last executing test programs: 2m5.343515788s ago: executing program 2 (id=33): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x2d2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 2m5.204521891s ago: executing program 2 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018010000646c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") 2m5.166127272s ago: executing program 2 (id=35): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2m5.113167683s ago: executing program 2 (id=36): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 2m5.065411565s ago: executing program 2 (id=37): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000500), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="adeb5e09de02", 0x6, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 2m4.717021223s ago: executing program 2 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) 2m4.656617695s ago: executing program 32 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) 5.307008318s ago: executing program 1 (id=1295): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x8, 0x5, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfdffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4.782818731s ago: executing program 1 (id=1301): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000002c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") io_submit(0x0, 0x0, &(0x7f00000011c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x0) 4.261186834s ago: executing program 5 (id=1307): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5403, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x6, 0x0, 0x1}) 4.119556428s ago: executing program 1 (id=1308): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.925905512s ago: executing program 1 (id=1310): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2, "0019e3", "68c9666da4c7f4657f0f0cb39880ab34d6c59031b5b3ff9a30670b66e193ece9e9dddbfcc98e21ca5c886e336478961752d9041644cfdbca61da7e8f01c95c00330099baf140ec42352750d0bee01f071319da4f562d4fee9d4c1cc12ffc460ded9f9e005a8e58bebdf2264b57adf9aa9b961e82aadf433f00b79d982080f0b153c8a6a92d84acdc4a7214009b0c218bc69f484a2a7a1798eb5eaa2a59ac06474b88def07b15b09af6c54bceaaeec1e7849a7e42307e8313f5c48b422479750d839633204c4465c1651413fe82ea2486f8ef1fa9bc1d8720d110a15d08f06e8a836adad2f47b147726d9d5d8a219ef4662851be00ba69f139462280a7e366856"}}, 0x110) 3.737235107s ago: executing program 1 (id=1312): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000925810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.048231369s ago: executing program 5 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r0, &(0x7f0000000100)=0x100000000, 0x12) 1.710502048s ago: executing program 0 (id=1335): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006e6f646973636172642c75737271756f74b23194d8726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f726e75652c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c0000000000000000d398e30e7cdc23a1553be48fabf3f19f3ca197da8932a8e170520258e19420036141172352466ff223e87948b103", @ANYRES16], 0x5, 0x62cd, &(0x7f00000042c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 1.547063732s ago: executing program 5 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) 1.450511304s ago: executing program 5 (id=1340): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x88) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) 1.337011487s ago: executing program 5 (id=1342): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz0\x00', {0x81, 0x0, 0xb, 0xf881}, 0x3c, [0x2, 0x4, 0x81, 0x0, 0x5, 0x6, 0x2, 0x4, 0x1000, 0x800003, 0x88, 0x51c, 0x1, 0x5, 0x2, 0x4, 0x9, 0xd82, 0xb, 0x2, 0x6, 0x8, 0x80000000, 0xf0, 0x9d75, 0x7, 0x1, 0x401, 0x0, 0x68, 0x3, 0x6, 0x1ff, 0x6, 0x7ff, 0xffffffff, 0x0, 0x306d, 0x7, 0x7f, 0x6, 0x9, 0x1ff, 0x2, 0x3, 0xc6c, 0x9, 0xffff, 0x336c9414, 0x5, 0x7f, 0xe3, 0x4, 0x7, 0x3, 0x5, 0xee, 0x100005, 0x1, 0x1, 0x7, 0x341a9238, 0x0, 0x5], [0x3, 0x2, 0x1000, 0xfffffffd, 0x7, 0xb53, 0xfd49, 0xb8, 0x41, 0xffffff03, 0x7, 0x2, 0x3, 0x401, 0x5, 0x6, 0x6, 0x81, 0x79, 0x5, 0x9, 0x83, 0x0, 0x8001, 0x7, 0xa4, 0x7, 0x5801, 0x8000800, 0x1, 0x7b, 0x0, 0x3, 0x7, 0xb564, 0x8, 0x2, 0x9180, 0x0, 0x23, 0xb, 0x3fb, 0x5, 0xfffffffa, 0x4a, 0x1, 0x9, 0xfffff0a3, 0x0, 0x80003, 0x2, 0xb9, 0x3, 0x6, 0xb772, 0x67, 0x2, 0x7, 0x9, 0x9, 0x2, 0x8, 0x9, 0x1], [0x7, 0xbf3a, 0x1, 0x4, 0x2, 0xfffffffd, 0x7d, 0x1ce0000, 0xfff, 0x74f2, 0x8001, 0x8, 0x6, 0xd, 0x1, 0x7ff, 0x7ffffffc, 0xa, 0x9, 0x7, 0x8, 0xffffffe9, 0x20000000, 0x7, 0x6, 0x8, 0x7, 0x41c, 0x101, 0x5, 0x2, 0xee26, 0x6, 0x3, 0x5, 0x400, 0x2, 0x1, 0x0, 0x7fff, 0xd7, 0x38000000, 0x9, 0x327, 0x6, 0xfffffffa, 0x0, 0x1, 0x39, 0x8, 0x701, 0x4, 0x4, 0x5, 0x2000004, 0x4, 0xad46, 0x3, 0x1c, 0x9, 0xfffffffd, 0x10, 0x2, 0x1], [0x1, 0x3ff, 0x7fff, 0x8, 0x5, 0x0, 0x4, 0x1, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x5, 0x9, 0x245, 0x4, 0xffff, 0x6, 0x1, 0xf, 0x80000000, 0x1000, 0x8, 0x1, 0x8001, 0x7, 0xff, 0x0, 0x5d1, 0x2, 0x81, 0x32, 0x9, 0x4, 0x78, 0xe8, 0x2, 0x80000000, 0x1, 0x0, 0x5c91f772, 0x5, 0x3, 0x2, 0x2, 0x8, 0x6, 0x598a, 0x6, 0x9, 0x5d, 0x9, 0xb2, 0x6, 0x5, 0x1, 0xfff, 0x8, 0x9, 0x8a, 0x4]}, 0x249) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) creat(&(0x7f0000000380)='./bus\x00', 0x0) 1.055315813s ago: executing program 1 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)) 1.038188324s ago: executing program 4 (id=1347): unshare(0x6020400) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x40000000, r0, 0x0) 986.893495ms ago: executing program 3 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x80, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x801}, @device_b, @broadcast, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x7984, 0x2, 0x2, 0x0, 0x2}}, 0x2810, 0x2, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x1, 0x0, 0x4, 0x0, {0x2, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x4, 0xfe}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x146e}]]}, 0x80}}, 0x24008080) 880.617028ms ago: executing program 3 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0xe, 0xffffffff, 0x7}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000a40)=@vmx={0x4, 0x0, 0x2080, {0x2000, 0x70000, {0x1}, 0x1, 0x5}, {"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", "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"}}) 874.658038ms ago: executing program 0 (id=1350): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x880, 0x80) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 750.098451ms ago: executing program 3 (id=1351): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a3ec, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 749.889571ms ago: executing program 4 (id=1352): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000002580)=""/170, 0xaa}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 675.804853ms ago: executing program 3 (id=1353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/172, 0xac}], 0x1, &(0x7f00000005c0)=""/216, 0xd8}, 0x401}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x22, 0x0) 528.168527ms ago: executing program 0 (id=1354): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) rmdir(0x0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') 528.032847ms ago: executing program 4 (id=1355): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) 418.48808ms ago: executing program 0 (id=1356): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x8000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x36, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8e0f}], 0x1, 0x40010142, 0x0) 394.16464ms ago: executing program 4 (id=1357): write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) 287.325833ms ago: executing program 0 (id=1358): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x80) sendfile(r0, r1, 0x0, 0x1) 273.818323ms ago: executing program 4 (id=1359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 217.625784ms ago: executing program 0 (id=1360): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 196.010605ms ago: executing program 5 (id=1361): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0xfffe, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b05ea2c89e8767384fa58279ca506f52cf38efc178d53779", "fadf95f21ef7895e3a7eb2dfecb0f25ced68667d15b312bce58e37adc1db796a"}}}}}}, 0x0) 174.547415ms ago: executing program 3 (id=1362): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(0x0, r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x3c, r1, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 23.556139ms ago: executing program 4 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 0s ago: executing program 3 (id=1364): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000001180), 0x1, 0x10ef, &(0x7f00000011c0)="$eJzs2DGLE0EYBuB3Nukjc/0iaGEhxx3xD1yhkMbC2kaOq7zqUin3c/w5cpX9cb0pAvbKkGwUCYhkMSDPA8t8+7LzzU45EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGimydeSnHRJHbIuSUn6/m7xkKQf8kefJ11K3lwtli9v5q+W209b1qW0sk1LPX9S67zO63l9cXLxtC4/fHz/7vr66mbbpqTP/fr2Mq9Xo26lrT0ZtSMAAAD8H74fbHbk9QEAAIA/Ge0iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAEdSi6JCXp+7vFQ5L+uL8FAAAAHKiky9vZvnxzDfDT83yZlV3exm+l1Wf5tGc+AAAA8HfKL+fxZ5nuzuUte5xpTk8379shq4tkkuTstz7369vL4Sn/cgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxgB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAADBVAAAA//8mRNS4") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000140)='./file1\x00', r1, 0x0) kernel console output (not intermixed with test programs): has an invalid bInterval 42, changing to 9 [ 125.752345][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.772406][ T4553] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.782235][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 125.794178][ T4553] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 125.804287][ T4553] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 125.813595][ T4553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.825680][ T4553] usb 4-1: config 0 descriptor?? [ 125.832179][ T6000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.871475][ T4188] Bluetooth: hci5: urb ffff888068743200 submission failed (90) [ 126.068267][ T4553] usb 4-1: USB disconnect, device number 5 [ 126.308662][ T6004] loop0: detected capacity change from 0 to 131072 [ 126.348271][ T6004] F2FS-fs (loop0): invalid crc value [ 126.389986][ T6004] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.426997][ T6004] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 126.442056][ T6004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 126.692588][ T5041] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.700934][ T5041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.731449][ T5041] usb 2-1: config 0 has no interface number 0 [ 126.767165][ T5041] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 126.802179][ T5041] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 126.832331][ T5041] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.845955][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.560'. [ 126.863419][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.560'. [ 127.062678][ T5041] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 127.085476][ T5041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.102475][ T5041] usb 2-1: Product: syz [ 127.112532][ T5041] usb 2-1: Manufacturer: syz [ 127.117512][ T5041] usb 2-1: SerialNumber: syz [ 127.143164][ T5041] usb 2-1: config 0 descriptor?? [ 127.184825][ T6033] loop0: detected capacity change from 0 to 64 [ 127.317014][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.578263][ T6014] loop5: detected capacity change from 0 to 40427 [ 127.617461][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 127.762497][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.777800][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.849083][ T5040] usb 2-1: USB disconnect, device number 8 [ 127.962493][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.976665][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.985184][ T7] usb 4-1: Product: syz [ 127.989404][ T7] usb 4-1: Manufacturer: syz [ 127.999989][ T7] usb 4-1: SerialNumber: syz [ 128.039039][ T6037] loop4: detected capacity change from 0 to 131072 [ 128.066079][ T6014] F2FS-fs (loop5): invalid crc value [ 128.083388][ T6037] F2FS-fs (loop4): invalid crc value [ 128.125590][ T6014] F2FS-fs (loop5): Found nat_bits in checkpoint [ 128.158613][ T6037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.205319][ T6037] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 128.224231][ T6037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.236892][ T6048] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.285882][ T6014] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 128.344826][ T7] usb 4-1: 0:2 : does not exist [ 128.430449][ T7] usb 4-1: USB disconnect, device number 6 [ 128.486906][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.667229][ T4387] attempt to access beyond end of device [ 128.667229][ T4387] loop5: rw=2049, want=45104, limit=40427 [ 128.802353][ T4553] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.042458][ T5040] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.322388][ T4553] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 129.332554][ T5040] usb 2-1: Using ep0 maxpacket: 16 [ 129.348545][ T4553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.382335][ T4553] usb 1-1: Product: syz [ 129.398022][ T4553] usb 1-1: Manufacturer: syz [ 129.408297][ T4553] usb 1-1: SerialNumber: syz [ 129.472642][ T5040] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 129.499052][ T5040] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.510610][ T5040] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 129.524899][ T5040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.536432][ T6075] loop3: detected capacity change from 0 to 4096 [ 129.551268][ T5040] usb 2-1: config 0 descriptor?? [ 129.690285][ T4237] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 129.697907][ T4199] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 129.704824][ T4199] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 129.868278][ T6087] loop3: detected capacity change from 0 to 256 [ 129.903931][ T6087] exfat: Deprecated parameter 'utf8' [ 129.910495][ T6087] exfat: Deprecated parameter 'namecase' [ 129.930829][ T6087] exfat: Deprecated parameter 'namecase' [ 129.936986][ T6087] exfat: Deprecated parameter 'namecase' [ 129.991339][ T6087] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 130.034286][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.047491][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.064930][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.072011][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.086324][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.095836][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.111905][ T5040] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 130.120993][ T5040] cypress 0003:04B4:DE61.0008: item fetching failed at offset 26/33 [ 130.136613][ T5040] cypress 0003:04B4:DE61.0008: parse failed [ 130.150753][ T5040] cypress: probe of 0003:04B4:DE61.0008 failed with error -22 [ 130.238020][ T5040] usb 2-1: USB disconnect, device number 9 [ 130.523172][ T21] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 130.535404][ T6107] Illegal XDP return value 4294966772, expect packet loss! [ 130.552800][ T21] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.652350][ T4228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.660199][ T6112] syz.5.596 (6112): /proc/6111/oom_adj is deprecated, please use /proc/6111/oom_score_adj instead. [ 130.862707][ T4553] usb 1-1: probing VID:PID(0424:012C) [ 130.869405][ T4553] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 130.877219][ T4553] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 130.884356][ T4553] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 130.890927][ T4553] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 130.897662][ T4553] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 130.905253][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 130.924635][ T4553] vub300: probe of 1-1:1.0 failed with error -71 [ 130.937363][ T4553] usb 1-1: USB disconnect, device number 6 [ 130.943468][ T4228] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 131.058059][ T6130] loop5: detected capacity change from 0 to 256 [ 131.072513][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.112131][ T6130] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x331b010b, utbl_chksum : 0xe619d30d) [ 131.137605][ T26] audit: type=1800 audit(1786971364.004:29): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.604" name="file1" dev="loop5" ino=1048623 res=0 errno=0 [ 131.332367][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 131.333075][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.452515][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.465736][ T7] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 131.475386][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.487951][ T7] usb 2-1: config 0 descriptor?? [ 131.712521][ T4228] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.721705][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.737172][ T4228] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 131.745765][ T4228] usb 4-1: Product: syz [ 131.749948][ T4228] usb 4-1: Manufacturer: syz [ 131.760369][ T4228] r8152-cfgselector 4-1: config 0 descriptor?? [ 131.766698][ T1110] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 131.902450][ T21] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 131.911655][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.920017][ T21] usb 5-1: Product: syz [ 131.924530][ T21] usb 5-1: Manufacturer: syz [ 131.929439][ T21] usb 5-1: SerialNumber: syz [ 131.965407][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 131.972462][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 131.976220][ T21] symbolserial 5-1:1.0: symbol converter detected [ 131.979572][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 131.993852][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 132.000739][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 132.007975][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0xd [ 132.016246][ T21] usb 5-1: symbol converter now attached to ttyUSB0 [ 132.021541][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0xd [ 132.030338][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 132.040380][ T7] wacom 0003:056A:032C.000A: unknown main item tag 0x0 [ 132.050697][ T7] wacom 0003:056A:032C.000A: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 132.063037][ T4228] r8152-cfgselector 4-1: bad CDC descriptors [ 132.092631][ T4228] r8152-cfgselector 4-1: Unknown version 0x0000 [ 132.114534][ T4228] r8152-cfgselector 4-1: bad CDC descriptors [ 132.133017][ T1110] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.151095][ T4228] r8152-cfgselector 4-1: Unknown version 0x0000 [ 132.170125][ T7] usb 2-1: USB disconnect, device number 10 [ 132.188213][ T4228] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 132.215879][ T21] usb 5-1: USB disconnect, device number 6 [ 132.242154][ T21] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 132.256572][ T21] symbolserial 5-1:1.0: device disconnected [ 132.279292][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 132.342494][ T1110] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.351953][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.360826][ T1110] usb 6-1: Product: syz [ 132.365405][ T1110] usb 6-1: Manufacturer: syz [ 132.370127][ T1110] usb 6-1: SerialNumber: syz [ 132.416428][ T1110] cdc_ncm 6-1:1.0: skipping garbage [ 132.424734][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.431074][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.668524][ T6153] loop3: detected capacity change from 0 to 4096 [ 132.691828][ T6149] loop0: detected capacity change from 0 to 40427 [ 132.727141][ T6149] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 132.764695][ T6149] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 132.821285][ T6149] F2FS-fs (loop0): invalid crc value [ 132.855295][ T4199] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 132.859391][ T6157] loop4: detected capacity change from 0 to 2048 [ 132.881967][ T4199] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.891566][ T6149] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.923614][ T6157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.036350][ T6149] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 133.043519][ T6149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.199835][ T4193] attempt to access beyond end of device [ 133.199835][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 133.373489][ T6175] loop4: detected capacity change from 0 to 2048 [ 133.477055][ T6175] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 133.502573][ T1110] cdc_ncm 6-1:1.0: bind() failure [ 133.522395][ T1110] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 133.542461][ T1110] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 133.559863][ T6175] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #12: comm syz.4.623: corrupted in-inode xattr [ 133.582395][ T1110] usbtest: probe of 6-1:1.1 failed with error -71 [ 133.591618][ T1110] usb 6-1: USB disconnect, device number 11 [ 133.686521][ T7] kernel read not supported for file /sequencer (pid: 7 comm: kworker/0:0) [ 133.878024][ T6197] loop4: detected capacity change from 0 to 1024 [ 133.928763][ T6191] loop1: detected capacity change from 0 to 8192 [ 133.980435][ T6201] loop0: detected capacity change from 0 to 4096 [ 134.014811][ T6191] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 134.066287][ T6207] loop5: detected capacity change from 0 to 64 [ 134.076976][ T6201] EXT4-fs (loop0): Test dummy encryption mode enabled [ 134.090128][ T6191] REISERFS (device loop1): using ordered data mode [ 134.123594][ T6191] reiserfs: using flush barriers [ 134.128811][ T6201] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 134.167287][ T6201] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 134.185633][ T6191] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.250504][ T6201] System zones: 0-5 [ 134.254999][ T6191] REISERFS (device loop1): checking transaction log (loop1) [ 134.302614][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 134.535274][ T6213] loop5: detected capacity change from 0 to 1024 [ 134.541531][ T6191] REISERFS (device loop1): Using tea hash to sort names [ 134.544282][ T6191] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 134.629828][ T6191] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 134.680046][ T6215] loop0: detected capacity change from 0 to 512 [ 134.801672][ T6215] EXT4-fs (loop0): Ignoring removed nobh option [ 134.853163][ T6219] loop4: detected capacity change from 0 to 64 [ 134.901403][ T6215] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 134.942115][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 134.967417][ T6215] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.060159][ T26] audit: type=1800 audit(1786971367.924:30): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 135.265450][ T6237] device ipvlan2 entered promiscuous mode [ 135.319950][ T6237] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 135.489408][ T6246] loop0: detected capacity change from 0 to 8 [ 135.506874][ T6248] loop1: detected capacity change from 0 to 512 [ 135.576276][ T6248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.648013][ T26] audit: type=1800 audit(1786971368.514:31): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.650" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 135.671451][ T6248] EXT4-fs (loop1): 1 truncate cleaned up [ 135.704590][ T6248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.847367][ T6257] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.870383][ T6257] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 135.918007][ T6235] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 135.933877][ T6235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 135.959617][ T6257] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 136.000837][ T6235] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 136.042787][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.070001][ T6235] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.082668][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 136.190890][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.216405][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 136.266836][ T6235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.284426][ T6235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.293958][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.312899][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 136.388094][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.431646][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 136.508424][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.540926][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x2, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 136.560863][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.625157][ T6257] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 136.666396][ T6257] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x2, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 136.737408][ T6257] ntfs: volume version 3.1. [ 136.801113][ T6282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.877838][ T6282] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.151191][ T6269] XFS (loop0): Mounting V5 Filesystem [ 137.168455][ T6291] hfsplus: invalid length 32517 has been corrected to 255 [ 137.355962][ T6269] XFS (loop0): Ending clean mount [ 137.384115][ T6291] hfsplus: b-tree write err: -5, ino 20 [ 137.455081][ T6303] device batadv_slave_0 entered promiscuous mode [ 137.482949][ T6301] device batadv_slave_0 left promiscuous mode [ 137.525454][ T4193] XFS (loop0): Unmounting Filesystem [ 137.535186][ T4534] hfsplus: b-tree write err: -5, ino 20 [ 137.620002][ T6296] JBD2: Ignoring recovery information on journal [ 137.807150][ T6296] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.835590][ T4253] (kworker/u4:6,4253,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 137.867416][ T4253] (kworker/u4:6,4253,0):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 137.906544][ T6306] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 137.917521][ T4253] (kworker/u4:6,4253,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 137.950928][ T6306] REISERFS (device loop3): using ordered data mode [ 138.003785][ T6306] reiserfs: using flush barriers [ 138.036739][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 138.045881][ T6306] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.073810][ T6322] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 138.116213][ T6326] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 138.147401][ T6326] FAT-fs (loop5): Filesystem has been set read-only [ 138.172673][ T6306] REISERFS (device loop3): checking transaction log (loop3) [ 138.271096][ T6327] attempt to access beyond end of device [ 138.271096][ T6327] loop5: rw=2049, want=1041, limit=128 [ 138.442024][ T6333] input: syz1 as /devices/virtual/input/input16 [ 138.550309][ T6306] REISERFS (device loop3): Using tea hash to sort names [ 138.569682][ T6306] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 138.589021][ T5041] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.862379][ T5041] usb 2-1: Using ep0 maxpacket: 16 [ 138.928154][ T6352] set_capacity_and_notify: 10 callbacks suppressed [ 138.928169][ T6352] loop4: detected capacity change from 0 to 256 [ 139.012528][ T5041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.031993][ T5041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.066411][ T5041] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.081264][ T5041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.114654][ T5041] usb 2-1: config 0 descriptor?? [ 139.339469][ T6372] loop4: detected capacity change from 0 to 256 [ 139.399493][ T6374] loop3: detected capacity change from 0 to 1024 [ 139.433565][ T6374] EXT4-fs (loop3): Ignoring removed bh option [ 139.445441][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 139.608882][ T5041] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input17 [ 139.611994][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 139.705140][ T5041] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 139.955020][ T6393] loop0: detected capacity change from 0 to 256 [ 139.998762][ T5041] usb 2-1: USB disconnect, device number 11 [ 140.200250][ T6382] loop4: detected capacity change from 0 to 32768 [ 140.241513][ T21] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 140.494858][ T6418] loop6: detected capacity change from 0 to 7 [ 140.501273][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 140.618790][ T21] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 140.627864][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.648358][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.732402][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 140.742945][ T21] pvrusb2: ********** [ 140.746984][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 140.765162][ T21] pvrusb2: Important functionality might not be entirely working. [ 140.793591][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 140.808351][ T21] pvrusb2: ********** [ 140.950164][ T2425] pvrusb2: Invalid write control endpoint [ 140.962358][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.971939][ T6436] loop1: detected capacity change from 0 to 512 [ 141.005712][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.028453][ T4231] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 141.071570][ T4231] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 141.084486][ T2425] pvrusb2: Invalid write control endpoint [ 141.095144][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 141.106532][ T4231] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 141.120174][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 141.127976][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 141.134176][ T6436] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 141.138671][ T4231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 141.162897][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.175421][ T6436] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.181696][ T2425] pvrusb2: Device being rendered inoperable [ 141.194369][ T6412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.207279][ T6412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.234771][ T6395] pvrusb2: Attempted to execute control transfer when device not ok [ 141.235689][ T4231] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 141.251568][ T4231] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 141.260420][ T4231] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 141.262228][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 141.276557][ T4231] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 141.285615][ T4231] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 141.293662][ T4231] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 141.302900][ T4231] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.303517][ T5041] usb 6-1: USB disconnect, device number 12 [ 141.311882][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 141.355983][ T2425] pvrusb2: Attached sub-driver cx25840 [ 141.361738][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 141.392711][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.413414][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 141.444981][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 141.604168][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.640786][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.653374][ T4231] usb 4-1: USB disconnect, device number 8 [ 141.663335][ T7] usb 1-1: Product: syz [ 141.667543][ T7] usb 1-1: Manufacturer: syz [ 141.679464][ T4231] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 141.680390][ T7] usb 1-1: SerialNumber: syz [ 141.711554][ T4231] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 141.736300][ T4231] keyspan 4-1:1.0: device disconnected [ 141.780197][ T6441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.810534][ T6441] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 141.843815][ T6441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.843815][ T6441] [ 141.866686][ T6441] EXT4-fs (loop1): Total free blocks count 0 [ 141.874901][ T6441] EXT4-fs (loop1): Free/Dirty block details [ 141.886326][ T6441] EXT4-fs (loop1): free_blocks=65280 [ 141.891737][ T6441] EXT4-fs (loop1): dirty_blocks=2545 [ 141.897167][ T6441] EXT4-fs (loop1): Block reservation details [ 141.913079][ T6441] EXT4-fs (loop1): i_reserved_data_blocks=2545 [ 142.024635][ T6447] device syzkaller1 entered promiscuous mode [ 142.033769][ T4253] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 67586 with max blocks 496 with error 28 [ 142.067069][ T4253] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.067069][ T4253] [ 142.142897][ T6443] loop4: detected capacity change from 0 to 40427 [ 142.170325][ T6443] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 142.226963][ T6443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 142.295769][ T6443] F2FS-fs (loop4): invalid crc value [ 142.306433][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 142.339218][ T6452] loop5: detected capacity change from 0 to 2048 [ 142.390339][ T6443] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 142.519262][ T6452] Alternate GPT is invalid, using primary GPT. [ 142.540920][ T6452] loop5: p1 p2 p3 [ 142.550112][ T6452] loop5: partition table partially beyond EOD, truncated [ 142.575939][ T6443] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 142.585103][ T6443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.675809][ T6454] attempt to access beyond end of device [ 142.675809][ T6454] loop4: rw=2049, want=45104, limit=40427 [ 142.709579][ T4798] udevd[4798]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 142.709838][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 142.746173][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 142.836147][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 142.836159][ T26] audit: type=1800 audit(1786971631.723:34): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.736" name="start_block" dev="configfs" ino=40366 res=0 errno=0 [ 142.859484][ T7] cdc_ncm 1-1:1.0: bind() failure [ 142.891414][ T7] usbtest: probe of 1-1:1.1 failed with error -71 [ 142.929120][ T7] usb 1-1: USB disconnect, device number 7 [ 143.298096][ T4231] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 143.465185][ T6474] loop4: detected capacity change from 0 to 1024 [ 143.579499][ T6474] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 143.695227][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.744874][ T4231] usb 4-1: not running at top speed; connect to a high speed hub [ 143.993113][ T4231] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 144.012540][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.041711][ T4231] usb 4-1: Product: syz [ 144.056258][ T4231] usb 4-1: Manufacturer: syz [ 144.060889][ T4231] usb 4-1: SerialNumber: syz [ 144.120347][ T6471] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.134733][ T4231] snd-ua101 4-1:1.1: sample format descriptor not found [ 144.171889][ T4231] snd-ua101 4-1:1.0: invalid num_altsetting [ 144.231257][ T1110] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.480921][ T6503] set_capacity_and_notify: 1 callbacks suppressed [ 144.480952][ T6503] loop1: detected capacity change from 0 to 64 [ 144.589052][ T1110] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 144.608411][ T1110] usb 1-1: config 127 has no interface number 0 [ 144.634352][ T1110] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 144.663783][ T1110] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 144.871572][ T1110] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 144.890886][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.921028][ T1110] usb 1-1: Product: syz [ 144.925301][ T1110] usb 1-1: Manufacturer: syz [ 144.940691][ T1110] usb 1-1: SerialNumber: syz [ 144.983004][ T6485] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.994634][ T6485] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.047132][ T6521] binder: 6520:6521 ioctl c0306201 200000000280 returned -14 [ 145.360034][ T6535] loop4: detected capacity change from 0 to 512 [ 145.372886][ T1110] usb 1-1: probing VID:PID(0424:012C) [ 145.384475][ T1110] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 145.390918][ T1110] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 145.422991][ T1110] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 145.448893][ T6537] loop1: detected capacity change from 0 to 4096 [ 145.470503][ T1110] usb 1-1: ignoring unexpected bulk_out endpoint [ 145.481795][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 145.523937][ T1110] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 145.531809][ T6535] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.560195][ T1110] vub300: probe of 1-1:127.138 failed with error -22 [ 145.579595][ T6535] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 145.604758][ T5042] usb 4-1: USB disconnect, device number 9 [ 145.610018][ T1110] usb 1-1: USB disconnect, device number 8 [ 145.617470][ T6535] EXT4-fs (loop4): Remounting filesystem read-only [ 145.660750][ T6535] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.768: mark_inode_dirty error [ 145.673292][ T6535] EXT4-fs (loop4): Remounting filesystem read-only [ 145.683888][ T6535] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 145.704817][ T6535] EXT4-fs (loop4): Remounting filesystem read-only [ 145.751597][ T6543] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 145.785578][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 145.819381][ T6543] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.768: mark_inode_dirty error [ 145.842193][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 145.848988][ T6543] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 145.862274][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 145.868838][ T6543] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.768: mark_inode_dirty error [ 145.881129][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 145.899627][ T6543] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 145.942923][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 145.968550][ T6543] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.768: mark_inode_dirty error [ 146.018937][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 146.041833][ T6550] loop1: detected capacity change from 0 to 8192 [ 146.049391][ T6546] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.768: corrupted inode contents [ 146.071652][ T6546] EXT4-fs (loop4): Remounting filesystem read-only [ 146.098491][ T6550] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 146.119535][ T6550] REISERFS (device loop1): using ordered data mode [ 146.126126][ T6550] reiserfs: using flush barriers [ 146.211749][ T6550] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.294663][ T6550] REISERFS (device loop1): checking transaction log (loop1) [ 146.307500][ T5042] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 146.370146][ T6565] loop3: detected capacity change from 0 to 128 [ 146.370463][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.778'. [ 146.509011][ T6559] loop0: detected capacity change from 0 to 40427 [ 146.581431][ T6565] loop3: detected capacity change from 0 to 4096 [ 146.596977][ T6550] REISERFS (device loop1): Using rupasov hash to sort names [ 146.617804][ T6550] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.628701][ T6559] F2FS-fs (loop0): invalid crc value [ 146.663381][ T6559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.703423][ T5042] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.725358][ T5042] usb 6-1: config 0 has no interface number 0 [ 146.745063][ T5042] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.766305][ T6559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.786741][ T5042] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 146.800031][ T5042] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.825173][ T5042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.845757][ T26] audit: type=1804 audit(1786971635.762:35): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.776" name="/newroot/172/file0/file1" dev="loop0" ino=10 res=1 errno=0 [ 146.897718][ T5042] usb 6-1: config 0 descriptor?? [ 146.904754][ T4193] attempt to access beyond end of device [ 146.904754][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 146.922050][ T6556] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.956134][ T6575] loop4: detected capacity change from 0 to 1024 [ 146.973818][ T5042] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.136805][ T6575] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 147.190256][ T5042] usb 6-1: USB disconnect, device number 13 [ 147.197816][ T6575] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 147.298248][ T6584] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 147.432329][ T6584] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 147.540756][ T4534] hfsplus: b-tree write err: -5, ino 25 [ 147.546559][ T4534] hfsplus: b-tree write err: -5, ino 4 [ 147.561475][ T4534] hfsplus: b-tree write err: -5, ino 2 [ 147.573249][ T4534] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 147.584670][ T4534] hfsplus: b-tree write err: -5, ino 27 [ 147.984359][ T5042] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.153022][ T5040] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 148.268753][ T6606] loop1: detected capacity change from 0 to 40427 [ 148.292449][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.342207][ T6606] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 148.360626][ T6606] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 148.379733][ T6606] F2FS-fs (loop1): invalid crc value [ 148.387813][ T6606] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 148.421398][ T5042] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.437051][ T5042] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.447790][ T5042] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 148.499392][ T5042] usb 5-1: config 220 has no interface number 2 [ 148.508892][ T5042] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.541278][ T5042] usb 5-1: config 220 interface 0 has no altsetting 0 [ 148.548858][ T6606] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 148.557752][ T6606] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.560697][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 148.570900][ T5040] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.582127][ T5042] usb 5-1: config 220 interface 76 has no altsetting 0 [ 148.589035][ T5042] usb 5-1: config 220 interface 1 has no altsetting 0 [ 148.602315][ T26] audit: type=1800 audit(1786971637.535:36): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.794" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 148.606451][ T5040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.644388][ T6606] attempt to access beyond end of device [ 148.644388][ T6606] loop1: rw=2049, want=77960, limit=40427 [ 148.656244][ T5040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.666367][ T5040] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.729517][ T7] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 148.738342][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 148.752027][ T4185] attempt to access beyond end of device [ 148.752027][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 148.759043][ T7] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 148.775437][ T5040] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.786064][ T5040] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.794912][ T5040] usb 6-1: Manufacturer: syz [ 148.807395][ T7] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 148.821815][ T5042] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.836482][ T5040] usb 6-1: config 0 descriptor?? [ 148.847532][ T5042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.856174][ T6633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.865670][ T5042] usb 5-1: Product: syz [ 148.884421][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.891334][ T5042] usb 5-1: Manufacturer: syz [ 148.895940][ T5042] usb 5-1: SerialNumber: syz [ 148.968206][ T6636] loop3: detected capacity change from 0 to 2048 [ 149.043952][ T6636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.057016][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.070994][ T7] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.080907][ T7] usb 1-1: Product: syz [ 149.085200][ T7] usb 1-1: Manufacturer: syz [ 149.094950][ T7] usb 1-1: SerialNumber: syz [ 149.112166][ T7] usb 1-1: config 0 descriptor?? [ 149.157783][ T7] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 149.172818][ T7] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 149.232309][ T6638] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 149.296392][ T5042] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 149.303960][ T5042] usb 5-1: No valid video chain found. [ 149.311948][ T5042] usb 5-1: selecting invalid altsetting 0 [ 149.337819][ T5040] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 149.351562][ T5040] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 149.362198][ T5040] appleir 0003:05AC:8243.000C: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 149.450045][ T5042] usb 5-1: selecting invalid altsetting 0 [ 149.464417][ T5042] usbtest: probe of 5-1:220.1 failed with error -22 [ 149.486762][ T5042] usb 5-1: USB disconnect, device number 7 [ 149.540633][ T5041] usb 6-1: USB disconnect, device number 14 [ 149.665928][ T4232] usb 1-1: USB disconnect, device number 9 [ 149.705667][ T4232] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 149.743312][ T6654] input: syz0 as /devices/virtual/input/input18 [ 149.784056][ T6654] input: failed to attach handler leds to device input18, error: -6 [ 150.023128][ T6671] bridge0: port 3(veth0) entered blocking state [ 150.041550][ T6671] bridge0: port 3(veth0) entered disabled state [ 150.056101][ T6671] device veth0 entered promiscuous mode [ 150.077880][ T6671] bridge0: port 3(veth0) entered blocking state [ 150.084742][ T6671] bridge0: port 3(veth0) entered forwarding state [ 150.227022][ T6683] device sit0 entered promiscuous mode [ 150.269745][ T6683] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 150.293563][ T6683] netlink: 1 bytes leftover after parsing attributes in process `syz.4.825'. [ 150.363798][ T6691] set_capacity_and_notify: 2 callbacks suppressed [ 150.363812][ T6691] loop0: detected capacity change from 0 to 512 [ 150.459543][ T6691] attempt to access beyond end of device [ 150.459543][ T6691] loop0: rw=0, want=17179852722, limit=512 [ 150.485141][ T6691] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 150.499781][ T6691] FAT-fs (loop0): Filesystem has been set read-only [ 150.506716][ T6691] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 150.546896][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.563396][ T6699] device syzkaller1 entered promiscuous mode [ 150.601638][ T6701] netlink: 'syz.4.836': attribute type 3 has an invalid length. [ 150.616536][ T6701] netlink: 'syz.4.836': attribute type 6 has an invalid length. [ 150.624356][ T6701] netlink: 52 bytes leftover after parsing attributes in process `syz.4.836'. [ 150.745912][ T1110] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 150.775398][ T6705] loop4: detected capacity change from 0 to 2048 [ 150.825028][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 150.856793][ T6705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.969343][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.993937][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.003845][ T1110] usb 6-1: Using ep0 maxpacket: 8 [ 151.029242][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 151.043879][ T4232] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 151.053140][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.069609][ T4232] usb 4-1: config 0 descriptor?? [ 151.123149][ T1110] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.160307][ T1110] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.182740][ T1110] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.201716][ T6703] loop0: detected capacity change from 0 to 32768 [ 151.208854][ T1110] usb 6-1: config 0 interface 0 has no altsetting 0 [ 151.225153][ T6703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.835 (6703) [ 151.280288][ T6703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 151.289754][ T6703] BTRFS info (device loop0): use zlib compression, level 3 [ 151.305922][ T6703] BTRFS info (device loop0): turning on sync discard [ 151.316940][ T6703] BTRFS info (device loop0): using free space tree [ 151.324268][ T6703] BTRFS info (device loop0): has skinny extents [ 151.369461][ T6703] BTRFS info (device loop0): enabling ssd optimizations [ 151.405525][ T1110] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 151.436049][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.461156][ T1110] usb 6-1: Product: syz [ 151.471550][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 151.480848][ T1110] usb 6-1: Manufacturer: syz [ 151.485453][ T1110] usb 6-1: SerialNumber: syz [ 151.536336][ T1110] usb 6-1: config 0 descriptor?? [ 151.551806][ T4232] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 151.569424][ T4232] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 151.580040][ T4232] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 151.587154][ T4232] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 151.594339][ T4232] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 151.602048][ T4232] appleir 0003:05AC:8241.000D: No inputs registered, leaving [ 151.636231][ T4232] appleir 0003:05AC:8241.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 151.637245][ T1110] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 151.655213][ T4231] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 151.831258][ T4232] usb 4-1: USB disconnect, device number 10 [ 151.838570][ T1110] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 151.846609][ T1110] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 151.862720][ T1110] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 152.027984][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.056665][ T4231] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.091640][ T6749] loop1: detected capacity change from 0 to 32768 [ 152.098345][ T4231] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 152.119176][ T4231] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.152022][ T4228] usb 6-1: USB disconnect, device number 15 [ 152.191923][ T6749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.847 (6749) [ 152.224103][ T6749] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 152.253154][ T6749] BTRFS warning (device loop1): excessive commit interval 3581 [ 152.285563][ T4231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.294707][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.308027][ T6749] BTRFS info (device loop1): force zlib compression, level 3 [ 152.329502][ T6749] BTRFS info (device loop1): metadata ratio 107050 [ 152.337322][ T4231] usb 5-1: Product: syz [ 152.341541][ T4231] usb 5-1: Manufacturer: syz [ 152.355960][ T6749] BTRFS info (device loop1): turning on flush-on-commit [ 152.370097][ T4231] usb 5-1: SerialNumber: syz [ 152.379994][ T6749] BTRFS info (device loop1): max_inline at 4096 [ 152.391486][ T4553] Bluetooth: hci3: command 0x0411 tx timeout [ 152.416154][ T6749] BTRFS info (device loop1): using free space tree [ 152.422979][ T6749] BTRFS info (device loop1): has skinny extents [ 152.435316][ T4231] cdc_ncm 5-1:1.0: skipping garbage [ 152.499490][ T6763] Invalid argument reading file caps for ./file0 [ 152.636596][ T6720] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.819115][ T6749] BTRFS info (device loop1): enabling ssd optimizations [ 153.300425][ T6720] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.307630][ T6756] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.527489][ T4231] cdc_ncm 5-1:1.0: bind() failure [ 153.551837][ T4231] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 153.587025][ T4231] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 153.606988][ T4231] usbtest: probe of 5-1:1.1 failed with error -71 [ 153.622782][ T5041] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 153.624396][ T4231] usb 5-1: USB disconnect, device number 8 [ 153.737202][ T6817] overlayfs: failed to set xattr on upper [ 153.743513][ T6817] overlayfs: ...falling back to index=off,metacopy=off. [ 153.921802][ T6825] loop0: detected capacity change from 0 to 1024 [ 153.961349][ T6756] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 153.981731][ T6756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.000321][ T6756] usb 4-1: Product: syz [ 154.005308][ T6756] usb 4-1: Manufacturer: syz [ 154.014361][ T6756] usb 4-1: SerialNumber: syz [ 154.026169][ T6756] usb 4-1: config 0 descriptor?? [ 154.058092][ T6827] loop1: detected capacity change from 0 to 512 [ 154.076021][ T6756] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 154.082479][ T5041] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 154.190202][ T6827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.262768][ T5041] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 154.282221][ T5041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.302550][ T5041] usb 6-1: Product: syz [ 154.306739][ T5041] usb 6-1: Manufacturer: syz [ 154.311345][ T5041] usb 6-1: SerialNumber: syz [ 154.367028][ T6802] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 154.413849][ T5041] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 154.436905][ T6835] loop0: detected capacity change from 0 to 128 [ 154.446745][ T5041] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 154.501333][ T6756] sonixb 4-1:0.0: Error writing register 01: -71 [ 154.527944][ T6756] sonixb: probe of 4-1:0.0 failed with error -71 [ 154.545867][ T6835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.561730][ T6756] usb 4-1: USB disconnect, device number 11 [ 154.575323][ T6835] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.840703][ T6842] loop0: detected capacity change from 0 to 512 [ 154.885485][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 154.985901][ T6829] loop4: detected capacity change from 0 to 32768 [ 155.112527][ T6829] XFS (loop4): Mounting V5 Filesystem [ 155.266148][ T6863] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 155.301190][ T6865] loop0: detected capacity change from 0 to 256 [ 155.323766][ T6829] XFS (loop4): Ending clean mount [ 155.382656][ T6829] XFS (loop4): Quotacheck needed: Please wait. [ 155.510109][ T6829] XFS (loop4): Quotacheck: Done. [ 155.615349][ T6754] usb 6-1: USB disconnect, device number 16 [ 155.774814][ T4186] XFS (loop4): Unmounting Filesystem [ 156.256714][ T6892] loop1: detected capacity change from 0 to 512 [ 156.301015][ T6892] EXT4-fs (loop1): Ignoring removed bh option [ 156.345774][ T6892] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.892: inode #13: comm syz.1.892: iget: illegal inode # [ 156.360534][ T6892] EXT4-fs (loop1): Remounting filesystem read-only [ 156.377316][ T6892] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.892: couldn't read orphan inode 13 (err -117) [ 156.464337][ T6892] EXT4-fs (loop1): Remounting filesystem read-only [ 156.503827][ T6892] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,auto_da_alloc,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,. Quota mode: none. [ 156.524452][ T4228] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 156.607648][ T6877] loop3: detected capacity change from 0 to 40427 [ 156.656113][ T6892] EXT4-fs (loop1): shut down requested (2) [ 156.719861][ T6877] F2FS-fs (loop3): invalid crc value [ 156.747215][ T6877] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.777129][ T4228] usb 6-1: Using ep0 maxpacket: 8 [ 156.896655][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.927445][ T4228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.957644][ T4228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 157.006657][ T6877] F2FS-fs (loop3): Start checkpoint disabled! [ 157.015676][ T4228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 157.068063][ T4228] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.102380][ T6877] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 157.116496][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.185737][ T4228] hub 6-1:1.0: bad descriptor, ignoring hub [ 157.191704][ T4228] hub: probe of 6-1:1.0 failed with error -5 [ 157.213284][ T144] attempt to access beyond end of device [ 157.213284][ T144] loop3: rw=2049, want=45104, limit=40427 [ 157.215782][ T4228] cdc_wdm 6-1:1.0: skipping garbage [ 157.253819][ T4228] cdc_wdm 6-1:1.0: skipping garbage [ 157.296084][ T4228] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 157.306240][ T6918] loop1: detected capacity change from 0 to 256 [ 157.332736][ T4228] cdc_wdm 6-1:1.0: Unknown control protocol [ 157.372058][ T6920] loop0: detected capacity change from 0 to 64 [ 157.386854][ T4228] usb 6-1: USB disconnect, device number 17 [ 157.441602][ T6922] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.536590][ T6918] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 157.619323][ T6920] hfs: keylen 1794 too large [ 157.796128][ T6920] hfs: keylen 1794 too large [ 157.853839][ T6920] hfs: keylen 1794 too large [ 157.931004][ T6932] loop1: detected capacity change from 0 to 256 [ 157.962445][ T4228] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 157.995199][ T6932] FAT-fs (loop1): Directory bread(block 64) failed [ 158.039360][ T6932] FAT-fs (loop1): Directory bread(block 65) failed [ 158.062308][ T6932] FAT-fs (loop1): Directory bread(block 66) failed [ 158.068944][ T6932] FAT-fs (loop1): Directory bread(block 67) failed [ 158.079504][ T6932] FAT-fs (loop1): Directory bread(block 68) failed [ 158.086051][ T6932] FAT-fs (loop1): Directory bread(block 69) failed [ 158.114826][ T6932] FAT-fs (loop1): Directory bread(block 70) failed [ 158.129075][ T6932] FAT-fs (loop1): Directory bread(block 71) failed [ 158.135874][ T6932] FAT-fs (loop1): Directory bread(block 72) failed [ 158.163490][ T6932] FAT-fs (loop1): Directory bread(block 73) failed [ 158.218634][ T4228] usb 6-1: Using ep0 maxpacket: 8 [ 158.337967][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.377684][ T4228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.417572][ T4228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 158.456165][ T4228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 158.496912][ T4228] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.526393][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.578870][ T6930] loop4: detected capacity change from 0 to 32768 [ 158.617307][ T4228] hub 6-1:1.0: bad descriptor, ignoring hub [ 158.631355][ T6930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.909 (6930) [ 158.636118][ T4228] hub: probe of 6-1:1.0 failed with error -5 [ 158.680219][ T4228] cdc_wdm 6-1:1.0: skipping garbage [ 158.685446][ T4228] cdc_wdm 6-1:1.0: skipping garbage [ 158.740805][ T6930] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.750167][ T4228] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 158.768130][ T6945] loop1: detected capacity change from 0 to 4096 [ 158.774701][ T4228] cdc_wdm 6-1:1.0: Unknown control protocol [ 158.781417][ T6930] BTRFS info (device loop4): use zlib compression, level 3 [ 158.822905][ T6930] BTRFS info (device loop4): turning on sync discard [ 158.827917][ T4228] usb 6-1: USB disconnect, device number 18 [ 158.854644][ T6930] BTRFS info (device loop4): using free space tree [ 158.906236][ T6930] BTRFS info (device loop4): has skinny extents [ 158.979406][ T6945] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 159.065840][ T26] audit: type=1800 audit(1786971648.061:37): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.915" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 159.101224][ T6955] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 159.240743][ T6930] BTRFS info (device loop4): enabling ssd optimizations [ 159.359011][ T6974] loop1: detected capacity change from 0 to 1024 [ 159.436289][ T6978] loop3: detected capacity change from 0 to 256 [ 159.507158][ T6974] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 159.525632][ T6978] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 159.648328][ T6974] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,grpid,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 159.819790][ T6937] loop0: detected capacity change from 0 to 32768 [ 159.871174][ T6988] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 160.103994][ T6937] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.202098][ T7004] hfs: keylen 1794 too large [ 160.230966][ T7004] hfs: keylen 1794 too large [ 160.285500][ T7004] hfs: keylen 1794 too large [ 160.442441][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 160.815864][ T7025] team0 (unregistering): Port device team_slave_0 removed [ 160.881965][ T7025] team0 (unregistering): Port device team_slave_1 removed [ 160.951742][ T7029] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 160.972432][ T7031] EXT4-fs (loop0): Ignoring removed bh option [ 161.026932][ T7029] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 161.042659][ T7031] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 161.095802][ T7029] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 161.134822][ T7029] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 161.143042][ T7029] UDF-fs: Scanning with blocksize 512 failed [ 161.150713][ T7029] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 161.181749][ T7029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.215786][ T7031] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.937: corrupted in-inode xattr [ 161.322321][ T7031] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.937: couldn't read orphan inode 15 (err -117) [ 161.374819][ T7040] set_capacity_and_notify: 3 callbacks suppressed [ 161.374832][ T7040] loop4: detected capacity change from 0 to 512 [ 161.395889][ T7031] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 161.463309][ T7040] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.499478][ T7040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.562769][ T7040] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.939: Invalid block bitmap block 0 in block_group 0 [ 161.594181][ T7040] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 161.607712][ T7040] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.939: attempt to clear invalid blocks 983261 len 1 [ 161.628678][ T7040] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.939: Invalid inode table block 0 in block_group 0 [ 161.753990][ T7040] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 161.801114][ T7040] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 161.845098][ T7040] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.939: Invalid inode table block 0 in block_group 0 [ 161.870238][ T7040] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 161.885637][ T7040] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.939: mark_inode_dirty error [ 161.920902][ T7040] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 161.936039][ T7040] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.939: Invalid inode table block 0 in block_group 0 [ 161.954404][ T7040] EXT4-fs (loop4): 1 truncate cleaned up [ 161.964489][ T7040] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 162.309300][ T7086] capability: warning: `syz.0.954' uses 32-bit capabilities (legacy support in use) [ 162.320153][ T7082] loop3: detected capacity change from 0 to 64 [ 162.559839][ T7097] device syzkaller1 entered promiscuous mode [ 162.643302][ T7099] loop3: detected capacity change from 0 to 8192 [ 162.680585][ T7099] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 162.702160][ T7099] REISERFS (device loop3): using ordered data mode [ 162.752690][ T7099] reiserfs: using flush barriers [ 162.759103][ T7099] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.788725][ T7099] REISERFS (device loop3): checking transaction log (loop3) [ 162.824715][ T7105] loop5: detected capacity change from 0 to 1024 [ 162.869523][ T7107] loop1: detected capacity change from 0 to 256 [ 162.914607][ T7107] exfat: Deprecated parameter 'utf8' [ 162.926332][ T7107] exfat: Deprecated parameter 'utf8' [ 162.939776][ T7105] hfsplus: extend alloc file! (16384,256,150995124) [ 163.019913][ T7107] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 163.039396][ T7099] REISERFS (device loop3): Using rupasov hash to sort names [ 163.052974][ T7099] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 163.273594][ T7114] loop4: detected capacity change from 0 to 1024 [ 163.525626][ T6754] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.729199][ T7129] loop1: detected capacity change from 0 to 256 [ 163.770248][ T7129] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.782973][ T7129] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 163.795856][ T7129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.808239][ T6754] usb 1-1: Using ep0 maxpacket: 8 [ 163.957323][ T6754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.975306][ T6754] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.985382][ T6754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.013638][ T6754] usb 1-1: config 0 descriptor?? [ 164.287410][ T6754] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.092140][ T6754] usb 1-1: USB disconnect, device number 10 [ 166.112632][ T7139] loop0: detected capacity change from 0 to 256 [ 166.132050][ T7136] loop1: detected capacity change from 0 to 256 [ 166.161454][ T7138] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.187127][ T7138] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.207488][ T7143] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 166.240359][ T7139] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.251872][ T26] audit: type=1800 audit(1786971655.281:38): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.966" name="file1" dev="loop1" ino=1048648 res=0 errno=0 [ 166.272559][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.298707][ T7139] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 166.347909][ T7139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 166.583044][ T7152] input: syz1 as /devices/virtual/input/input20 [ 166.707008][ T7148] binder: 7147:7148 ioctl c0306201 200000001a80 returned -14 [ 167.093268][ T7184] Set syz1 is full, maxelem 1029 reached [ 167.137676][ T7188] loop5: detected capacity change from 0 to 512 [ 167.169409][ T6999] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.208417][ T7192] loop3: detected capacity change from 0 to 256 [ 167.249358][ T7192] exfat: Deprecated parameter 'utf8' [ 167.254729][ T7192] exfat: Deprecated parameter 'utf8' [ 167.295542][ T7188] FAT-fs (loop5): error, corrupted file size (i_pos 53, 9216) [ 167.317939][ T7192] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 167.354795][ T7188] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 167.368859][ T7188] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 167.428493][ T6999] usb 5-1: Using ep0 maxpacket: 16 [ 167.458795][ T7194] loop0: detected capacity change from 0 to 512 [ 167.480597][ T7194] EXT4-fs (loop0): inline encryption not supported [ 167.545256][ T7194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.555570][ T6999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.572849][ T6999] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 167.590611][ T7197] 9pnet: Insufficient options for proto=fd [ 167.600124][ T6999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.610379][ T7171] loop1: detected capacity change from 0 to 40427 [ 167.615803][ T7194] EXT4-fs (loop0): 1 truncate cleaned up [ 167.622621][ T7194] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 167.654400][ T6999] usb 5-1: config 0 descriptor?? [ 167.667851][ T7171] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 167.675607][ T7171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.722200][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.752237][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.763084][ T7171] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.776139][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.804224][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.826697][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.860645][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.875410][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.892145][ T7171] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.900181][ T7171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.908144][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.929423][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 167.961377][ T7202] binder: 7201:7202 ioctl c0306201 200000001a80 returned -14 [ 167.973526][ T7194] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.988: bad extra_isize 62 (inode size 256) [ 168.011499][ T26] audit: type=1800 audit(1786971657.050:39): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.979" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 168.070150][ T26] audit: type=1804 audit(1786971657.080:40): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.979" name="/newroot/179/bus/file1" dev="loop1" ino=10 res=1 errno=0 [ 168.127829][ T6999] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 168.217540][ T7215] loop5: detected capacity change from 0 to 512 [ 168.358699][ T7215] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 168.418484][ T7215] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.994: checksumming directory block 0 [ 168.531949][ T4553] usb 5-1: USB disconnect, device number 9 [ 168.616470][ T6754] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.997207][ T7224] loop0: detected capacity change from 0 to 32768 [ 169.034842][ T6754] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.137797][ T7224] JBD2: Ignoring recovery information on journal [ 169.150234][ T6754] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 169.335597][ T7224] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.368103][ T7255] loop4: detected capacity change from 0 to 256 [ 169.398180][ T6754] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 169.407249][ T6754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.443813][ T6754] usb 4-1: Product: syz [ 169.451759][ T26] audit: type=1800 audit(1786971658.507:41): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.998" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 169.473147][ T6754] usb 4-1: Manufacturer: syz [ 169.497492][ T6754] usb 4-1: SerialNumber: syz [ 169.523057][ T26] audit: type=1800 audit(1786971658.537:42): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1007" name="file1" dev="loop4" ino=1048655 res=0 errno=0 [ 169.583332][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 169.683558][ T7258] loop4: detected capacity change from 0 to 256 [ 169.774473][ T6754] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.990092][ T6754] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 170.005595][ T6754] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 170.062470][ T7252] loop1: detected capacity change from 0 to 40427 [ 170.165208][ T7252] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 170.178119][ T7252] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.211259][ T7252] F2FS-fs (loop1): invalid crc value [ 170.251137][ T7254] loop5: detected capacity change from 0 to 32768 [ 170.262714][ T7252] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 170.344616][ T7254] (syz.5.1004,7254,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.409098][ T7252] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 170.420917][ T7252] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.437893][ T6754] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 170.465842][ T7254] (syz.5.1004,7254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.522920][ T6754] usb 4-1: USB disconnect, device number 12 [ 170.533711][ T7252] attempt to access beyond end of device [ 170.533711][ T7252] loop1: rw=2049, want=77960, limit=40427 [ 170.620513][ T7254] JBD2: Ignoring recovery information on journal [ 170.740134][ T4185] attempt to access beyond end of device [ 170.740134][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 170.799876][ T7254] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 170.831317][ T7277] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 170.921579][ T7254] (syz.5.1004,7254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 171.028915][ T26] audit: type=1800 audit(1786971660.085:43): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1015" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 171.163828][ T7247] (syz.5.1004,7247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 171.185383][ T7247] (syz.5.1004,7247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 171.199314][ T7247] (syz.5.1004,7247,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 171.211880][ T7247] (syz.5.1004,7247,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 171.221273][ T7247] (syz.5.1004,7247,0):ocfs2_quota_read:201 ERROR: status = -5 [ 171.228778][ T7247] Quota error (device loop5): find_block_dqentry: Can't read quota tree block 6 [ 171.238059][ T7247] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 171.247562][ T7247] (syz.5.1004,7247,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 171.257147][ T7247] (syz.5.1004,7247,0):ocfs2_mknod:314 ERROR: status = -5 [ 171.266219][ T7247] (syz.5.1004,7247,0):ocfs2_mknod:502 ERROR: status = -5 [ 171.273768][ T7247] (syz.5.1004,7247,0):ocfs2_mkdir:659 ERROR: status = -5 [ 171.568173][ T7286] ntfs3: loop3: ino=3, Correct links count -> 2. [ 171.609867][ T7292] EXT4-fs (loop4): Ignoring removed oldalloc option [ 171.616065][ T4387] ocfs2: Unmounting device (7,5) on (node local) [ 171.635433][ T7295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.702076][ T7295] EXT4-fs (loop0): 1 truncate cleaned up [ 171.732802][ T7295] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000102,errors=remount-ro,. Quota mode: none. [ 171.775559][ T7292] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1022: invalid block [ 171.872124][ T7286] ntfs3: Cannot use different iocharset when remounting! [ 171.891958][ T7292] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1022: invalid indirect mapped block 1024 (level 0) [ 171.990023][ T7292] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1022: bg 0: block 35: padding at end of block bitmap is not set [ 172.046266][ T7302] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.073503][ T7292] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 172.152547][ T7292] EXT4-fs (loop4): 1 truncate cleaned up [ 172.204383][ T7292] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,grpjquota=,min_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 172.293576][ T7306] set_capacity_and_notify: 5 callbacks suppressed [ 172.293591][ T7306] loop0: detected capacity change from 0 to 4096 [ 172.367800][ T7306] EXT4-fs (loop0): Test dummy encryption mode enabled [ 172.404484][ T7306] EXT4-fs (loop0): Ignoring removed orlov option [ 172.426624][ T7313] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.451017][ T7306] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 172.486156][ T7314] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 172.651802][ T7318] loop1: detected capacity change from 0 to 1024 [ 172.737417][ T7318] EXT4-fs (loop1): Ignoring removed bh option [ 172.743984][ T21] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 172.808568][ T7318] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 172.882518][ T7318] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.930917][ T4553] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.998583][ T7318] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.039158][ T7318] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.094686][ T7318] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.094686][ T7318] [ 173.124418][ T7332] loop4: detected capacity change from 0 to 512 [ 173.139132][ T7330] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.140763][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 173.169844][ T4553] usb 4-1: Using ep0 maxpacket: 32 [ 173.179313][ T7332] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.205989][ T7317] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.228781][ T7332] EXT4-fs (loop4): 1 truncate cleaned up [ 173.256509][ T7332] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.269578][ T21] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 173.288228][ T21] usb 6-1: config 100 has no interface number 0 [ 173.293531][ T7330] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.295208][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.319563][ T21] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 173.330095][ T21] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 173.352759][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.362881][ T21] usb 6-1: config 100 interface 173 has no altsetting 0 [ 173.369936][ T4553] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 173.379166][ T4553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.390865][ T4553] usb 4-1: config 0 descriptor?? [ 173.396384][ T7317] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.436130][ T7332] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.1035: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 173.486236][ T7330] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.521479][ T7317] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.556489][ T7330] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.617789][ T7317] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.645606][ T7327] loop0: detected capacity change from 0 to 40427 [ 173.652625][ T21] usb 6-1: string descriptor 0 read error: -22 [ 173.660137][ T7330] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.1030: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.676418][ T21] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 173.696496][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.705151][ T7327] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 173.734635][ T7327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.783003][ T7327] F2FS-fs (loop0): invalid crc value [ 173.801153][ T7313] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.815318][ T7327] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 173.833530][ T7313] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.858123][ T21] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected [ 173.872781][ T4553] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 173.887672][ T21] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 174.013063][ T4237] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 174.025717][ T4237] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.025717][ T4237] [ 174.035682][ T7327] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.042829][ T7327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 174.105230][ T7327] attempt to access beyond end of device [ 174.105230][ T7327] loop0: rw=2049, want=77960, limit=40427 [ 174.125525][ T7313] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 174.171518][ T6754] usb 6-1: USB disconnect, device number 19 [ 174.197859][ T6752] usb 4-1: USB disconnect, device number 13 [ 174.211294][ T6754] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 174.261630][ T6754] metro_usb 6-1:100.173: device disconnected [ 174.275263][ T4193] attempt to access beyond end of device [ 174.275263][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 174.666662][ T7353] loop0: detected capacity change from 0 to 512 [ 174.690303][ T7353] EXT4-fs (loop0): Ignoring removed oldalloc option [ 174.769999][ T7353] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.1040: invalid block [ 174.792614][ T7353] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1040: invalid indirect mapped block 1024 (level 0) [ 174.814554][ T7358] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 174.829369][ T7353] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1040: bg 0: block 35: padding at end of block bitmap is not set [ 174.856741][ T7353] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 174.875007][ T7353] EXT4-fs (loop0): 1 truncate cleaned up [ 174.881520][ T7353] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpjquota=,min_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 174.962387][ T7361] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 175.139708][ T7365] loop0: detected capacity change from 0 to 256 [ 175.179119][ T7364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 175.188042][ T7367] loop1: detected capacity change from 0 to 128 [ 175.249549][ T26] audit: type=1800 audit(1786971664.324:44): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1043" name="file1" dev="loop0" ino=1048657 res=0 errno=0 [ 175.282501][ T7367] FAT-fs (loop1): bogus number of reserved sectors [ 175.312989][ T7367] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 175.324367][ T7367] FAT-fs (loop1): Can't find a valid FAT filesystem [ 175.636607][ T7382] loop5: detected capacity change from 0 to 1024 [ 175.716848][ T7382] EXT4-fs (loop5): Ignoring removed bh option [ 175.734822][ T7382] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 175.752193][ T7382] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.772220][ T7382] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 3) [ 175.794716][ T7382] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 175.807464][ T7382] EXT4-fs (loop5): This should not happen!! Data will be lost [ 175.807464][ T7382] [ 175.830380][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.845224][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.860120][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.880703][ T7381] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.895178][ T4553] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.902987][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.918433][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.933678][ T7381] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.938164][ T6999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.955939][ T7389] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.971017][ T7381] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.1053: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.206206][ T6999] usb 5-1: Using ep0 maxpacket: 32 [ 176.266086][ T4553] usb 1-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 176.275572][ T4553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.325512][ T6999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.339091][ T6999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.351278][ T6999] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.360631][ T6999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.383864][ T6999] usb 5-1: config 0 descriptor?? [ 176.500858][ T144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 176.514717][ T144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 176.514717][ T144] [ 176.630255][ T7394] loop5: detected capacity change from 0 to 512 [ 176.712578][ T7394] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.736174][ T7394] EXT4-fs (loop5): 1 truncate cleaned up [ 176.742088][ T7394] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.772529][ T7394] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.1055: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 176.875098][ T6999] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 177.027800][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 177.043390][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 177.130326][ T7409] clocksource: Switched to clocksource acpi_pm [ 177.139726][ T7409] clocksource: Switched to clocksource tsc [ 177.154424][ T6754] usb 5-1: USB disconnect, device number 10 [ 177.336777][ T7417] loop1: detected capacity change from 0 to 8192 [ 177.391152][ T7417] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 177.409064][ T7417] REISERFS (device loop1): using ordered data mode [ 177.415881][ T7417] reiserfs: using flush barriers [ 177.424346][ T7417] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.444891][ T7417] REISERFS (device loop1): checking transaction log (loop1) [ 177.542929][ T7417] REISERFS (device loop1): Using rupasov hash to sort names [ 177.550793][ T7417] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 177.575847][ T4553] usb 1-1: USB disconnect, device number 11 [ 177.863691][ T7427] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1067'. [ 177.890280][ T7427] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1067'. [ 177.925064][ T26] audit: type=1326 audit(1786971667.016:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.4.1072" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59c16250d9 code=0x0 [ 178.059034][ T7436] loop3: detected capacity change from 0 to 2048 [ 178.125977][ T7436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.381962][ T6752] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 178.681912][ T6752] usb 6-1: Using ep0 maxpacket: 32 [ 178.784881][ T4553] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.815024][ T7463] loop4: detected capacity change from 0 to 256 [ 178.832731][ T6752] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 178.841805][ T6752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.885948][ T7463] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 178.929551][ T6752] usb 6-1: config 0 descriptor?? [ 179.041953][ T4553] usb 4-1: Using ep0 maxpacket: 32 [ 179.162246][ T4553] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 179.201929][ T4553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.202262][ T6752] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.224403][ T4553] usb 4-1: config 0 descriptor?? [ 179.265451][ T4553] gspca_main: sq930x-2.14.0 probing 041e:403c [ 179.270167][ T6752] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.329500][ T6752] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 179.360588][ T6752] usb 6-1: media controller created [ 179.447028][ T6752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.542013][ T6752] az6027: usb out operation failed. (-71) [ 179.571939][ T6752] az6027: usb out operation failed. (-71) [ 179.577804][ T6752] stb0899_attach: Driver disabled by Kconfig [ 179.604292][ T6752] az6027: no front-end attached [ 179.604292][ T6752] [ 179.641989][ T6752] az6027: usb out operation failed. (-71) [ 179.647873][ T6752] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 179.657021][ T7491] loop0: detected capacity change from 0 to 128 [ 179.689862][ T6752] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 179.727875][ T7491] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.748400][ T6752] dvb-usb: schedule remote query interval to 400 msecs. [ 179.773600][ T6752] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 179.782508][ T7491] hpfs: filesystem error: improperly stopped [ 179.788516][ T7491] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.822775][ T6752] usb 6-1: USB disconnect, device number 20 [ 179.849100][ T7491] hpfs: You really don't want any checks? You are crazy... [ 179.877313][ T7491] hpfs: Code page index out of array [ 179.884434][ T6752] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 179.893272][ T7491] hpfs: code page support is disabled [ 179.925058][ T7491] hpfs: hpfs_map_4sectors(): unaligned read [ 179.931140][ T7491] hpfs: hpfs_map_4sectors(): unaligned read [ 179.967682][ T7491] hpfs: filesystem error: unable to find root dir [ 180.045750][ T7485] loop1: detected capacity change from 0 to 32768 [ 180.145783][ T7485] JBD2: Ignoring recovery information on journal [ 180.234933][ T7485] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 180.257637][ T9] (kworker/u4:0,9,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 180.271444][ T9] (kworker/u4:0,9,1):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 180.290544][ T9] (kworker/u4:0,9,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 180.325149][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 180.352086][ T21] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.412041][ T4553] gspca_sq930x: ucbus_write failed -71 [ 180.417737][ T4553] sq930x: probe of 4-1:0.0 failed with error -71 [ 180.438256][ T4553] usb 4-1: USB disconnect, device number 14 [ 180.601998][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 180.722201][ T21] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.749013][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.756017][ T21] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.765314][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.777027][ T21] usb 1-1: config 0 descriptor?? [ 181.269136][ T7544] loop4: detected capacity change from 0 to 4096 [ 181.303040][ T7549] loop1: detected capacity change from 0 to 2048 [ 181.322053][ T6754] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 181.359256][ T7552] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.370362][ T7549] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.379287][ T7544] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 181.426645][ T7544] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 181.431671][ T7555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.502446][ T7544] Remounting filesystem read-only [ 181.585375][ T4186] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 181.602165][ T6754] usb 4-1: Using ep0 maxpacket: 8 [ 181.616805][ T21] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 181.734150][ T6754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.758798][ T6754] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 181.778747][ T7565] loop1: detected capacity change from 0 to 736 [ 181.796196][ T6754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.831128][ T6754] usb 4-1: config 0 descriptor?? [ 181.843169][ T21] corsair-cpro: probe of 0003:1B1C:0C10.0011 failed with error -71 [ 182.035596][ T6999] usb 1-1: USB disconnect, device number 12 [ 182.157192][ T6754] usb 4-1: string descriptor 0 read error: -71 [ 182.223342][ T6754] usb 4-1: USB disconnect, device number 15 [ 182.565198][ T7594] loop4: detected capacity change from 0 to 764 [ 182.778137][ T7606] loop5: detected capacity change from 0 to 1024 [ 182.850544][ T7615] loop0: detected capacity change from 0 to 1024 [ 182.868420][ T26] audit: type=1800 audit(1786971671.956:46): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1142" name="num" dev="configfs" ino=43955 res=0 errno=0 [ 182.917728][ T7617] loop4: detected capacity change from 0 to 256 [ 182.924343][ T6752] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.939717][ T7606] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 182.974385][ T7606] hfsplus: xattr searching failed [ 182.981313][ T7620] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 183.011969][ T7620] hfsplus: xattr search failed [ 183.022937][ T7622] user requested TSC rate below hardware speed [ 183.074954][ T7617] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.095030][ T4237] hfsplus: b-tree write err: -5, ino 25 [ 183.100890][ T4237] hfsplus: b-tree write err: -5, ino 4 [ 183.113674][ T7617] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 183.131223][ T4237] hfsplus: b-tree write err: -5, ino 2 [ 183.147102][ T4237] hfsplus: b-tree write err: -5, ino 28 [ 183.176354][ T7617] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 183.225456][ T7629] loop0: detected capacity change from 0 to 64 [ 183.342184][ T6752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.387372][ T6752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.426202][ T6752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.492203][ T6752] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.548416][ T6752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.578377][ T6752] usb 2-1: config 0 descriptor?? [ 183.799863][ T7650] device team_slave_0 entered promiscuous mode [ 183.824498][ T7649] device team_slave_0 left promiscuous mode [ 183.861346][ T7653] loop5: detected capacity change from 0 to 512 [ 183.986937][ T7653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 184.036455][ T7653] System zones: 1-12 [ 184.062261][ T7653] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1153: missing EA_INODE flag [ 184.084212][ T6752] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 184.097720][ T7653] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1153: error while reading EA inode 12 err=-117 [ 184.132278][ T6752] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 184.145247][ T7653] EXT4-fs (loop5): 1 orphan inode deleted [ 184.150995][ T7653] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 184.167916][ T7667] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1162'. [ 184.461497][ T7676] Console: switching to colour VGA+ 80x25 [ 184.517416][ T7680] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 184.591892][ T7676] Console: switching to colour frame buffer device 128x48 [ 184.644725][ T7665] loop3: detected capacity change from 0 to 32768 [ 184.730862][ T7665] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.963402][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 184.999526][ T7690] loop4: detected capacity change from 0 to 4096 [ 185.037569][ T7695] loop0: detected capacity change from 0 to 256 [ 185.119445][ T7688] loop5: detected capacity change from 0 to 32768 [ 185.134953][ T7690] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 185.149062][ T7690] ntfs3: loop4: Failed to load $Extend. [ 185.244599][ T7688] JBD2: Ignoring recovery information on journal [ 185.357288][ T7700] EXT4-fs (loop3): 1 truncate cleaned up [ 185.357321][ T7700] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 185.394430][ T7688] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 185.430879][ T26] audit: type=1800 audit(1786971674.516:47): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1175" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 185.483635][ T6999] Bluetooth: hci0: command 0x0406 tx timeout [ 185.490614][ T6999] Bluetooth: hci1: command 0x0406 tx timeout [ 185.501895][ T6756] Bluetooth: hci2: command 0x0406 tx timeout [ 185.518371][ T7700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1175: bg 0: block 465: padding at end of block bitmap is not set [ 185.542638][ T7700] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 185.550078][ T6999] Bluetooth: hci4: command 0x0406 tx timeout [ 185.561691][ T26] audit: type=1804 audit(1786971674.646:48): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1171" name="/newroot/187/file1/file1" dev="loop5" ino=17058 res=1 errno=0 [ 185.620032][ T7700] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.620032][ T7700] [ 185.646677][ T7700] EXT4-fs (loop3): Total free blocks count 0 [ 185.653449][ T7700] EXT4-fs (loop3): Free/Dirty block details [ 185.659878][ T7700] EXT4-fs (loop3): free_blocks=0 [ 185.665466][ T7700] EXT4-fs (loop3): dirty_blocks=10 [ 185.670742][ T7700] EXT4-fs (loop3): Block reservation details [ 185.673989][ T4387] ocfs2: Unmounting device (7,5) on (node local) [ 185.692041][ T7700] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 185.738451][ T7709] exfat: Deprecated parameter 'namecase' [ 185.819173][ T7709] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 185.892652][ T7711] exfat: Deprecated parameter 'utf8' [ 185.902012][ T7711] exfat: Deprecated parameter 'utf8' [ 185.907402][ T7711] exfat: Deprecated parameter 'namecase' [ 185.962073][ T7711] exfat: Deprecated parameter 'namecase' [ 186.015635][ T7711] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 186.075279][ T7722] device macvtap1 entered promiscuous mode [ 186.107980][ T7722] device vlan0 entered promiscuous mode [ 186.118196][ T26] audit: type=1800 audit(1786971675.206:49): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file1" dev="loop3" ino=1048665 res=0 errno=0 [ 186.138986][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.160083][ T7722] team0: Device macvtap1 failed to register rx_handler [ 186.172806][ T5041] usb 2-1: USB disconnect, device number 12 [ 186.187508][ T7722] device vlan0 left promiscuous mode [ 186.248580][ T7730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 186.439645][ T7736] netlink: 'syz.3.1190': attribute type 22 has an invalid length. [ 186.484365][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1190'. [ 186.567176][ T7741] netlink: 'syz.3.1190': attribute type 22 has an invalid length. [ 186.604056][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1190'. [ 186.635535][ T7749] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 186.650109][ T7749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.657396][ T7749] IPv6: NLM_F_CREATE should be set when creating new route [ 186.691079][ T7743] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 186.746357][ T7753] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 186.781980][ T7753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.877888][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1199'. [ 187.234826][ T7779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.252055][ T6752] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.265811][ T7775] ntfs: volume version 3.1. [ 187.291387][ T7779] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1207: bad orphan inode 131083 [ 187.311741][ T7779] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 187.356136][ T7779] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #2: block 13: comm syz.3.1207: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 187.386910][ T7775] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp860. You might want to try to use the mount option nls=utf8. [ 187.404735][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.449895][ T7775] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 187.651216][ T7793] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1214'. [ 187.701330][ T7797] set_capacity_and_notify: 6 callbacks suppressed [ 187.701343][ T7797] loop1: detected capacity change from 0 to 512 [ 187.714915][ T6752] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.732965][ T6752] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.793253][ T7803] loop5: detected capacity change from 0 to 512 [ 187.839016][ T7797] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #13: comm syz.1.1227: iget: bad i_size value: 12154757448730 [ 187.868246][ T7797] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1227: couldn't read orphan inode 13 (err -117) [ 187.934287][ T6752] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 187.951364][ T7803] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.969437][ T7797] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.980298][ T6752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.010715][ T6752] usb 1-1: Product: syz [ 188.028638][ T6752] usb 1-1: Manufacturer: syz [ 188.038954][ T6752] usb 1-1: SerialNumber: syz [ 188.052384][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 188.160258][ T7805] loop3: detected capacity change from 0 to 32768 [ 188.260406][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 188.286171][ T7805] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 188.333238][ T6752] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 188.393727][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 188.441374][ T7818] ip_tables: iptables: counters copy to user failed while replacing table [ 188.736740][ T7831] loop3: detected capacity change from 0 to 4096 [ 188.785327][ T7832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.990777][ T7843] loop3: detected capacity change from 0 to 736 [ 189.241306][ T7855] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1240'. [ 189.896266][ T7859] loop5: detected capacity change from 0 to 131072 [ 189.979202][ T6755] usb 1-1: USB disconnect, device number 13 [ 189.987992][ T6755] usblp0: removed [ 189.997988][ T7859] F2FS-fs (loop5): invalid crc value [ 190.034557][ T7859] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.069472][ T7859] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 190.080694][ T5041] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 190.102921][ T7859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 190.542033][ T5041] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.556259][ T7866] loop0: detected capacity change from 0 to 32768 [ 190.602354][ T5041] usb 4-1: not running at top speed; connect to a high speed hub [ 190.638608][ T7866] JBD2: Ignoring recovery information on journal [ 190.827256][ T7866] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 190.882214][ T5041] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 190.891373][ T5041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.921957][ T5041] usb 4-1: Product: syz [ 190.930072][ T5041] usb 4-1: Manufacturer: syz [ 190.943833][ T5041] usb 4-1: SerialNumber: syz [ 190.950900][ T26] audit: type=1804 audit(1786971680.036:50): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1247" name="/newroot/257/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 191.015858][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 191.034142][ T5041] usb 4-1: selecting invalid altsetting 1 [ 191.051767][ T5041] usb 4-1: selecting invalid altsetting 1 [ 191.081548][ T5041] usb 4-1: selecting invalid altsetting 1 [ 191.138587][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.167227][ T6755] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.254293][ T7900] loop5: detected capacity change from 0 to 8192 [ 191.266545][ T4228] usb 4-1: USB disconnect, device number 16 [ 191.357418][ T7900] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 191.367422][ T7900] REISERFS (device loop5): using ordered data mode [ 191.377342][ T7900] reiserfs: using flush barriers [ 191.383811][ T7900] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.400795][ T7900] REISERFS (device loop5): checking transaction log (loop5) [ 191.413127][ T7900] REISERFS (device loop5): Using r5 hash to sort names [ 191.422421][ T7900] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 191.451903][ T6755] usb 5-1: Using ep0 maxpacket: 16 [ 191.576372][ T7907] loop0: detected capacity change from 0 to 1024 [ 191.612080][ T6755] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.631691][ T7907] hfsplus: request for non-existent node 100663296 in B*Tree [ 191.639598][ T7907] hfsplus: request for non-existent node 100663296 in B*Tree [ 191.652694][ T6755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.694050][ T6755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.731543][ T6755] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.751527][ T6755] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.813829][ T7911] tun0: tun_chr_ioctl cmd 1074025675 [ 191.819254][ T7911] tun0: persist enabled [ 191.841667][ T7911] tun0: tun_chr_ioctl cmd 1074025675 [ 191.854718][ T7911] tun0: persist enabled [ 191.883165][ T6755] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.896939][ T6755] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.908786][ T6755] usb 5-1: Manufacturer: syz [ 191.916043][ T6755] usb 5-1: config 0 descriptor?? [ 191.927066][ T7918] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.1270'. [ 192.146476][ T7933] loop3: detected capacity change from 0 to 256 [ 192.251993][ T6755] rc_core: IR keymap rc-hauppauge not found [ 192.259701][ T6755] Registered IR keymap rc-empty [ 192.265595][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.289330][ T7933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 192.342074][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.368188][ T26] audit: type=1800 audit(1786971681.456:51): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1276" name="file1" dev="loop3" ino=1048666 res=0 errno=0 [ 192.390004][ T6755] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 192.416301][ T6755] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 192.453178][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1290'. [ 192.467531][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.512077][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.531263][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1290'. [ 192.565896][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.602244][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.636185][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.687610][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.743632][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.791896][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.824517][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.862059][ T6755] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.902947][ T6755] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.916222][ T6755] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.940511][ T7853] block2mtd: error: cannot open device [ 192.953312][ T6755] usb 5-1: USB disconnect, device number 11 [ 193.047254][ T7976] loop1: detected capacity change from 0 to 64 [ 193.672321][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.679006][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.835309][ T7997] loop1: detected capacity change from 0 to 256 [ 193.866536][ T7979] loop5: detected capacity change from 0 to 131072 [ 193.905735][ T7979] F2FS-fs (loop5): invalid crc value [ 193.921995][ T7997] exfat: Deprecated parameter 'utf8' [ 193.928017][ T7997] exfat: Deprecated parameter 'namecase' [ 193.934205][ T7997] exfat: Deprecated parameter 'namecase' [ 193.939924][ T7997] exfat: Deprecated parameter 'namecase' [ 193.950107][ T7995] loop3: detected capacity change from 0 to 4096 [ 193.961787][ T7979] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.008584][ T7979] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 194.009259][ T7995] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.022981][ T7997] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 194.032068][ T7979] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 194.109769][ T7995] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 194.183783][ T7995] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 194.211154][ T7995] System zones: 0-5 [ 194.248638][ T8015] loop0: detected capacity change from 0 to 512 [ 194.258321][ T7995] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 194.292246][ T8015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.368604][ T8015] EXT4-fs (loop0): 1 truncate cleaned up [ 194.389901][ T8015] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.660208][ T6755] kernel read not supported for file /sequencer (pid: 6755 comm: kworker/0:19) [ 194.846694][ T8032] loop0: detected capacity change from 0 to 1024 [ 194.864868][ T8034] loop3: detected capacity change from 0 to 64 [ 195.073663][ T6754] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.142147][ T8040] device ipvlan0 entered promiscuous mode [ 195.169689][ T8040] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 195.476910][ T6754] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.582605][ T8054] loop0: detected capacity change from 0 to 8192 [ 195.619515][ T8054] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 195.645706][ T8054] REISERFS (device loop0): using ordered data mode [ 195.677468][ T8054] reiserfs: using flush barriers [ 195.692069][ T6754] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.707083][ T8054] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.711591][ T6754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.731202][ T6754] usb 2-1: Product: syz [ 195.735546][ T6754] usb 2-1: Manufacturer: syz [ 195.740165][ T6754] usb 2-1: SerialNumber: syz [ 195.746990][ T8054] REISERFS (device loop0): checking transaction log (loop0) [ 195.784601][ T6754] cdc_ncm 2-1:1.0: skipping garbage [ 195.837683][ T8044] loop4: detected capacity change from 0 to 32768 [ 195.863920][ T8054] REISERFS (device loop0): Using tea hash to sort names [ 195.872319][ T8054] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 195.898773][ T8044] XFS (loop4): Mounting V5 Filesystem [ 195.928823][ T8050] loop5: detected capacity change from 0 to 40427 [ 195.979774][ T8050] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 196.002352][ T8050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 196.036440][ T8050] F2FS-fs (loop5): invalid crc value [ 196.052627][ T8044] XFS (loop4): Ending clean mount [ 196.110666][ T8050] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 196.180969][ T4186] XFS (loop4): Unmounting Filesystem [ 196.267787][ T8050] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 196.307585][ T8050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 196.457250][ T4387] attempt to access beyond end of device [ 196.457250][ T4387] loop5: rw=2049, want=45104, limit=40427 [ 196.872080][ T6754] cdc_ncm 2-1:1.0: bind() failure [ 196.912084][ T6754] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 196.942001][ T6754] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 196.982097][ T6754] usbtest: probe of 2-1:1.1 failed with error -71 [ 196.994857][ T6754] usb 2-1: USB disconnect, device number 13 [ 197.781792][ T8102] JBD2: Ignoring recovery information on journal [ 197.788930][ T4553] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.841575][ T8102] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 197.901291][ T8129] ODEBUG: Out of memory. ODEBUG disabled [ 198.162033][ T4553] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.304870][ T4553] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 198.317972][ T4387] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 198.340979][ T4553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 198.349469][ T4553] usb 2-1: Product: syz [ 198.353915][ T4553] usb 2-1: Manufacturer: syz [ 198.362229][ T4387] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 198.379131][ T4387] OCFS2: File system is now read-only. [ 198.387998][ T4387] (syz-executor,4387,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 198.400793][ T4387] (syz-executor,4387,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 198.415130][ T4553] usb_debug 2-1:1.0: debug converter detected [ 198.425351][ T4387] (syz-executor,4387,1):ocfs2_replay_truncate_records:5974 ERROR: status = -30 [ 198.434877][ T4553] usb 2-1: debug converter now attached to ttyUSB0 [ 198.479764][ T4387] (syz-executor,4387,1):__ocfs2_flush_truncate_log:6055 ERROR: status = -30 [ 198.526145][ T4387] (syz-executor,4387,1):ocfs2_sync_fs:405 ERROR: status = -30 [ 198.552296][ T4387] [ 198.554731][ T4387] ============================================ [ 198.560887][ T4387] WARNING: possible recursive locking detected [ 198.567051][ T4387] syzkaller #0 Not tainted [ 198.571476][ T4387] -------------------------------------------- [ 198.577636][ T4387] syz-executor/4387 is trying to acquire lock: [ 198.583797][ T4387] ffff88807565e990 (jbd2_handle){++++}-{0:0}, at: jbd2_log_wait_commit+0x155/0x4e0 [ 198.593157][ T4387] [ 198.593157][ T4387] but task is already holding lock: [ 198.600527][ T4387] ffff88807565e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 198.609779][ T4387] [ 198.609779][ T4387] other info that might help us debug this: [ 198.617845][ T4387] Possible unsafe locking scenario: [ 198.617845][ T4387] [ 198.625300][ T4387] CPU0 [ 198.628589][ T4387] ---- [ 198.631914][ T4387] lock(jbd2_handle); [ 198.635998][ T4387] lock(jbd2_handle); [ 198.640076][ T4387] [ 198.640076][ T4387] *** DEADLOCK *** [ 198.640076][ T4387] [ 198.648246][ T4387] May be due to missing lock nesting notation [ 198.648246][ T4387] [ 198.656570][ T4387] 4 locks held by syz-executor/4387: [ 198.661869][ T4387] #0: ffff8880534a20e0 (&type->s_umount_key#69){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 198.672074][ T4387] #1: ffff8880534a2650 (sb_internal#3){.+.+}-{0:0}, at: __ocfs2_flush_truncate_log+0x49f/0x1110 [ 198.682630][ T4387] #2: ffff8880605e58e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 198.693347][ T4387] #3: ffff88807565e990 (jbd2_handle){++++}-{0:0} [ 198.693379][ T8154] set_capacity_and_notify: 4 callbacks suppressed [ 198.693392][ T8154] loop3: detected capacity change from 0 to 8192 [ 198.699785][ T4387] , at: start_this_handle+0x12d5/0x1560 [ 198.699807][ T4387] [ 198.699807][ T4387] stack backtrace: [ 198.699813][ T4387] CPU: 1 PID: 4387 Comm: syz-executor Not tainted syzkaller #0 [ 198.731519][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.739619][ T8154] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 198.741622][ T4387] Call Trace: [ 198.741630][ T4387] [ 198.756930][ T4387] dump_stack_lvl+0x188/0x250 [ 198.761629][ T4387] ? show_regs_print_info+0x20/0x20 [ 198.766845][ T4387] ? load_image+0x410/0x410 [ 198.771373][ T4387] __lock_acquire+0x1247/0x7b50 [ 198.776285][ T4387] ? finish_lock_switch+0x12d/0x290 [ 198.778583][ T8154] REISERFS (device loop3): using ordered data mode [ 198.781528][ T4387] ? verify_lock_unused+0x140/0x140 [ 198.793232][ T4387] ? verify_lock_unused+0x140/0x140 [ 198.798461][ T4387] ? __schedule+0x11cb/0x4350 [ 198.799025][ T8154] reiserfs: using flush barriers [ 198.803153][ T4387] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.803183][ T4387] lock_acquire+0x19e/0x400 [ 198.818590][ T4387] ? jbd2_log_wait_commit+0x155/0x4e0 [ 198.823996][ T4387] ? jbd2_log_wait_commit+0x14e/0x4e0 [ 198.829274][ T8154] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.829386][ T4387] ? __lock_acquire+0x7b50/0x7b50 [ 198.850479][ T4387] ? read_lock_is_recursive+0x10/0x10 [ 198.855897][ T4387] ? preempt_schedule+0xbc/0xd0 [ 198.860720][ T8154] REISERFS (device loop3): checking transaction log (loop3) [ 198.860761][ T4387] ? preempt_schedule_common+0xa5/0xd0 [ 198.873516][ T4387] jbd2_log_wait_commit+0x171/0x4e0 [ 198.878740][ T4387] ? jbd2_log_wait_commit+0x155/0x4e0 [ 198.884126][ T4387] ? jbd2_journal_clear_err+0xb0/0xb0 [ 198.889516][ T4387] ? preempt_schedule_thunk+0x16/0x18 [ 198.894908][ T4387] ? jbd2_journal_start_commit+0x205/0x2b0 [ 198.900760][ T4387] ocfs2_sync_fs+0x21d/0x330 [ 198.905369][ T4387] ? ocfs2_put_super+0x1b0/0x1b0 [ 198.910324][ T4387] ? get_nr_dirty_inodes+0x258/0x2e0 [ 198.915631][ T4387] sync_filesystem+0x1be/0x220 [ 198.920412][ T4387] generic_shutdown_super+0x6b/0x300 [ 198.925717][ T4387] kill_block_super+0x7c/0xe0 [ 198.930411][ T4387] deactivate_locked_super+0x93/0xf0 [ 198.935712][ T4387] cleanup_mnt+0x426/0x4d0 [ 198.940151][ T4387] task_work_run+0x125/0x1a0 [ 198.944763][ T4387] exit_to_user_mode_loop+0x10f/0x130 [ 198.950153][ T4387] exit_to_user_mode_prepare+0xee/0x180 [ 198.955716][ T4387] syscall_exit_to_user_mode+0x16/0x40 [ 198.961235][ T4387] do_syscall_64+0x58/0xa0 [ 198.965665][ T4387] ? clear_bhb_loop+0x30/0x80 [ 198.970358][ T4387] ? clear_bhb_loop+0x30/0x80 [ 198.975055][ T4387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.980988][ T4387] RIP: 0033:0x7fc9f4d1f317 [ 198.985419][ T4387] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 199.005040][ T4387] RSP: 002b:00007fffc0850c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.013471][ T4387] RAX: 0000000000000000 RBX: 00007fc9f4db4474 RCX: 00007fc9f4d1f317 [ 199.021464][ T4387] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc0850d10 [ 199.029476][ T4387] RBP: 00007fffc0850d10 R08: 00007fffc0851d10 R09: 00000000ffffffff [ 199.037463][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc0851da0 [ 199.045457][ T4387] R13: 00007fc9f4db4474 R14: 000000000003071f R15: 00007fffc0851de0 [ 199.053446][ T4387] [ 199.071241][ T4553] usb 2-1: USB disconnect, device number 14 [ 199.082001][ T4553] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 199.091463][ T4553] usb_debug 2-1:1.0: device disconnected [ 199.098828][ T8154] REISERFS (device loop3): Using rupasov hash to sort names [ 199.114948][ T8154] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.