383][ T5495] usb 3-1: USB disconnect, device number 19 [ 360.271048][T11099] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 360.285818][T11128] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 360.302218][T11099] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 360.313912][T11099] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 360.326852][T11099] usb 5-1: USB disconnect, device number 17 [ 360.938809][T11142] loop4: detected capacity change from 0 to 16 [ 360.985759][T11142] erofs: (device loop4): mounted with root inode @ nid 36. [ 361.063091][T11142] syz.4.2544: attempt to access beyond end of device [ 361.063091][T11142] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 361.143062][T11142] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1440] out[1677] [ 361.181206][T11142] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 87 of nid 36 [ 361.362781][T11150] ceph: missing cluster fsid [ 361.367488][T11150] ceph: separator ':' missing in source [ 361.532150][ T8977] ------------[ cut here ]------------ [ 361.537793][ T8977] kernel BUG at fs/buffer.c:2666! [ 361.561575][ T8977] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 361.567711][ T8977] CPU: 1 PID: 8977 Comm: kmmpd-loop2 Not tainted 6.1.128-syzkaller #0 [ 361.575897][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 361.585992][ T8977] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 361.591412][ T8977] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 71 44 e0 ff e9 b1 fe ff ff e8 e7 ed 88 ff 0f 0b e8 e0 ed 88 ff <0f> 0b e8 d9 ed 88 ff 0f 0b e8 d2 ed 88 ff 0f 0b e8 cb ed 88 ff 0f [ 361.611050][ T8977] RSP: 0018:ffffc90004e8fc40 EFLAGS: 00010293 [ 361.617126][ T8977] RAX: ffffffff8201a510 RBX: 0000000000000000 RCX: ffff88807d401dc0 [ 361.625101][ T8977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.633074][ T8977] RBP: ffffc90004e8fd50 R08: ffffffff8201a0ed R09: ffffed100aaa23b4 [ 361.641057][ T8977] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100aaa23b3 [ 361.649039][ T8977] R13: ffff888055511d98 R14: 0000000000000000 R15: 0000000000003801 [ 361.657012][ T8977] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 361.665942][ T8977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.672528][ T8977] CR2: 00007f00e90d56c0 CR3: 000000005bed5000 CR4: 00000000003506e0 [ 361.680504][ T8977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.688475][ T8977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.696449][ T8977] Call Trace: [ 361.699730][ T8977] [ 361.702665][ T8977] ? __die_body+0x5e/0xa0 [ 361.707014][ T8977] ? die+0x83/0xb0 [ 361.710746][ T8977] ? do_trap+0x11e/0x350 [ 361.715010][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.719781][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.724556][ T8977] ? do_error_trap+0x13d/0x1e0 [ 361.729417][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.734187][ T8977] ? do_int3+0x30/0x30 [ 361.738264][ T8977] ? report_bug+0x3e0/0x500 [ 361.742798][ T8977] ? rcu_is_watching+0x11/0xb0 [ 361.747568][ T8977] ? handle_invalid_op+0x2c/0x40 [ 361.752507][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.757294][ T8977] ? exc_invalid_op+0x2f/0x40 [ 361.762112][ T8977] ? asm_exc_invalid_op+0x16/0x20 [ 361.767142][ T8977] ? submit_bh_wbc+0x9d/0x4e0 [ 361.771823][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.776591][ T8977] ? submit_bh_wbc+0x4c0/0x4e0 [ 361.781366][ T8977] write_mmp_block_thawed+0x3b6/0x5a0 [ 361.786754][ T8977] ? read_mmp_block+0x7e0/0x7e0 [ 361.791609][ T8977] ? update_process_times+0x1b0/0x1b0 [ 361.796989][ T8977] ? kmmpd+0x40c/0xa70 [ 361.801065][ T8977] write_mmp_block+0x13f/0x390 [ 361.805834][ T8977] kmmpd+0x40c/0xa70 [ 361.809738][ T8977] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 361.815290][ T8977] ? __kthread_parkme+0x168/0x1c0 [ 361.820328][ T8977] kthread+0x28d/0x320 [ 361.824401][ T8977] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 361.829951][ T8977] ? kthread_blkcg+0xd0/0xd0 [ 361.834540][ T8977] ret_from_fork+0x1f/0x30 [ 361.838969][ T8977] [ 361.841982][ T8977] Modules linked in: [ 362.132778][T11167] loop1: detected capacity change from 0 to 32768 [ 362.219385][ T8977] ---[ end trace 0000000000000000 ]--- [ 362.225350][ T8977] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 362.232876][ T8977] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 71 44 e0 ff e9 b1 fe ff ff e8 e7 ed 88 ff 0f 0b e8 e0 ed 88 ff <0f> 0b e8 d9 ed 88 ff 0f 0b e8 d2 ed 88 ff 0f 0b e8 cb ed 88 ff 0f [ 362.254580][ T8977] RSP: 0018:ffffc90004e8fc40 EFLAGS: 00010293 [ 362.261954][ T8977] RAX: ffffffff8201a510 RBX: 0000000000000000 RCX: ffff88807d401dc0 [ 362.270063][ T8977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.279388][ T8977] RBP: ffffc90004e8fd50 R08: ffffffff8201a0ed R09: ffffed100aaa23b4 [ 362.288037][ T8977] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100aaa23b3 [ 362.297629][ T8977] R13: ffff888055511d98 R14: 0000000000000000 R15: 0000000000003801 [ 362.306204][ T8977] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 362.317605][ T8977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.325083][ T8977] CR2: 00007f42529762d8 CR3: 000000007884f000 CR4: 00000000003506f0 [ 362.333385][ T8977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.341640][ T8977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.349670][ T8977] Kernel panic - not syncing: Fatal exception [ 362.356059][ T8977] Kernel Offset: disabled [ 362.360385][ T8977] Rebooting in 86400 seconds..