last executing test programs: 2m3.484942963s ago: executing program 4 (id=329): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 2m3.352875691s ago: executing program 4 (id=334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000005, 0x6031, 0xffffffffffffffff, 0xc4b89000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2m2.462673683s ago: executing program 4 (id=347): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 2m2.333719751s ago: executing program 4 (id=350): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@usrquota}, {@test_dummy_encryption_v1}, {@data_err_ignore}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)) 2m1.688003788s ago: executing program 4 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000d00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, r1}) 2m0.863301066s ago: executing program 4 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004002e"], 0x58}}, 0x0) 2m0.62674368s ago: executing program 32 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004002e"], 0x58}}, 0x0) 11.494440079s ago: executing program 5 (id=1578): unshare(0x24020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x2, 0x0) 11.348733227s ago: executing program 5 (id=1579): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11.153380108s ago: executing program 5 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0800090001ac0f000a000600080221000001004005000800070000000a0034000101010101010000080026003c1400000800350002000000090007"], 0x60}}, 0x0) 10.866992665s ago: executing program 5 (id=1583): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x4, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0xa8d02) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 10.403847672s ago: executing program 5 (id=1586): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) 9.57918412s ago: executing program 5 (id=1593): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x8, 0x2, "37f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregs(0xe, 0x0, 0x8, 0x0) 9.363267693s ago: executing program 33 (id=1593): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x8, 0x2, "37f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregs(0xe, 0x0, 0x8, 0x0) 4.587323323s ago: executing program 3 (id=1631): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) io_submit(r1, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) 4.414452812s ago: executing program 3 (id=1634): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe}) 4.257162352s ago: executing program 3 (id=1635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="82ce26b09357", {0x0, 0x8cd}}, 0x40, @val={0x8c, 0x10, {0x127, "721d306f217e", @short="728ad681f3eb2be6"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 4.059141763s ago: executing program 0 (id=1636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 3.206195183s ago: executing program 1 (id=1642): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000280)=0x4) 3.146734407s ago: executing program 0 (id=1643): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.007298265s ago: executing program 1 (id=1644): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x24, 0xf801}}}}}}, 0x0) 2.92221901s ago: executing program 0 (id=1645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x7, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) 2.907657901s ago: executing program 1 (id=1646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) shutdown(r0, 0x1) 2.863105283s ago: executing program 3 (id=1647): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5fcf, &(0x7f0000003100)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.74913499s ago: executing program 1 (id=1648): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@fat=@sys_immutable}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}]}, 0x1, 0x379, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, 0x0, 0x183341, 0x33) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/242, 0xf2) 1.8986176s ago: executing program 1 (id=1652): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4433, &(0x7f00000088c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) 1.413795147s ago: executing program 3 (id=1655): syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) 1.260790487s ago: executing program 0 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x3) 1.052336859s ago: executing program 0 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x12, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) 934.119986ms ago: executing program 2 (id=1660): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x24000080) 741.525047ms ago: executing program 0 (id=1661): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000006a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000600)=ANY=[], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="4cf2a36adc4bc2ebb4b811ea6fc55952"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e4) 696.320239ms ago: executing program 2 (id=1662): socket$inet6(0xa, 0x80000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x20, r1, 0x328bc769c7e6ce25, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 405.514837ms ago: executing program 2 (id=1663): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf65280068fdfa"], 0x28}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) 369.118769ms ago: executing program 2 (id=1664): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x3) 211.493838ms ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x100, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 68.878227ms ago: executing program 1 (id=1666): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000a00)='./bus\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x2, 0x62d2, &(0x7f0000006e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 68.336846ms ago: executing program 2 (id=1667): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000340)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$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") syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x36, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9b"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 3 (id=1668): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): _CHANGE): hsr_slave_1: link becomes ready [ 140.190408][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 140.216463][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.454342][ T6361] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 140.526140][ T6361] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.577548][ T6346] set_capacity_and_notify: 1 callbacks suppressed [ 140.577564][ T6346] loop3: detected capacity change from 0 to 32768 [ 140.710862][ T6346] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.673 (6346) [ 140.767880][ T6346] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 140.854040][ T6346] BTRFS info (device loop3): using free space tree [ 140.912495][ T6346] BTRFS info (device loop3): has skinny extents [ 140.932416][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.940916][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.975676][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.183653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.271554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.358774][ T6365] loop2: detected capacity change from 0 to 32768 [ 141.368208][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.424173][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.437099][ T6346] BTRFS info (device loop3): enabling ssd optimizations [ 141.458073][ T6419] loop0: detected capacity change from 0 to 256 [ 141.476161][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.482965][ T6419] exfat: Deprecated parameter 'utf8' [ 141.492204][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.508382][ T6075] device veth0_vlan entered promiscuous mode [ 141.540930][ T6419] exfat: Deprecated parameter 'utf8' [ 141.546488][ T6419] exfat: Deprecated parameter 'utf8' [ 141.588287][ T6075] device veth1_vlan entered promiscuous mode [ 141.684194][ T6075] device veth0_macvtap entered promiscuous mode [ 141.695837][ T6075] device veth1_macvtap entered promiscuous mode [ 141.707318][ T6365] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 141.718813][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.730561][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.759891][ T6419] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 141.760423][ T4603] (kworker/u4:6,4603,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 141.795275][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.860650][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.912145][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.960693][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.010610][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.051650][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.104947][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.135514][ T6435] loop5: detected capacity change from 0 to 512 [ 142.147812][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.199118][ T4190] (syz-executor,4190,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 142.204221][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.236646][ T4190] (syz-executor,4190,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 142.290239][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.301613][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 142.337257][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.354176][ T6435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.688: inode #1: comm syz.5.688: iget: illegal inode # [ 142.398554][ T6435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.688: error while reading EA inode 1 err=-117 [ 142.414217][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.497352][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.508623][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.519065][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.531157][ T6435] EXT4-fs (loop5): 1 orphan inode deleted [ 142.536959][ T6435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.550008][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.580803][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.628943][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.665697][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.706077][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.750757][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.768833][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.793590][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.838842][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.864595][ T6075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.881303][ T6075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.911005][ T6075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.919769][ T6075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.403038][ T6466] loop3: detected capacity change from 0 to 512 [ 143.533203][ T6466] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.659220][ T6466] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.696: iget: bad i_size value: 38620345925642 [ 143.691397][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.737108][ T6478] loop2: detected capacity change from 0 to 2048 [ 143.796787][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.842324][ T6466] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.696: couldn't read orphan inode 15 (err -117) [ 143.884449][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.919241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.921415][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 143.941414][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.003055][ T6478] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 144.054639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.145787][ T6478] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.167510][ T6466] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.696: bg 0: block 5: invalid block bitmap [ 144.273602][ T6466] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.333935][ T6466] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.333935][ T6466] [ 144.417277][ T6466] EXT4-fs (loop3): Total free blocks count 0 [ 144.507675][ T6466] EXT4-fs (loop3): Free/Dirty block details [ 144.563758][ T6466] EXT4-fs (loop3): free_blocks=0 [ 144.601051][ T6466] EXT4-fs (loop3): dirty_blocks=1 [ 144.608986][ T6466] EXT4-fs (loop3): Block reservation details [ 144.657873][ T6466] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 144.693447][ T6497] loop0: detected capacity change from 0 to 8192 [ 144.794899][ T6497] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 144.795338][ T6517] loop2: detected capacity change from 0 to 256 [ 144.819565][ T6515] loop5: detected capacity change from 0 to 512 [ 144.827076][ T6497] REISERFS (device loop0): using ordered data mode [ 144.866200][ T6497] reiserfs: using flush barriers [ 144.906128][ T6497] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.913232][ T6517] exfat: Deprecated parameter 'utf8' [ 144.945983][ T6517] exfat: Deprecated parameter 'namecase' [ 144.951984][ T6517] exfat: Deprecated parameter 'utf8' [ 144.964240][ T6497] REISERFS (device loop0): checking transaction log (loop0) [ 144.967597][ T6515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.980880][ T6497] REISERFS (device loop0): Using r5 hash to sort names [ 144.995796][ T6497] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 145.020891][ T6497] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 145.080410][ T6521] loop3: detected capacity change from 0 to 8192 [ 145.087108][ T6515] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.102397][ T6497] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 145.120768][ T6497] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 145.136041][ T6497] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 145.156995][ T6517] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.179941][ T6515] EXT4-fs (loop5): 1 truncate cleaned up [ 145.194965][ T6521] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 145.205175][ T6515] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 145.251679][ T6521] REISERFS (device loop3): using ordered data mode [ 145.258338][ T6521] reiserfs: using flush barriers [ 145.265046][ T6521] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.293865][ T6521] REISERFS (device loop3): checking transaction log (loop3) [ 145.320655][ T6154] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.417940][ T6521] REISERFS (device loop3): Using r5 hash to sort names [ 145.439215][ T6521] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 145.603818][ T6154] usb 2-1: Using ep0 maxpacket: 8 [ 145.761253][ T6154] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 145.781095][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.821022][ T6545] loop0: detected capacity change from 0 to 512 [ 145.873190][ T6154] pvrusb2: Hardware description: Terratec Grabster AV400 [ 145.895124][ T6545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.931674][ T6154] pvrusb2: ********** [ 145.935764][ T6154] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 145.967246][ T6545] EXT4-fs (loop0): 1 truncate cleaned up [ 145.972157][ T6154] pvrusb2: Important functionality might not be entirely working. [ 145.981977][ T6154] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 145.994684][ T6154] pvrusb2: ********** [ 146.034150][ T6545] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 146.092152][ T2427] pvrusb2: Invalid write control endpoint [ 146.210947][ T2427] pvrusb2: Invalid write control endpoint [ 146.217677][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 146.270585][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 146.310902][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 146.369582][ T2427] pvrusb2: Device being rendered inoperable [ 146.406896][ T6523] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 146.442292][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 146.456322][ T4247] usb 2-1: USB disconnect, device number 7 [ 146.481242][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 146.521512][ T2427] pvrusb2: Attached sub-driver cx25840 [ 146.527147][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 146.620641][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 146.632761][ T6154] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.804025][ T6585] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.730'. [ 146.823466][ T6585] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 146.934613][ T6154] usb 1-1: Using ep0 maxpacket: 32 [ 147.060842][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.100620][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.129177][ T6154] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 147.153490][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.169576][ T6154] usb 1-1: config 0 descriptor?? [ 147.423823][ T6616] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.576690][ T6613] loop5: detected capacity change from 0 to 4096 [ 147.622578][ T6154] hid_mf 0003:0079:1801.0007: item fetching failed at offset 0/2 [ 147.640536][ T6154] hid_mf 0003:0079:1801.0007: HID parse failed. [ 147.660663][ T6154] hid_mf: probe of 0003:0079:1801.0007 failed with error -22 [ 147.670554][ T6626] genirq: Flags mismatch irq 1. 00000000 (dt2814) vs. 00000080 (i8042) [ 147.727852][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 147.751449][ T6613] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 147.868025][ T6154] usb 1-1: USB disconnect, device number 5 [ 148.145913][ T6649] loop2: detected capacity change from 0 to 8 [ 148.148204][ T6647] loop1: detected capacity change from 0 to 256 [ 148.198342][ T6649] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 148.260776][ T6647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 148.261095][ T6647] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 148.338330][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 148.510386][ T6658] loop2: detected capacity change from 0 to 64 [ 148.543177][ T6660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.562219][ T4943] Bluetooth: hci4: command 0x0411 tx timeout [ 148.796706][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 148.957246][ T6681] netlink: 'syz.3.763': attribute type 8 has an invalid length. [ 149.030973][ T5254] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.420927][ T5254] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.429001][ T5254] usb 6-1: config 0 has no interface number 0 [ 149.455601][ T5254] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.477421][ T5254] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.489765][ T5254] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.530860][ T5254] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 149.570649][ T5254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.594119][ T5254] usb 6-1: config 0 descriptor?? [ 149.806605][ T6716] loop2: detected capacity change from 0 to 4096 [ 150.240618][ T4247] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.317770][ T5254] uclogic 0003:28BD:0042.0008: failed retrieving string descriptor #100: -71 [ 150.354539][ T5254] uclogic 0003:28BD:0042.0008: failed retrieving pen parameters: -71 [ 150.380162][ T5254] uclogic 0003:28BD:0042.0008: pen probing failed: -71 [ 150.402696][ T5254] uclogic 0003:28BD:0042.0008: failed probing parameters: -71 [ 150.410360][ T5254] uclogic: probe of 0003:28BD:0042.0008 failed with error -71 [ 150.425801][ T5254] usb 6-1: USB disconnect, device number 2 [ 150.617466][ T6762] loop0: detected capacity change from 0 to 8 [ 150.627754][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.645175][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.656864][ T4247] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 150.673551][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.687179][ T4247] usb 2-1: config 0 descriptor?? [ 150.705388][ T6762] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 150.735729][ T6763] loop3: detected capacity change from 0 to 764 [ 150.845970][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop0 [ 150.990264][ T6766] loop5: detected capacity change from 0 to 256 [ 151.036518][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 151.135980][ T6766] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 151.183350][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.199317][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.227302][ T6766] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 151.260659][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.330890][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.408598][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.480645][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.548830][ T4247] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 151.561457][ T6761] loop2: detected capacity change from 0 to 131072 [ 151.616204][ T6761] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.642973][ T4247] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 151.681479][ T6761] F2FS-fs (loop2): recover fsync data on readonly fs [ 151.690332][ T6761] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955 [ 151.722576][ T6779] loop0: detected capacity change from 0 to 64 [ 151.983287][ T5254] usb 2-1: USB disconnect, device number 8 [ 152.062321][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 152.150311][ T6790] loop5: detected capacity change from 0 to 256 [ 152.173907][ T6794] loop2: detected capacity change from 0 to 1024 [ 152.253478][ T6790] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 152.287028][ T6794] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,usrjquota=,lazytime,nobarrier,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 152.470248][ T6792] loop3: detected capacity change from 0 to 32768 [ 152.480674][ T6154] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.606744][ T6792] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.804 (6792) [ 152.682705][ T6792] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.717946][ T6792] BTRFS info (device loop3): using free space tree [ 152.760093][ T6792] BTRFS info (device loop3): has skinny extents [ 152.891184][ T6154] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.909533][ T6154] usb 1-1: config 0 has no interface number 0 [ 152.917165][ T6154] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.929434][ T6154] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.939952][ T6154] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.953596][ T6154] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 152.963203][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.973550][ T6154] usb 1-1: config 0 descriptor?? [ 153.063750][ T6792] BTRFS info (device loop3): enabling ssd optimizations [ 153.661368][ T6154] uclogic 0003:28BD:0042.000A: failed retrieving string descriptor #100: -71 [ 153.690801][ T6154] uclogic 0003:28BD:0042.000A: failed retrieving pen parameters: -71 [ 153.698971][ T6154] uclogic 0003:28BD:0042.000A: pen probing failed: -71 [ 153.735893][ T6154] uclogic 0003:28BD:0042.000A: failed probing parameters: -71 [ 153.775112][ T6154] uclogic: probe of 0003:28BD:0042.000A failed with error -71 [ 153.805637][ T6154] usb 1-1: USB disconnect, device number 6 [ 153.927407][ T6805] loop2: detected capacity change from 0 to 40427 [ 153.951812][ T6805] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 153.960290][ T6805] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.994090][ T6805] F2FS-fs (loop2): invalid crc value [ 154.051077][ T6805] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.114793][ T6847] loop1: detected capacity change from 0 to 256 [ 154.155950][ T6847] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 154.189156][ T6808] loop5: detected capacity change from 0 to 40427 [ 154.233664][ T6805] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.250802][ T6805] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.367157][ T6808] F2FS-fs (loop5): invalid crc value [ 154.425071][ T6808] F2FS-fs (loop5): Found nat_bits in checkpoint [ 154.657636][ T6808] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 154.699982][ T6808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 154.889409][ T6808] F2FS-fs (loop5): switch extent_cache option is not allowed [ 154.913882][ T6868] loop1: detected capacity change from 0 to 256 [ 155.011358][ T5256] attempt to access beyond end of device [ 155.011358][ T5256] loop5: rw=2049, want=40976, limit=40427 [ 155.106909][ T6868] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 155.264834][ T6878] binder: 6877:6878 ioctl 400c620e 2000000001c0 returned -22 [ 155.639017][ T6891] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 155.719477][ T6891] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 156.047826][ T6910] set_capacity_and_notify: 1 callbacks suppressed [ 156.047843][ T6910] loop3: detected capacity change from 0 to 256 [ 156.072378][ T6912] loop0: detected capacity change from 0 to 128 [ 156.143160][ T6912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.162217][ T6915] loop1: detected capacity change from 0 to 1024 [ 156.191104][ T6910] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 156.225344][ T6912] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.257886][ T6915] EXT4-fs (loop1): inline encryption not supported [ 156.270679][ T4335] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.371806][ T6915] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 156.397357][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.660939][ T4335] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 156.692188][ T4335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.734297][ T4335] usb 6-1: config 0 descriptor?? [ 156.798007][ T4335] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 157.021708][ T5254] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.040210][ T6943] loop1: detected capacity change from 0 to 64 [ 157.251890][ T4335] gspca_cpia1: usb_control_msg 03, error -32 [ 157.290861][ T4335] cpia1 6-1:0.0: unexpected state after lo power cmd: 01 [ 157.420890][ T5254] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.430876][ T5254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.455038][ T5254] usb 1-1: config 0 descriptor?? [ 157.501844][ T5254] cp210x 1-1:0.0: cp210x converter detected [ 157.511020][ T4335] gspca_cpia1: usb_control_msg 01, error -71 [ 157.527088][ T4335] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 157.554162][ T4335] usb 6-1: USB disconnect, device number 3 [ 157.920159][ T6990] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 157.950795][ T5254] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 158.005654][ T5254] usb 1-1: cp210x converter now attached to ttyUSB0 [ 158.204114][ T5254] usb 1-1: USB disconnect, device number 7 [ 158.223336][ T5254] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.270304][ T5254] cp210x 1-1:0.0: device disconnected [ 158.361965][ T6154] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.469245][ T7015] netlink: 'syz.5.889': attribute type 4 has an invalid length. [ 158.590488][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 158.620704][ T6154] usb 4-1: Using ep0 maxpacket: 16 [ 158.707511][ T7027] bridge0: port 2(bridge_slave_1) entered learning state [ 158.744780][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.786062][ T6154] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 158.809048][ T7023] loop5: detected capacity change from 0 to 8192 [ 158.815654][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.851946][ T6154] usb 4-1: config 0 descriptor?? [ 158.853742][ T7031] loop1: detected capacity change from 0 to 512 [ 158.891132][ T7023] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 158.901355][ T7023] REISERFS (device loop5): using ordered data mode [ 158.907897][ T7023] reiserfs: using flush barriers [ 158.997424][ T7031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.017919][ T7023] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.071386][ T7023] REISERFS (device loop5): checking transaction log (loop5) [ 159.080703][ T7031] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 159.091369][ T7031] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 159.099493][ T7031] System zones: 0-2, 18-18, 34-35 [ 159.126251][ T7023] REISERFS (device loop5): Using r5 hash to sort names [ 159.151753][ T7031] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.161049][ T7023] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 159.202120][ T7023] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 159.239084][ T7039] netlink: 27 bytes leftover after parsing attributes in process `syz.2.899'. [ 159.285629][ T7031] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 159.335013][ T7029] loop0: detected capacity change from 0 to 32768 [ 159.355872][ T7023] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.372195][ T7023] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.377904][ T6154] nzxt-kraken2 0003:1E71:170E.000B: item fetching failed at offset 1/5 [ 159.395682][ T7023] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.422387][ T6154] nzxt-kraken2 0003:1E71:170E.000B: hid parse failed with -22 [ 159.429976][ T6154] nzxt-kraken2: probe of 0003:1E71:170E.000B failed with error -22 [ 159.459632][ T7029] [ 159.459632][ T7029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.459632][ T7029] [ 159.508883][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 159.552044][ T7029] ERROR: (device loop0): diWrite: ixpxd invalid [ 159.552044][ T7029] [ 159.662554][ T4335] usb 4-1: USB disconnect, device number 6 [ 159.706961][ T7029] ERROR: (device loop0): txCommit: [ 159.706961][ T7029] [ 159.814733][ T4185] [ 159.814733][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.814733][ T4185] [ 159.856770][ T4185] [ 159.856770][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.856770][ T4185] [ 160.107902][ T7064] netlink: 72 bytes leftover after parsing attributes in process `syz.2.910'. [ 160.170711][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 160.344188][ T7068] loop3: detected capacity change from 0 to 4096 [ 160.353834][ T7071] loop0: detected capacity change from 0 to 64 [ 160.440234][ T7068] NILFS (loop3): invalid segment: Checksum error in segment payload [ 160.470506][ T7078] sctp: [Deprecated]: syz.2.916 (pid 7078) Use of int in max_burst socket option. [ 160.470506][ T7078] Use struct sctp_assoc_value instead [ 160.486948][ T7068] NILFS (loop3): trying rollback from an earlier position [ 160.586349][ T7068] NILFS (loop3): recovery complete [ 160.609179][ T7084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.640373][ T7083] loop1: detected capacity change from 0 to 256 [ 160.763262][ T7083] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 160.855675][ T7094] netlink: 88 bytes leftover after parsing attributes in process `syz.2.922'. [ 161.280495][ T7117] loop1: detected capacity change from 0 to 1024 [ 161.384763][ T7120] sp0: Synchronizing with TNC [ 161.498240][ T154] hfsplus: b-tree write err: -5, ino 4 [ 161.649633][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 161.731316][ T7131] loop5: detected capacity change from 0 to 8192 [ 161.795811][ T7131] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 161.809783][ T7131] REISERFS (device loop5): using ordered data mode [ 161.825736][ T7131] reiserfs: using flush barriers [ 161.856086][ T7131] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.880653][ T4941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.956335][ T7131] REISERFS (device loop5): checking transaction log (loop5) [ 162.024115][ T7131] REISERFS (device loop5): Using r5 hash to sort names [ 162.041441][ T7131] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 162.256353][ T7125] loop3: detected capacity change from 0 to 32768 [ 162.263568][ T4941] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.299721][ T4941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.306549][ T4941] usb 1-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 162.325966][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.350468][ T7140] loop2: detected capacity change from 0 to 4096 [ 162.357724][ T4941] usb 1-1: config 0 descriptor?? [ 162.381854][ T7135] loop1: detected capacity change from 0 to 40427 [ 162.479995][ T7135] F2FS-fs (loop1): invalid crc value [ 162.486783][ T7140] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 162.509347][ T7125] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 162.529331][ T7140] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 162.573426][ T7135] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.644349][ T7140] ntfs: volume version 3.1. [ 162.678768][ T7125] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.695893][ T7135] F2FS-fs (loop1): Start checkpoint disabled! [ 162.725193][ T1279] (kworker/u4:5,1279,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 162.737552][ T7149] sch_fq: defrate 0 ignored. [ 162.775051][ T7140] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 162.792703][ T7140] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 162.810932][ T7135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.834552][ T4941] wacom 0003:056A:00D2.000C: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 162.877805][ T7125] (syz.3.936,7125,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 162.897747][ T7135] F2FS-fs (loop1): switch discard_unit option is not allowed [ 162.901592][ T4941] wacom 0003:056A:00D2.000C: hidraw0: USB HID v8.00 Device [HID 056a:00d2] on usb-dummy_hcd.0-1/input0 [ 162.938410][ T7125] (syz.3.936,7125,0):ocfs2_rename:1297 ERROR: status = -2 [ 162.986061][ T4941] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D2.000C/input/input11 [ 162.987041][ T7125] (syz.3.936,7125,0):ocfs2_rename:1687 ERROR: status = -2 [ 163.183062][ T4941] usb 1-1: USB disconnect, device number 8 [ 163.227914][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 163.280294][ T7161] loop2: detected capacity change from 0 to 256 [ 163.362739][ T7161] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.407191][ T7163] dvmrp1: tun_chr_ioctl cmd 2147767519 [ 163.454428][ T7162] fido_id[7162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 163.485285][ T7161] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.558224][ T7214] device bond0 entered promiscuous mode [ 164.590839][ T7214] device bond_slave_0 entered promiscuous mode [ 164.614118][ T7214] device bond_slave_1 entered promiscuous mode [ 164.713158][ T7214] device bond0 left promiscuous mode [ 164.718672][ T7214] device bond_slave_0 left promiscuous mode [ 164.758962][ T7214] device bond_slave_1 left promiscuous mode [ 164.902739][ T7178] loop3: detected capacity change from 0 to 32768 [ 164.924266][ T26] audit: type=1326 audit(1769780836.566:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 164.997898][ T26] audit: type=1326 audit(1769780836.566:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 165.045004][ T7236] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 165.063245][ T26] audit: type=1326 audit(1769780836.566:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 165.086600][ T26] audit: type=1326 audit(1769780836.566:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 165.111066][ T26] audit: type=1326 audit(1769780836.566:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 165.134591][ T7236] netlink: 'syz.0.976': attribute type 2 has an invalid length. [ 165.153741][ T7178] XFS (loop3): Mounting V5 Filesystem [ 165.165071][ T7236] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.976'. [ 165.180611][ T26] audit: type=1326 audit(1769780836.566:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a61e5eb9 code=0x7ff00000 [ 165.321087][ T7242] block nbd0: server does not support multiple connections per device. [ 165.330763][ T4701] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.348114][ T7178] XFS (loop3): Ending clean mount [ 165.386923][ T7242] block nbd0: shutting down sockets [ 165.428312][ T7254] loop0: detected capacity change from 0 to 512 [ 165.475213][ T7254] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.542347][ T4189] XFS (loop3): Unmounting Filesystem [ 165.570182][ T7254] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.979: bad orphan inode 131083 [ 165.570854][ T4701] usb 3-1: Using ep0 maxpacket: 16 [ 165.629223][ T7254] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000008,abort,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 165.881006][ T4701] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 165.890130][ T4701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.941061][ T4701] usb 3-1: Product: syz [ 165.945304][ T4701] usb 3-1: Manufacturer: syz [ 165.975447][ T4701] usb 3-1: SerialNumber: syz [ 165.982610][ T7273] loop1: detected capacity change from 0 to 22 [ 166.034399][ T7273] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 166.118138][ T7273] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 166.192072][ T7277] loop5: detected capacity change from 0 to 2048 [ 166.312804][ T4701] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 166.351123][ T4701] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 166.406036][ T4701] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 166.416505][ T4701] usb 3-1: media controller created [ 166.446918][ T7284] loop5: detected capacity change from 0 to 64 [ 166.455402][ T4701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.761160][ T4701] zl10353_read_register: readreg error (reg=127, ret==-71) [ 166.839874][ T4701] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 166.863287][ T4701] usb 3-1: USB disconnect, device number 8 [ 167.590454][ T7335] loop0: detected capacity change from 0 to 164 [ 167.646906][ T7335] Unable to read rock-ridge attributes [ 167.675546][ T7335] Unable to read rock-ridge attributes [ 168.210240][ T7351] loop1: detected capacity change from 0 to 4096 [ 168.360876][ T4701] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.470822][ T4702] kernel write not supported for file /dsp (pid: 4702 comm: kworker/0:15) [ 168.600711][ T4701] usb 1-1: Using ep0 maxpacket: 32 [ 168.633639][ T7364] loop3: detected capacity change from 0 to 2048 [ 168.720955][ T4701] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.734521][ T4701] usb 1-1: config 1 has no interface number 1 [ 168.749118][ T7339] loop2: detected capacity change from 0 to 40427 [ 168.778035][ T7364] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 168.812979][ T7364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.837451][ T7339] F2FS-fs (loop2): invalid crc value [ 168.868071][ T7339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.925658][ T4701] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.955375][ T4701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.997878][ T4701] usb 1-1: Product: syz [ 169.010914][ T4701] usb 1-1: Manufacturer: syz [ 169.025984][ T4701] usb 1-1: SerialNumber: syz [ 169.057708][ T7339] F2FS-fs (loop2): Start checkpoint disabled! [ 169.103979][ T7339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 169.316457][ T7386] loop1: detected capacity change from 0 to 2048 [ 169.360855][ T4701] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 169.369443][ T4701] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 169.409748][ T4701] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 169.481531][ T4701] usb 1-1: USB disconnect, device number 9 [ 169.498763][ T7386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.511014][ T7386] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.575177][ T154] attempt to access beyond end of device [ 169.575177][ T154] loop2: rw=2049, want=45112, limit=40427 [ 169.726885][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.827919][ T7401] device macsec0 entered promiscuous mode [ 169.836706][ T7401] device macsec0 left promiscuous mode [ 170.108360][ T7414] loop3: detected capacity change from 0 to 128 [ 170.142063][ T7414] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.171926][ T7417] loop1: detected capacity change from 0 to 256 [ 170.179133][ T7417] exfat: Deprecated parameter 'utf8' [ 170.195354][ T7417] exfat: Deprecated parameter 'utf8' [ 170.208866][ T7414] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.301712][ T7417] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 170.396205][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.440211][ T7423] loop0: detected capacity change from 0 to 2048 [ 170.605294][ T7423] NILFS (loop0): error -116 while loading last checkpoint (checkpoint number=2) [ 170.615438][ T7431] program syz.3.1053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.748893][ T6154] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.883855][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 170.900897][ T4701] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 170.904589][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 170.918751][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1059'. [ 170.929572][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1059'. [ 171.109131][ T7452] loop3: detected capacity change from 0 to 128 [ 171.150702][ T4701] usb 6-1: Using ep0 maxpacket: 32 [ 171.161076][ T6154] usb 3-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.186448][ T7452] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 171.202375][ T7453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.220875][ T6154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.242196][ T6154] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 171.269277][ T7452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.271278][ T4701] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 171.286857][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.327176][ T4701] usb 6-1: config 0 has no interface number 0 [ 171.329430][ T6154] usb 3-1: config 0 descriptor?? [ 171.500842][ T4701] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 171.511986][ T4701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.520223][ T4701] usb 6-1: Product: syz [ 171.539816][ T4701] usb 6-1: Manufacturer: syz [ 171.555546][ T4701] usb 6-1: SerialNumber: syz [ 171.571024][ T4701] usb 6-1: config 0 descriptor?? [ 171.822866][ T7474] set_capacity_and_notify: 1 callbacks suppressed [ 171.822884][ T7474] loop1: detected capacity change from 0 to 256 [ 171.853679][ T6154] wacom 0003:056A:0026.000D: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 171.892399][ T6154] wacom 0003:056A:0026.000D: hidraw0: USB HID v0.00 Device [HID 056a:0026] on usb-dummy_hcd.2-1/input0 [ 171.914618][ T6154] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0026.000D/input/input14 [ 171.976599][ T7477] loop0: detected capacity change from 0 to 1024 [ 171.986552][ T7474] FAT-fs (loop1): Directory bread(block 64) failed [ 172.010822][ T7474] FAT-fs (loop1): Directory bread(block 65) failed [ 172.026487][ T7474] FAT-fs (loop1): Directory bread(block 66) failed [ 172.050844][ T4701] radio-si470x 6-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 172.057858][ T4701] radio-si470x 6-1:0.35: This driver is known to work with firmware version 12, [ 172.067866][ T7474] FAT-fs (loop1): Directory bread(block 67) failed [ 172.103342][ T7474] FAT-fs (loop1): Directory bread(block 68) failed [ 172.109975][ T4701] radio-si470x 6-1:0.35: but the device has firmware version 0. [ 172.119517][ T4335] usb 3-1: USB disconnect, device number 9 [ 172.121032][ T7474] FAT-fs (loop1): Directory bread(block 69) failed [ 172.158482][ T7474] FAT-fs (loop1): Directory bread(block 70) failed [ 172.180764][ T7474] FAT-fs (loop1): Directory bread(block 71) failed [ 172.196503][ T7474] FAT-fs (loop1): Directory bread(block 72) failed [ 172.213657][ T7479] hfsplus: request for non-existent node 62977 in B*Tree [ 172.230857][ T7474] FAT-fs (loop1): Directory bread(block 73) failed [ 172.260184][ T7479] hfsplus: request for non-existent node 62977 in B*Tree [ 172.270959][ T4701] radio-si470x 6-1:0.35: software version 146, hardware version 66 [ 172.279255][ T4701] radio-si470x 6-1:0.35: If you have some trouble using this driver, [ 172.320596][ T4701] radio-si470x 6-1:0.35: please report to V4L ML at linux-media@vger.kernel.org [ 172.344941][ T7478] fido_id[7478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 172.372571][ T154] hfsplus: b-tree write err: -5, ino 3 [ 172.414599][ T7467] loop3: detected capacity change from 0 to 32768 [ 172.481529][ T4701] radio-si470x 6-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 172.510613][ C0] radio-si470x 6-1:0.35: non-zero urb status (-71) [ 172.518328][ T4701] radio-si470x 6-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 172.531046][ T4701] radio-si470x: probe of 6-1:0.35 failed with error -22 [ 172.551444][ T7467] XFS (loop3): Mounting V5 Filesystem [ 172.606187][ T4701] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 172.655295][ T4701] usb 6-1: USB disconnect, device number 4 [ 172.849019][ T7467] XFS (loop3): Ending clean mount [ 172.928502][ T7467] overlayfs: failed to set xattr on upper [ 172.951491][ T7467] overlayfs: ...falling back to index=off,metacopy=off. [ 173.089468][ T4189] XFS (loop3): Unmounting Filesystem [ 173.180675][ T4701] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.392706][ T7499] loop2: detected capacity change from 0 to 40427 [ 173.445612][ T7499] F2FS-fs (loop2): invalid crc value [ 173.450984][ T4701] usb 1-1: Using ep0 maxpacket: 8 [ 173.525369][ T7499] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.570865][ T4701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.585197][ T4701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.653793][ T7517] input: syz1 as /devices/virtual/input/input17 [ 173.660761][ T7499] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 173.692452][ T7499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.780896][ T4701] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 173.800629][ T4701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.834582][ T4701] usb 1-1: Product: syz [ 173.856072][ T4701] usb 1-1: Manufacturer: syz [ 173.873425][ T4701] usb 1-1: SerialNumber: syz [ 173.894629][ T4701] usb 1-1: config 0 descriptor?? [ 173.906887][ T4190] attempt to access beyond end of device [ 173.906887][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 173.985726][ T7512] loop1: detected capacity change from 0 to 40427 [ 174.053056][ T7524] loop3: detected capacity change from 0 to 1024 [ 174.081459][ T7512] F2FS-fs (loop1): build fault injection attr: rate: 7, type: 0x1ffff [ 174.089751][ T7512] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2ac [ 174.154921][ T7524] EXT4-fs (loop3): Ignoring removed oldalloc option [ 174.172981][ T7512] F2FS-fs (loop1): invalid crc value [ 174.192381][ T7524] EXT4-fs (loop3): Ignoring removed bh option [ 174.211467][ T7524] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.226284][ T7512] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 174.277830][ T7512] F2FS-fs (loop1): Found nat_bits in checkpoint [ 174.391921][ T7524] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,block_validity,oldalloc,nombcache,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 174.417237][ T7512] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 174.438769][ T4701] usb 1-1: USB disconnect, device number 10 [ 174.508949][ T7512] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 174.727636][ T7546] loop2: detected capacity change from 0 to 128 [ 174.736729][ T6075] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0 [ 174.761556][ T7548] loop5: detected capacity change from 0 to 16 [ 174.803395][ T7546] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 174.839975][ T7546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.856150][ T7548] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.993159][ T7552] loop3: detected capacity change from 0 to 2048 [ 175.112678][ T7552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.326553][ T7567] loop1: detected capacity change from 0 to 256 [ 175.507854][ T7569] PID 7569 killed due to inadequate hugepage pool [ 175.647199][ T7581] FAT-fs (loop0): Directory bread(block 64) failed [ 175.687830][ T7581] FAT-fs (loop0): Directory bread(block 65) failed [ 175.710359][ T7581] FAT-fs (loop0): Directory bread(block 66) failed [ 175.723597][ T7581] FAT-fs (loop0): Directory bread(block 67) failed [ 175.730253][ T7581] FAT-fs (loop0): Directory bread(block 68) failed [ 175.739685][ T7581] FAT-fs (loop0): Directory bread(block 69) failed [ 175.759925][ T7581] FAT-fs (loop0): Directory bread(block 70) failed [ 175.776057][ T7591] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.796274][ T7581] FAT-fs (loop0): Directory bread(block 71) failed [ 175.800835][ T7591] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 175.823610][ T7581] FAT-fs (loop0): Directory bread(block 72) failed [ 175.841032][ T7581] FAT-fs (loop0): Directory bread(block 73) failed [ 175.865136][ T7591] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 175.956467][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 175.956482][ T26] audit: type=1800 audit(1769780847.596:79): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1116" name="file1" dev="loop5" ino=1048623 res=0 errno=0 [ 176.676103][ T7612] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.742049][ T7610] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.784614][ T7610] EXT4-fs (loop5): shut down requested (1) [ 176.855100][ T7599] set_capacity_and_notify: 4 callbacks suppressed [ 176.855117][ T7599] loop3: detected capacity change from 0 to 32768 [ 177.057897][ T7599] XFS (loop3): Mounting V5 Filesystem [ 177.076065][ T7637] loop1: detected capacity change from 0 to 4096 [ 177.089489][ T7630] loop0: detected capacity change from 0 to 2048 [ 177.147488][ T7645] loop2: detected capacity change from 0 to 256 [ 177.182015][ T7645] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.199879][ T7630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.209876][ T7599] XFS (loop3): Ending clean mount [ 177.223625][ T7645] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 177.240061][ T7645] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 177.255404][ T7599] XFS (loop3): Quotacheck needed: Please wait. [ 177.283335][ T7637] ntfs3: loop1: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" fiemap is not supported for compressed file (cp -r) [ 177.315058][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.529229][ T7599] XFS (loop3): Quotacheck: Done. [ 177.747781][ T6075] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 177.801920][ T4189] XFS (loop3): Unmounting Filesystem [ 177.844803][ T6075] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 178.017699][ T7663] loop5: detected capacity change from 0 to 64 [ 178.382307][ T7676] binder: 7675:7676 ioctl 400c620e 2000000001c0 returned -22 [ 178.811919][ T4201] Bluetooth: hci4: link tx timeout [ 178.817508][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.828949][ T4201] Bluetooth: hci4: link tx timeout [ 178.835037][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.874769][ T7661] loop0: detected capacity change from 0 to 32768 [ 178.946710][ T7661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1144 (7661) [ 179.064093][ T7661] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.090085][ T4201] Bluetooth: hci4: link tx timeout [ 179.095744][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.115607][ T7702] loop1: detected capacity change from 0 to 256 [ 179.139511][ T7661] BTRFS info (device loop0): using free space tree [ 179.139534][ T7661] BTRFS info (device loop0): has skinny extents [ 179.159295][ T4201] Bluetooth: hci4: link tx timeout [ 179.164945][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.387794][ T7661] BTRFS info (device loop0): enabling ssd optimizations [ 179.510941][ T4201] Bluetooth: hci4: link tx timeout [ 179.516184][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.919505][ T7696] loop2: detected capacity change from 0 to 32768 [ 180.110334][ T4201] Bluetooth: hci4: link tx timeout [ 180.117778][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.133795][ T7696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1157 (7696) [ 180.153372][ T7745] loop5: detected capacity change from 0 to 2048 [ 180.287666][ T7696] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 180.298461][ T7750] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 180.306417][ T7696] BTRFS info (device loop2): setting nodatacow, compression disabled [ 180.352650][ T7696] BTRFS info (device loop2): force clearing of disk cache [ 180.384782][ T7749] loop0: detected capacity change from 0 to 2048 [ 180.408955][ T7696] BTRFS info (device loop2): enabling ssd optimizations [ 180.450699][ T7745] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 180.471954][ T7696] BTRFS info (device loop2): using spread ssd allocation scheme [ 180.479841][ T7696] BTRFS info (device loop2): turning off barriers [ 180.487108][ T7696] BTRFS info (device loop2): disabling free space tree [ 180.494675][ T7696] BTRFS info (device loop2): not using ssd optimizations [ 180.502097][ T7696] BTRFS info (device loop2): not using spread ssd allocation scheme [ 180.510275][ T7696] BTRFS info (device loop2): has skinny extents [ 180.516503][ T7749] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.861669][ T7696] BTRFS info (device loop2): clearing free space tree [ 180.870269][ T7696] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.884256][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 180.890506][ T7696] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.122953][ T4201] Bluetooth: hci4: link tx timeout [ 181.128143][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.136763][ T4201] Bluetooth: hci4: link tx timeout [ 181.142058][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.297840][ T26] audit: type=1800 audit(1769780852.936:80): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1157" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 181.323664][ T4201] Bluetooth: hci4: link tx timeout [ 181.328887][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.604634][ T7752] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 181.630995][ T7752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 181.643816][ T7752] F2FS-fs (loop1): invalid crc value [ 181.737824][ T7752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.932629][ T4201] Bluetooth: hci4: link tx timeout [ 181.937898][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.060030][ T7752] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.121099][ T7752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.498498][ T7838] set_capacity_and_notify: 3 callbacks suppressed [ 182.498514][ T7838] loop3: detected capacity change from 0 to 128 [ 182.659561][ T7836] loop5: detected capacity change from 0 to 4096 [ 182.676819][ T7838] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 182.726247][ T7836] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 182.763962][ T7838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.829202][ T26] audit: type=1326 audit(1769780854.466:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 182.913506][ T26] audit: type=1326 audit(1769780854.466:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 182.961864][ T7849] loop2: detected capacity change from 0 to 512 [ 183.001051][ T26] audit: type=1326 audit(1769780854.496:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 183.078077][ T26] audit: type=1326 audit(1769780854.496:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 183.167984][ T7849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 183.200742][ T26] audit: type=1326 audit(1769780854.496:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 183.223784][ T4335] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.242461][ T26] audit: type=1326 audit(1769780854.496:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 183.291314][ T7849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1197: bg 0: block 248: padding at end of block bitmap is not set [ 183.375120][ T26] audit: type=1326 audit(1769780854.496:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24755deb9 code=0x7ffc0000 [ 183.403215][ T7849] Quota error (device loop2): write_blk: dquota write failed [ 183.436092][ T7849] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 183.456542][ T7849] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1197: Failed to acquire dquot type 1 [ 183.480775][ T4335] usb 6-1: Using ep0 maxpacket: 32 [ 183.495733][ T7859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.506146][ T7849] EXT4-fs (loop2): 1 truncate cleaned up [ 183.530988][ T7849] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.546462][ T7861] loop1: detected capacity change from 0 to 128 [ 183.621035][ T4335] usb 6-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 183.666323][ T7861] FAT-fs (loop1): Directory bread(block 414) failed [ 183.699442][ T7861] FAT-fs (loop1): Directory bread(block 415) failed [ 183.717094][ T7861] FAT-fs (loop1): Directory bread(block 416) failed [ 183.724198][ T7861] FAT-fs (loop1): Directory bread(block 417) failed [ 183.731915][ T7861] FAT-fs (loop1): Directory bread(block 418) failed [ 183.739535][ T7861] FAT-fs (loop1): Directory bread(block 419) failed [ 183.748570][ T7861] FAT-fs (loop1): Directory bread(block 420) failed [ 183.793474][ T7861] FAT-fs (loop1): Directory bread(block 421) failed [ 183.820911][ T4335] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 183.834295][ T7861] FAT-fs (loop1): Directory bread(block 414) failed [ 183.850649][ T4335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.874225][ T7861] FAT-fs (loop1): Directory bread(block 415) failed [ 183.881277][ T4335] usb 6-1: Product: syz [ 183.905855][ T4335] usb 6-1: Manufacturer: syz [ 183.922692][ T4335] usb 6-1: SerialNumber: syz [ 183.942078][ T4335] usb 6-1: config 0 descriptor?? [ 183.958582][ T7877] loop0: detected capacity change from 0 to 16 [ 183.986917][ T7877] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.002365][ T4335] usb 6-1: bad CDC descriptors [ 184.011007][ T4335] usb 6-1: unsupported MDLM descriptors [ 184.208359][ T7885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.277560][ T4697] usb 6-1: USB disconnect, device number 5 [ 184.355987][ T7890] loop0: detected capacity change from 0 to 1024 [ 184.392639][ T7888] loop1: detected capacity change from 0 to 4096 [ 184.427956][ T7890] EXT4-fs (loop0): inline encryption not supported [ 184.484423][ T7890] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 184.494186][ T7896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.554275][ T7888] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 184.695120][ T7888] Remounting filesystem read-only [ 185.105881][ T7893] loop2: detected capacity change from 0 to 32768 [ 185.177617][ T7908] loop5: detected capacity change from 0 to 4096 [ 185.297131][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 185.333326][ T7923] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.360821][ T7893] XFS (loop2): Mounting V5 Filesystem [ 185.418052][ T7929] nft_compat: unsupported protocol 0 [ 185.506182][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 185.562477][ T4201] Bluetooth: hci4: link tx timeout [ 185.567755][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.631011][ T7893] XFS (loop2): Ending clean mount [ 185.650121][ T7893] XFS (loop2): Quotacheck needed: Please wait. [ 185.677961][ T7940] loop5: detected capacity change from 0 to 1024 [ 185.770778][ T7940] EXT4-fs (loop5): Ignoring removed oldalloc option [ 185.799512][ T7893] XFS (loop2): Quotacheck: Done. [ 185.804779][ T7940] EXT4-fs (loop5): Ignoring removed bh option [ 185.820649][ T7940] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.836200][ T7942] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.876580][ T7942] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.931879][ T4201] Bluetooth: hci4: link tx timeout [ 185.937204][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.990606][ T7940] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,block_validity,oldalloc,nombcache,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 186.161823][ T4201] Bluetooth: hci4: link tx timeout [ 186.167148][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.195044][ T4190] XFS (loop2): Unmounting Filesystem [ 187.000698][ T7956] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 187.007478][ T7956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.094081][ T7956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.260848][ T7956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.267983][ T7956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.718635][ T7973] XFS (loop0): Mounting V5 Filesystem [ 187.826224][ T4201] Bluetooth: hci4: link tx timeout [ 187.831830][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.961100][ T7973] XFS (loop0): Ending clean mount [ 188.030173][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1253'. [ 188.191158][ T4185] XFS (loop0): Unmounting Filesystem [ 188.204067][ T8024] set_capacity_and_notify: 3 callbacks suppressed [ 188.204082][ T8024] loop1: detected capacity change from 0 to 256 [ 188.268982][ T8023] loop3: detected capacity change from 0 to 1024 [ 188.313150][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 188.313165][ T26] audit: type=1800 audit(1769780859.956:114): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1255" name=64F26161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop1" ino=1048628 res=0 errno=0 [ 188.378749][ T8028] loop5: detected capacity change from 0 to 512 [ 188.421733][ T8023] EXT4-fs (loop3): Ignoring removed orlov option [ 188.455977][ T8028] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.478897][ T8028] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.1259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 188.500361][ T8028] EXT4-fs error (device loop5): ext4_quota_enable:6445: comm syz.5.1259: Bad quota inode: 4, type: 1 [ 188.520772][ T8023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 188.614464][ T8023] System zones: 0-1, 3-12 [ 188.633674][ T8023] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 188.660311][ T8028] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.683527][ T8028] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 188.690376][ T8028] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.696642][ T8038] loop2: detected capacity change from 0 to 256 [ 188.720321][ T8040] loop1: detected capacity change from 0 to 1024 [ 188.752438][ T8028] EXT4-fs (loop5): shut down requested (2) [ 189.085736][ T154] hfsplus: b-tree write err: -5, ino 4 [ 189.087136][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 189.103907][ T4201] Bluetooth: hci4: link tx timeout [ 189.109127][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.226627][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 189.333748][ T8056] tap0: tun_chr_ioctl cmd 1077974060 [ 189.931959][ T4200] Bluetooth: hci4: link tx timeout [ 189.937150][ T4200] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.072193][ T8088] loop5: detected capacity change from 0 to 16 [ 190.125415][ T8088] erofs: (device loop5): mounted with root inode @ nid 36. [ 190.142701][ T8088] binder: 8087:8088 ioctl c0306201 200000000240 returned -14 [ 190.255899][ T8075] loop0: detected capacity change from 0 to 32768 [ 190.338241][ T8065] loop2: detected capacity change from 0 to 32768 [ 190.376147][ T8065] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1271 (8065) [ 190.407517][ T8099] loop5: detected capacity change from 0 to 256 [ 190.463236][ T8065] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 190.498690][ T8065] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.522527][ T8065] BTRFS info (device loop2): use zstd compression, level 3 [ 190.590685][ T8065] BTRFS info (device loop2): using free space tree [ 190.622758][ T8065] BTRFS info (device loop2): has skinny extents [ 191.027753][ T8125] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 191.107477][ T4200] Bluetooth: hci4: link tx timeout [ 191.112695][ T4200] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.230766][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 191.246172][ T8065] BTRFS info (device loop2): enabling ssd optimizations [ 191.312263][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 191.546931][ T8154] loop0: detected capacity change from 0 to 2048 [ 191.689325][ T8154] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.200948][ T6463] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.610803][ T6463] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.650567][ T6463] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.730989][ T6463] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.740099][ T6463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.780024][ T6463] usb 6-1: SerialNumber: syz [ 192.830923][ T4247] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 193.094841][ T6463] usb 6-1: 0:2 : does not exist [ 193.138505][ T6463] usb 6-1: USB disconnect, device number 6 [ 193.260966][ T4247] usb 4-1: not running at top speed; connect to a high speed hub [ 193.353503][ T4247] usb 4-1: config 10 has an invalid interface number: 133 but max is 0 [ 193.366701][ T4247] usb 4-1: config 10 has no interface number 0 [ 193.382245][ T4247] usb 4-1: config 10 interface 133 has no altsetting 0 [ 193.458039][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.503896][ T8193] set_capacity_and_notify: 3 callbacks suppressed [ 193.503912][ T8193] loop0: detected capacity change from 0 to 32768 [ 193.561032][ T4247] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=83.c7 [ 193.578069][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.630001][ T4201] Bluetooth: hci4: link tx timeout [ 193.635352][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.643374][ T4201] Bluetooth: hci4: link tx timeout [ 193.648530][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.652163][ T4247] usb 4-1: Product: syz [ 193.688836][ T4247] usb 4-1: Manufacturer: syz [ 193.693918][ T4247] usb 4-1: SerialNumber: syz [ 193.716339][ T8193] XFS (loop0): Mounting V5 Filesystem [ 193.738664][ T8230] loop2: detected capacity change from 0 to 128 [ 193.791894][ T8230] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.828779][ T8230] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.862587][ T8202] loop1: detected capacity change from 0 to 40427 [ 193.922322][ T8202] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 193.933884][ T4201] Bluetooth: hci4: link tx timeout [ 193.939064][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.947281][ T8202] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 193.982347][ T8202] F2FS-fs (loop1): invalid crc value [ 194.001986][ T8193] XFS (loop0): Ending clean mount [ 194.019251][ T8202] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.031764][ T4247] usb 4-1: unsupported MDLM descriptors [ 194.070788][ T4247] usb 4-1: USB disconnect, device number 7 [ 194.084942][ T8193] XFS (loop0): Quotacheck needed: Please wait. [ 194.148846][ T8202] F2FS-fs (loop1): Start checkpoint disabled! [ 194.203254][ T8202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 194.245894][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.251007][ T8193] XFS (loop0): Quotacheck: Done. [ 194.252414][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.347262][ T8240] loop5: detected capacity change from 0 to 4096 [ 194.431686][ T8240] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 194.459238][ T8240] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 194.561039][ T8240] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 194.591535][ T4185] XFS (loop0): Unmounting Filesystem [ 194.627445][ T8240] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 194.794882][ T8240] ntfs: volume version 3.1. [ 194.805976][ T8240] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota. [ 194.834724][ T4603] attempt to access beyond end of device [ 194.834724][ T4603] loop1: rw=2049, want=40976, limit=40427 [ 194.849648][ T8240] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 194.918731][ T8240] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-2. You might want to try to use the mount option nls=utf8. [ 195.030364][ T8240] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 195.373794][ T8261] syz.5.1332 uses obsolete (PF_INET,SOCK_PACKET) [ 195.612211][ T8271] loop5: detected capacity change from 0 to 128 [ 195.747443][ T8271] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 195.789062][ T8271] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.904228][ T8271] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 1601862003 (only 1 groups) [ 196.080635][ T4695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 196.254573][ T8302] loop2: detected capacity change from 0 to 512 [ 196.360025][ T8302] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 196.407433][ T8302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1348: bg 0: block 255: padding at end of block bitmap is not set [ 196.435842][ T8302] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 196.450834][ T4695] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 196.460975][ T4695] usb 4-1: config 0 has no interface number 0 [ 196.467135][ T4695] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 196.468210][ T8302] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1348: invalid indirect mapped block 1 (level 1) [ 196.486968][ T4695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.512867][ T4695] usb 4-1: config 0 descriptor?? [ 196.519413][ T8302] EXT4-fs (loop2): 1 truncate cleaned up [ 196.525751][ T8302] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 196.552802][ T4695] usb-storage 4-1:0.42: USB Mass Storage device detected [ 196.560003][ T4258] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 196.612619][ T4695] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 196.620490][ T4695] usb-storage 4-1:0.42: This device (04cb,0100,00ae S 04 P e0) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 196.620490][ T4695] Please send a copy of this message to and [ 196.661117][ T8302] EXT4-fs (loop2): shut down requested (1) [ 196.877986][ T4697] usb 4-1: USB disconnect, device number 8 [ 196.931832][ T4258] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.953754][ T4258] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.968342][ T4258] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.985064][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.049474][ T4258] hub 6-1:4.0: USB hub found [ 197.251515][ T4258] hub 6-1:4.0: 13 ports detected [ 197.256837][ T4258] usb 6-1: selecting invalid altsetting 1 [ 197.275498][ T4258] hub 6-1:4.0: Using single TT (err -22) [ 197.293080][ T8336] loop1: detected capacity change from 0 to 1024 [ 197.320886][ T4258] hub 6-1:4.0: insufficient power available to use all downstream ports [ 197.470795][ T4258] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 197.491534][ T4258] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 197.554690][ T4258] usb 6-1: USB disconnect, device number 7 [ 197.760778][ T4697] Bluetooth: hci4: command 0x0405 tx timeout [ 197.823928][ T8352] loop0: detected capacity change from 0 to 256 [ 197.834485][ T8351] mmap: syz.3.1371 (8351) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 197.843266][ T8346] loop2: detected capacity change from 0 to 1024 [ 197.961574][ T8352] FAT-fs (loop0): Directory bread(block 64) failed [ 197.968712][ T8352] FAT-fs (loop0): Directory bread(block 65) failed [ 198.024796][ T8352] FAT-fs (loop0): Directory bread(block 66) failed [ 198.077315][ T8352] FAT-fs (loop0): Directory bread(block 67) failed [ 198.085475][ T8352] FAT-fs (loop0): Directory bread(block 68) failed [ 198.101587][ T8352] FAT-fs (loop0): Directory bread(block 69) failed [ 198.108291][ T8352] FAT-fs (loop0): Directory bread(block 70) failed [ 198.139778][ T8352] FAT-fs (loop0): Directory bread(block 71) failed [ 198.170921][ T8352] FAT-fs (loop0): Directory bread(block 72) failed [ 198.184356][ T8352] FAT-fs (loop0): Directory bread(block 73) failed [ 198.875676][ T8379] loop3: detected capacity change from 0 to 4096 [ 198.901202][ T6463] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 198.947103][ T8379] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.110927][ T4941] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 199.160828][ T6463] usb 6-1: Using ep0 maxpacket: 16 [ 199.260856][ T4697] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.278128][ T8390] loop3: detected capacity change from 0 to 128 [ 199.298248][ T6463] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 199.313884][ T6463] usb 6-1: config 0 has no interface number 0 [ 199.320434][ T6463] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 199.363605][ T8390] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 199.396620][ T8390] hpfs: filesystem error: improperly stopped [ 199.407160][ T8390] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 199.419696][ T8390] hpfs: You really don't want any checks? You are crazy... [ 199.434622][ T8390] hpfs: hpfs_map_sector(): read error [ 199.440050][ T8390] hpfs: code page support is disabled [ 199.449332][ T8390] hpfs: hpfs_map_4sectors(): unaligned read [ 199.460318][ T8390] hpfs: hpfs_map_4sectors(): unaligned read [ 199.468768][ T8390] hpfs: filesystem error: unable to find root dir [ 199.522244][ T6463] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 199.531795][ T4941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.551897][ T6463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.562675][ T8386] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 199.570377][ T4941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.580078][ T8390] hpfs: hpfs_map_4sectors(): unaligned read [ 199.593844][ T6463] usb 6-1: Product: syz [ 199.598056][ T6463] usb 6-1: Manufacturer: syz [ 199.604031][ T8390] hpfs: hpfs_map_sector(): read error [ 199.617409][ T6463] usb 6-1: SerialNumber: syz [ 199.620908][ T4697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.632549][ T6463] usb 6-1: config 0 descriptor?? [ 199.710898][ T4697] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 199.718533][ T4697] usb 1-1: can't read configurations, error -71 [ 199.790854][ T4941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.820365][ T4941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.843496][ T4941] usb 3-1: Product: syz [ 199.847824][ T4941] usb 3-1: Manufacturer: syz [ 199.872392][ T4941] usb 3-1: SerialNumber: syz [ 199.919492][ T8400] loop3: detected capacity change from 0 to 16 [ 199.928305][ T8400] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 200.284906][ T8414] loop3: detected capacity change from 0 to 512 [ 200.336968][ T6463] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input18 [ 200.382657][ T8414] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.394289][ T8414] ext4 filesystem being mounted at /303/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.406685][ T4941] usb 3-1: cannot find UAC_HEADER [ 200.427262][ T4941] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 200.441018][ T8414] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.1400: corrupted xattr block 33 [ 200.446686][ T4941] usb 3-1: USB disconnect, device number 10 [ 200.550363][ T4258] usb 6-1: USB disconnect, device number 8 [ 200.701768][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.757340][ T8422] raw_sendmsg: syz.3.1403 forgot to set AF_INET. Fix it! [ 200.890673][ T4697] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 200.944256][ T8430] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 201.036792][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.153980][ T4697] usb 1-1: Using ep0 maxpacket: 8 [ 201.214029][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1413'. [ 201.284523][ T4697] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.299864][ T4697] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.310718][ T4697] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.317477][ T4697] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 201.327181][ T4697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.329598][ T8447] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1414'. [ 201.351467][ T8447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 201.370421][ T4697] usb 1-1: config 0 descriptor?? [ 201.484618][ T8450] loop3: detected capacity change from 0 to 4096 [ 201.559892][ T8450] ntfs: volume version 3.1. [ 201.593710][ T8450] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 201.611665][ T8450] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 201.627946][ T8450] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 201.868013][ T4697] ntrig 0003:1B96:0004.000E: unknown main item tag 0x0 [ 201.880152][ T4697] ntrig 0003:1B96:0004.000E: unknown main item tag 0x0 [ 201.896707][ T4697] ntrig 0003:1B96:0004.000E: unknown main item tag 0x0 [ 201.907581][ T8455] loop5: detected capacity change from 0 to 32768 [ 201.921348][ T4697] ntrig 0003:1B96:0004.000E: unknown main item tag 0x0 [ 201.937999][ T4697] ntrig 0003:1B96:0004.000E: unknown main item tag 0x0 [ 201.974305][ T4697] ntrig 0003:1B96:0004.000E: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 202.027343][ T8461] loop3: detected capacity change from 0 to 1024 [ 202.041723][ T8463] loop2: detected capacity change from 0 to 256 [ 202.070804][ T4697] ntrig 0003:1B96:0004.000E: Firmware version: 4.6.18.42.6 (5a58 5e55) [ 202.129820][ T8463] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 202.149587][ T8461] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 202.275243][ T4697] usb 1-1: USB disconnect, device number 12 [ 202.308208][ T8461] overlayfs: missing 'lowerdir' [ 202.333273][ T8461] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.1421: directory missing '..' [ 202.467955][ T8470] fido_id[8470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 202.677358][ T8482] loop3: detected capacity change from 0 to 512 [ 202.763878][ T8482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.847814][ T8482] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.882052][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1430'. [ 202.912532][ T8482] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 202.939022][ T8482] Quota error (device loop3): write_blk: dquota write failed [ 202.947940][ T8482] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 202.960223][ T8482] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.1428: Failed to acquire dquot type 0 [ 203.097415][ T8496] loop2: detected capacity change from 0 to 8 [ 203.197681][ T8496] SQUASHFS error: Unable to read directory block [249:c] [ 203.939384][ T8537] set_capacity_and_notify: 2 callbacks suppressed [ 203.939400][ T8537] loop2: detected capacity change from 0 to 256 [ 204.064624][ T8537] FAT-fs (loop2): Directory bread(block 64) failed [ 204.075462][ T8537] FAT-fs (loop2): Directory bread(block 65) failed [ 204.082941][ T8537] FAT-fs (loop2): Directory bread(block 66) failed [ 204.089587][ T8537] FAT-fs (loop2): Directory bread(block 67) failed [ 204.099241][ T8537] FAT-fs (loop2): Directory bread(block 68) failed [ 204.108832][ T8542] sp0: Synchronizing with TNC [ 204.120173][ T8537] FAT-fs (loop2): Directory bread(block 69) failed [ 204.135773][ T8537] FAT-fs (loop2): Directory bread(block 70) failed [ 204.179739][ T8537] FAT-fs (loop2): Directory bread(block 71) failed [ 204.219107][ T8537] FAT-fs (loop2): Directory bread(block 72) failed [ 204.237076][ T8537] FAT-fs (loop2): Directory bread(block 73) failed [ 204.340788][ T4941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.452209][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1460'. [ 204.619118][ T8553] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.630649][ T4941] usb 1-1: Using ep0 maxpacket: 16 [ 204.771219][ T4941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.803593][ T4941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.827321][ T8558] loop2: detected capacity change from 0 to 128 [ 204.845256][ T4941] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 204.885333][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.928901][ T8558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.992636][ T4941] usb 1-1: config 0 descriptor?? [ 205.054716][ T8558] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.156916][ T8558] fscrypt (loop2, inode 12): Unsupported encryption flags (0x23) [ 205.403292][ T8549] loop5: detected capacity change from 0 to 32768 [ 205.435209][ T8572] loop3: detected capacity change from 0 to 2048 [ 205.478016][ T8570] loop1: detected capacity change from 0 to 4096 [ 205.496119][ T8572] UDF-fs: bad mount option "partition=00000000000000003987" or missing value [ 205.553000][ T4941] hid-generic 0003:057E:200E.000F: hidraw0: USB HID v0.02 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 205.653538][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 205.698432][ T8549] XFS (loop5): Mounting V5 Filesystem [ 205.731994][ T4258] usb 1-1: USB disconnect, device number 13 [ 205.933070][ T8588] fido_id[8588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.934640][ T8549] XFS (loop5): Ending clean mount [ 206.020334][ T8549] XFS (loop5): Quotacheck needed: Please wait. [ 206.097521][ T6075] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 206.110790][ T6075] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.206549][ T8549] XFS (loop5): Quotacheck: Done. [ 206.332104][ T8603] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 206.414242][ T5256] XFS (loop5): Unmounting Filesystem [ 206.432416][ T8604] loop1: detected capacity change from 0 to 4096 [ 207.461750][ T8610] loop2: detected capacity change from 0 to 32768 [ 207.547680][ T8610] XFS (loop2): Mounting V5 Filesystem [ 207.774378][ T8610] XFS (loop2): Ending clean mount [ 207.894125][ T8610] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 208.044365][ T8640] loop1: detected capacity change from 0 to 32768 [ 208.163059][ T8666] loop3: detected capacity change from 0 to 32768 [ 208.218601][ T8666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1504 (8666) [ 208.250836][ T8666] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 208.259732][ T8666] BTRFS info (device loop3): using free space tree [ 208.266737][ T8666] BTRFS info (device loop3): has skinny extents [ 208.295053][ T4190] XFS (loop2): Unmounting Filesystem [ 208.317226][ T8643] loop0: detected capacity change from 0 to 32768 [ 208.419795][ T8643] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 208.419795][ T8643] [ 208.467740][ T8640] XFS (loop1): Mounting V5 Filesystem [ 208.507603][ T8643] ERROR: (device loop0): remounting filesystem as read-only [ 208.550837][ T8678] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 208.587385][ T8690] attempt to access beyond end of device [ 208.587385][ T8690] loop0: rw=2049, want=4680040, limit=32768 [ 208.599684][ T8678] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.651611][ T8666] BTRFS info (device loop3): enabling ssd optimizations [ 208.718004][ T8640] XFS (loop1): Ending clean mount [ 208.777596][ T277] blkno = 8ed2c, nblocks = 1 [ 208.789636][ T277] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 208.789636][ T277] [ 208.803918][ T8640] XFS (loop1): Quotacheck needed: Please wait. [ 208.958068][ T8640] XFS (loop1): Quotacheck: Done. [ 209.094275][ T4177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4177) [ 209.200998][ T8709] set_capacity_and_notify: 1 callbacks suppressed [ 209.201018][ T8709] loop2: detected capacity change from 0 to 1024 [ 209.312980][ T4335] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 209.349009][ T8709] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.465151][ T6075] XFS (loop1): Unmounting Filesystem [ 209.495511][ T8709] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 209.740731][ T4335] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.756783][ T8722] loop0: detected capacity change from 0 to 128 [ 209.790824][ T4335] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.810842][ T4335] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.819971][ T4335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.861092][ T8703] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.123110][ T4201] Bluetooth: hci4: link tx timeout [ 210.128521][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.388829][ T8740] loop0: detected capacity change from 0 to 1024 [ 210.422249][ T4696] usb 6-1: USB disconnect, device number 9 [ 210.529451][ T8740] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.592427][ T8748] loop3: detected capacity change from 0 to 512 [ 210.595752][ T8740] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 210.625776][ T8745] loop2: detected capacity change from 0 to 4096 [ 210.656332][ T8740] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 210.691004][ T8745] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 210.722095][ T8745] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 210.748167][ T8745] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 210.748723][ T8748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1526: inode #1: comm syz.3.1526: iget: illegal inode # [ 210.782149][ T8745] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 210.801798][ T8748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1526: error while reading EA inode 1 err=-117 [ 210.824208][ T8745] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 210.878908][ T8745] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 210.910148][ T8748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1526: inode #1: comm syz.3.1526: iget: illegal inode # [ 210.992404][ T8745] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 211.011288][ T8745] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 211.029255][ T8748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1526: error while reading EA inode 1 err=-117 [ 211.046901][ T8759] loop5: detected capacity change from 0 to 256 [ 211.089665][ T8745] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 211.129073][ T8745] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 211.170193][ T8748] EXT4-fs (loop3): 1 orphan inode deleted [ 211.186649][ T8748] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 211.283499][ T8759] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 211.286280][ T8763] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 211.321949][ T8745] ntfs: volume version 3.1. [ 211.365437][ T8759] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 211.426929][ T8759] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 211.498340][ T8759] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 211.551623][ T8768] Dead loop on virtual device ip6_vti0, fix it urgently! [ 211.591809][ T5256] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 211.696873][ T8771] loop0: detected capacity change from 0 to 256 [ 211.826034][ T8778] loop5: detected capacity change from 0 to 128 [ 211.835567][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1535'. [ 211.853175][ T8771] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 211.871066][ T8780] loop1: detected capacity change from 0 to 512 [ 211.880943][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1535'. [ 211.995517][ T8780] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 212.055109][ T8780] EXT4-fs (loop1): 1 truncate cleaned up [ 212.085894][ T8780] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,bsddf,,errors=continue. Quota mode: none. [ 212.145009][ T8786] loop5: detected capacity change from 0 to 1024 [ 212.246341][ T8795] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 212.254808][ T8795] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1544'. [ 212.264226][ T8786] EXT4-fs (loop5): inline encryption not supported [ 212.271420][ T8786] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.296982][ T8780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1538: invalid indirect mapped block 4294901760 (level 0) [ 212.366113][ T8786] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 212.393023][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.426198][ T8780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1538: invalid indirect mapped block 4294967295 (level 1) [ 212.430843][ T4258] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 212.722058][ T8808] MINIX-fs: mounting file system with errors, running fsck is recommended [ 212.763083][ T8808] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 212.779284][ T8808] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 212.836338][ T8813] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.836536][ T4258] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 212.861971][ T4258] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 212.891841][ T4258] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 212.930459][ T4258] usb 3-1: config 8 has no interface number 0 [ 212.960828][ T4258] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 212.990684][ T4258] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.170706][ T4258] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 213.190342][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.240897][ T4258] usb 3-1: Product: syz [ 213.251434][ T4258] usb 3-1: Manufacturer: syz [ 213.274568][ T4258] usb 3-1: SerialNumber: syz [ 213.379242][ T8833] overlayfs: workdir and upperdir must reside under the same mount [ 213.595342][ T4258] usb 3-1: USB disconnect, device number 11 [ 214.225461][ T8829] XFS (loop3): Mounting V5 Filesystem [ 214.245268][ T8831] set_capacity_and_notify: 3 callbacks suppressed [ 214.245296][ T8831] loop5: detected capacity change from 0 to 32768 [ 214.312762][ T8870] loop0: detected capacity change from 0 to 1024 [ 214.422975][ T8870] hfsplus: invalid length 32517 has been corrected to 255 [ 214.443221][ T8829] XFS (loop3): Ending clean mount [ 214.504502][ T8829] XFS (loop3): Quotacheck needed: Please wait. [ 214.560602][ T4258] Bluetooth: hci4: command 0x0405 tx timeout [ 214.580633][ T8864] loop2: detected capacity change from 0 to 32768 [ 214.693305][ T8829] XFS (loop3): Quotacheck: Done. [ 214.826647][ T8864] XFS (loop2): Mounting V5 Filesystem [ 215.029038][ T8829] XFS (loop3): Unmounting Filesystem [ 215.045500][ T8864] XFS (loop2): Ending clean mount [ 215.063171][ T8864] XFS (loop2): Quotacheck needed: Please wait. [ 215.298984][ T8864] XFS (loop2): Quotacheck: Done. [ 215.488796][ T8899] loop1: detected capacity change from 0 to 4096 [ 215.550395][ T8905] loop5: detected capacity change from 0 to 1024 [ 215.579811][ T4190] XFS (loop2): Unmounting Filesystem [ 215.662353][ T8899] ntfs: volume version 3.1. [ 215.701745][ T8899] __ntfs_error: 15 callbacks suppressed [ 215.701765][ T8899] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 215.750604][ T8899] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 215.764176][ T8905] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.801530][ T8899] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 215.863553][ T26] audit: type=1800 audit(1769780887.496:117): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1583" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 215.873857][ T8899] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 215.895004][ T8899] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 215.945604][ T8899] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 215.971099][ T8899] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 216.048168][ T8899] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set euc-jp. You might want to try to use the mount option nls=utf8. [ 216.072158][ T8899] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 216.161282][ T8912] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 216.417548][ T8916] loop1: detected capacity change from 0 to 1024 [ 216.488018][ T8916] hfsplus: invalid length 32517 has been corrected to 255 [ 216.814769][ T5484] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.054034][ T5484] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.163742][ T5484] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.260040][ T8939] loop0: detected capacity change from 0 to 256 [ 217.294886][ T8939] exfat: Deprecated parameter 'namecase' [ 217.309383][ T5484] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.322522][ T8939] exfat: Deprecated parameter 'namecase' [ 217.386820][ T8941] loop1: detected capacity change from 0 to 2048 [ 217.396153][ T8939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 217.566924][ T8941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.628527][ T8918] loop3: detected capacity change from 0 to 32768 [ 217.714404][ T8918] XFS (loop3): Mounting V5 Filesystem [ 217.827905][ T4695] hid-generic 0005:4C4A:4155.0010: unknown main item tag 0x0 [ 217.836413][ T4695] hid-generic 0005:4C4A:4155.0010: item fetching failed at offset 1/2 [ 217.845979][ T4695] hid-generic: probe of 0005:4C4A:4155.0010 failed with error -22 [ 217.881872][ T8918] XFS (loop3): Ending clean mount [ 218.055901][ T8962] loop2: detected capacity change from 0 to 256 [ 218.106050][ T8962] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 218.163990][ T8942] chnl_net:caif_netlink_parms(): no params data found [ 218.217225][ T4189] XFS (loop3): Unmounting Filesystem [ 218.467154][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.474554][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.509605][ T8942] device bridge_slave_0 entered promiscuous mode [ 218.571730][ T8978] usb usb1: usbfs: process 8978 (syz.1.1611) did not claim interface 8 before use [ 218.593852][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.630698][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.679194][ T8942] device bridge_slave_1 entered promiscuous mode [ 218.793344][ T8942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.860403][ T8942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.001473][ T8988] SQUASHFS error: zlib decompression failed, data probably corrupt [ 219.021888][ T8986] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1614'. [ 219.049134][ T8988] SQUASHFS error: Failed to read block 0x9b: -5 [ 219.062673][ T8986] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 219.115592][ T8988] SQUASHFS error: Unable to read metadata cache entry [99] [ 219.126708][ T8988] SQUASHFS error: Unable to read inode 0x127 [ 219.165689][ T8942] team0: Port device team_slave_0 added [ 219.185392][ T8942] team0: Port device team_slave_1 added [ 219.289853][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.299670][ T8995] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 219.309476][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.380694][ T8942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.401158][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.414082][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.449128][ T8942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.520721][ T4696] Bluetooth: hci1: command 0x0409 tx timeout [ 219.526901][ T4258] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.650723][ T8942] device hsr_slave_0 entered promiscuous mode [ 219.675010][ T8942] device hsr_slave_1 entered promiscuous mode [ 219.732478][ T8942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.746095][ T8942] Cannot create hsr debugfs directory [ 219.834274][ T8982] set_capacity_and_notify: 1 callbacks suppressed [ 219.834290][ T8982] loop2: detected capacity change from 0 to 40427 [ 219.923192][ T4258] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 219.947387][ T8982] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x1ffff [ 219.951106][ T4258] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 219.985885][ T8982] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 219.995509][ T4258] usb 4-1: config 220 has an invalid descriptor of length 25, skipping remainder of the config [ 220.015379][ T9007] loop0: detected capacity change from 0 to 8192 [ 220.025204][ T8982] F2FS-fs (loop2): invalid crc value [ 220.031011][ T4258] usb 4-1: config 220 has no interface number 2 [ 220.052145][ T8982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 220.062288][ T4258] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 220.081840][ T9007] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 220.093750][ T9007] REISERFS (device loop0): using ordered data mode [ 220.100949][ T4258] usb 4-1: config 220 interface 0 has no altsetting 0 [ 220.107965][ T9007] reiserfs: using flush barriers [ 220.113097][ T4258] usb 4-1: config 220 interface 76 has no altsetting 0 [ 220.121661][ T4258] usb 4-1: config 220 interface 1 has no altsetting 0 [ 220.122108][ T9007] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.188445][ T8982] F2FS-fs (loop2): Start checkpoint disabled! [ 220.201463][ T9007] REISERFS (device loop0): checking transaction log (loop0) [ 220.227817][ T8982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 220.280866][ T4258] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 220.318135][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.358193][ T8982] F2FS-fs (loop2): access invalid blkaddr:4043309056 [ 220.361550][ T4258] usb 4-1: Product: syz [ 220.399438][ T4258] usb 4-1: Manufacturer: syz [ 220.409012][ T8982] CPU: 1 PID: 8982 Comm: syz.2.1609 Not tainted syzkaller #0 [ 220.416453][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.426562][ T8982] Call Trace: [ 220.429869][ T8982] [ 220.432839][ T8982] dump_stack_lvl+0x188/0x250 [ 220.437571][ T8982] ? show_regs_print_info+0x20/0x20 [ 220.441683][ T4258] usb 4-1: SerialNumber: syz [ 220.442948][ T8982] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 220.453382][ T8982] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 220.458800][ T8982] f2fs_map_blocks+0xbcd/0x3300 [ 220.463725][ T8982] ? f2fs_force_buffered_io+0x680/0x680 [ 220.469331][ T8982] ? xa_load+0x276/0x2a0 [ 220.473619][ T8982] f2fs_mpage_readpages+0xc95/0x2260 [ 220.478975][ T8982] ? dquot_release_reservation_block+0xa0/0xa0 [ 220.485186][ T8982] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 220.491497][ T8982] ? f2fs_readahead+0x163/0x2f0 [ 220.496388][ T8982] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 220.502175][ T8982] read_pages+0x175/0x930 [ 220.506563][ T8982] ? page_cache_ra_unbounded+0x940/0x940 [ 220.512258][ T8982] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 220.517765][ T8982] page_cache_ra_unbounded+0x838/0x940 [ 220.523283][ T8982] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 220.529836][ T8982] f2fs_readdir+0x496/0xda0 [ 220.534410][ T8982] ? f2fs_fill_dentries+0xd10/0xd10 [ 220.539677][ T8982] ? end_current_label_crit_section+0x14b/0x170 [ 220.545961][ T8982] ? iterate_dir+0x10d/0x560 [ 220.550582][ T8982] ? down_read_killable+0x1ce/0x340 [ 220.555820][ T8982] ? fsnotify_perm+0x254/0x560 [ 220.560625][ T8982] iterate_dir+0x218/0x560 [ 220.565102][ T8982] ? f2fs_fill_dentries+0xd10/0xd10 [ 220.570351][ T8982] __se_sys_getdents+0xf2/0x260 [ 220.575243][ T8982] ? __x64_sys_getdents+0x80/0x80 [ 220.580299][ T8982] ? fillonedir+0x4e0/0x4e0 [ 220.584846][ T8982] ? vtime_user_exit+0x2c8/0x3e0 [ 220.589829][ T8982] ? lockdep_hardirqs_on+0x94/0x140 [ 220.595065][ T8982] do_syscall_64+0x4c/0xa0 [ 220.599519][ T8982] ? clear_bhb_loop+0x30/0x80 [ 220.604229][ T8982] ? clear_bhb_loop+0x30/0x80 [ 220.608944][ T8982] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.614886][ T8982] RIP: 0033:0x7fb24755deb9 [ 220.619332][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.623250][ T9007] REISERFS (device loop0): Using tea hash to sort names [ 220.638970][ T8982] RSP: 002b:00007fb2457b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 220.639000][ T8982] RAX: ffffffffffffffda RBX: 00007fb2477d8fa0 RCX: 00007fb24755deb9 [ 220.639017][ T8982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 220.639030][ T8982] RBP: 00007fb2475cbc1f R08: 0000000000000000 R09: 0000000000000000 [ 220.639044][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.639056][ T8982] R13: 00007fb2477d9038 R14: 00007fb2477d8fa0 R15: 00007ffc329a3cc8 [ 220.639089][ T8982] [ 220.701865][ T9007] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 220.715353][ T8982] attempt to access beyond end of device [ 220.715353][ T8982] loop2: rw=524288, want=45072, limit=40427 [ 220.715804][ T8982] attempt to access beyond end of device [ 220.715804][ T8982] loop2: rw=0, want=45072, limit=40427 [ 220.780065][ T9007] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 220.836265][ T8942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.865093][ T8942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.908446][ T8942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.916787][ T4258] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 220.930792][ T4258] usb 4-1: No valid video chain found. [ 220.955085][ T4258] usb 4-1: selecting invalid altsetting 0 [ 220.980471][ T8942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.988107][ T144] attempt to access beyond end of device [ 220.988107][ T144] loop2: rw=2049, want=40976, limit=40427 [ 221.072955][ T4258] usb 4-1: selecting invalid altsetting 0 [ 221.078839][ T4258] usbtest: probe of 4-1:220.1 failed with error -22 [ 221.144662][ T4258] usb 4-1: USB disconnect, device number 9 [ 221.558794][ T9035] binder_alloc: binder_alloc_mmap_handler: 9034 200000ffc000-200001000000 already mapped failed -16 [ 221.600931][ T4703] Bluetooth: hci1: command 0x041b tx timeout [ 221.656193][ T9043] loop0: detected capacity change from 0 to 512 [ 221.669092][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.749173][ T9043] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 221.782055][ T8942] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.789103][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.797926][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.833679][ T5484] device hsr_slave_0 left promiscuous mode [ 221.879157][ T5484] device hsr_slave_1 left promiscuous mode [ 221.916708][ T5484] batman_adv: batadv0: Interface deactivated: dummy0 [ 221.941877][ T5484] batman_adv: batadv0: Removing interface: dummy0 [ 221.976952][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 221.978761][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.007327][ T5484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.036930][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.062743][ T5484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.111441][ T5484] device bridge_slave_1 left promiscuous mode [ 222.119279][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.206840][ T5484] device bridge_slave_0 left promiscuous mode [ 222.213745][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.266348][ T5484] device veth1_macvtap left promiscuous mode [ 222.296467][ T5484] device veth0_macvtap left promiscuous mode [ 222.312208][ T5484] device veth1_vlan left promiscuous mode [ 222.318195][ T5484] device veth0_vlan left promiscuous mode [ 222.572874][ T9051] loop2: detected capacity change from 0 to 32768 [ 222.628890][ T4177] Dev loop2 SGI disklabel: csum bad, label corrupted [ 222.651968][ T9051] Dev loop2 SGI disklabel: csum bad, label corrupted [ 222.824739][ T5484] team0 (unregistering): Port device team_slave_1 removed [ 222.918234][ T5484] team0 (unregistering): Port device team_slave_0 removed [ 222.968688][ T5484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.047487][ T5484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.244463][ T9085] sctp: [Deprecated]: syz.1.1642 (pid 9085) Use of int in max_burst socket option. [ 223.244463][ T9085] Use struct sctp_assoc_value instead [ 223.295735][ T9087] loop0: detected capacity change from 0 to 128 [ 223.304060][ T5484] bond0 (unregistering): Released all slaves [ 223.385007][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.430471][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.461233][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.468462][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.508763][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.590194][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.639020][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.646235][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.655592][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.681278][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 223.719973][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.746442][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.748806][ T9097] loop1: detected capacity change from 0 to 256 [ 223.757799][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.772542][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.847408][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.865360][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.886856][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.920245][ T9099] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1649'. [ 223.951037][ T9097] FAT-fs (loop1): Directory bread(block 64) failed [ 223.958312][ T9097] FAT-fs (loop1): Directory bread(block 65) failed [ 223.984343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.997147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.024837][ T9097] FAT-fs (loop1): Directory bread(block 66) failed [ 224.034772][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.037212][ T8942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.071969][ T9097] FAT-fs (loop1): Directory bread(block 67) failed [ 224.086739][ T9097] FAT-fs (loop1): Directory bread(block 68) failed [ 224.095413][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.113980][ T9097] FAT-fs (loop1): Directory bread(block 69) failed [ 224.124877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.139030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.149792][ T9097] FAT-fs (loop1): Directory bread(block 70) failed [ 224.216456][ T9097] FAT-fs (loop1): Directory bread(block 71) failed [ 224.242676][ T9097] FAT-fs (loop1): Directory bread(block 72) failed [ 224.249939][ T9097] FAT-fs (loop1): Directory bread(block 73) failed [ 224.710134][ T9091] loop3: detected capacity change from 0 to 32768 [ 224.836921][ T9091] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 224.848130][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.867564][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.880356][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.429258][ T9143] netem: incorrect gi model size [ 225.494997][ T9143] netem: change failed [ 225.638351][ T9112] loop1: detected capacity change from 0 to 32768 [ 225.747075][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.761248][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 225.813511][ T9112] JBD2: Ignoring recovery information on journal [ 225.820361][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.016307][ T9112] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 226.035352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.061112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.102524][ T8942] device veth0_vlan entered promiscuous mode [ 226.110423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.114125][ T9112] VFS: Lookup of '' in ocfs2 loop1 would have caused loop [ 226.152238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.198975][ T8942] device veth1_vlan entered promiscuous mode [ 226.300192][ T6075] ocfs2: Unmounting device (7,1) on (node local) [ 226.331927][ T8942] device veth0_macvtap entered promiscuous mode [ 226.370624][ T6075] VFS: Busy inodes after unmount of loop1. Self-destruct in 5 seconds. Have a nice day... [ 226.390906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.410812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.428530][ T9174] loop2: detected capacity change from 0 to 256 [ 226.448284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.479029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.503022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.511503][ T9174] exfat: Deprecated parameter 'utf8' [ 226.518545][ T9174] exfat: Deprecated parameter 'utf8' [ 226.546540][ T8942] device veth1_macvtap entered promiscuous mode [ 226.602763][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.618905][ T9174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 226.663144][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.694829][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.723354][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.756517][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.806193][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.836209][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.857938][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.886674][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.910232][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.927234][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.972437][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.012153][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.036576][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.067052][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.097780][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.121556][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.143216][ T9150] loop0: detected capacity change from 0 to 40427 [ 227.150791][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.178134][ T9150] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 227.193985][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.219224][ T9150] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.229695][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.256808][ T9150] F2FS-fs (loop0): invalid crc value [ 227.264145][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.302748][ T9150] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.321642][ T8942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.368701][ T8942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.377630][ T8942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.402886][ T8942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.426734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.439939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.445023][ T9150] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.483427][ T9150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.586753][ T9181] loop1: detected capacity change from 0 to 32768 [ 227.648553][ T9181] [ 227.648553][ T9181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.648553][ T9181] [ 227.667048][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.697420][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.750624][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.775543][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.784320][ T9190] ialloc: diAlloc returned -5! [ 227.817983][ T9181] [ 227.817983][ T9181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.817983][ T9181] [ 227.826485][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.855753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.863837][ T9181] [ 227.863837][ T9181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.863837][ T9181] [ 227.879060][ T9181] [ 227.879060][ T9181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.879060][ T9181] [ 227.934470][ T9181] [ 227.934470][ T9181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.934470][ T9181] [ 228.035393][ T6075] [ 228.035393][ T6075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.035393][ T6075] [ 228.065080][ T6075] [ 228.065080][ T6075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.065080][ T6075]