last executing test programs: 6.218636683s ago: executing program 2 (id=601): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6") bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="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", 0x6fa}], 0x1}}], 0x1, 0x0) 5.04612972s ago: executing program 1 (id=606): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2018000, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0xff, 0x6ca, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.699664731s ago: executing program 1 (id=607): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) 4.690730682s ago: executing program 2 (id=608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast1, @in=@broadcast, 0x421f, 0x0, 0x0, 0x5, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.451017029s ago: executing program 2 (id=610): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x3, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081) 4.274899375s ago: executing program 1 (id=611): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.0934207s ago: executing program 2 (id=613): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 3.343863504s ago: executing program 0 (id=614): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x3}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xa8) 3.240860177s ago: executing program 1 (id=623): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca21, 0x10000, 0x1, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.179664139s ago: executing program 0 (id=616): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2018000, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0xff, 0x6ca, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.901724838s ago: executing program 2 (id=618): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.651298906s ago: executing program 0 (id=628): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$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") write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *'], 0xa) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file1\x00', 0x200400, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000001fc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 2.51898905s ago: executing program 0 (id=620): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000080)={[{@acl}, {@usrjquota_file, 0x4}, {@hash_rupasov}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x12, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) 2.20819819s ago: executing program 3 (id=622): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.19312673s ago: executing program 1 (id=632): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 1.88420657s ago: executing program 1 (id=624): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.830749911s ago: executing program 3 (id=625): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x3}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xa8) 1.531077671s ago: executing program 3 (id=626): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r1, 0x8b18, &(0x7f0000000040)) 1.502343242s ago: executing program 0 (id=627): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 1.425901494s ago: executing program 3 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x10a, {0x8000000, 0xeeee0000}}) 1.140216584s ago: executing program 3 (id=630): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 205.476553ms ago: executing program 3 (id=631): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r0, 0x5760, 0x0) sendmmsg$unix(r3, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18.597239ms ago: executing program 0 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) 0s ago: executing program 2 (id=634): syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kernel console output (not intermixed with test programs): conds [ 93.255771][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 93.310433][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 93.358523][ T5907] Zero length message leads to an empty skb [ 93.400968][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.499295][ T5912] loop0: detected capacity change from 0 to 256 [ 93.745132][ T5915] loop1: detected capacity change from 0 to 4096 [ 94.191421][ T5930] loop0: detected capacity change from 0 to 24 [ 94.453583][ T5934] loop2: detected capacity change from 0 to 128 [ 94.511761][ T5934] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.548069][ T5934] hpfs: filesystem error: improperly stopped [ 94.558526][ T5934] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.571769][ T28] audit: type=1326 audit(1778716831.887:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 94.586746][ T5934] hpfs: You really don't want any checks? You are crazy... [ 94.638807][ T5934] hpfs: hpfs_map_sector(): read error [ 94.662879][ T28] audit: type=1326 audit(1778716831.907:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 94.686926][ T5934] hpfs: code page support is disabled [ 94.712094][ T5934] hpfs: hpfs_map_4sectors(): unaligned read [ 94.743095][ T28] audit: type=1326 audit(1778716831.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 94.776851][ T5934] hpfs: hpfs_map_4sectors(): unaligned read [ 94.782840][ T5934] hpfs: filesystem error: unable to find root dir [ 94.838205][ T28] audit: type=1326 audit(1778716831.907:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 94.875071][ T5943] Bluetooth: MGMT ver 1.22 [ 94.888358][ T5934] hpfs: hpfs_map_4sectors(): unaligned read [ 94.911373][ T5934] hpfs: hpfs_map_sector(): read error [ 94.927917][ T28] audit: type=1326 audit(1778716831.907:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 94.965464][ T28] audit: type=1326 audit(1778716831.937:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 95.078365][ T28] audit: type=1326 audit(1778716831.937:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 95.155184][ T5949] loop0: detected capacity change from 0 to 256 [ 95.162227][ T28] audit: type=1326 audit(1778716831.947:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 95.249902][ T28] audit: type=1326 audit(1778716831.947:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 95.292352][ T28] audit: type=1326 audit(1778716831.947:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bff39ce59 code=0x7ffc0000 [ 95.330162][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.348350][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.376184][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.387550][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.401583][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.411742][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.448560][ T5955] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 95.496677][ T5949] syz.0.49 (5949) used greatest stack depth: 20464 bytes left [ 95.568660][ T5769] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 95.992679][ T5965] loop1: detected capacity change from 0 to 256 [ 96.011627][ T5965] exfat: Deprecated parameter 'utf8' [ 96.075593][ T5965] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 96.220198][ T5957] loop2: detected capacity change from 0 to 32768 [ 96.241903][ T5957] (syz.2.51,5957,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.274037][ T5969] input: syz0 as /devices/virtual/input/input5 [ 96.296315][ T5957] (syz.2.51,5957,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.374219][ T5957] JBD2: Ignoring recovery information on journal [ 96.425852][ T5973] Illegal XDP return value 4294900224 on prog (id 7) dev syz_tun, expect packet loss! [ 96.569042][ T5957] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.698716][ T5981] Bluetooth: MGMT ver 1.22 [ 96.734547][ T5981] Bluetooth: hci2: invalid length 1, exp 2 for type 6 [ 97.035510][ T5957] syz.2.51 (5957) used greatest stack depth: 18768 bytes left [ 97.214729][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 97.254226][ T5995] syzkaller1: entered promiscuous mode [ 97.259779][ T5995] syzkaller1: entered allmulticast mode [ 97.274433][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.469912][ T5997] loop2: detected capacity change from 0 to 16 [ 97.502246][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.527920][ T5997] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.543109][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.563116][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.588549][ T788] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.623098][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.664772][ T788] usb 1-1: config 0 descriptor?? [ 97.823677][ T5993] loop3: detected capacity change from 0 to 32768 [ 98.084569][ T6001] veth1_to_bond: entered allmulticast mode [ 98.107337][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 98.130686][ T788] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 98.211090][ T788] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.295375][ T6001] veth1_to_bond (unregistering): left allmulticast mode [ 98.392026][ T6001] bond0: (slave bond_slave_1): Releasing backup interface [ 98.471581][ T6005] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 98.526153][ T6005] overlayfs: maximum fs stacking depth exceeded [ 98.546176][ T9] usb 1-1: USB disconnect, device number 2 [ 98.933162][ T3064] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.021469][ T6010] loop3: detected capacity change from 0 to 32768 [ 99.057508][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.083190][ T6010] JBD2: Ignoring recovery information on journal [ 99.151187][ T6010] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.170669][ T3064] usb 2-1: Using ep0 maxpacket: 16 [ 99.208022][ T3064] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.243198][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 99.255028][ T3064] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.267573][ T788] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 99.285633][ T3064] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.293341][ T788] usb 3-1: config 4 has no interface number 0 [ 99.303224][ T788] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.323210][ T3064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.352809][ T788] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.396672][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.416526][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.465142][ T788] hub 3-1:4.128: USB hub found [ 99.535841][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 99.688934][ T788] hub 3-1:4.128: 2 ports detected [ 99.705314][ T788] hub 3-1:4.128: Using single TT (err -22) [ 99.825733][ T3064] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 99.886162][ T788] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 99.913275][ T788] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 99.987285][ T788] usb 3-1: USB disconnect, device number 2 [ 100.068626][ T3064] usb 2-1: USB disconnect, device number 2 [ 100.241686][ T6028] block nbd3: shutting down sockets [ 100.572921][ T6040] bridge_slave_0: left allmulticast mode [ 100.586227][ T6040] bridge_slave_0: left promiscuous mode [ 100.594294][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.621490][ T6040] bridge_slave_1: left allmulticast mode [ 100.658015][ T6040] bridge_slave_1: left promiscuous mode [ 100.679472][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.718529][ T6040] bond0: (slave bond_slave_0): Releasing backup interface [ 100.805486][ T6040] bond0: (slave bond_slave_1): Releasing backup interface [ 100.950878][ T6040] team0: Port device team_slave_0 removed [ 101.016725][ T6040] team0: Port device team_slave_1 removed [ 101.054384][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.062437][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.082202][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.090383][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.210790][ T6056] loop3: detected capacity change from 0 to 512 [ 101.330706][ T6056] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.96: lblock 0 mapped to illegal pblock 3 (length 1) [ 101.421357][ T6056] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.96: error -117 reading directory block [ 101.483795][ T6056] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 101.504046][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.588285][ T6056] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.96: lblock 0 mapped to illegal pblock 3 (length 1) [ 101.624645][ T6056] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.96: error -117 reading directory block [ 101.673578][ T6056] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.96: lblock 0 mapped to illegal pblock 3 (length 1) [ 101.715005][ T6056] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.96: error -117 reading directory block [ 101.839564][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.032738][ T6072] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 102.053184][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.102'. [ 102.147486][ T6064] loop1: detected capacity change from 0 to 32768 [ 102.262858][ T6064] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 102.304925][ T6064] JBD2: Ignoring recovery information on journal [ 102.326185][ T6074] loop2: detected capacity change from 0 to 2048 [ 102.348764][ T6062] loop0: detected capacity change from 0 to 32768 [ 102.498981][ T6064] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.527373][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.555097][ T6062] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.639874][ T6081] loop3: detected capacity change from 0 to 4096 [ 102.664120][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 102.664136][ T28] audit: type=1800 audit(1778716839.997:18): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.715911][ T6081] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 102.781398][ T28] audit: type=1800 audit(1778716840.087:19): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 102.832900][ T6093] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 102.871447][ T6093] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 110 with error 28 [ 102.903274][ T6093] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.903274][ T6093] [ 102.928767][ T6093] EXT4-fs (loop2): Total free blocks count 0 [ 102.942319][ T6081] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 102.947402][ T6093] EXT4-fs (loop2): Free/Dirty block details [ 102.959899][ T6062] XFS (loop0): Ending clean mount [ 102.983375][ T6093] EXT4-fs (loop2): free_blocks=66060288 [ 102.999602][ T6093] EXT4-fs (loop2): dirty_blocks=112 [ 103.017272][ T6093] EXT4-fs (loop2): Block reservation details [ 103.032451][ T6093] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 103.042878][ T6062] XFS (loop0): Quotacheck needed: Please wait. [ 103.081013][ T6093] EXT4-fs error (device loop2) in ext4_setattr:5682: error 28 [ 103.163675][ T6095] ntfs3: loop3: ino=1f, "file2" failed to open parent directory r=5 to update [ 103.227177][ T6062] XFS (loop0): Quotacheck: Done. [ 103.248682][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.359711][ T49] ntfs3: loop3: ino=1f, failed to open parent directory r=5 to update [ 103.373962][ T28] audit: type=1804 audit(1778716840.697:20): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.97" name="/newroot/31/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 103.415511][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 103.462414][ T28] audit: type=1804 audit(1778716840.737:21): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.97" name="/newroot/31/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 103.564661][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.870543][ T6097] loop2: detected capacity change from 0 to 8192 [ 104.198839][ T6107] loop2: detected capacity change from 0 to 512 [ 104.422168][ T6107] EXT4-fs: Ignoring removed orlov option [ 104.458239][ T6107] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.477701][ T6107] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.629928][ T6107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.664808][ T6107] EXT4-fs (loop2): re-mounted 00000005-0000-0000-0000-000000000000. [ 104.778770][ T5772] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 105.225837][ T6133] loop2: detected capacity change from 0 to 4096 [ 105.243193][ T6133] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 105.274996][ T6136] block nbd0: server does not support multiple connections per device. [ 105.298778][ T6136] block nbd0: shutting down sockets [ 105.430785][ T28] audit: type=1800 audit(1778716842.747:22): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.121" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 105.978538][ T6161] capability: warning: `syz.0.132' uses deprecated v2 capabilities in a way that may be insecure [ 106.465007][ T6169] warning: `syz.1.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.479134][ T6151] loop2: detected capacity change from 0 to 32768 [ 106.562311][ T6151] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.752002][ T6151] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 106.756572][ T6181] input: syz0 as /devices/virtual/input/input6 [ 106.782840][ T3064] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.828639][ T6151] XFS (loop2): Starting recovery (logdev: internal) [ 106.920608][ T6151] XFS (loop2): Ending recovery (logdev: internal) [ 106.974138][ T3064] usb 1-1: Using ep0 maxpacket: 8 [ 106.985449][ T3064] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.015001][ T3064] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.050802][ T3064] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.071095][ T3064] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.122073][ T3064] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.149151][ T3064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.175124][ T6151] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x44b/0x650, xfs_bnobt block 0x8 [ 107.216396][ T6151] XFS (loop2): Unmount and run xfs_repair [ 107.268485][ T27] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 107.287533][ T27] XFS (loop2): Unmount and run xfs_repair [ 107.296936][ T27] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 107.309716][ T27] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 107.322737][ T27] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 107.335257][ T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 107.347805][ T27] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 107.360553][ T27] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 107.373118][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.382333][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.392193][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.402973][ T6151] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8 len 8 error 117 [ 107.422881][ T3064] usb 1-1: GET_CAPABILITIES returned 0 [ 107.428612][ T3064] usbtmc 1-1:16.0: can't read capabilities [ 107.542157][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.556979][ T6179] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 107.569507][ T6179] XFS (loop2): Unmount and run xfs_repair [ 107.578943][ T6179] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 107.588901][ T6179] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 107.604737][ T6179] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 107.651295][ T6179] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 107.682553][ T6179] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 107.699755][ T5838] usb 1-1: USB disconnect, device number 3 [ 107.720136][ T6179] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 107.753200][ T6179] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.762153][ T6179] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.794895][ T6179] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 107.814128][ T6179] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x210/0x680 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 107.839906][ T6179] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 108.152632][ T6192] loop3: detected capacity change from 0 to 8192 [ 108.353160][ T6192] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 108.778548][ T6203] binder: 6202:6203 ioctl c0306201 2000000003c0 returned -14 [ 109.143075][ C0] sched: RT throttling activated [ 109.170236][ T6192] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.243243][ T3064] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.262858][ T6192] ntfs3: loop3: Failed to load $Extend (-2). [ 109.291337][ T6192] ntfs3: loop3: Failed to initialize $Extend. [ 109.322713][ T6195] loop1: detected capacity change from 0 to 131072 [ 109.335475][ T6195] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 109.344033][ T6195] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.357318][ T6195] F2FS-fs (loop1): invalid crc value [ 109.384361][ T6195] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.467245][ T6195] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.474723][ T6195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 109.478095][ T3064] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 109.561081][ T3064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.584423][ T3064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.634452][ T3064] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.681719][ T3064] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.747767][ T3064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.794690][ T3064] usb 1-1: config 0 descriptor?? [ 110.251446][ T3064] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 110.285647][ T3064] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 110.323555][ T3064] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.691220][ T9] usb 1-1: USB disconnect, device number 4 [ 110.924066][ T6215] loop3: detected capacity change from 0 to 40427 [ 110.970936][ T6215] F2FS-fs (loop3): invalid crc value [ 111.017622][ T6215] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.181738][ T6215] F2FS-fs (loop3): Start checkpoint disabled! [ 111.234644][ T6215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 111.474038][ T6215] syz.3.150: attempt to access beyond end of device [ 111.474038][ T6215] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.550281][ T6215] syz.3.150: attempt to access beyond end of device [ 111.550281][ T6215] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 111.700964][ T6237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.158'. [ 111.866832][ T1144] kworker/u4:7: attempt to access beyond end of device [ 111.866832][ T1144] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.897119][ T1144] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 111.904936][ T1144] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 112.202385][ T6243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.162'. [ 112.395576][ T6247] loop2: detected capacity change from 0 to 64 [ 112.546350][ T6235] loop0: detected capacity change from 0 to 32768 [ 112.605651][ T6235] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.725590][ T6235] XFS (loop0): Ending clean mount [ 112.888405][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.825357][ T6295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 113.910306][ T6300] loop3: detected capacity change from 0 to 512 [ 113.918524][ T6300] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.990010][ T6300] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.181: corrupted in-inode xattr: e_value size too large [ 114.011079][ T6300] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.181: couldn't read orphan inode 15 (err -117) [ 114.078338][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.272299][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.619017][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 115.015894][ T6318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.049731][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 115.570264][ T6327] loop0: detected capacity change from 0 to 4096 [ 115.735380][ T6327] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.787184][ T6327] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 115.820298][ T6313] loop1: detected capacity change from 0 to 131072 [ 115.841541][ T6313] F2FS-fs (loop1): invalid crc value [ 115.854988][ T6327] System zones: 0-5 [ 115.880788][ T6313] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.925876][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.959070][ T6313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 116.355386][ T6327] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 116.544301][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.727111][ T6329] loop2: detected capacity change from 0 to 32768 [ 116.766745][ T6349] loop0: detected capacity change from 0 to 16 [ 116.819502][ T28] audit: type=1800 audit(1778716854.147:23): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 117.315244][ T6357] loop0: detected capacity change from 0 to 512 [ 117.401527][ T6357] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.203: inode has both inline data and extents flags [ 117.459287][ T6357] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.203: couldn't read orphan inode 15 (err -117) [ 117.505951][ T6357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.899588][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.001379][ T6368] loop3: detected capacity change from 0 to 256 [ 118.027579][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.058071][ T6368] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.233597][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 118.244851][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.275713][ T5818] usb 3-1: config 0 has no interfaces? [ 118.290294][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.330802][ T5818] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.359773][ T5818] usb 3-1: Product: syz [ 118.378912][ T5818] usb 3-1: Manufacturer: syz [ 118.411959][ T5818] usb 3-1: config 0 descriptor?? [ 118.522121][ T6382] netlink: 35 bytes leftover after parsing attributes in process `syz.3.212'. [ 118.676515][ T27] usb 3-1: USB disconnect, device number 3 [ 119.731440][ T6421] capability: warning: `syz.2.227' uses 32-bit capabilities (legacy support in use) [ 119.888690][ T6416] loop0: detected capacity change from 0 to 32768 [ 119.968039][ T6416] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.032009][ T6416] XFS (loop0): Ending clean mount [ 120.370368][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.411178][ T6447] loop2: detected capacity change from 0 to 64 [ 120.751855][ T6453] loop1: detected capacity change from 0 to 512 [ 120.799175][ T6453] EXT4-fs: Ignoring removed bh option [ 120.857420][ T6453] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.883735][ T6453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.943198][ T6453] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.015489][ T6453] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.239: inode has both inline data and extents flags [ 121.048008][ T6453] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.239: couldn't read orphan inode 15 (err -117) [ 121.062955][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.163441][ T6461] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22) [ 121.210536][ T6465] loop2: detected capacity change from 0 to 1024 [ 121.240328][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.259421][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 121.275441][ T6465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.289321][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 121.297396][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.303750][ T6465] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.514505][ T6465] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.245: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.561152][ T6465] EXT4-fs (loop2): Remounting filesystem read-only [ 121.596140][ T6474] loop0: detected capacity change from 0 to 1024 [ 121.611485][ T6474] EXT4-fs: Ignoring removed bh option [ 121.661762][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.690756][ T6474] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.702393][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.831494][ T6474] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.246: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.866313][ T6474] EXT4-fs (loop0): Remounting filesystem read-only [ 121.893211][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.947099][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.059125][ T6484] loop5: detected capacity change from 0 to 7 [ 122.060060][ T6476] loop1: detected capacity change from 0 to 32768 [ 122.080736][ T6484] Dev loop5: unable to read RDB block 7 [ 122.097002][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.098539][ T6476] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (6476) [ 122.121765][ T6484] loop5: unable to read partition table [ 122.130049][ T6484] loop5: partition table beyond EOD, truncated [ 122.136859][ T6484] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.141975][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.183146][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.194300][ T5818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.211022][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.228473][ T5818] usb 4-1: Product: syz [ 122.251598][ T5818] usb 4-1: Manufacturer: syz [ 122.267405][ T5818] usb 4-1: SerialNumber: syz [ 122.288524][ T6476] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.311454][ T5818] cdc_ncm 4-1:1.0: skipping garbage [ 122.315252][ T6476] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.334181][ T6476] BTRFS info (device loop1): enabling disk space caching [ 122.341430][ T6476] BTRFS info (device loop1): force clearing of disk cache [ 122.373629][ T6476] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.393631][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 122.407681][ T6476] BTRFS info (device loop1): use zstd compression, level 3 [ 122.425761][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.452601][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.462523][ T6476] BTRFS info (device loop1): disk space caching is enabled [ 122.479680][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.499194][ T9] usb 3-1: config 0 descriptor?? [ 122.707914][ T6476] BTRFS info (device loop1): enabling ssd optimizations [ 122.742597][ T6476] BTRFS info (device loop1): auto enabling async discard [ 122.769587][ T6476] BTRFS info (device loop1): rebuilding free space tree [ 122.787316][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.848429][ T9] usb 3-1: USB disconnect, device number 4 [ 122.896665][ T6507] ªªªªªª: renamed from vlan0 (while UP) [ 122.945443][ T6476] BTRFS info (device loop1): disabling free space tree [ 122.954982][ T6476] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.967012][ T6476] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.345960][ T5818] cdc_ncm 4-1:1.0: bind() failure [ 123.371135][ T5818] usbtest: probe of 4-1:1.1 failed with error -71 [ 123.390208][ T5818] usb 4-1: USB disconnect, device number 2 [ 123.427610][ T5771] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.443540][ T5820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.654328][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 123.661687][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.685461][ T5820] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.723084][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.743061][ T5820] usb 1-1: Product: syz [ 123.753835][ T5820] usb 1-1: Manufacturer: syz [ 123.758512][ T5820] usb 1-1: SerialNumber: syz [ 123.826836][ T5820] usb 1-1: config 0 descriptor?? [ 123.832803][ T6510] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.866313][ T5820] hub 1-1:0.0: bad descriptor, ignoring hub [ 123.882745][ T5820] hub: probe of 1-1:0.0 failed with error -5 [ 124.076383][ T6512] loop2: detected capacity change from 0 to 32768 [ 124.127809][ T6512] [ 124.127809][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.127809][ T6512] [ 124.169493][ T6512] [ 124.169493][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.169493][ T6512] [ 124.180504][ T6512] [ 124.180504][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.180504][ T6512] [ 124.191083][ T6512] [ 124.191083][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.191083][ T6512] [ 124.219077][ T112] [ 124.219077][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.219077][ T112] [ 124.275899][ T6512] [ 124.275899][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.275899][ T6512] [ 124.286918][ T6512] [ 124.286918][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.286918][ T6512] [ 124.299920][ T6512] [ 124.299920][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.299920][ T6512] [ 124.310997][ T6512] [ 124.310997][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.310997][ T6512] [ 124.321835][ T6512] [ 124.321835][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.321835][ T6512] [ 124.332407][ T6512] [ 124.332407][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.332407][ T6512] [ 124.343069][ T6512] [ 124.343069][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.343069][ T6512] [ 124.354046][ T6512] [ 124.354046][ T6512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.354046][ T6512] [ 124.371318][ T112] [ 124.371318][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.371318][ T112] [ 124.460421][ T6519] loop1: detected capacity change from 0 to 512 [ 124.512347][ T5772] [ 124.512347][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.512347][ T5772] [ 124.550006][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.566085][ T5772] [ 124.566085][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.566085][ T5772] [ 124.593229][ T6519] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.842861][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.909077][ T9] usb 1-1: USB disconnect, device number 5 [ 125.118919][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 125.195844][ T6534] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 125.353652][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 125.405443][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.424494][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.463923][ T9] usb 1-1: Product: syz [ 125.483066][ T9] usb 1-1: Manufacturer: syz [ 125.487795][ T9] usb 1-1: SerialNumber: syz [ 125.500706][ T9] usb 1-1: config 0 descriptor?? [ 125.507260][ T6517] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.516715][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 125.522699][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 125.637362][ T6544] netlink: 316 bytes leftover after parsing attributes in process `syz.2.268'. [ 125.767615][ T6549] loop2: detected capacity change from 0 to 512 [ 125.814523][ T6549] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.871510][ T6549] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 125.925113][ T5759] usb 1-1: USB disconnect, device number 6 [ 125.969016][ T6549] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.270: bg 0: block 248: padding at end of block bitmap is not set [ 126.023350][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.053944][ T6549] Quota error (device loop2): write_blk: dquota write failed [ 126.078130][ T6549] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 126.100134][ T6549] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.270: Failed to acquire dquot type 1 [ 126.158769][ T6549] EXT4-fs (loop2): 1 truncate cleaned up [ 126.175239][ T6549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 126.247253][ T6549] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 126.271819][ T6549] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 126.286527][ T6549] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.270: Failed to acquire dquot type 1 [ 126.365221][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 126.374642][ T1144] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 126.390623][ T1144] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 126.717500][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.081249][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.482246][ T6579] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.284'. [ 127.563527][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.654346][ T3064] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.730805][ T6587] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 127.752421][ T6587] team0: Device vxcan1 is of different type [ 127.776029][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.795592][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.813266][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.836698][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.853850][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.868077][ T3064] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 127.882166][ T3064] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 127.896953][ T9] usb 1-1: config 0 descriptor?? [ 127.923196][ T3064] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 127.943104][ T3064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.960003][ T3064] usb 4-1: Product: syz [ 127.973106][ T3064] usb 4-1: Manufacturer: syz [ 127.981850][ T3064] usb 4-1: SerialNumber: syz [ 128.004687][ T3064] usb 4-1: config 0 descriptor?? [ 128.015124][ T3064] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 128.164234][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.192368][ T6594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.201469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.319183][ T6596] syzkaller1: entered promiscuous mode [ 128.325111][ T6596] syzkaller1: entered allmulticast mode [ 128.350702][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 128.389447][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.575316][ T6599] loop6: detected capacity change from 0 to 7 [ 128.588416][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.597926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.606359][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.615613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.628162][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.637450][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.646162][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.655594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.665555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.674830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.689609][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.701073][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.710390][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.718896][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.728169][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.736207][ T6599] ldm_validate_partition_table(): Disk read failed. [ 128.752376][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.761890][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.770424][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.779658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.787953][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.798184][ T6599] Dev loop6: unable to read RDB block 0 [ 128.806795][ T6599] loop6: unable to read partition table [ 128.816670][ T6599] loop6: partition table beyond EOD, truncated [ 128.822942][ T6599] loop_reread_partitions: partition scan of loop6 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 129.053270][ T3064] gspca_sunplus: reg_r err -71 [ 129.058294][ T3064] sunplus: probe of 4-1:0.0 failed with error -71 [ 129.084375][ T3064] usb 4-1: USB disconnect, device number 3 [ 129.171909][ T6606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.295'. [ 129.217446][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.255577][ T6608] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 129.356638][ T6610] netlink: 248 bytes leftover after parsing attributes in process `syz.1.297'. [ 129.754284][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.099705][ T6624] loop3: detected capacity change from 0 to 4096 [ 130.251132][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.367452][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.542130][ T6634] loop0: detected capacity change from 0 to 4096 [ 130.563215][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 130.572913][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 130.595174][ T6637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.615504][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.626522][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.640972][ T9] usb 3-1: Product: syz [ 130.646704][ T9] usb 3-1: Manufacturer: syz [ 130.651376][ T9] usb 3-1: SerialNumber: syz [ 130.661851][ T9] usb 3-1: config 0 descriptor?? [ 130.672732][ T6628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.683480][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 130.689481][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 130.693341][ T5820] usb 1-1: USB disconnect, device number 7 [ 130.893435][ T28] audit: type=1804 audit(1778716868.217:24): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.306" name="/newroot/77/file0/file2" dev="loop0" ino=16 res=1 errno=0 [ 131.100172][ T9] usb 3-1: USB disconnect, device number 5 [ 131.194260][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.281450][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.493211][ T3064] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 131.507987][ T6649] syzkaller1: entered promiscuous mode [ 131.523209][ T6649] syzkaller1: entered allmulticast mode [ 131.722520][ T3064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 131.747132][ T3064] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.763348][ T3064] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.801392][ T3064] usb 3-1: Product: syz [ 131.811046][ T3064] usb 3-1: Manufacturer: syz [ 131.821618][ T3064] usb 3-1: SerialNumber: syz [ 131.825265][ T6651] loop6: detected capacity change from 0 to 7 [ 131.837960][ T3064] usb 3-1: config 0 descriptor?? [ 131.844862][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.856187][ T6628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.867224][ T6651] ldm_validate_partition_table(): Disk read failed. [ 131.875129][ T3064] hub 3-1:0.0: bad descriptor, ignoring hub [ 131.885472][ T3064] hub: probe of 3-1:0.0 failed with error -5 [ 131.894716][ T6651] Dev loop6: unable to read RDB block 0 [ 131.912875][ T6647] loop0: detected capacity change from 0 to 32768 [ 131.921777][ T6651] loop6: unable to read partition table [ 131.936745][ T6651] loop6: partition table beyond EOD, truncated [ 131.943563][ T6647] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.309 (6647) [ 131.963897][ T6651] loop_reread_partitions: partition scan of loop6 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 132.000410][ T6647] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.016210][ T6647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.025620][ T6647] BTRFS info (device loop0): enabling disk space caching [ 132.032905][ T6647] BTRFS info (device loop0): force clearing of disk cache [ 132.041009][ T6647] BTRFS info (device loop0): disk space caching is enabled [ 132.138028][ T6647] BTRFS info (device loop0): enabling ssd optimizations [ 132.145308][ T6647] BTRFS info (device loop0): auto enabling async discard [ 132.170849][ T6647] BTRFS info (device loop0): rebuilding free space tree [ 132.235670][ T9] usb 3-1: USB disconnect, device number 6 [ 132.266390][ T6647] BTRFS info (device loop0): disabling free space tree [ 132.284333][ T6647] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.326588][ T6647] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.347137][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.360973][ T6673] trusted_key: syz.1.321 sent an empty control message without MSG_MORE. [ 132.518935][ T6676] loop1: detected capacity change from 0 to 256 [ 132.537078][ T6676] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.565748][ T6676] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 132.580003][ T6676] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 132.628923][ T28] audit: type=1804 audit(1778716869.957:25): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.309" name="/newroot/78/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 132.793737][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.876834][ T5769] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.919351][ T6681] batadv_slave_1: entered promiscuous mode [ 132.959242][ T6679] batadv_slave_1: left promiscuous mode [ 133.123841][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130919][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371742][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.797899][ T6691] loop0: detected capacity change from 0 to 32768 [ 133.812443][ T6691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.319 (6691) [ 133.846555][ T6691] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.858627][ T6691] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.868920][ T6691] BTRFS info (device loop0): turning on sync discard [ 133.876500][ T6691] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.886074][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.894977][ T6691] BTRFS info (device loop0): use zstd compression, level 3 [ 133.902400][ T6691] BTRFS info (device loop0): turning on async discard [ 133.909802][ T6691] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 133.920879][ T6691] BTRFS info (device loop0): trying to use backup root at mount time [ 133.931242][ T6691] BTRFS info (device loop0): enabling auto defrag [ 133.938920][ T6691] BTRFS info (device loop0): using free space tree [ 134.008190][ T1130] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 134.034520][ T6691] BTRFS error (device loop0): failed to load root extent [ 134.041737][ T6691] BTRFS warning (device loop0): try to load backup roots slot 1 [ 134.051612][ T1130] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 134.065080][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 134.074494][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 134.082853][ T9] usb 3-1: config 0 has no interface number 0 [ 134.083869][ T6691] BTRFS warning (device loop0): couldn't read tree root [ 134.091268][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 134.106254][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 134.119165][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 134.128460][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.137294][ T9] usb 3-1: Product: syz [ 134.138622][ T6691] BTRFS warning (device loop0): try to load backup roots slot 2 [ 134.141500][ T9] usb 3-1: Manufacturer: syz [ 134.141518][ T9] usb 3-1: SerialNumber: syz [ 134.161562][ T9] usb 3-1: config 0 descriptor?? [ 134.172325][ T6694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.179893][ T6694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.183853][ T1130] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 134.216645][ T6691] BTRFS warning (device loop0): couldn't read tree root [ 134.224215][ T6691] BTRFS warning (device loop0): try to load backup roots slot 3 [ 134.258605][ T6691] BTRFS info (device loop0): enabling ssd optimizations [ 134.276888][ T6691] BTRFS info (device loop0): rebuilding free space tree [ 134.331486][ T6691] BTRFS info (device loop0): checking UUID tree [ 134.401294][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.443709][ T6694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.485703][ T6694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.706152][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.827391][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.971653][ T6721] loop3: detected capacity change from 0 to 256 [ 135.009450][ T6721] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.070464][ T6721] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 135.137030][ T6721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.314189][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 135.341484][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 135.406132][ T9] asix: probe of 3-1:0.34 failed with error -71 [ 135.468945][ T9] usb 3-1: USB disconnect, device number 7 [ 135.495912][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.570513][ T6713] loop1: detected capacity change from 0 to 32768 [ 135.599780][ T6713] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.331 (6713) [ 135.653750][ T6713] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 135.676600][ T6713] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 135.696801][ T6713] BTRFS info (device loop1): turning on sync discard [ 135.717759][ T6713] BTRFS info (device loop1): turning on async discard [ 135.737605][ T6713] BTRFS info (device loop1): using free space tree [ 135.834097][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.853262][ T6713] BTRFS info (device loop1): enabling ssd optimizations [ 136.266831][ T6723] loop0: detected capacity change from 0 to 32768 [ 136.307028][ T6723] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (6723) [ 136.407222][ T6723] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.436595][ T6723] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.459823][ T5771] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 136.480597][ T6723] BTRFS info (device loop0): enabling auto defrag [ 136.487703][ T6723] BTRFS info (device loop0): use no compression [ 136.515070][ T6723] BTRFS info (device loop0): max_inline at 4096 [ 136.550066][ T6723] BTRFS info (device loop0): using free space tree [ 136.572392][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.806474][ T6723] BTRFS info (device loop0): enabling ssd optimizations [ 136.849248][ T6723] BTRFS info (device loop0): auto enabling async discard [ 137.290963][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.623904][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.009824][ T6768] loop1: detected capacity change from 0 to 32768 [ 138.138372][ T6768] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.208576][ T6789] loop0: detected capacity change from 0 to 128 [ 138.224081][ T6789] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 138.302127][ T6768] XFS (loop1): Ending clean mount [ 138.325343][ T6789] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.384089][ T6776] loop3: detected capacity change from 0 to 32768 [ 138.399175][ T6789] ext2 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.413695][ T6776] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.464969][ T6776] XFS (loop3): Ending clean mount [ 138.604412][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.648615][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.702079][ T6776] XFS (loop3): User initiated shutdown received. [ 138.731022][ T6776] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 138.757739][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.834613][ T6776] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 138.873577][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.107535][ T5770] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.163836][ T5818] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 139.376021][ T5818] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.398079][ T5818] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.417831][ T5818] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.427462][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.443129][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 139.462684][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.486256][ T5818] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.503094][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.522296][ T5818] usb 1-1: config 0 descriptor?? [ 139.532657][ T6807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.695523][ T3064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.769366][ T5818] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.020664][ C1] usblp0: nonzero read bulk status received: -71 [ 140.069267][ T5818] usb 1-1: USB disconnect, device number 8 [ 140.108199][ T6809] loop3: detected capacity change from 0 to 32768 [ 140.126601][ T5818] usblp0: removed [ 140.157093][ T6809] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.340 (6809) [ 140.255674][ T6809] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 140.289988][ T6809] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 140.316033][ T6809] BTRFS info (device loop3): turning on sync discard [ 140.341063][ T6809] BTRFS info (device loop3): turning on async discard [ 140.351186][ T6809] BTRFS info (device loop3): using free space tree [ 140.445319][ T6809] BTRFS info (device loop3): enabling ssd optimizations [ 140.508130][ T6835] netlink: 104 bytes leftover after parsing attributes in process `syz.1.339'. [ 140.768749][ T5770] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.317827][ T5838] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.471934][ T6854] loop1: detected capacity change from 0 to 64 [ 141.509384][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 141.530340][ T5838] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.567527][ T5838] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.589814][ T28] audit: type=1804 audit(1778716878.917:26): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.354" name="/newroot/85/bus/file1" dev="loop1" ino=3 res=1 errno=0 [ 141.603968][ T5838] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.643099][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.793055][ T6847] loop2: detected capacity change from 0 to 32768 [ 141.814040][ T6847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.351 (6847) [ 141.877657][ T6847] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.892275][ T6847] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.907117][ T6847] BTRFS info (device loop2): setting nodatasum [ 141.916311][ T6847] BTRFS info (device loop2): force zlib compression, level 3 [ 141.924669][ T6847] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.934192][ T6847] BTRFS info (device loop2): use lzo compression, level 0 [ 141.941591][ T6847] BTRFS info (device loop2): turning on flush-on-commit [ 141.948866][ T6847] BTRFS info (device loop2): enabling auto defrag [ 141.956888][ T6847] BTRFS info (device loop2): max_inline at 4096 [ 141.964818][ T6847] BTRFS info (device loop2): using free space tree [ 142.031652][ T6847] BTRFS info (device loop2): enabling ssd optimizations [ 142.098560][ T5838] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 142.238922][ T6874] loop1: detected capacity change from 0 to 512 [ 142.239194][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.339314][ T6874] EXT4-fs (loop1): 1 truncate cleaned up [ 142.339990][ T5838] usb 1-1: USB disconnect, device number 9 [ 142.416431][ T6874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.644744][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.984309][ T6888] loop3: detected capacity change from 0 to 512 [ 143.443949][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.365'. [ 143.610937][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 143.774308][ T6912] loop3: detected capacity change from 0 to 4096 [ 143.811059][ T6913] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.003154][ T28] audit: type=1800 audit(1778716881.327:27): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.371" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 144.023537][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.146100][ T6920] loop2: detected capacity change from 0 to 2048 [ 144.211216][ T6920] loop2: p2 < > p3 p4 [ 144.231242][ T6920] loop2: p3 start 65535 is beyond EOD, truncated [ 144.253065][ T6920] loop2: p4 size 8192 extends beyond EOD, truncated [ 144.306292][ T6922] loop3: detected capacity change from 0 to 1024 [ 144.346415][ T6922] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 144.346415][ T6922] [ 144.427207][ T5773] blk_print_req_error: 32 callbacks suppressed [ 144.427226][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.436497][ T5785] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.447062][ T5772] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 144.471111][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.494330][ T5785] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.523076][ T5773] buffer_io_error: 30 callbacks suppressed [ 144.523090][ T5773] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 144.533579][ T5785] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 144.568580][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.601736][ T5773] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 144.619556][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.656451][ T5773] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 144.682577][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.726164][ T5773] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 144.743982][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.777711][ T5773] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 144.939167][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 144.979993][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 144.999530][ T6910] loop1: detected capacity change from 0 to 40427 [ 145.046701][ T6910] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 145.056137][ T6910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 145.108649][ T6910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.223730][ T6910] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 145.264340][ T6910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.488036][ T6910] syz.1.370: attempt to access beyond end of device [ 145.488036][ T6910] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 145.508643][ T6910] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 145.519657][ T28] audit: type=1800 audit(1778716882.847:28): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.370" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 145.539796][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.633257][ T5818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.676153][ T6939] loop0: detected capacity change from 0 to 1024 [ 145.696294][ T6939] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 145.696294][ T6939] [ 145.863151][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 145.872530][ T5818] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 145.897745][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.945237][ T5818] usb 4-1: config 0 descriptor?? [ 146.179877][ T5818] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 146.232536][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.265438][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 146.274958][ T5818] usb 4-1: media controller created [ 146.331622][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.509652][ T5818] DVB: Unable to find symbol dib7000p_attach() [ 146.539294][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 146.723825][ T5818] rc_core: IR keymap rc-dib0700-rc5 not found [ 146.743093][ T5818] Registered IR keymap rc-empty [ 146.763564][ T5818] dvb-usb: could not initialize remote control. [ 146.769893][ T5818] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 146.827836][ T5818] usb 4-1: USB disconnect, device number 4 [ 146.966999][ T5818] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 147.320227][ T6956] loop2: detected capacity change from 0 to 32768 [ 147.339783][ T6956] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.384 (6956) [ 147.392254][ T6956] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.408618][ T6956] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 147.419202][ T6956] BTRFS info (device loop2): enabling disk space caching [ 147.428181][ T6956] BTRFS info (device loop2): force clearing of disk cache [ 147.436714][ T6956] BTRFS info (device loop2): disk space caching is enabled [ 147.573609][ T6956] BTRFS info (device loop2): enabling ssd optimizations [ 147.615475][ T6956] BTRFS info (device loop2): auto enabling async discard [ 147.675202][ T6956] BTRFS info (device loop2): rebuilding free space tree [ 147.718719][ T6956] BTRFS info (device loop2): disabling free space tree [ 147.733217][ T6956] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.773340][ T6956] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.014953][ T28] audit: type=1804 audit(1778716885.337:29): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.384" name="/newroot/90/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 148.173905][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 148.270763][ T5772] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.521483][ T6980] loop1: detected capacity change from 0 to 32768 [ 148.673351][ T28] audit: type=1800 audit(1778716885.997:30): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 148.893130][ T3064] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.105479][ T3064] usb 3-1: Using ep0 maxpacket: 16 [ 149.122575][ T3064] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.153789][ T3064] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.171722][ T3064] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 149.200922][ T3064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.241873][ T3064] usb 3-1: config 0 descriptor?? [ 149.513361][ T5820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.673324][ T5759] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.696317][ T3064] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 149.747631][ T5820] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 149.767795][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.789297][ T5820] usb 4-1: config 0 descriptor?? [ 149.811408][ T5820] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 149.825217][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.865649][ T5759] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.877424][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.889703][ T5759] usb 1-1: config 0 descriptor?? [ 149.919749][ T5759] cp210x 1-1:0.0: cp210x converter detected [ 150.028221][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 150.036774][ T5838] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 150.046228][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.064255][ T5838] usb 2-1: config 0 descriptor?? [ 150.157534][ T788] usb 3-1: USB disconnect, device number 8 [ 150.286831][ T5838] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 150.301239][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.320691][ T5838] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 150.329477][ T5838] usb 2-1: media controller created [ 150.353334][ T5759] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 150.369651][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.387851][ T5759] usb 1-1: cp210x converter now attached to ttyUSB0 [ 150.497641][ T5838] DVB: Unable to find symbol dib7000p_attach() [ 150.507594][ T5838] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 150.583868][ T5759] usb 1-1: USB disconnect, device number 10 [ 150.595704][ T5838] rc_core: IR keymap rc-dib0700-rc5 not found [ 150.602029][ T5838] Registered IR keymap rc-empty [ 150.612971][ T5759] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.625357][ T5838] dvb-usb: could not initialize remote control. [ 150.631775][ T5838] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 150.642778][ T5820] gspca_stv06xx: I2C: Read error writing address: -71 [ 150.667302][ T5759] cp210x 1-1:0.0: device disconnected [ 150.682483][ T5820] usb 4-1: USB disconnect, device number 5 [ 150.703450][ T5838] usb 2-1: USB disconnect, device number 3 [ 150.821658][ T5838] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 151.414004][ T7021] loop1: detected capacity change from 0 to 256 [ 151.468181][ T7018] loop0: detected capacity change from 0 to 4096 [ 151.503291][ T7018] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 151.537435][ T7021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 151.688783][ T28] audit: type=1800 audit(1778716889.017:31): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 152.199829][ T7022] loop3: detected capacity change from 0 to 32768 [ 152.224856][ T7022] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.404 (7022) [ 152.262061][ T7022] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 152.278346][ T7022] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.287735][ T7022] BTRFS info (device loop3): enabling disk space caching [ 152.295356][ T7022] BTRFS info (device loop3): force clearing of disk cache [ 152.303076][ T7022] BTRFS info (device loop3): disk space caching is enabled [ 152.350754][ T7022] BTRFS info (device loop3): enabling ssd optimizations [ 152.358581][ T7022] BTRFS info (device loop3): auto enabling async discard [ 152.372569][ T7022] BTRFS info (device loop3): rebuilding free space tree [ 152.404846][ T7022] BTRFS info (device loop3): disabling free space tree [ 152.412076][ T7022] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.422023][ T7022] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.534906][ T28] audit: type=1804 audit(1778716889.867:32): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.404" name="/newroot/109/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 152.648972][ T5770] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 152.819045][ T5787] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (5787) [ 153.035859][ T7062] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.413'. [ 153.079938][ T7062] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 153.113639][ T7062] openvswitch: netlink: Message has 4 unknown bytes. [ 153.225898][ T7063] loop1: detected capacity change from 0 to 256 [ 153.345376][ T7063] FAT-fs (loop1): Directory bread(block 64) failed [ 153.352051][ T7063] FAT-fs (loop1): Directory bread(block 65) failed [ 153.383359][ T7063] FAT-fs (loop1): Directory bread(block 66) failed [ 153.414950][ T7063] FAT-fs (loop1): Directory bread(block 67) failed [ 153.423641][ T7063] FAT-fs (loop1): Directory bread(block 68) failed [ 153.453195][ T7063] FAT-fs (loop1): Directory bread(block 69) failed [ 153.460944][ T7063] FAT-fs (loop1): Directory bread(block 70) failed [ 153.513850][ T7063] FAT-fs (loop1): Directory bread(block 71) failed [ 153.577376][ T7063] FAT-fs (loop1): Directory bread(block 72) failed [ 153.623531][ T7063] FAT-fs (loop1): Directory bread(block 73) failed [ 153.941945][ T7074] loop0: detected capacity change from 0 to 512 [ 154.021144][ T7057] loop3: detected capacity change from 0 to 32768 [ 154.057791][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.419: iget: bad i_size value: 38620345925642 [ 154.106663][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.419: couldn't read orphan inode 15 (err -117) [ 154.146098][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.165321][ T7078] loop2: detected capacity change from 0 to 4096 [ 154.174926][ T28] audit: type=1800 audit(1778716891.497:33): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.408" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 154.221089][ T7074] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.419: bg 0: block 5: invalid block bitmap [ 154.515521][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.412192][ T7083] loop1: detected capacity change from 0 to 32768 [ 155.451665][ T7083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.424 (7083) [ 155.475603][ T7083] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.488345][ T7083] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 155.497715][ T7083] BTRFS info (device loop1): setting nodatacow, compression disabled [ 155.507169][ T7083] BTRFS info (device loop1): trying to use backup root at mount time [ 155.517681][ T7083] BTRFS info (device loop1): enabling auto defrag [ 155.528387][ T7083] BTRFS info (device loop1): max_inline at 0 [ 155.535182][ T7083] BTRFS info (device loop1): using free space tree [ 155.543710][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.551508][ T5820] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.647061][ T7083] BTRFS info (device loop1): auto enabling async discard [ 155.773466][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 155.778849][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 155.798590][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.817071][ T27] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.831511][ T27] usb 1-1: config 0 has no interface number 0 [ 155.852799][ T5820] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.873212][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.893071][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.901331][ T5820] usb 3-1: Product: syz [ 155.905708][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.927328][ T27] usb 1-1: Product: syz [ 155.931648][ T5820] usb 3-1: Manufacturer: syz [ 155.957931][ T27] usb 1-1: Manufacturer: syz [ 155.962623][ T27] usb 1-1: SerialNumber: syz [ 155.977453][ T5820] usb 3-1: SerialNumber: syz [ 156.005384][ T5820] usb 3-1: config 0 descriptor?? [ 156.012175][ T7096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.047902][ T27] usb 1-1: config 0 descriptor?? [ 156.065724][ T5820] hub 3-1:0.0: bad descriptor, ignoring hub [ 156.071726][ T5820] hub: probe of 3-1:0.0 failed with error -5 [ 156.080022][ T27] smsc95xx v2.0.0 [ 156.109045][ T7126] loop3: detected capacity change from 0 to 256 [ 156.156078][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.248214][ T7126] FAT-fs (loop3): Directory bread(block 64) failed [ 156.313151][ T7126] FAT-fs (loop3): Directory bread(block 65) failed [ 156.333551][ T7126] FAT-fs (loop3): Directory bread(block 66) failed [ 156.363101][ T7126] FAT-fs (loop3): Directory bread(block 67) failed [ 156.380925][ T7126] FAT-fs (loop3): Directory bread(block 68) failed [ 156.390087][ T7126] FAT-fs (loop3): Directory bread(block 69) failed [ 156.396944][ T7126] FAT-fs (loop3): Directory bread(block 70) failed [ 156.403874][ T7126] FAT-fs (loop3): Directory bread(block 71) failed [ 156.410692][ T7126] FAT-fs (loop3): Directory bread(block 72) failed [ 156.444006][ T7126] FAT-fs (loop3): Directory bread(block 73) failed [ 156.760015][ T7129] loop1: detected capacity change from 0 to 1024 [ 156.814342][ T7096] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 156.935921][ T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 157.063868][ T7096] usb 3-1: device firmware changed [ 157.083616][ T5818] usb 3-1: USB disconnect, device number 9 [ 157.148000][ T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 157.169461][ T27] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 157.199728][ T27] usb 1-1: USB disconnect, device number 11 [ 157.253258][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.266676][ T1130] hfsplus: b-tree write err: -5, ino 8 [ 157.445482][ T7138] process 'syz.3.440' launched './file0' with NULL argv: empty string added [ 157.473445][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 157.494296][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 157.537848][ T5818] usb 3-1: string descriptor 0 read error: -22 [ 157.549785][ T5818] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.560238][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.597537][ T5818] usb 3-1: config 0 descriptor?? [ 157.603918][ T7127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.632317][ T5818] hub 3-1:0.0: bad descriptor, ignoring hub [ 157.641666][ T5818] hub: probe of 3-1:0.0 failed with error -5 [ 157.845688][ T7145] loop1: detected capacity change from 0 to 512 [ 157.893540][ T7145] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.444: inode has both inline data and extents flags [ 157.940683][ T7145] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.444: couldn't read orphan inode 15 (err -117) [ 158.001221][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.093446][ T27] usb 3-1: USB disconnect, device number 10 [ 158.167769][ T7145] EXT4-fs (loop1): shut down requested (1) [ 158.216713][ T7156] loop3: detected capacity change from 0 to 512 [ 158.246532][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.283147][ T7156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.317501][ T7156] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.447: bad orphan inode 131083 [ 158.339062][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.574487][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.094361][ T7175] loop0: detected capacity change from 0 to 2048 [ 159.139045][ T7175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.163243][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.243065][ T28] audit: type=1804 audit(1778716896.567:34): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.455" name="/newroot/114/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 159.354111][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 159.374243][ T5838] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 159.382426][ T5838] usb 4-1: config 0 has no interface number 0 [ 159.401469][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 159.426589][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.436321][ T5838] usb 4-1: Product: syz [ 159.440642][ T5838] usb 4-1: Manufacturer: syz [ 159.445445][ T5838] usb 4-1: SerialNumber: syz [ 159.453081][ T5838] usb 4-1: config 0 descriptor?? [ 159.461006][ T5838] smsc95xx v2.0.0 [ 159.823151][ T5759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.013947][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 160.031477][ T5759] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.041752][ T5759] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.051771][ T5759] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.063783][ T5759] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 160.073432][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.081552][ T5759] usb 2-1: Product: syz [ 160.086380][ T5759] usb 2-1: Manufacturer: syz [ 160.091084][ T5759] usb 2-1: SerialNumber: syz [ 160.101432][ T5759] usb 2-1: config 0 descriptor?? [ 160.299170][ T5838] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 160.513388][ T5838] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 160.548235][ T5759] gs_usb 2-1:0.0: Configuring for 3 interfaces [ 160.568031][ T5838] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 160.568233][ T7196] input: syz0 as /devices/virtual/input/input11 [ 160.600814][ T5838] usb 4-1: USB disconnect, device number 6 [ 160.704284][ T5780] udevd[5780]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 160.717076][ T5780] udevd[5780]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 160.955059][ T5759] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 161.049774][ T5759] gs_usb: probe of 2-1:0.0 failed with error -71 [ 161.086277][ T5759] usb 2-1: USB disconnect, device number 4 [ 161.253263][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.444959][ T27] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 161.453401][ T27] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 161.463963][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.472779][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.484100][ T27] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 161.492329][ T27] usb 3-1: Product: syz [ 161.498477][ T27] usb 3-1: Manufacturer: syz [ 161.506063][ T27] usb 3-1: SerialNumber: syz [ 161.512721][ T27] usb 3-1: config 0 descriptor?? [ 161.523667][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 161.529724][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 161.533531][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.550312][ T27] usb 3-1: selecting invalid altsetting 0 [ 161.723617][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 161.732119][ T5838] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 161.745639][ T5838] usb 4-1: config 0 has no interface number 0 [ 161.751923][ T5838] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.770993][ T5838] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 161.788425][ T5838] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 161.797749][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.805985][ T5838] usb 4-1: Product: syz [ 161.810353][ T5838] usb 4-1: Manufacturer: syz [ 161.815092][ T5838] usb 4-1: SerialNumber: syz [ 161.822551][ T5838] usb 4-1: config 0 descriptor?? [ 161.841563][ T7210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.849286][ T7210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.070014][ T7210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.077665][ T7210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.285150][ T7205] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 162.621157][ T7225] loop0: detected capacity change from 0 to 1024 [ 162.692431][ T7227] loop1: detected capacity change from 0 to 64 [ 162.710388][ T7205] usb 3-1: failed to restore interface 0 altsetting 251 (error=-71) [ 162.728929][ T5838] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.734693][ T27] usb 3-1: USB disconnect, device number 11 [ 162.760561][ T5838] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 162.827746][ T5838] asix: probe of 4-1:0.251 failed with error -71 [ 162.893412][ T5838] usb 4-1: USB disconnect, device number 7 [ 162.975282][ T7227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.136655][ T5771] Trying to free block not in datazone [ 163.269351][ T7233] veth1_to_bond: entered allmulticast mode [ 163.278610][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 163.392045][ T7233] veth1_to_bond (unregistering): left allmulticast mode [ 163.504653][ T7233] bond0: (slave bond_slave_1): Releasing backup interface [ 163.519237][ T7239] netlink: 248 bytes leftover after parsing attributes in process `syz.3.484'. [ 164.141320][ T7257] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.249049][ T7259] loop3: detected capacity change from 0 to 4096 [ 164.855938][ T7265] loop2: detected capacity change from 0 to 4096 [ 164.896507][ T7263] loop3: detected capacity change from 0 to 4096 [ 164.927670][ T7263] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 165.063456][ T5838] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.123746][ T7263] ntfs3: loop3: failed to convert "c46c" to macturkish [ 165.183232][ T7263] ntfs3: loop3: failed to convert "c46c" to macturkish [ 165.263405][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 165.304023][ T5838] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 165.312294][ T5838] usb 1-1: config 0 has no interface number 0 [ 165.360593][ T5838] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 165.382433][ T5838] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 165.403426][ T5838] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 165.414494][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.422648][ T5838] usb 1-1: Product: syz [ 165.476845][ T5838] usb 1-1: Manufacturer: syz [ 165.481539][ T5838] usb 1-1: SerialNumber: syz [ 165.514524][ T5838] usb 1-1: config 0 descriptor?? [ 165.525187][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.532577][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.670364][ T7275] loop3: detected capacity change from 0 to 8192 [ 165.723893][ T7275] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.806385][ T7275] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 165.822279][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.838315][ T7275] REISERFS (device loop3): using ordered data mode [ 165.845684][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.853830][ T7275] reiserfs: using flush barriers [ 165.866875][ T7275] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.919464][ T7275] REISERFS (device loop3): checking transaction log (loop3) [ 166.140356][ T7272] loop2: detected capacity change from 0 to 40427 [ 166.163887][ T7272] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 166.170385][ T7272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 166.180512][ T7275] REISERFS (device loop3): Using tea hash to sort names [ 166.194435][ T7275] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 166.259450][ T7272] F2FS-fs (loop2): invalid crc value [ 166.455078][ T7275] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 166.469485][ T5838] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 166.469549][ T5838] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 166.483650][ T5838] asix: probe of 1-1:0.251 failed with error -71 [ 166.513261][ T7272] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 166.520468][ T7272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.532441][ T5838] usb 1-1: USB disconnect, device number 12 [ 166.642146][ T7272] syz.2.498: attempt to access beyond end of device [ 166.642146][ T7272] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 166.707454][ T5772] syz-executor: attempt to access beyond end of device [ 166.707454][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.748130][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.043161][ T3064] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.178832][ T7290] loop2: detected capacity change from 0 to 4096 [ 167.233465][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.285378][ T3064] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 167.303401][ T3064] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 167.325019][ T3064] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.346210][ T3064] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.365032][ T3064] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.375615][ T3064] usb 2-1: Product: syz [ 167.379976][ T3064] usb 2-1: Manufacturer: syz [ 167.386491][ T3064] usb 2-1: SerialNumber: syz [ 167.395313][ T3064] usb 2-1: config 0 descriptor?? [ 167.424681][ T3064] hub 2-1:0.0: bad descriptor, ignoring hub [ 167.432554][ T3064] hub: probe of 2-1:0.0 failed with error -5 [ 167.438892][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 167.446989][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.462541][ T3064] usb 2-1: selecting invalid altsetting 0 [ 167.468762][ T5818] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.492360][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.531998][ T5818] usb 4-1: config 0 descriptor?? [ 167.738813][ T7295] loop2: detected capacity change from 0 to 1024 [ 167.801502][ T5818] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.822321][ T7295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.843449][ T7295] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.913311][ T28] audit: type=1800 audit(1778716905.237:35): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 167.917237][ T7295] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm syz.2.504: lblock 8 mapped to illegal pblock 8 (length 8) [ 167.972062][ T7295] EXT4-fs error (device loop2): ext4_ext_remove_space:2940: inode #15: comm syz.2.504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 168.001300][ T28] audit: type=1800 audit(1778716905.237:36): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 168.137616][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.295865][ T5818] usb 4-1: USB disconnect, device number 8 [ 168.363308][ T7286] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 168.402738][ T7309] loop2: detected capacity change from 0 to 128 [ 168.439366][ T7309] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.477472][ T7309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.540010][ T28] audit: type=1800 audit(1778716905.867:37): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 168.789044][ T7286] usb 2-1: failed to restore interface 0 altsetting 251 (error=-71) [ 168.810767][ T7307] loop0: detected capacity change from 0 to 32768 [ 168.825050][ T3064] usb 2-1: USB disconnect, device number 5 [ 168.891332][ T28] audit: type=1800 audit(1778716906.217:38): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.507" name="file0" dev="loop0" ino=7 res=0 errno=0 [ 169.094310][ T7316] loop2: detected capacity change from 0 to 2048 [ 169.166965][ T7316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.346428][ T7318] loop3: detected capacity change from 0 to 512 [ 169.422901][ T7318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.439525][ T7318] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.674472][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.138769][ T7340] loop0: detected capacity change from 0 to 256 [ 170.169075][ T7342] netlink: 27 bytes leftover after parsing attributes in process `syz.2.521'. [ 170.814979][ T7354] loop3: detected capacity change from 0 to 256 [ 171.705481][ T7366] pimreg: entered allmulticast mode [ 171.783262][ T7366] pimreg: left allmulticast mode [ 171.829091][ T7352] loop2: detected capacity change from 0 to 131072 [ 171.879749][ T7352] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.951087][ T7352] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.389122][ T7388] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 172.498133][ T7392] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.545'. [ 172.663729][ T5813] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 172.866314][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 172.886730][ T5813] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 172.908309][ T5813] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.922905][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.947712][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.972907][ T5813] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.006855][ T5813] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.043186][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.137220][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 173.149847][ T7408] netlink: 4676 bytes leftover after parsing attributes in process `syz.3.551'. [ 173.313140][ T5813] usb 1-1: usb_control_msg returned -32 [ 173.318827][ T5813] usbtmc 1-1:16.0: can't read capabilities [ 173.377022][ T7413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 173.712462][ T7423] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 173.778563][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 173.918341][ T5818] usb 1-1: USB disconnect, device number 13 [ 174.043127][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.123123][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.245591][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.255844][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.266830][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.276645][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.285016][ T27] usb 4-1: SerialNumber: syz [ 174.306466][ T5838] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 174.319941][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.331292][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.346933][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.356350][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.377589][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.394725][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.414709][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.434730][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.448311][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.456842][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.470685][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.497401][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.516044][ T27] usb 4-1: 0:2 : does not exist [ 174.517691][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.533088][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.548625][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.559303][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.584608][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 174.593206][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.629301][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.636877][ T27] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 174.654789][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.668577][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.681525][ T27] usb 4-1: 5:0: failed to get current value for ch 15 (-22) [ 174.681791][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.702061][ T5838] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.711782][ T5838] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.731886][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.742863][ T5838] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.755863][ T27] usb 4-1: USB disconnect, device number 9 [ 174.762331][ T5838] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.771204][ T7434] netlink: 256 bytes leftover after parsing attributes in process `syz.0.561'. [ 174.793332][ T5838] usb 2-1: Product: syz [ 174.797582][ T5838] usb 2-1: Manufacturer: syz [ 174.802228][ T5838] usb 2-1: SerialNumber: syz [ 174.860188][ T5838] usb 2-1: config 0 descriptor?? [ 174.882191][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.909669][ T5838] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 175.339770][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 175.340663][ T27] usb 2-1: USB disconnect, device number 6 [ 175.353921][ T7443] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 175.382894][ T27] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 175.433352][ T5838] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.633109][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 175.641950][ T7438] loop0: detected capacity change from 0 to 32768 [ 175.648517][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.648724][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.648748][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.648792][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.648816][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.658629][ T5838] usb 3-1: config 0 descriptor?? [ 175.758152][ T7438] (syz.0.563,7438,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.787693][ T7438] (syz.0.563,7438,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.867522][ T7438] JBD2: Ignoring recovery information on journal [ 175.957313][ T7438] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 176.022462][ T7448] loop3: detected capacity change from 0 to 32768 [ 176.069797][ T7448] JBD2: Ignoring recovery information on journal [ 176.131768][ T7448] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.155758][ T5838] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input12 [ 176.265856][ T5838] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 176.415385][ T28] audit: type=1800 audit(1778716913.737:39): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.563" name="file1" dev="loop0" ino=16979 res=0 errno=0 [ 176.555721][ T27] usb 3-1: USB disconnect, device number 12 [ 176.580995][ T7456] loop1: detected capacity change from 0 to 4096 [ 176.604560][ T7456] EXT4-fs: inline encryption not supported [ 176.663697][ T7456] EXT4-fs (loop1): Test dummy encryption mode enabled [ 176.690875][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 176.723179][ T7456] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 176.731464][ T7456] System zones: 0-5 [ 176.756766][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 176.817314][ T7456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.008451][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.134525][ T7460] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 177.351514][ T7468] loop3: detected capacity change from 0 to 1024 [ 177.486263][ T7471] syzkaller1: entered promiscuous mode [ 177.521068][ T7471] syzkaller1: entered allmulticast mode [ 177.836644][ T7481] input: syz0 as /devices/virtual/input/input13 [ 178.100445][ T7490] loop3: detected capacity change from 0 to 256 [ 178.339845][ T7497] loop0: detected capacity change from 0 to 512 [ 178.384598][ T7497] EXT4-fs: Ignoring removed nobh option [ 178.408637][ T7497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.472059][ T7497] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.604158][ T7497] EXT4-fs (loop0): 1 truncate cleaned up [ 178.635657][ T7497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.748564][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.847085][ T7504] loop2: detected capacity change from 0 to 8192 [ 178.897503][ T7515] loop0: detected capacity change from 0 to 128 [ 178.905543][ T7504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.908306][ T7515] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.935989][ T7515] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.956233][ T7504] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 178.969247][ T7504] REISERFS (device loop2): using ordered data mode [ 178.977961][ T7504] reiserfs: using flush barriers [ 179.024278][ T7504] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.033893][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.056350][ T7504] REISERFS (device loop2): checking transaction log (loop2) [ 179.097645][ T7504] REISERFS (device loop2): Using r5 hash to sort names [ 179.129388][ T7504] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 179.176741][ T7504] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 179.236623][ T7504] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 179.254440][ T7504] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 179.293742][ T7504] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 179.358508][ T7520] syzkaller1: entered promiscuous mode [ 179.368075][ T7520] syzkaller1: entered allmulticast mode [ 179.433224][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.629949][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.667748][ T5813] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.685154][ T5813] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.697696][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.724411][ T5813] usb 2-1: SerialNumber: syz [ 179.854114][ T7530] loop8: detected capacity change from 0 to 7 [ 179.866656][ T5773] Dev loop8: unable to read RDB block 7 [ 179.872318][ T5773] loop8: AHDI p1 p2 [ 179.883140][ T5773] loop8: partition table partially beyond EOD, truncated [ 179.892810][ T5773] loop8: p1 start 1702000233 is beyond EOD, truncated [ 179.915509][ T7530] Dev loop8: unable to read RDB block 7 [ 179.923291][ T7530] loop8: AHDI p1 p2 [ 179.927293][ T7530] loop8: partition table partially beyond EOD, truncated [ 179.946017][ T7530] loop8: p1 start 1702000233 is beyond EOD, truncated [ 179.969330][ T5813] usb 2-1: 0:2 : does not exist [ 180.026339][ T5813] usb 2-1: USB disconnect, device number 7 [ 180.103570][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.124248][ T7533] loop2: detected capacity change from 0 to 512 [ 180.149826][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.166296][ T7533] EXT4-fs: Ignoring removed nobh option [ 180.181714][ T7533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.219973][ T7533] EXT4-fs (loop2): 1 truncate cleaned up [ 180.228853][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.303406][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 180.310173][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.337534][ T27] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 180.353204][ T27] usb 4-1: config 0 has no interface number 0 [ 180.359400][ T27] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.386011][ T27] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 180.404394][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.412533][ T27] usb 4-1: Product: syz [ 180.420834][ T27] usb 4-1: Manufacturer: syz [ 180.429020][ T27] usb 4-1: SerialNumber: syz [ 180.439750][ T27] usb 4-1: config 0 descriptor?? [ 180.452215][ T27] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 180.467914][ T27] em28xx 4-1:0.132: Video interface 132 found: [ 180.841202][ T7540] loop1: detected capacity change from 0 to 32768 [ 180.876044][ T27] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 180.876719][ T7540] JBD2: Ignoring recovery information on journal [ 180.920811][ T7540] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.069401][ T7544] netlink: 276 bytes leftover after parsing attributes in process `syz.0.603'. [ 181.086020][ T7544] netlink: 276 bytes leftover after parsing attributes in process `syz.0.603'. [ 181.189819][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 181.307399][ T27] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 181.326203][ T27] em28xx 4-1:0.132: board has no eeprom [ 181.398448][ T27] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 181.417264][ T27] em28xx 4-1:0.132: analog set to bulk mode. [ 181.425326][ T5818] em28xx 4-1:0.132: Registering V4L2 extension [ 181.454879][ T27] usb 4-1: USB disconnect, device number 10 [ 181.473091][ T3064] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.494241][ T27] em28xx 4-1:0.132: Disconnecting em28xx [ 181.584791][ T7552] loop1: detected capacity change from 0 to 1024 [ 181.682108][ T5818] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 181.695594][ T5818] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 181.704084][ T3064] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.704081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d562c00: rx timeout, send abort [ 181.714475][ T5818] em28xx 4-1:0.132: No AC97 audio processor [ 181.729099][ T3064] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.731020][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d562c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.763103][ T3064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.786364][ T5818] usb 4-1: Decoder not found [ 181.792527][ T3064] usb 1-1: config 0 descriptor?? [ 181.803064][ T5818] em28xx 4-1:0.132: failed to create media graph [ 181.824167][ T3064] pwc: Askey VC010 type 2 USB webcam detected. [ 181.830850][ T5818] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 181.850398][ T5818] em28xx 4-1:0.132: Remote control support is not available for this card. [ 181.865426][ T27] em28xx 4-1:0.132: Closing input extension [ 181.967327][ T27] em28xx 4-1:0.132: Freeing device [ 182.098462][ T7561] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 182.237048][ T7567] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 182.256253][ T3064] pwc: recv_control_msg error -32 req 02 val 2b00 [ 182.287887][ T3064] pwc: recv_control_msg error -32 req 02 val 2700 [ 182.369306][ T7571] loop1: detected capacity change from 0 to 128 [ 182.382559][ T7571] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.402481][ T7571] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.456848][ T1144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.508713][ T3064] pwc: recv_control_msg error -71 req 04 val 1000 [ 182.539784][ T3064] pwc: recv_control_msg error -71 req 04 val 1300 [ 182.558949][ T3064] pwc: recv_control_msg error -71 req 04 val 1400 [ 182.576594][ T3064] pwc: recv_control_msg error -71 req 02 val 2000 [ 182.584581][ T3064] pwc: recv_control_msg error -71 req 02 val 2100 [ 182.591799][ T3064] pwc: recv_control_msg error -71 req 04 val 1500 [ 182.602690][ T3064] pwc: recv_control_msg error -71 req 02 val 2500 [ 182.610053][ T3064] pwc: recv_control_msg error -71 req 02 val 2400 [ 182.623531][ T3064] pwc: recv_control_msg error -71 req 02 val 2600 [ 182.640744][ T3064] pwc: recv_control_msg error -71 req 02 val 2900 [ 182.648180][ T3064] pwc: recv_control_msg error -71 req 02 val 2800 [ 182.662918][ T3064] pwc: recv_control_msg error -71 req 04 val 1100 [ 182.685220][ T3064] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.711618][ T3064] pwc: Registered as video103. [ 182.739252][ T3064] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 182.800717][ T3064] usb 1-1: USB disconnect, device number 14 [ 183.079867][ T7575] loop2: detected capacity change from 0 to 32768 [ 183.114362][ T7575] JBD2: Ignoring recovery information on journal [ 183.187064][ T7575] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.402684][ T7585] syzkaller1: entered promiscuous mode [ 183.411684][ T7585] syzkaller1: entered allmulticast mode [ 183.475607][ T7588] loop0: detected capacity change from 0 to 1024 [ 183.698167][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 183.901559][ T7594] loop0: detected capacity change from 0 to 128 [ 184.237775][ T7599] loop0: detected capacity change from 0 to 8192 [ 184.264335][ T7599] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.303699][ T7599] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 184.333902][ T7599] REISERFS (device loop0): using ordered data mode [ 184.340505][ T7599] reiserfs: using flush barriers [ 184.390470][ T7599] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.402543][ T7607] loop3: detected capacity change from 0 to 128 [ 184.423276][ T5759] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.424482][ T7599] REISERFS (device loop0): checking transaction log (loop0) [ 184.442596][ T7607] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.457980][ T7599] REISERFS (device loop0): Using r5 hash to sort names [ 184.469769][ T7607] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.511454][ T7599] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.544907][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.554158][ T7599] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 184.635058][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 184.667950][ T5759] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 184.677721][ T7599] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.703174][ T5759] usb 3-1: config 0 has no interface number 0 [ 184.709554][ T5759] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.747734][ T7612] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.775367][ T5759] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 184.803814][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.818801][ T5759] usb 3-1: Product: syz [ 184.831667][ T7599] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.835766][ T5759] usb 3-1: Manufacturer: syz [ 184.856161][ T7614] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.871094][ T5759] usb 3-1: SerialNumber: syz [ 184.891636][ T7599] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.902759][ T5759] usb 3-1: config 0 descriptor?? [ 184.919383][ T5759] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 184.930747][ T5759] em28xx 3-1:0.132: Video interface 132 found: [ 185.083281][ T5813] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.282557][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.303150][ T5813] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.323597][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.355587][ T5813] usb 2-1: config 0 descriptor?? [ 185.363145][ T5759] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 185.396647][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 185.711111][ T7624] loop0: detected capacity change from 0 to 32768 [ 185.752207][ T7624] JBD2: Ignoring recovery information on journal [ 185.777871][ T5759] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 185.791993][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.801858][ T5759] em28xx 3-1:0.132: board has no eeprom [ 185.808832][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.864970][ T7624] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 185.883163][ T5759] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 185.891444][ T5759] em28xx 3-1:0.132: analog set to bulk mode. [ 185.904258][ T5838] em28xx 3-1:0.132: Registering V4L2 extension [ 185.963562][ T5759] usb 3-1: USB disconnect, device number 13 [ 185.970999][ T5759] em28xx 3-1:0.132: Disconnecting em28xx [ 186.024804][ T5813] pwc: recv_control_msg error -71 req 04 val 1000 [ 186.061868][ T5813] pwc: recv_control_msg error -71 req 04 val 1300 [ 186.082537][ T5813] pwc: recv_control_msg error -71 req 04 val 1400 [ 186.105248][ T5813] pwc: recv_control_msg error -71 req 02 val 2000 [ 186.112574][ T5813] pwc: recv_control_msg error -71 req 02 val 2100 [ 186.121995][ T5813] pwc: recv_control_msg error -71 req 04 val 1500 [ 186.135436][ T5813] pwc: recv_control_msg error -71 req 02 val 2500 [ 186.155671][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 186.172189][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 186.183485][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.194007][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.201834][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.210888][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.232907][ T5813] pwc: Registered as video103. [ 186.269083][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 186.339250][ T5813] usb 2-1: USB disconnect, device number 8 [ 186.345720][ T5838] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 186.352825][ T5838] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 186.399145][ T5838] em28xx 3-1:0.132: No AC97 audio processor [ 186.447168][ T5838] usb 3-1: Decoder not found [ 186.451862][ T5838] em28xx 3-1:0.132: failed to create media graph [ 186.471990][ T5838] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 186.515566][ T7633] ================================================================== [ 186.523718][ T7633] BUG: KASAN: slab-use-after-free in v4l2_open+0x359/0x360 [ 186.530988][ T7633] Read of size 4 at addr ffff88805e8a47e0 by task v4l_id/7633 [ 186.538496][ T7633] [ 186.540894][ T7633] CPU: 0 PID: 7633 Comm: v4l_id Not tainted syzkaller #0 [ 186.547982][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.558191][ T7633] Call Trace: [ 186.561516][ T7633] [ 186.564492][ T7633] dump_stack_lvl+0x18c/0x250 [ 186.569236][ T7633] ? read_lock_is_recursive+0x20/0x20 [ 186.574672][ T7633] ? show_regs_print_info+0x20/0x20 [ 186.579945][ T7633] ? load_image+0x420/0x420 [ 186.584504][ T7633] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 186.590025][ T7633] ? __virt_addr_valid+0x18c/0x540 [ 186.595222][ T7633] ? __virt_addr_valid+0x469/0x540 [ 186.600406][ T7633] print_report+0xa8/0x210 [ 186.604893][ T7633] ? v4l2_open+0x359/0x360 [ 186.609358][ T7633] kasan_report+0x117/0x150 [ 186.613923][ T7633] ? v4l2_open+0x359/0x360 [ 186.618404][ T7633] v4l2_open+0x359/0x360 [ 186.622699][ T7633] chrdev_open+0x5cc/0x6a0 [ 186.627175][ T7633] ? cd_forget+0x160/0x160 [ 186.631653][ T7633] ? fsnotify_perm+0x3ed/0x5e0 [ 186.636476][ T7633] ? cd_forget+0x160/0x160 [ 186.640955][ T7633] do_dentry_open+0x8c6/0x1500 [ 186.645782][ T7633] path_openat+0x27f1/0x3230 [ 186.650440][ T7633] ? do_sys_openat2+0xda/0x1d0 [ 186.655263][ T7633] ? verify_lock_unused+0x140/0x140 [ 186.660519][ T7633] ? do_filp_open+0x430/0x430 [ 186.665245][ T7633] ? __virt_addr_valid+0x18c/0x540 [ 186.670419][ T7633] do_filp_open+0x1f5/0x430 [ 186.674978][ T7633] ? vfs_tmpfile+0x490/0x490 [ 186.679646][ T7633] ? _raw_spin_unlock+0x28/0x40 [ 186.684550][ T7633] ? alloc_fd+0x58f/0x630 [ 186.688934][ T7633] do_sys_openat2+0x134/0x1d0 [ 186.693661][ T7633] ? do_sys_open+0xe0/0xe0 [ 186.698125][ T7633] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 186.704172][ T7633] ? lock_chain_count+0x20/0x20 [ 186.709078][ T7633] ? lock_chain_count+0x20/0x20 [ 186.713989][ T7633] __x64_sys_openat+0x139/0x160 [ 186.718910][ T7633] do_syscall_64+0x55/0xa0 [ 186.723379][ T7633] ? clear_bhb_loop+0x40/0x90 [ 186.728121][ T7633] ? clear_bhb_loop+0x40/0x90 [ 186.732862][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.738826][ T7633] RIP: 0033:0x7fb300aa7407 [ 186.743307][ T7633] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 186.762977][ T7633] RSP: 002b:00007ffee6115660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 186.771460][ T7633] RAX: ffffffffffffffda RBX: 00007fb301189880 RCX: 00007fb300aa7407 [ 186.779484][ T7633] RDX: 0000000000000000 RSI: 00007ffee6116f1d RDI: ffffffffffffff9c [ 186.787506][ T7633] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 186.795522][ T7633] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 186.803537][ T7633] R13: 00007ffee61158b0 R14: 00007fb301286000 R15: 0000560ac10754d8 [ 186.811568][ T7633] [ 186.814623][ T7633] [ 186.816978][ T7633] Allocated by task 5838: [ 186.821350][ T7633] kasan_set_track+0x4e/0x70 [ 186.826006][ T7633] __kasan_kmalloc+0x8f/0xa0 [ 186.830669][ T7633] em28xx_v4l2_init+0x10b/0x2e70 [ 186.835668][ T7633] em28xx_init_extension+0x11c/0x1b0 [ 186.841002][ T7633] process_scheduled_works+0xa5d/0x15d0 [ 186.846612][ T7633] worker_thread+0xa55/0xfc0 [ 186.851254][ T7633] kthread+0x2fa/0x390 [ 186.855362][ T7633] ret_from_fork+0x48/0x80 [ 186.859830][ T7633] ret_from_fork_asm+0x11/0x20 [ 186.864644][ T7633] [ 186.867021][ T7633] Freed by task 5838: [ 186.871045][ T7633] kasan_set_track+0x4e/0x70 [ 186.875691][ T7633] kasan_save_free_info+0x2e/0x50 [ 186.880772][ T7633] ____kasan_slab_free+0x126/0x1e0 [ 186.885931][ T7633] slab_free_freelist_hook+0x130/0x1a0 [ 186.891435][ T7633] __kmem_cache_free+0xba/0x1e0 [ 186.896343][ T7633] em28xx_v4l2_init+0x1670/0x2e70 [ 186.901423][ T7633] em28xx_init_extension+0x11c/0x1b0 [ 186.906768][ T7633] process_scheduled_works+0xa5d/0x15d0 [ 186.912370][ T7633] worker_thread+0xa55/0xfc0 [ 186.917011][ T7633] kthread+0x2fa/0x390 [ 186.921137][ T7633] ret_from_fork+0x48/0x80 [ 186.925614][ T7633] ret_from_fork_asm+0x11/0x20 [ 186.930443][ T7633] [ 186.932819][ T7633] Last potentially related work creation: [ 186.938570][ T7633] kasan_save_stack+0x3e/0x60 [ 186.943307][ T7633] __kasan_record_aux_stack+0xaf/0xc0 [ 186.948731][ T7633] call_rcu+0x153/0x950 [ 186.952944][ T7633] generic_shutdown_super+0x134/0x2b0 [ 186.958369][ T7633] kill_block_super+0x44/0x90 [ 186.963195][ T7633] deactivate_locked_super+0x97/0x100 [ 186.968630][ T7633] cleanup_mnt+0x43b/0x4d0 [ 186.973102][ T7633] task_work_run+0x1d4/0x260 [ 186.977751][ T7633] exit_to_user_mode_loop+0xe6/0x110 [ 186.983101][ T7633] exit_to_user_mode_prepare+0xee/0x180 [ 186.988706][ T7633] syscall_exit_to_user_mode+0x1a/0x50 [ 186.994224][ T7633] do_syscall_64+0x61/0xa0 [ 186.998712][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.004674][ T7633] [ 187.007041][ T7633] The buggy address belongs to the object at ffff88805e8a4000 [ 187.007041][ T7633] which belongs to the cache kmalloc-8k of size 8192 [ 187.021166][ T7633] The buggy address is located 2016 bytes inside of [ 187.021166][ T7633] freed 8192-byte region [ffff88805e8a4000, ffff88805e8a6000) [ 187.035186][ T7633] [ 187.037544][ T7633] The buggy address belongs to the physical page: [ 187.044004][ T7633] page:ffffea00017a2800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e8a0 [ 187.054222][ T7633] head:ffffea00017a2800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.063244][ T7633] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 187.071729][ T7633] page_type: 0xffffffff() [ 187.076109][ T7633] raw: 00fff00000000840 ffff888017c42280 0000000000000000 dead000000000001 [ 187.084747][ T7633] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 187.093375][ T7633] page dumped because: kasan: bad access detected [ 187.099852][ T7633] page_owner tracks the page as allocated [ 187.105593][ T7633] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6817, tgid 6816 (syz.2.344), ts 140310991411, free_ts 140191851777 [ 187.128388][ T7633] post_alloc_hook+0x1c1/0x200 [ 187.133212][ T7633] get_page_from_freelist+0x1951/0x19e0 [ 187.138819][ T7633] __alloc_pages+0x1f0/0x460 [ 187.143456][ T7633] alloc_slab_page+0x5d/0x160 [ 187.148181][ T7633] new_slab+0x87/0x2d0 [ 187.152295][ T7633] ___slab_alloc+0xc5d/0x12f0 [ 187.157028][ T7633] __kmem_cache_alloc_node+0x19e/0x250 [ 187.162547][ T7633] __kmalloc+0xa4/0x230 [ 187.166767][ T7633] n_hdlc_alloc_buf+0x83/0x210 [ 187.171593][ T7633] n_hdlc_tty_open+0x277/0x460 [ 187.176415][ T7633] tty_ldisc_open+0x9d/0x100 [ 187.181081][ T7633] tty_set_ldisc+0x368/0x550 [ 187.185725][ T7633] tty_ioctl+0xc29/0xdd0 [ 187.190022][ T7633] __se_sys_ioctl+0xfd/0x170 [ 187.194662][ T7633] do_syscall_64+0x55/0xa0 [ 187.199213][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.205163][ T7633] page last free stack trace: [ 187.209870][ T7633] free_unref_page_prepare+0x7b2/0x8c0 [ 187.215389][ T7633] free_unref_page+0x32/0x2e0 [ 187.220151][ T7633] __unfreeze_partials+0x1cf/0x210 [ 187.225309][ T7633] put_cpu_partial+0x17c/0x250 [ 187.230121][ T7633] __slab_free+0x319/0x400 [ 187.234583][ T7633] qlist_free_all+0x75/0xd0 [ 187.239144][ T7633] kasan_quarantine_reduce+0x143/0x160 [ 187.244671][ T7633] __kasan_slab_alloc+0x22/0x80 [ 187.249581][ T7633] slab_post_alloc_hook+0x6e/0x4b0 [ 187.254755][ T7633] kmem_cache_alloc_lru+0x111/0x2d0 [ 187.260023][ T7633] sock_alloc_inode+0x28/0xc0 [ 187.264759][ T7633] new_inode_pseudo+0x63/0x1d0 [ 187.269571][ T7633] __sock_create+0x12d/0x940 [ 187.274215][ T7633] __sys_socket+0xd7/0x1a0 [ 187.278700][ T7633] __x64_sys_socket+0x7a/0x90 [ 187.283441][ T7633] do_syscall_64+0x55/0xa0 [ 187.287905][ T7633] [ 187.290273][ T7633] Memory state around the buggy address: [ 187.295940][ T7633] ffff88805e8a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.304070][ T7633] ffff88805e8a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.312178][ T7633] >ffff88805e8a4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.320284][ T7633] ^ [ 187.327620][ T7633] ffff88805e8a4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.335732][ T7633] ffff88805e8a4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.343835][ T7633] ================================================================== [ 187.353534][ T5838] em28xx 3-1:0.132: Remote control support is not available for this card. [ 187.365160][ T5759] em28xx 3-1:0.132: Closing input extension [ 187.374085][ T7633] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.381349][ T7633] CPU: 0 PID: 7633 Comm: v4l_id Not tainted syzkaller #0 [ 187.388430][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.398519][ T7633] Call Trace: [ 187.401821][ T7633] [ 187.404781][ T7633] dump_stack_lvl+0x18c/0x250 [ 187.409500][ T7633] ? show_regs_print_info+0x20/0x20 [ 187.414727][ T7633] ? load_image+0x420/0x420 [ 187.419266][ T7633] panic+0x2dc/0x730 [ 187.423206][ T7633] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 187.429420][ T7633] ? bpf_jit_dump+0xd0/0xd0 [ 187.433971][ T7633] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 187.439989][ T7633] ? _raw_spin_unlock+0x40/0x40 [ 187.444868][ T7633] ? v4l2_open+0x359/0x360 [ 187.449307][ T7633] check_panic_on_warn+0x84/0xa0 [ 187.454363][ T7633] ? v4l2_open+0x359/0x360 [ 187.458803][ T7633] end_report+0x6f/0x130 [ 187.463070][ T7633] kasan_report+0x128/0x150 [ 187.467609][ T7633] ? v4l2_open+0x359/0x360 [ 187.472052][ T7633] v4l2_open+0x359/0x360 [ 187.476323][ T7633] chrdev_open+0x5cc/0x6a0 [ 187.480767][ T7633] ? cd_forget+0x160/0x160 [ 187.485211][ T7633] ? fsnotify_perm+0x3ed/0x5e0 [ 187.490098][ T7633] ? cd_forget+0x160/0x160 [ 187.494534][ T7633] do_dentry_open+0x8c6/0x1500 [ 187.499334][ T7633] path_openat+0x27f1/0x3230 [ 187.503954][ T7633] ? do_sys_openat2+0xda/0x1d0 [ 187.508771][ T7633] ? verify_lock_unused+0x140/0x140 [ 187.514005][ T7633] ? do_filp_open+0x430/0x430 [ 187.518704][ T7633] ? __virt_addr_valid+0x18c/0x540 [ 187.523845][ T7633] do_filp_open+0x1f5/0x430 [ 187.528376][ T7633] ? vfs_tmpfile+0x490/0x490 [ 187.533007][ T7633] ? _raw_spin_unlock+0x28/0x40 [ 187.537890][ T7633] ? alloc_fd+0x58f/0x630 [ 187.542262][ T7633] do_sys_openat2+0x134/0x1d0 [ 187.546971][ T7633] ? do_sys_open+0xe0/0xe0 [ 187.551410][ T7633] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 187.557418][ T7633] ? lock_chain_count+0x20/0x20 [ 187.562293][ T7633] ? lock_chain_count+0x20/0x20 [ 187.567173][ T7633] __x64_sys_openat+0x139/0x160 [ 187.572055][ T7633] do_syscall_64+0x55/0xa0 [ 187.576490][ T7633] ? clear_bhb_loop+0x40/0x90 [ 187.581191][ T7633] ? clear_bhb_loop+0x40/0x90 [ 187.585897][ T7633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.591824][ T7633] RIP: 0033:0x7fb300aa7407 [ 187.596268][ T7633] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 187.615898][ T7633] RSP: 002b:00007ffee6115660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 187.624442][ T7633] RAX: ffffffffffffffda RBX: 00007fb301189880 RCX: 00007fb300aa7407 [ 187.632438][ T7633] RDX: 0000000000000000 RSI: 00007ffee6116f1d RDI: ffffffffffffff9c [ 187.640441][ T7633] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 187.648430][ T7633] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 187.656420][ T7633] R13: 00007ffee61158b0 R14: 00007fb301286000 R15: 0000560ac10754d8 [ 187.664419][ T7633] [ 187.668022][ T7633] Kernel Offset: disabled [ 187.672354][ T7633] Rebooting in 86400 seconds..