last executing test programs: 3.609102974s ago: executing program 1 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.224076704s ago: executing program 1 (id=1675): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000d00)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp852'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) lstat(&(0x7f0000007180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 2.871549822s ago: executing program 1 (id=1679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x1, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x7, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 2.867678622s ago: executing program 3 (id=1680): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,noacl,compress_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c006973636172645f756e6974497365676d656e742c6661756c745f747970653d303030303e3030303030303030303030303030b88a00"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103043, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)) 1.489712674s ago: executing program 3 (id=1691): r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 896.531228ms ago: executing program 4 (id=1698): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) 767.578412ms ago: executing program 0 (id=1699): mount$fuse(0x0, 0x0, 0x0, 0x281063, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) 734.122472ms ago: executing program 2 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x2, [@empty, @multicast]}) 674.701194ms ago: executing program 4 (id=1701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x18, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 623.626875ms ago: executing program 0 (id=1702): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x11, "233d28ab040f747d24b5359c86f84a9f8c"}, &(0x7f0000000580)=0x19) 614.988815ms ago: executing program 1 (id=1703): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 605.396615ms ago: executing program 3 (id=1704): unshare(0x20020600) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) 526.270737ms ago: executing program 2 (id=1705): unshare(0x40400) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 525.609687ms ago: executing program 0 (id=1706): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x200000000000000) fallocate(r0, 0x3, 0x5, 0xffffffff) 443.558479ms ago: executing program 1 (id=1707): r0 = socket$igmp(0x2, 0x3, 0x2) setreuid(0xffffffffffffffff, 0xee00) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 443.254289ms ago: executing program 4 (id=1708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x70bd26, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 410.03353ms ago: executing program 3 (id=1709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c000}, 0x10) 393.99588ms ago: executing program 0 (id=1710): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002, 0x0) set_mempolicy(0x4000, &(0x7f0000000080), 0xea) 347.638742ms ago: executing program 2 (id=1711): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800034ca269bb73c", 0x8, 0x2004c000, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff5c, @mcast1, 0xfefffffb}, 0x1c) 347.417002ms ago: executing program 4 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20000, 0x28400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}}, 0x0) 341.963502ms ago: executing program 1 (id=1713): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@gid}, {@chkdsk_no}, {@chkdsk_always}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) 277.653473ms ago: executing program 2 (id=1714): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x81132, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 241.159844ms ago: executing program 4 (id=1715): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="060011000574"], 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x40000) 218.110104ms ago: executing program 0 (id=1716): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 217.878754ms ago: executing program 3 (id=1717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x5c, 0x0, &(0x7f0000000bc0)=[@enter_looper, @register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @release={0x40046306, 0x2}], 0x50, 0x0, &(0x7f0000000d00)="f249c1449c9cb8daca2000613f46feede7d53219f760b012dac29692c9c2d5a111e2f3cdf6ec4e9cafbdb16adddd88a66b237b829c0970f7981b59eb12d1d5d319b709ddbd4b9eb0f78bf03053f7b200"}) 134.304176ms ago: executing program 2 (id=1718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x8002, 0x2, 0x2, 0xfffff000}, 0x14) 47.809959ms ago: executing program 0 (id=1719): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 47.022719ms ago: executing program 4 (id=1720): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) 41.046499ms ago: executing program 3 (id=1721): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 0s ago: executing program 2 (id=1722): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0xd9b2}}, {}]}) kernel console output (not intermixed with test programs): 939] REISERFS (device loop1): checking transaction log (loop1) [ 130.059920][ T5114] peak_usb: probe of 1-1:0.0 failed with error -22 [ 130.073471][ T4413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.092339][ T5939] REISERFS (device loop1): Using r5 hash to sort names [ 130.111720][ T5939] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 130.173521][ T5114] usb 1-1: USB disconnect, device number 5 [ 130.225270][ T5937] F2FS-fs (loop3): recover fsync data on readonly fs [ 130.237281][ T5939] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 130.255361][ T5937] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 130.269529][ T5937] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 130.305374][ T5937] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.639685][ T4413] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 130.789208][ T4413] lg-g15 0003:046D:C222.0005: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 130.839515][ T4413] usb 5-1: USB disconnect, device number 7 [ 130.946725][ T5959] fido_id[5959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 131.280856][ T5958] loop1: detected capacity change from 0 to 40427 [ 131.294202][ T5954] loop3: detected capacity change from 0 to 32768 [ 131.374103][ T5958] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.414645][ T5958] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.431473][ T5958] F2FS-fs (loop1): invalid crc value [ 131.438862][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 131.488392][ T5954] XFS (loop3): Mounting V5 Filesystem [ 131.521553][ T5958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.593181][ T5970] netlink: 'syz.0.689': attribute type 14 has an invalid length. [ 131.622243][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 131.682255][ T5958] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.694747][ T5954] XFS (loop3): Ending clean mount [ 131.729337][ T5958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.858175][ T4194] XFS (loop3): Unmounting Filesystem [ 131.983573][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/304.tmp-b7:4' failed: Read-only file system [ 132.011604][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-diskseq/311.tmp-b7:1' failed: Read-only file system [ 132.059452][ T5991] loop0: detected capacity change from 0 to 4096 [ 132.084551][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 132.181611][ T5991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.188463][ T5991] EXT4-fs (loop0): inline encryption not supported [ 132.207791][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/312.tmp-b7:3' failed: Read-only file system [ 132.225504][ T5991] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 132.257102][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/312.tmp-b7:3' failed: Read-only file system [ 132.291665][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/311.tmp-b7:1' failed: Read-only file system [ 132.305581][ T5991] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a803c028, mo2=0002] [ 132.349601][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/311.tmp-b7:1' failed: Read-only file system [ 132.358494][ T5991] System zones: 0-5 [ 132.402719][ T5991] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000003,dioread_lock,auto_da_alloc=0x0000000000000000,nodioread_nolock,nodioread_nolock,errors=remount-ro,usrjquota=./file1,nolazytime,max_dir_size_kb=0x00000. Quota mode: writeback. [ 132.444897][ T5984] loop2: detected capacity change from 0 to 32768 [ 132.503572][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/313.tmp-b7:0' failed: Read-only file system [ 132.517808][ T5984] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.538572][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 132.588158][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 132.664403][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-diskseq/314.tmp-b7:3' failed: Read-only file system [ 132.720601][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 132.842407][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848863][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099219][ T5115] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 133.317499][ T6003] loop0: detected capacity change from 0 to 32768 [ 133.337539][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 133.362445][ T6020] netlink: 'syz.4.696': attribute type 14 has an invalid length. [ 133.393096][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.696'. [ 133.453033][ T6026] tipc: Started in network mode [ 133.457968][ T6026] tipc: Node identity e0000002, cluster identity 4711 [ 133.504392][ T6026] tipc: Enabling of bearer rejected, failed to enable media [ 133.544841][ T6003] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 133.579619][ T6034] loop4: detected capacity change from 0 to 64 [ 133.613950][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 133.639475][ T5115] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 133.668624][ T6034] attempt to access beyond end of device [ 133.668624][ T6034] loop4: rw=0, want=1026, limit=64 [ 133.680141][ T6034] Buffer I/O error on dev loop4, logical block 512, async page read [ 133.686456][ T5115] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 133.688581][ T6034] attempt to access beyond end of device [ 133.688581][ T6034] loop4: rw=0, want=113154, limit=64 [ 133.708122][ T6034] Buffer I/O error on dev loop4, logical block 56576, async page read [ 133.710450][ T5115] usb 2-1: Product: syz [ 133.772089][ T5115] usb 2-1: Manufacturer: syz [ 133.776771][ T5115] usb 2-1: SerialNumber: syz [ 133.792081][ T6037] loop0: detected capacity change from 0 to 1024 [ 133.810522][ T5115] usb 2-1: config 0 descriptor?? [ 133.819410][ T4412] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.059271][ T5115] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 134.239395][ T4412] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 134.248496][ T4412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.262827][ T4412] usb 3-1: config 0 descriptor?? [ 134.269361][ T5115] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 134.276186][ T5115] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 134.284669][ T5115] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 134.329441][ T5115] peak_usb: probe of 2-1:0.0 failed with error -22 [ 134.496025][ T23] usb 2-1: USB disconnect, device number 9 [ 134.519246][ T4412] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 134.527939][ T4412] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 134.729301][ T4412] [drm:udl_init] *ERROR* Selecting channel failed [ 134.744896][ T4412] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 134.752688][ T4412] [drm] Initialized udl on minor 2 [ 134.781447][ T4412] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.790874][ T4412] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 134.806861][ T4412] usb 3-1: USB disconnect, device number 6 [ 134.814279][ T4411] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 134.824804][ T4411] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 134.829510][ T5115] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.835449][ T4411] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 134.869328][ T4413] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 135.219336][ T5115] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.234048][ T5115] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 135.243402][ T5115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.338490][ T6054] loop1: detected capacity change from 0 to 128 [ 135.420149][ T6054] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 135.471816][ T4413] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 135.501631][ T4413] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 135.510637][ T6054] hpfs: filesystem error: improperly stopped [ 135.516769][ T6054] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 135.529231][ T4413] usb 5-1: Product: syz [ 135.552387][ T4413] usb 5-1: Manufacturer: syz [ 135.552411][ T4413] usb 5-1: SerialNumber: syz [ 135.572702][ T6054] hpfs: You really don't want any checks? You are crazy... [ 135.573029][ T6054] hpfs: hpfs_map_sector(): read error [ 135.573041][ T6054] hpfs: code page support is disabled [ 135.573096][ T6054] hpfs: hpfs_map_4sectors(): unaligned read [ 135.573135][ T6054] hpfs: hpfs_map_4sectors(): unaligned read [ 135.573146][ T6054] hpfs: filesystem error: unable to find root dir [ 135.611688][ T4413] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 135.712940][ T6066] loop3: detected capacity change from 0 to 4096 [ 135.733441][ T5115] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 135.809396][ T6066] EXT4-fs (loop3): Test dummy encryption mode enabled [ 135.817005][ T6066] EXT4-fs (loop3): inline encryption not supported [ 135.849192][ T5115] lg-g15 0003:046D:C222.0006: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 135.857880][ T6066] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 135.921250][ T6066] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a803c028, mo2=0002] [ 135.941155][ T6066] System zones: 0-5 [ 135.961273][ T5115] usb 1-1: USB disconnect, device number 6 [ 135.981737][ T6066] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000003,dioread_lock,auto_da_alloc=0x0000000000000000,nodioread_nolock,nodioread_nolock,errors=remount-ro,usrjquota=./file1,nolazytime,max_dir_size_kb=0x00000. Quota mode: writeback. [ 136.043884][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 136.109387][ T4413] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 136.137457][ T4413] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 136.323223][ T5115] usb 5-1: USB disconnect, device number 8 [ 136.925865][ T6093] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 137.005400][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-diskseq/327.tmp-b7:1' failed: Read-only file system [ 137.150429][ T6099] loop3: detected capacity change from 0 to 1024 [ 137.263427][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 137.293745][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/328.tmp-b7:3' failed: Read-only file system [ 137.332518][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/327.tmp-b7:1' failed: Read-only file system [ 137.354710][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/323.tmp-b7:4' failed: Read-only file system [ 137.368206][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 137.400116][ T4180] udevd[4180]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 137.418030][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/323.tmp-b7:4' failed: Read-only file system [ 137.433352][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-uuid/67d633f8-938d-3ec7-b076-6b27e93c5b1e.tmp-b7:3' failed: Read-only file system [ 137.450955][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/327.tmp-b7:1' failed: Read-only file system [ 137.485294][ T6108] loop4: detected capacity change from 0 to 4096 [ 137.524311][ T6115] loop2: detected capacity change from 0 to 256 [ 137.560500][ T6108] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.590035][ T6108] EXT4-fs (loop4): inline encryption not supported [ 137.607307][ T6108] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 137.660564][ T6108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a803c028, mo2=0002] [ 137.668796][ T6108] System zones: 0-5 [ 137.679321][ T6108] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000003,dioread_lock,auto_da_alloc=0x0000000000000000,nodioread_nolock,nodioread_nolock,errors=remount-ro,usrjquota=./file1,nolazytime,max_dir_size_kb=0x00000. Quota mode: writeback. [ 137.840614][ T6126] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.099316][ T4411] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.144977][ T6137] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 138.263214][ T6139] loop3: detected capacity change from 0 to 4096 [ 138.340831][ T6149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.365616][ T6139] NILFS (loop3): error -22 preparing GC: cannot mark copying blocks dirty [ 138.449245][ T5115] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.502746][ T4411] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 138.521453][ T4411] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 138.567214][ T4411] usb 3-1: config 220 has no interface number 2 [ 138.587766][ T4411] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 138.648377][ T4411] usb 3-1: config 220 interface 0 has no altsetting 0 [ 138.669149][ T4411] usb 3-1: config 220 interface 76 has no altsetting 0 [ 138.706799][ T4411] usb 3-1: config 220 interface 1 has no altsetting 0 [ 138.719082][ T5115] usb 5-1: Using ep0 maxpacket: 32 [ 138.756632][ T6169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.845378][ T5115] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.869150][ T5115] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.879145][ T5115] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.899401][ T5115] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.899760][ T4411] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 138.906191][ T5115] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 138.906223][ T5115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.936441][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.961884][ T5115] usb 5-1: config 0 descriptor?? [ 138.977250][ T4411] usb 3-1: Product: syz [ 138.998647][ T4411] usb 3-1: Manufacturer: syz [ 139.012149][ T4411] usb 3-1: SerialNumber: syz [ 139.058960][ T6180] loop3: detected capacity change from 0 to 1024 [ 139.251492][ T6180] EXT4-fs (loop3): Ignoring removed bh option [ 139.376693][ T6192] loop0: detected capacity change from 0 to 1024 [ 139.394554][ T6180] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 139.418625][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.426070][ T4411] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 139.435699][ T4411] usb 3-1: No valid video chain found. [ 139.455621][ T4411] usb 3-1: selecting invalid altsetting 0 [ 139.582506][ T6192] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 139.590706][ T4411] usb 3-1: selecting invalid altsetting 0 [ 139.597256][ T4411] usbtest: probe of 3-1:220.1 failed with error -22 [ 139.626249][ T6194] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 139.664944][ T4411] usb 3-1: USB disconnect, device number 7 [ 139.690632][ T6194] hfsplus: xattr searching failed [ 139.797060][ T155] hfsplus: b-tree write err: -5, ino 25 [ 139.829826][ T155] hfsplus: b-tree write err: -5, ino 4 [ 139.850444][ T155] hfsplus: b-tree write err: -5, ino 2 [ 139.861653][ T155] hfsplus: b-tree write err: -5, ino 20 [ 140.126582][ T6188] loop1: detected capacity change from 0 to 131072 [ 140.133208][ C0] sched: RT throttling activated [ 140.183160][ T5115] input: HID 17ef:6067 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6067.0007/input/input16 [ 140.209924][ T6188] F2FS-fs (loop1): Invalid segment count (0) [ 140.216012][ T6188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.233936][ T6188] F2FS-fs (loop1): invalid crc value [ 140.260783][ T5115] lenovo 0003:17EF:6067.0007: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6067] on usb-dummy_hcd.4-1/input0 [ 140.284275][ T6188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.322831][ T6188] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [393219, 3] run fsck to fix. [ 140.334638][ T6188] F2FS-fs (loop1): Failed to read root inode [ 140.402274][ T6207] loop2: detected capacity change from 0 to 512 [ 140.426759][ T5115] usb 5-1: USB disconnect, device number 9 [ 140.527455][ T6207] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 140.587550][ T6207] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.779: bg 0: block 4: invalid block bitmap [ 140.658449][ T6209] fido_id[6209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 140.701617][ T6207] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 140.740435][ T6207] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.779: invalid indirect mapped block 1 (level 1) [ 140.830162][ T6207] EXT4-fs (loop2): 1 truncate cleaned up [ 140.859155][ T6207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.323686][ T6227] loop0: detected capacity change from 0 to 1024 [ 141.338587][ T6225] loop2: detected capacity change from 0 to 764 [ 141.427285][ T6225] rock: directory entry would overflow storage [ 141.459479][ T6227] EXT4-fs (loop0): Ignoring removed bh option [ 141.490015][ T6225] rock: sig=0x5850, size=36, remaining=22 [ 141.565668][ T6227] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 141.672980][ T6235] loop4: detected capacity change from 0 to 512 [ 141.779816][ T6235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.846811][ T6235] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.910122][ T6235] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.792: invalid size [ 142.069668][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 142.104137][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/345.tmp-b7:0' failed: Read-only file system [ 142.127859][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 142.149837][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-diskseq/341.tmp-b7:3' failed: Read-only file system [ 142.167863][ T6248] loop0: detected capacity change from 0 to 512 [ 142.185875][ T6244] loop2: detected capacity change from 0 to 4096 [ 142.213274][ T6252] loop3: detected capacity change from 0 to 1024 [ 142.242664][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 142.266339][ T6215] loop1: detected capacity change from 0 to 40427 [ 142.360057][ T6248] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 142.402591][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/353.tmp-b7:3' failed: Read-only file system [ 142.410634][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 142.428515][ T6215] F2FS-fs (loop1): invalid crc value [ 142.442727][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/345.tmp-b7:0' failed: Read-only file system [ 142.485977][ T6248] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.797: bg 0: block 4: invalid block bitmap [ 142.525656][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 142.542922][ T4280] hfsplus: b-tree write err: -5, ino 8 [ 142.554895][ T6215] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.593831][ T6248] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 142.596724][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 142.603528][ T6263] ntfs3: loop2: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 142.660483][ T6248] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.797: invalid indirect mapped block 1 (level 1) [ 142.782660][ T6248] EXT4-fs (loop0): 1 truncate cleaned up [ 142.788513][ T6248] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.080868][ T6215] F2FS-fs (loop1): Start checkpoint disabled! [ 143.249837][ T6215] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 143.421408][ T6280] loop2: detected capacity change from 0 to 1024 [ 143.530626][ T6280] EXT4-fs (loop2): Ignoring removed bh option [ 143.689894][ T6280] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 143.722265][ T6270] loop4: detected capacity change from 0 to 131072 [ 143.781461][ T6270] F2FS-fs (loop4): Invalid segment count (0) [ 143.787701][ T6270] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.797869][ T6270] F2FS-fs (loop4): invalid crc value [ 143.865329][ T6270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.927706][ T6293] tipc: Enabling of bearer rejected, failed to enable media [ 143.936180][ T6270] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [393219, 3] run fsck to fix. [ 143.947983][ T6270] F2FS-fs (loop4): Failed to read root inode [ 144.029126][ T5115] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.419291][ T5115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.463901][ T5115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.629366][ T5115] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 144.679082][ T5115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 144.739113][ T5115] usb 4-1: Product: syz [ 144.753592][ T5115] usb 4-1: Manufacturer: syz [ 144.830544][ T5115] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 144.858867][ T6328] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.940382][ T6328] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.817: bg 0: block 4: invalid block bitmap [ 144.960268][ T6328] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 144.970728][ T6328] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.817: invalid indirect mapped block 1 (level 1) [ 144.984864][ T6328] EXT4-fs (loop1): 1 truncate cleaned up [ 144.990946][ T6328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.023664][ T6320] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.190907][ T6338] tipc: Enabling of bearer rejected, failed to enable media [ 145.387704][ T6320] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.448873][ T6320] exFAT-fs (loop4): unable to read boot sector [ 145.472930][ T6320] exFAT-fs (loop4): failed to read boot sector [ 145.479939][ T5115] mos7840: probe of ttyUSB0 failed with error -71 [ 145.509146][ T5115] usb 4-1: USB disconnect, device number 7 [ 145.528922][ T6320] exFAT-fs (loop4): failed to recognize exfat type [ 145.544980][ T5115] mos7840 4-1:1.0: device disconnected [ 146.097779][ T6362] netlink: 220 bytes leftover after parsing attributes in process `syz.3.833'. [ 146.137666][ T6365] set_capacity_and_notify: 3 callbacks suppressed [ 146.137682][ T6365] loop4: detected capacity change from 0 to 16 [ 146.165698][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 146.244050][ T6365] erofs: (device loop4): mounted with root inode @ nid 36. [ 146.294125][ T6365] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 146.424275][ T6342] loop2: detected capacity change from 0 to 32768 [ 147.097913][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/365.tmp-b7:1' failed: Read-only file system [ 147.099444][ T6390] ip_tables: iptables: counters copy to user failed while replacing table [ 147.160034][ T6392] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 147.204584][ T6394] loop4: detected capacity change from 0 to 1024 [ 147.224534][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/368.tmp-b7:0' failed: Read-only file system [ 147.256097][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/371.tmp-b7:4' failed: Read-only file system [ 147.268575][ T6394] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 147.313084][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/365.tmp-b7:1' failed: Read-only file system [ 147.346391][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 147.377649][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/368.tmp-b7:0' failed: Read-only file system [ 147.405790][ T6369] loop3: detected capacity change from 0 to 40427 [ 147.451395][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system [ 147.487179][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/365.tmp-b7:1' failed: Read-only file system [ 147.534838][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 147.535622][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 147.606049][ T6369] F2FS-fs (loop3): invalid crc value [ 147.678873][ T6369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.769944][ T6412] netlink: 220 bytes leftover after parsing attributes in process `syz.2.856'. [ 147.816500][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 147.894299][ T6369] F2FS-fs (loop3): Start checkpoint disabled! [ 147.962598][ T6369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 148.013072][ T6426] netlink: 52 bytes leftover after parsing attributes in process `syz.2.861'. [ 148.049154][ T6426] netlink: 52 bytes leftover after parsing attributes in process `syz.2.861'. [ 148.251046][ T6425] loop4: detected capacity change from 0 to 8192 [ 148.324520][ T6425] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 148.359957][ T6425] REISERFS (device loop4): using ordered data mode [ 148.395698][ T6425] reiserfs: using flush barriers [ 148.436498][ T6425] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.533237][ T6425] REISERFS (device loop4): checking transaction log (loop4) [ 148.618412][ T6425] REISERFS (device loop4): Using r5 hash to sort names [ 148.645542][ T6425] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 148.941370][ T6453] netlink: 220 bytes leftover after parsing attributes in process `syz.0.872'. [ 148.963923][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 149.086346][ T6455] loop3: detected capacity change from 0 to 2048 [ 149.219396][ T6467] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.248112][ T6470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.690879][ T6493] netlink: 220 bytes leftover after parsing attributes in process `syz.1.894'. [ 149.785985][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 149.821642][ T6497] loop3: detected capacity change from 0 to 2048 [ 149.986444][ T6497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.081457][ T6497] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.336450][ T6514] netlink: del zone limit has 8 unknown bytes [ 150.856393][ T4199] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.963598][ T6542] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.975274][ T6510] loop0: detected capacity change from 0 to 32768 [ 151.083443][ T6549] loop1: detected capacity change from 0 to 4096 [ 151.097393][ T6510] XFS (loop0): Mounting V5 Filesystem [ 151.148699][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.185625][ T6549] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 151.198270][ T6549] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 151.209288][ T6549] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 151.252527][ T6549] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,nobarrier,noinit_itable,usrjquota="errors=continue,errors=continue,noblock_validity,. Quota mode: writeback. [ 151.287796][ T6510] XFS (loop0): Ending clean mount [ 151.545582][ T4190] XFS (loop0): Unmounting Filesystem [ 151.661804][ T6566] __nla_validate_parse: 1 callbacks suppressed [ 151.661833][ T6566] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.923'. [ 151.718630][ T6566] netlink: del zone limit has 8 unknown bytes [ 151.877440][ T6553] loop2: detected capacity change from 0 to 32768 [ 152.026248][ T6570] loop1: detected capacity change from 0 to 2048 [ 152.095875][ T6574] loop3: detected capacity change from 0 to 512 [ 152.126386][ T6570] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.152818][ T6574] EXT4-fs (loop3): invalid inodes per group: 0 [ 152.152818][ T6574] [ 152.195623][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-diskseq/389.tmp-b7:3' failed: Read-only file system [ 152.221667][ T6578] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.225588][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/378.tmp-b7:4' failed: Read-only file system [ 152.244190][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop1 [ 152.270249][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-diskseq/386.tmp-b7:2' failed: Read-only file system [ 152.274601][ T4410] udevd[4410]: symlink '../../loop0' '/dev/disk/by-diskseq/387.tmp-b7:0' failed: Read-only file system [ 152.294112][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/388.tmp-b7:1' failed: Read-only file system [ 152.320680][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 152.340409][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system [ 152.359339][ T6574] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 152.383357][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/378.tmp-b7:4' failed: Read-only file system [ 152.397877][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:3' failed: Read-only file system [ 152.588979][ T6590] loop0: detected capacity change from 0 to 512 [ 152.600253][ T6586] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.741651][ T6590] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.779271][ T4270] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.809250][ T6590] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.901358][ T6590] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.931: invalid size [ 152.959138][ T4412] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.004874][ T5115] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.049322][ T6608] loop2: detected capacity change from 0 to 1024 [ 153.077408][ T6608] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.131282][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv0,barrier=0x000000000000000. Quota mode: none. [ 153.219496][ T4270] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 153.221511][ T5014] Process accounting resumed [ 153.239153][ T4270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 153.279525][ T6608] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 153.349369][ T4270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.376353][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.379777][ T5115] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.394710][ T4270] usb 5-1: SerialNumber: syz [ 153.429660][ T4412] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.450873][ T4270] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 153.539429][ T4412] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 153.584677][ T5115] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 153.605756][ T5115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.613959][ T5115] usb 4-1: Product: syz [ 153.618254][ T5115] usb 4-1: Manufacturer: syz [ 153.623018][ T5115] usb 4-1: SerialNumber: syz [ 153.641846][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.950'. [ 153.662219][ T6622] loop0: detected capacity change from 0 to 4096 [ 153.675755][ T5114] usb 5-1: USB disconnect, device number 10 [ 153.683414][ T5115] kl5kusb105 4-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 153.709441][ T5115] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 153.739246][ T4412] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 153.761358][ T4412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.777843][ T6622] NILFS (loop0): invalid segment: Checksum error in segment payload [ 153.787209][ T4412] usb 2-1: Product: syz [ 153.791674][ T6622] NILFS (loop0): trying rollback from an earlier position [ 153.799212][ T4412] usb 2-1: Manufacturer: syz [ 153.803847][ T4412] usb 2-1: SerialNumber: syz [ 153.837760][ T6622] NILFS (loop0): recovery complete [ 153.859149][ T6627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.257377][ T6647] loop4: detected capacity change from 0 to 16 [ 154.284427][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 154.357093][ T6647] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.389327][ T4270] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.635978][ T4412] usb 2-1: USB disconnect, device number 10 [ 154.789425][ T4270] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.800623][ T4270] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.810864][ T4270] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.820045][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.860832][ T6638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.053609][ T6668] loop0: detected capacity change from 0 to 64 [ 155.138989][ T6673] netlink: 'syz.1.972': attribute type 29 has an invalid length. [ 155.161723][ T6668] hfs: unable to locate alternate MDB [ 155.179563][ T6668] hfs: continuing without an alternate MDB [ 155.216133][ T26] audit: type=1800 audit(1788882844.401:5): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.980" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 155.250241][ T5115] usb 3-1: USB disconnect, device number 8 [ 155.432993][ T6684] loop1: detected capacity change from 0 to 64 [ 155.480267][ T6686] netlink: 5 bytes leftover after parsing attributes in process `syz.0.990'. [ 155.510389][ T6684] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 155.663882][ T6691] loop0: detected capacity change from 0 to 4096 [ 155.704908][ T6691] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.757149][ T5115] usb 4-1: USB disconnect, device number 8 [ 155.774094][ T5115] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 155.796017][ T5115] kl5kusb105 4-1:1.0: device disconnected [ 155.884278][ T6700] EXT4-fs (loop1): invalid inodes per group: 0 [ 155.884278][ T6700] [ 155.901451][ T6691] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 155.943840][ T6691] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 155.979369][ T6700] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 156.047627][ T6691] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 156.119835][ T6691] EXT4-fs (loop0): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,nobarrier,noinit_itable,usrjquota="errors=continue,errors=continue,noblock_validity,. Quota mode: writeback. [ 156.159852][ T6711] ip_tables: iptables: counters copy to user failed while replacing table [ 156.202787][ T6711] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 156.255937][ T4746] hfsplus: b-tree write err: -5, ino 8 [ 156.536331][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 156.561717][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 156.574833][ T6729] netlink: 'syz.4.1000': attribute type 18 has an invalid length. [ 156.589676][ T6715] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 156.619177][ T5114] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.651025][ T6715] REISERFS (device loop3): using ordered data mode [ 156.665851][ T6715] reiserfs: using flush barriers [ 156.677710][ T6715] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.694955][ T6715] REISERFS (device loop3): checking transaction log (loop3) [ 156.712201][ T6715] REISERFS (device loop3): Using r5 hash to sort names [ 156.724384][ T6715] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 156.979254][ T5114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.109334][ T4412] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.121582][ T6748] set_capacity_and_notify: 3 callbacks suppressed [ 157.121599][ T6748] loop3: detected capacity change from 0 to 4096 [ 157.149254][ T5114] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 157.158352][ T5114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.167487][ T5114] usb 2-1: Product: syz [ 157.180517][ T5114] usb 2-1: Manufacturer: syz [ 157.185200][ T5114] usb 2-1: SerialNumber: syz [ 157.191870][ T6748] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.230543][ T6748] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 157.241408][ T5114] kl5kusb105 2-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 157.254094][ T6748] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 157.262533][ T5114] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 157.278198][ T6748] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 157.297963][ T4176] udevd[4176]: setting mode of /dev/ttyUSB0 to 020660 failed: Read-only file system [ 157.302968][ T6748] EXT4-fs (loop3): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,nobarrier,noinit_itable,usrjquota="errors=continue,errors=continue,noblock_validity,. Quota mode: writeback. [ 157.339594][ T4176] udevd[4176]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: Read-only file system [ 157.378393][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/411.tmp-b7:3' failed: Read-only file system [ 157.416348][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 157.448867][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/396.tmp-b7:2' failed: Read-only file system [ 157.533539][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/411.tmp-b7:3' failed: Read-only file system [ 157.548213][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/413.tmp-b7:3' failed: Read-only file system [ 157.581588][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/413.tmp-b7:3' failed: Read-only file system [ 157.589355][ T4412] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.593859][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/413.tmp-b7:3' failed: Read-only file system [ 157.611843][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/413.tmp-b7:3' failed: Read-only file system [ 157.699473][ T4412] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 157.749327][ T4270] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 157.889514][ T4412] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 157.899124][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.907438][ T4412] usb 1-1: Product: syz [ 157.912029][ T4412] usb 1-1: Manufacturer: syz [ 157.916655][ T4412] usb 1-1: SerialNumber: syz [ 157.969241][ T5014] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 158.139409][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 158.151486][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 158.319341][ T4270] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 158.328492][ T4270] usb 5-1: New USB device strings: Mfr=154, Product=4, SerialNumber=3 [ 158.337129][ T4270] usb 5-1: Product: syz [ 158.341786][ T4270] usb 5-1: Manufacturer: syz [ 158.346877][ T4270] usb 5-1: SerialNumber: syz [ 158.354209][ T4270] usb 5-1: config 0 descriptor?? [ 158.379337][ T5014] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 158.391229][ T5014] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.404336][ T5014] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.411162][ T5014] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 158.419807][ T4270] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 158.420776][ T5014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.445588][ T5014] usb 4-1: config 0 descriptor?? [ 158.470110][ T6763] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 158.612254][ T5115] usb 5-1: USB disconnect, device number 11 [ 158.712200][ T4412] usb 1-1: USB disconnect, device number 7 [ 158.932832][ T5014] elecom 0003:056E:00FC.0008: unknown main item tag 0x2 [ 158.945946][ T5014] elecom 0003:056E:00FC.0008: unknown global tag 0xd [ 158.953895][ T5014] elecom 0003:056E:00FC.0008: item 0 2 1 13 parsing failed [ 158.967588][ T5014] elecom: probe of 0003:056E:00FC.0008 failed with error -22 [ 159.152096][ T5115] usb 4-1: USB disconnect, device number 9 [ 159.300183][ T6770] loop0: detected capacity change from 0 to 8192 [ 159.357256][ T4412] usb 2-1: USB disconnect, device number 11 [ 159.368147][ T4412] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 159.382499][ T4412] kl5kusb105 2-1:1.0: device disconnected [ 159.395273][ T6770] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 159.408811][ T6770] REISERFS (device loop0): using ordered data mode [ 159.416059][ T6770] reiserfs: using flush barriers [ 159.422511][ T6770] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.439481][ T6770] REISERFS (device loop0): checking transaction log (loop0) [ 159.448214][ T6770] REISERFS (device loop0): Using r5 hash to sort names [ 159.456048][ T4270] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 159.464253][ T6770] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 159.819664][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 159.865351][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 159.904023][ T6793] loop0: detected capacity change from 0 to 1024 [ 159.945813][ T6796] 9pnet: p9_fd_create_unix (6796): problem connecting socket: qY3aK: -111 [ 159.977695][ T6793] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.996067][ T6797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1032'. [ 160.019288][ T6797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1032'. [ 160.028343][ T6797] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 160.049386][ T4270] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 160.058598][ T4270] usb 3-1: New USB device strings: Mfr=154, Product=4, SerialNumber=3 [ 160.099173][ T4270] usb 3-1: Product: syz [ 160.139113][ T4270] usb 3-1: Manufacturer: syz [ 160.144025][ T4270] usb 3-1: SerialNumber: syz [ 160.165437][ T6793] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv0,barrier=0x000000000000000. Quota mode: none. [ 160.245684][ T4270] usb 3-1: config 0 descriptor?? [ 160.306456][ T5014] Process accounting resumed [ 160.322243][ T4270] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 160.332534][ T6793] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 160.380665][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 160.551074][ T23] usb 3-1: USB disconnect, device number 9 [ 160.595595][ T6821] loop0: detected capacity change from 0 to 16 [ 160.719278][ T6821] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.736903][ T6830] Bluetooth: hci0: unsupported parameter 5135 [ 160.769305][ T6830] Bluetooth: hci0: unsupported parameter 8192 [ 160.778961][ T6830] Bluetooth: hci0: unsupported parameter 5135 [ 160.791454][ T6830] Bluetooth: hci0: unsupported parameter 8192 [ 160.865766][ T6832] loop4: detected capacity change from 0 to 1024 [ 160.910233][ T5115] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.329183][ T5115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.339541][ T5115] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 161.348745][ T5115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.404122][ T4412] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.435692][ T6859] ip_tables: iptables: counters copy to user failed while replacing table [ 161.649267][ T4412] usb 5-1: Using ep0 maxpacket: 32 [ 161.769322][ T4412] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 132, using maximum allowed: 30 [ 161.780413][ T4412] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 161.793556][ T4412] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.800494][ T4412] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 161.810000][ T4412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.822421][ T4412] usb 5-1: config 0 descriptor?? [ 161.864715][ T5115] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 161.969336][ T5115] lg-g15 0003:046D:C222.0009: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 162.042545][ T6862] loop1: detected capacity change from 0 to 1024 [ 162.097560][ T5115] usb 4-1: USB disconnect, device number 10 [ 162.148482][ T6868] loop0: detected capacity change from 0 to 1024 [ 162.274487][ T6872] program syz.2.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.306396][ T4180] udevd[4180]: symlink '../../loop2' '/dev/disk/by-diskseq/396.tmp-b7:2' failed: Read-only file system [ 162.315241][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 162.332216][ T4412] wacom 0003:056A:00B8.000A: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 162.362794][ T4412] wacom 0003:056A:00B8.000A: hidraw0: USB HID v10.05 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 162.374292][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/423.tmp-b7:1' failed: Read-only file system [ 162.377096][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 162.403691][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 162.428101][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-uuid/67d633f8-938d-3ec7-b076-6b27e93c5b1e.tmp-b7:1' failed: Read-only file system [ 162.429733][ T4180] udevd[4180]: symlink '../../loop2' '/dev/disk/by-diskseq/396.tmp-b7:2' failed: Read-only file system [ 162.458564][ T4412] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.000A/input/input20 [ 162.499682][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 162.516729][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 162.571275][ T4412] usb 5-1: USB disconnect, device number 12 [ 162.572115][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 162.810367][ T6877] fido_id[6877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.958540][ T6894] loop0: detected capacity change from 0 to 1024 [ 163.058813][ T6894] EXT4-fs (loop0): Ignoring removed bh option [ 163.078934][ T6901] loop2: detected capacity change from 0 to 64 [ 163.127256][ T6894] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 163.201757][ T6894] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 163.535998][ T6921] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 163.617336][ T6921] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1090'. [ 163.753746][ T6933] program syz.1.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.776985][ T6928] loop0: detected capacity change from 0 to 4096 [ 163.783628][ T5014] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.792495][ T6934] loop3: detected capacity change from 0 to 1024 [ 163.851393][ T6937] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.909246][ T6941] loop4: detected capacity change from 0 to 64 [ 164.188982][ T6948] loop0: detected capacity change from 0 to 256 [ 164.209433][ T5014] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.225536][ T5014] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 164.245266][ T5014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.296905][ T6951] loop4: detected capacity change from 0 to 1024 [ 164.322050][ T6953] loop3: detected capacity change from 0 to 512 [ 164.376213][ T6953] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: comm syz.3.1104: inode #2147418112: comm syz.3.1104: iget: illegal inode # [ 164.402786][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.418209][ T6953] EXT4-fs (loop3): no journal found [ 164.436152][ T6956] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 164.444253][ T6953] EXT4-fs (loop3): can't get journal size [ 164.454533][ T6958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.469773][ T6956] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1106'. [ 164.499815][ T6953] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 164.536345][ T6953] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 164.569310][ T6953] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 164.604016][ T6953] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1104: Invalid inode bitmap blk 4 in block_group 0 [ 164.794029][ T5014] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 164.813052][ T6965] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 164.867207][ T6974] loop1: detected capacity change from 0 to 64 [ 164.891947][ T6965] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1104: Invalid inode bitmap blk 4 in block_group 0 [ 164.968702][ T6965] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 164.972948][ T5014] lg-g15 0003:046D:C222.000B: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 165.050358][ T5014] usb 3-1: USB disconnect, device number 10 [ 165.268283][ T6981] fido_id[6981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 165.439216][ T4413] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.485190][ T6988] EXT4-fs (loop4): Ignoring removed bh option [ 165.529112][ T4270] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.571681][ T6995] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 165.580524][ T6988] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 165.599503][ T6995] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1120'. [ 165.679199][ T4413] usb 2-1: Using ep0 maxpacket: 8 [ 165.779410][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 165.799366][ T4413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.826509][ T4413] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.869564][ T4413] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 165.899316][ T4270] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 165.917591][ T4270] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 165.935077][ T4413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.956070][ T4413] usb 2-1: config 0 descriptor?? [ 165.969127][ T4270] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.981502][ T4270] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 165.992022][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.028401][ T4270] usb 4-1: config 0 descriptor?? [ 166.110186][ T7016] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 166.367009][ T7026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.451808][ T4413] logitech-djreceiver 0003:046D:C534.000C: unknown main item tag 0x0 [ 166.460820][ T4413] logitech-djreceiver 0003:046D:C534.000C: unknown main item tag 0x0 [ 166.511219][ T4270] microsoft 0003:045E:00F9.000D: unknown main item tag 0x2 [ 166.543829][ T4270] microsoft 0003:045E:00F9.000D: unknown main item tag 0x6 [ 166.555337][ T4270] microsoft 0003:045E:00F9.000D: unknown main item tag 0x5 [ 166.563437][ T4270] microsoft 0003:045E:00F9.000D: unknown main item tag 0x6 [ 166.571157][ T4270] microsoft 0003:045E:00F9.000D: unknown main item tag 0x5 [ 166.578586][ T4270] microsoft 0003:045E:00F9.000D: item fetching failed at offset 38/40 [ 166.603492][ T4270] microsoft 0003:045E:00F9.000D: parse failed [ 166.631894][ T4270] microsoft: probe of 0003:045E:00F9.000D failed with error -22 [ 166.693240][ T4413] usb 2-1: USB disconnect, device number 12 [ 166.742116][ T4270] usb 4-1: USB disconnect, device number 11 [ 167.174151][ T7044] set_capacity_and_notify: 5 callbacks suppressed [ 167.174169][ T7044] loop2: detected capacity change from 0 to 128 [ 167.258219][ T7048] loop4: detected capacity change from 0 to 256 [ 167.292667][ T7044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.364799][ T7044] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.385418][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 167.396591][ T7048] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 167.455223][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 167.480530][ T7061] device wlan1 entered promiscuous mode [ 167.486336][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 167.536901][ T7061] device wlan1 left promiscuous mode [ 167.577900][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/452.tmp-b7:0' failed: Read-only file system [ 167.696104][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/456.tmp-b7:4' failed: Read-only file system [ 167.738574][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 167.754194][ T7068] loop2: detected capacity change from 0 to 256 [ 167.762128][ T7063] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.776487][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/443.tmp-b7:1' failed: Read-only file system [ 167.792648][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/444.tmp-b7:3' failed: Read-only file system [ 167.808985][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/456.tmp-b7:4' failed: Read-only file system [ 167.834995][ T7063] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.857926][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/443.tmp-b7:1' failed: Read-only file system [ 167.874452][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/444.tmp-b7:3' failed: Read-only file system [ 168.012528][ T7073] loop4: detected capacity change from 0 to 8 [ 168.359167][ T5115] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.512909][ T7092] loop1: detected capacity change from 0 to 128 [ 168.565287][ T7092] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.582869][ T7092] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.609227][ T5115] usb 4-1: Using ep0 maxpacket: 8 [ 168.729295][ T5115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.769113][ T5115] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.835241][ T5115] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 168.869427][ T5115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.895168][ T5115] usb 4-1: config 0 descriptor?? [ 169.309890][ T7124] loop0: detected capacity change from 0 to 128 [ 169.375552][ T7124] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.386844][ T7124] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.390768][ T5115] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x0 [ 169.465540][ T5115] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x0 [ 169.619384][ T4412] usb 4-1: USB disconnect, device number 12 [ 169.804828][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 169.895508][ T7139] device wlan1 entered promiscuous mode [ 169.946632][ T7139] device wlan1 left promiscuous mode [ 170.116324][ T7151] loop1: detected capacity change from 0 to 8 [ 170.383496][ T7161] siw: device registration error -23 [ 171.102825][ T7188] loop0: detected capacity change from 0 to 8 [ 172.005211][ T7211] loop0: detected capacity change from 0 to 1024 [ 172.186538][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1230'. [ 172.250460][ T7211] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 172.403157][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/444.tmp-b7:3' failed: Read-only file system [ 172.413564][ T7211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0102] [ 172.441912][ T4937] udevd[4937]: symlink '../../loop2' '/dev/disk/by-diskseq/461.tmp-b7:2' failed: Read-only file system [ 172.468720][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/471.tmp-b7:0' failed: Read-only file system [ 172.470953][ T7211] System zones: 0-1, 2-3, 5-36, 22-22, 102-102 [ 172.493898][ T7211] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,debug,abort,barrier=0x000000000000000b,nobarrier,,errors=continue. Quota mode: writeback. [ 172.532942][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/462.tmp-b7:4' failed: Read-only file system [ 172.588473][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 172.608487][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/444.tmp-b7:3' failed: Read-only file system [ 172.834488][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/471.tmp-b7:0' failed: Read-only file system [ 172.851561][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/468.tmp-b7:1' failed: Read-only file system [ 172.913986][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/471.tmp-b7:0' failed: Read-only file system [ 172.969595][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/468.tmp-b7:1' failed: Read-only file system [ 173.267946][ T7242] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 173.411733][ T7251] loop3: detected capacity change from 0 to 2048 [ 173.464019][ T7251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.763867][ T7258] Bluetooth: hci0: unsupported parameter 5161 [ 173.781707][ T7258] Bluetooth: hci0: unsupported parameter 8192 [ 173.797280][ T7258] Bluetooth: hci0: unsupported parameter 5161 [ 173.813903][ T7258] Bluetooth: hci0: unsupported parameter 8192 [ 173.989941][ T7229] loop2: detected capacity change from 0 to 32768 [ 174.149159][ T7229] JBD2: Ignoring recovery information on journal [ 174.295851][ T7229] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 174.310671][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'. [ 174.676901][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 174.776546][ T4413] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.215775][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.237720][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.262406][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 175.268111][ T4413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.304132][ T4413] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 175.322680][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.377657][ T4413] usb 1-1: config 0 descriptor?? [ 175.882893][ T4413] logitech-hidpp-device 0003:046D:C262.000F: No inputs registered, leaving [ 175.913261][ T4413] logitech-hidpp-device 0003:046D:C262.000F: hidraw0: USB HID v0.00 Joystick [HID 046d:c262] on usb-dummy_hcd.0-1/input0 [ 176.112131][ T4413] usb 1-1: USB disconnect, device number 8 [ 176.802315][ T7338] loop4: detected capacity change from 0 to 764 [ 176.871717][ T7338] rock: directory entry would overflow storage [ 176.894043][ T7338] rock: sig=0x4654, size=5, remaining=4 [ 176.989183][ T5114] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.297597][ T7363] loop3: detected capacity change from 0 to 512 [ 177.343798][ T7363] EXT4-fs (loop3): Ignoring removed oldalloc option [ 177.360915][ T7363] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 177.370060][ T5114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.411141][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/479.tmp-b7:3' failed: Read-only file system [ 177.429052][ T5114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.452871][ T5114] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.470376][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 177.487585][ T7363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1283: invalid indirect mapped block 4294967295 (level 1) [ 177.506728][ T5114] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 177.524855][ T5114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.538766][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system [ 177.552047][ T5114] usb 2-1: config 0 descriptor?? [ 177.561060][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/478.tmp-b7:4' failed: Read-only file system [ 177.576716][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/472.tmp-b7:0' failed: Read-only file system [ 177.627399][ T7373] loop0: detected capacity change from 0 to 2048 [ 177.641575][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/478.tmp-b7:4' failed: Read-only file system [ 177.658315][ T7363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1283: invalid indirect mapped block 4294967295 (level 1) [ 177.684245][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/479.tmp-b7:3' failed: Read-only file system [ 177.696243][ T7363] EXT4-fs (loop3): 2 truncates cleaned up [ 177.710277][ T7363] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback. [ 177.732254][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 177.767164][ T7363] EXT4-fs error (device loop3): __ext4_iget:4919: inode #13: block 32768: comm syz.3.1283: invalid block [ 177.838692][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.881936][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/480.tmp-b7:0' failed: Read-only file system [ 177.890942][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/478.tmp-b7:4' failed: Read-only file system [ 178.061854][ T5114] logitech-hidpp-device 0003:046D:C262.0010: No inputs registered, leaving [ 178.072628][ T7379] loop3: detected capacity change from 0 to 764 [ 178.108068][ T5114] logitech-hidpp-device 0003:046D:C262.0010: hidraw0: USB HID v0.00 Joystick [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 178.237844][ T7379] rock: directory entry would overflow storage [ 178.249092][ T7379] rock: sig=0x4654, size=5, remaining=4 [ 178.300218][ T4412] usb 2-1: USB disconnect, device number 13 [ 178.593371][ T7392] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 179.213993][ T7426] loop1: detected capacity change from 0 to 1024 [ 179.279149][ T4411] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 179.472170][ T7416] loop2: detected capacity change from 0 to 32768 [ 179.536663][ T7432] loop0: detected capacity change from 0 to 8 [ 179.719647][ T7416] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 179.759311][ T4411] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.805656][ T4411] usb 5-1: not running at top speed; connect to a high speed hub [ 179.843138][ T4195] XFS (loop2): Unmounting Filesystem [ 179.899262][ T4411] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 179.911241][ T4411] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 179.923562][ T7450] loop0: detected capacity change from 0 to 164 [ 179.930073][ T4411] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 179.937652][ T4411] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 179.996620][ T7450] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 180.027709][ T7450] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 180.039491][ T4270] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.074124][ T7450] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.169334][ T4411] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 180.178436][ T4411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.192057][ T4411] usb 5-1: Product: syz [ 180.196423][ T4411] usb 5-1: Manufacturer: syz [ 180.219268][ T4411] usb 5-1: SerialNumber: syz [ 180.389772][ T7460] ip_tables: iptables: counters copy to user failed while replacing table [ 180.449556][ T4270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.477675][ T4270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.503271][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.518659][ T4411] usb 5-1: USB disconnect, device number 13 [ 180.571090][ T4270] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 180.599303][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.621310][ T4270] usb 4-1: config 0 descriptor?? [ 180.634046][ T7469] loop2: detected capacity change from 0 to 8 [ 180.737870][ T7474] loop0: detected capacity change from 0 to 256 [ 180.765648][ T7474] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.946153][ T7481] loop1: detected capacity change from 0 to 128 [ 180.965917][ T7482] loop2: detected capacity change from 0 to 1024 [ 181.093616][ T4270] logitech-hidpp-device 0003:046D:C262.0011: No inputs registered, leaving [ 181.127080][ T4270] logitech-hidpp-device 0003:046D:C262.0011: hidraw0: USB HID v0.00 Joystick [HID 046d:c262] on usb-dummy_hcd.3-1/input0 [ 181.144723][ T7487] loop0: detected capacity change from 0 to 512 [ 181.260651][ T7487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1337: bg 0: block 5: invalid block bitmap [ 181.284485][ T7493] ip_tables: iptables: counters copy to user failed while replacing table [ 181.316570][ T7] usb 4-1: USB disconnect, device number 13 [ 181.318509][ T7487] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 181.334777][ T7487] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1337: invalid indirect mapped block 3 (level 2) [ 181.348893][ T7487] EXT4-fs (loop0): 1 orphan inode deleted [ 181.354767][ T7487] EXT4-fs (loop0): 1 truncate cleaned up [ 181.360933][ T7487] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 181.422630][ T7494] fido_id[7494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 181.835682][ T7519] loop0: detected capacity change from 0 to 128 [ 181.979507][ T7524] ip_tables: iptables: counters copy to user failed while replacing table [ 182.345021][ T7543] process 'syz.4.1362' launched '/dev/fd/3' with NULL argv: empty string added [ 182.423445][ T7550] mmap: syz.3.1365 (7550) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 182.446719][ T7545] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.466244][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/505.tmp-b7:0' failed: Read-only file system [ 182.493189][ T4937] udevd[4937]: symlink '../../loop3' '/dev/disk/by-diskseq/484.tmp-b7:3' failed: Read-only file system [ 182.547863][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/505.tmp-b7:0' failed: Read-only file system [ 182.562138][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/506.tmp-b7:1' failed: Read-only file system [ 182.589401][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/478.tmp-b7:4' failed: Read-only file system [ 182.614932][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/484.tmp-b7:3' failed: Read-only file system [ 182.676669][ T5110] udevd[5110]: symlink '../../loop2' '/dev/disk/by-diskseq/501.tmp-b7:2' failed: Read-only file system [ 182.734218][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/506.tmp-b7:1' failed: Read-only file system [ 182.751510][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/508.tmp-b7:4' failed: Read-only file system [ 182.801236][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-diskseq/506.tmp-b7:1' failed: Read-only file system [ 182.864316][ T7564] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 182.913720][ T7566] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1372'. [ 182.924155][ T7566] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 183.145834][ T7569] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.360012][ T7577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.758076][ T7562] JBD2: Ignoring recovery information on journal [ 183.862062][ T7594] netlink: 'syz.0.1380': attribute type 3 has an invalid length. [ 183.921639][ T7594] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 183.962564][ T7562] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.979194][ T7594] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1380'. [ 184.000979][ T7585] JBD2: Ignoring recovery information on journal [ 184.101255][ T7585] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.275809][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 184.314748][ T7603] set_capacity_and_notify: 7 callbacks suppressed [ 184.314765][ T7603] loop2: detected capacity change from 0 to 164 [ 184.328677][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 184.469627][ T7603] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 184.561314][ T7605] program syz.1.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.579650][ T7603] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 184.614741][ T7608] program syz.1.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.635743][ T7603] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 184.653532][ T7608] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 184.786785][ T7614] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.906431][ T7618] loop3: detected capacity change from 0 to 8 [ 185.016283][ T7618] SQUASHFS error: lzo decompression failed, data probably corrupt [ 185.039092][ T7618] SQUASHFS error: Failed to read block 0x91: -5 [ 185.045464][ T7618] SQUASHFS error: Unable to read metadata cache entry [8f] [ 185.059125][ T7618] SQUASHFS error: Unable to read inode 0x11f [ 185.185000][ T7620] loop4: detected capacity change from 0 to 32768 [ 185.246229][ T7620] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 185.285357][ T4196] XFS (loop4): Unmounting Filesystem [ 185.366038][ T7] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 185.729370][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36129, setting to 64 [ 185.903015][ T7] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 185.912200][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.924089][ T7] usb 4-1: Product: syz [ 185.928274][ T7] usb 4-1: Manufacturer: syz [ 185.932934][ T7] usb 4-1: SerialNumber: syz [ 185.943171][ T7] usb 4-1: config 0 descriptor?? [ 185.960060][ T7618] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.981684][ T7] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 185.988122][ T7] usb 4-1: No valid video chain found. [ 186.191319][ T4412] usb 4-1: USB disconnect, device number 14 [ 186.777219][ T7637] loop4: detected capacity change from 0 to 512 [ 186.785613][ T7633] loop3: detected capacity change from 0 to 1024 [ 186.832496][ T7642] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1397'. [ 186.842113][ T7642] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 186.889256][ T7637] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.188042][ T7660] Bluetooth: hci0: unsupported parameter 5134 [ 187.204332][ T7660] Bluetooth: hci0: unsupported parameter 8192 [ 187.222097][ T7660] Bluetooth: hci0: unsupported parameter 5134 [ 187.234852][ T7664] loop4: detected capacity change from 0 to 8 [ 187.259086][ T7660] Bluetooth: hci0: unsupported parameter 8192 [ 187.317773][ T7664] SQUASHFS error: lzo decompression failed, data probably corrupt [ 187.345618][ T7664] SQUASHFS error: Failed to read block 0x91: -5 [ 187.394812][ T7664] SQUASHFS error: Unable to read metadata cache entry [8f] [ 187.424420][ T7664] SQUASHFS error: Unable to read inode 0x11f [ 187.493955][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/518.tmp-b7:1' failed: Read-only file system [ 187.504535][ T7675] loop2: detected capacity change from 0 to 512 [ 187.507828][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/507.tmp-b7:0' failed: Read-only file system [ 187.534283][ T4410] udevd[4410]: symlink '../../loop3' '/dev/disk/by-diskseq/527.tmp-b7:3' failed: Read-only file system [ 187.568683][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/525.tmp-b7:4' failed: Read-only file system [ 187.591646][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/507.tmp-b7:0' failed: Read-only file system [ 187.608387][ T7675] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.654522][ T4180] udevd[4180]: symlink '../../loop2' '/dev/disk/by-diskseq/520.tmp-b7:2' failed: Read-only file system [ 187.677651][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/527.tmp-b7:3' failed: Read-only file system [ 187.692944][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/507.tmp-b7:0' failed: Read-only file system [ 187.712749][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/528.tmp-b7:4' failed: Read-only file system [ 187.770895][ T5110] udevd[5110]: symlink '../../loop4' '/dev/disk/by-diskseq/529.tmp-b7:4' failed: Read-only file system [ 187.843893][ T5014] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 187.926764][ T7687] netlink: 'syz.2.1423': attribute type 3 has an invalid length. [ 187.949166][ T7687] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 187.956958][ T7687] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1423'. [ 188.219313][ T5014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36129, setting to 64 [ 188.287950][ T7683] loop0: detected capacity change from 0 to 32768 [ 188.323606][ T7683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1420 (7683) [ 188.376174][ T7683] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 188.399902][ T5014] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 188.419085][ T5014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.436451][ T7683] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.459105][ T5014] usb 5-1: Product: syz [ 188.469116][ T5014] usb 5-1: Manufacturer: syz [ 188.494987][ T5014] usb 5-1: SerialNumber: syz [ 188.500400][ T7683] BTRFS info (device loop0): use zstd compression, level 3 [ 188.529925][ T7683] BTRFS info (device loop0): using free space tree [ 188.536594][ T7683] BTRFS info (device loop0): has skinny extents [ 188.544402][ T5014] usb 5-1: config 0 descriptor?? [ 188.553358][ T7700] Bluetooth: hci0: unsupported parameter 5134 [ 188.589483][ T7664] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.597355][ T7700] Bluetooth: hci0: unsupported parameter 8192 [ 188.614401][ T7700] Bluetooth: hci0: unsupported parameter 5134 [ 188.620890][ T7700] Bluetooth: hci0: unsupported parameter 8192 [ 188.623921][ T5014] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 188.647948][ T7704] loop3: detected capacity change from 0 to 1764 [ 188.690733][ T5014] usb 5-1: No valid video chain found. [ 188.740953][ T7683] BTRFS info (device loop0): enabling ssd optimizations [ 188.775689][ T7704] attempt to access beyond end of device [ 188.775689][ T7704] loop3: rw=0, want=7180648576, limit=1764 [ 188.790291][ T7704] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 188.805886][ T26] audit: type=1800 audit(1788882877.991:6): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1420" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 188.872314][ T7691] loop1: detected capacity change from 0 to 32768 [ 188.896394][ T5114] usb 5-1: USB disconnect, device number 14 [ 188.918418][ T7704] attempt to access beyond end of device [ 188.918418][ T7704] loop3: rw=0, want=7180648576, limit=1764 [ 188.946896][ T7704] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 188.956136][ T26] audit: type=1800 audit(1788882878.141:7): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1428" name="file0" dev="loop3" ino=1923 res=0 errno=0 [ 188.999664][ T7] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 189.017037][ T7691] XFS (loop1): Mounting V5 Filesystem [ 189.256127][ T7691] XFS (loop1): Ending clean mount [ 189.365964][ T4186] XFS (loop1): Unmounting Filesystem [ 189.419300][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.450324][ T7739] program syz.0.1430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.499387][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 189.509619][ T7740] program syz.0.1430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.537139][ T7740] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 189.561933][ T7742] loop4: detected capacity change from 0 to 512 [ 189.601579][ T7] usb 3-1: config index 0 descriptor too short (expected 28771, got 10) [ 189.610432][ T7] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 189.619338][ T7] usb 3-1: config 114 descriptor has 1 excess byte, ignoring [ 189.627005][ T7] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 189.677030][ T7742] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 189.706212][ T7742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 189.742911][ T7742] System zones: 0-1, 15-15, 18-18, 34-34 [ 189.770103][ T7745] loop1: detected capacity change from 0 to 256 [ 189.778789][ T7745] exfat: Deprecated parameter 'namecase' [ 189.785426][ T7745] exfat: Deprecated parameter 'utf8' [ 189.792931][ T7742] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.802385][ T7742] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 189.812058][ T7742] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 189.827494][ T7742] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 189.829873][ T7] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 189.836152][ T7742] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1434: bad orphan inode 16 [ 189.854372][ T7742] ext4_test_bit(bit=15, block=18) = 1 [ 189.860333][ T7742] is_bad_inode(inode)=0 [ 189.865103][ T7742] NEXT_ORPHAN(inode)=0 [ 189.874608][ T7745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 189.877072][ T7742] max_ino=32 [ 189.892349][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 189.901586][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 189.908806][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.917160][ T7742] i_nlink=2 [ 189.922257][ T7742] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 189.941709][ T7] usb 3-1: Product: syz [ 189.945937][ T7] usb 3-1: Manufacturer: syz [ 189.972368][ T7] usb 3-1: SerialNumber: syz [ 190.029846][ T7742] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 190.093191][ T7751] loop3: detected capacity change from 0 to 1024 [ 190.255547][ T7751] hfsplus: invalid xattr key length: 0 [ 190.274952][ T7] usb 3-1: USB disconnect, device number 11 [ 190.415606][ T155] hfsplus: b-tree write err: -5, ino 8 [ 190.641112][ T7773] loop3: detected capacity change from 0 to 8 [ 190.730825][ T7773] SQUASHFS error: Failed to read block 0xdfa: -5 [ 190.741970][ T7773] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 190.760915][ T7773] SQUASHFS error: Failed to read block 0x4e8: -5 [ 190.779752][ T7773] SQUASHFS error: Failed to read block 0x4e8: -5 [ 190.810387][ T26] audit: type=1800 audit(1788882880.001:8): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1448" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 191.060467][ T7788] loop3: detected capacity change from 0 to 1024 [ 191.181663][ T7788] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 191.237517][ T7800] loop1: detected capacity change from 0 to 2048 [ 191.239568][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 191.257081][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 191.286302][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 191.296545][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 191.317577][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 191.357535][ T7806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1463'. [ 191.405389][ T7800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.477258][ T7812] loop3: detected capacity change from 0 to 1024 [ 191.552819][ T7812] EXT4-fs (loop3): Ignoring removed bh option [ 191.620757][ T7822] loop4: detected capacity change from 0 to 128 [ 191.637914][ T7812] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.1465: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.665108][ T7824] loop0: detected capacity change from 0 to 512 [ 191.681464][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 191.688191][ T7812] Quota error (device loop3): write_blk: dquota write failed [ 191.689309][ T7822] EXT4-fs (loop4): Ignoring removed nobh option [ 191.696648][ T7812] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 191.712469][ T7812] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1465: Failed to acquire dquot type 0 [ 191.747195][ T7824] EXT4-fs (loop0): Ignoring removed oldalloc option [ 191.755265][ T7824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.769728][ T7826] loop2: detected capacity change from 0 to 512 [ 191.776237][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 191.776311][ T7824] EXT4-fs (loop0): 1 truncate cleaned up [ 191.789084][ T7824] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 191.813364][ T7812] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1465: Freeing blocks not in datazone - block = 0, count = 4096 [ 191.827413][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 191.836176][ T7812] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1465: Invalid inode bitmap blk 0 in block_group 0 [ 191.859632][ T1436] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.882896][ T7822] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 191.900821][ T7826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.911170][ T1436] EXT4-fs (loop3): Remounting filesystem read-only [ 191.912379][ T7822] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.917804][ T1436] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 191.948140][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 191.975069][ T7812] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 192.012331][ T7826] EXT4-fs (loop2): 1 truncate cleaned up [ 192.018065][ T7826] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 192.039552][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 192.046136][ T7812] EXT4-fs (loop3): 1 orphan inode deleted [ 192.059306][ T1436] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 192.078299][ T7812] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000003fd,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 192.106201][ T7812] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm syz.3.1465: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.149264][ T7812] EXT4-fs (loop3): Remounting filesystem read-only [ 192.157229][ T7812] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 192.167755][ T1436] EXT4-fs (loop3): Remounting filesystem read-only [ 192.456846][ T7846] netem: change failed [ 192.507767][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/551.tmp-b7:4' failed: Read-only file system [ 192.521419][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/550.tmp-b7:3' failed: Read-only file system [ 192.525657][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/553.tmp-b7:1' failed: Read-only file system [ 192.568818][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/552.tmp-b7:0' failed: Read-only file system [ 192.594568][ T4410] udevd[4410]: symlink '../../loop2' '/dev/disk/by-diskseq/554.tmp-b7:2' failed: Read-only file system [ 192.642626][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/551.tmp-b7:4' failed: Read-only file system [ 192.665194][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/550.tmp-b7:3' failed: Read-only file system [ 192.717927][ T4410] udevd[4410]: symlink '../../loop2' '/dev/disk/by-diskseq/554.tmp-b7:2' failed: Read-only file system [ 192.733144][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/552.tmp-b7:0' failed: Read-only file system [ 192.762461][ T4937] udevd[4937]: symlink '../../loop1' '/dev/disk/by-diskseq/553.tmp-b7:1' failed: Read-only file system [ 192.938726][ T7858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.039591][ T26] audit: type=1800 audit(1788882882.231:9): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1490" name="file1" dev="loop4" ino=1048689 res=0 errno=0 [ 193.071461][ T7867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.113926][ T7867] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.129107][ T5000] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.263631][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.298150][ T7878] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 193.298150][ T7878] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 193.298150][ T7878] [ 193.369255][ T5000] usb 2-1: Using ep0 maxpacket: 32 [ 193.411218][ T7878] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: writeback. [ 193.448271][ T7880] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 193.489349][ T5000] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 193.509448][ T5000] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.522568][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 193.528606][ T5000] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.535638][ T5000] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 193.545217][ T5000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.555662][ T5000] usb 2-1: config 0 descriptor?? [ 193.584734][ T7880] ntfs3: loop2: Failed to load $Extend. [ 193.623875][ T7878] EXT4-fs (loop3): Cannot change quota options when quota turned on [ 193.639366][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.647528][ T7] usb 1-1: config 0 has no interface number 0 [ 193.830417][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.851532][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.879633][ T7] usb 1-1: Product: syz [ 193.884038][ T7] usb 1-1: Manufacturer: syz [ 193.888680][ T7] usb 1-1: SerialNumber: syz [ 193.911636][ T7] usb 1-1: config 0 descriptor?? [ 193.951795][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.043233][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.059569][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.079238][ T4175] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 194.088267][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.100103][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.107964][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.116206][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.133322][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.141663][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.148967][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.162903][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.173112][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 194.182955][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.196116][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.205898][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.213755][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.254885][ T5000] greenasia 0003:0E8F:0012.0012: unknown main item tag 0x0 [ 194.262991][ T5000] greenasia 0003:0E8F:0012.0012: unbalanced collection at end of report description [ 194.273289][ T5000] greenasia 0003:0E8F:0012.0012: parse failed [ 194.283521][ T5000] greenasia: probe of 0003:0E8F:0012.0012 failed with error -22 [ 194.293157][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299604][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.320939][ T7904] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (64608!=35945) [ 194.329617][ T4175] usb 5-1: Using ep0 maxpacket: 8 [ 194.343448][ T5000] usb 2-1: USB disconnect, device number 14 [ 194.397907][ T7904] EXT4-fs (loop3): orphan cleanup on readonly fs [ 194.412345][ T7904] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.1506: bad orphan inode 11 [ 194.445400][ T7904] ext4_test_bit(bit=10, block=3) = 0 [ 194.450017][ T4175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.453367][ T7904] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,grpquota,max_batch_time=0x000000000000000a,nodiscard,stripe=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: writeback. [ 194.472603][ T4175] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 194.502908][ T4175] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 194.513727][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.533045][ T4175] usb 5-1: config 0 descriptor?? [ 194.598158][ T5115] usb 1-1: USB disconnect, device number 9 [ 194.609167][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 194.626722][ T5115] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.674722][ T5115] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.708164][ T5115] quatech2 1-1:0.51: device disconnected [ 194.790422][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 195.013123][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.027120][ T7902] set_capacity_and_notify: 5 callbacks suppressed [ 195.027138][ T7902] loop2: detected capacity change from 0 to 40427 [ 195.041492][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.048499][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.060772][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.070420][ T7902] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 195.078215][ T7902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.086790][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.086946][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.135921][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.169325][ T4175] wacom 0003:056A:032A.0013: unknown main item tag 0x0 [ 195.181470][ T7902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.222100][ T4175] wacom 0003:056A:032A.0013: hidraw0: USB HID v0.81 Device [HID 056a:032a] on usb-dummy_hcd.4-1/input0 [ 195.245195][ T7927] loop0: detected capacity change from 0 to 128 [ 195.275109][ T4175] usb 5-1: USB disconnect, device number 15 [ 195.305265][ T7927] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 195.375425][ T7927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.397353][ T7902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 195.413583][ T7902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.457272][ T7930] fido_id[7930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.686409][ T7939] sock: sock_set_timeout: `syz.2.1518' (pid 7939) tries to set negative timeout [ 195.863461][ T7944] loop2: detected capacity change from 0 to 2048 [ 195.956792][ T7944] NILFS (loop2): invalid segment: Magic number mismatch [ 196.009169][ T7944] NILFS (loop2): trying rollback from an earlier position [ 196.076324][ T7944] NILFS (loop2): recovery complete [ 196.097698][ T7963] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.131879][ T7944] NILFS (loop2): bad btree node (ino=3, blocknr=8): level = 0, flags = 0x1, nchildren = 0 [ 196.132020][ T7944] NILFS (loop2): error -5 preparing GC: cannot read source blocks [ 196.272978][ T7969] loop1: detected capacity change from 0 to 64 [ 196.509175][ T7980] loop0: detected capacity change from 0 to 512 [ 196.576188][ T7987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.607394][ T7980] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 196.629244][ T7980] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 196.674110][ T7983] loop1: detected capacity change from 0 to 4096 [ 196.751230][ T7994] loop2: detected capacity change from 0 to 512 [ 196.757578][ T7983] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 196.788457][ T7980] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,mblk_io_submit,jqfmt=vfsold,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 196.834574][ T7980] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.877646][ T7983] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 196.888135][ T7994] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 196.919876][ T7994] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.939715][ T7983] ntfs3: loop1: mft corrupted [ 196.948138][ T7983] ntfs3: loop1: Failed to load $Extend. [ 196.989692][ T7980] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.1538: Attempting to read directory block (0) that is past i_size (3) [ 197.032070][ T7983] ntfs3: loop1: mft corrupted [ 197.260648][ T8002] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.268072][ T7976] loop4: detected capacity change from 0 to 32768 [ 197.407327][ T8010] raw_sendmsg: syz.1.1549 forgot to set AF_INET. Fix it! [ 197.516449][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/579.tmp-b7:2' failed: Read-only file system [ 197.532514][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/577.tmp-b7:0' failed: Read-only file system [ 197.535299][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/568.tmp-b7:3' failed: Read-only file system [ 197.568696][ T4410] udevd[4410]: symlink '../../loop4' '/dev/disk/by-diskseq/580.tmp-b7:4' failed: Read-only file system [ 197.581076][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/579.tmp-b7:2' failed: Read-only file system [ 197.591339][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-diskseq/574.tmp-b7:1' failed: Read-only file system [ 197.628556][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/568.tmp-b7:3' failed: Read-only file system [ 197.646250][ T5110] udevd[5110]: symlink '../../loop1' '/dev/disk/by-diskseq/574.tmp-b7:1' failed: Read-only file system [ 197.679692][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/579.tmp-b7:2' failed: Read-only file system [ 197.691964][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/582.tmp-b7:0' failed: Read-only file system [ 197.759240][ T7] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 197.911305][ T8022] loop3: detected capacity change from 0 to 128 [ 197.988236][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 198.015354][ T8022] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.031975][ T8022] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.119446][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.156148][ T8033] loop1: detected capacity change from 0 to 512 [ 198.164637][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.187326][ T1436] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.199698][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.247010][ T8033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.257175][ T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 198.282537][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.296365][ T8033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 198.319967][ T7] usb 1-1: config 0 descriptor?? [ 198.332294][ T8033] EXT4-fs (loop1): 1 truncate cleaned up [ 198.338069][ T8033] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 198.416824][ T8042] jffs2: notice: (8042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.667922][ T8049] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 198.726521][ T8049] ntfs3: loop4: Failed to load $Extend. [ 198.836942][ T8055] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.869578][ T8055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.879226][ T7] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 198.886921][ T7] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 199.041362][ T4175] usb 1-1: USB disconnect, device number 10 [ 199.155109][ T8063] sock: sock_set_timeout: `syz.3.1573' (pid 8063) tries to set negative timeout [ 199.212108][ T8065] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (64608!=35945) [ 199.277287][ T8065] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.289378][ T8065] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.1574: bad orphan inode 11 [ 199.395849][ T8065] ext4_test_bit(bit=10, block=3) = 0 [ 199.410738][ T8065] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,grpquota,max_batch_time=0x000000000000000a,nodiscard,stripe=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: writeback. [ 199.688345][ T8083] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 199.719800][ T8084] ntfs3: Unknown parameter 't' [ 199.799439][ T8083] ntfs3: loop3: Failed to load $Extend. [ 199.995489][ T8090] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 200.038678][ T8090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.063921][ T8092] NILFS (loop4): invalid segment: Magic number mismatch [ 200.096582][ T8092] NILFS (loop4): trying rollback from an earlier position [ 200.195834][ T8092] NILFS (loop4): recovery complete [ 200.257131][ T8099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.300428][ T8103] binder: 8101:8103 ioctl c018620c 2000000001c0 returned -22 [ 200.316744][ T8092] NILFS (loop4): bad btree node (ino=3, blocknr=8): level = 0, flags = 0x1, nchildren = 0 [ 200.346311][ T8092] NILFS (loop4): error -5 preparing GC: cannot read source blocks [ 200.587202][ T8119] set_capacity_and_notify: 8 callbacks suppressed [ 200.587219][ T8119] loop2: detected capacity change from 0 to 256 [ 200.626679][ T8109] loop1: detected capacity change from 0 to 4096 [ 200.653274][ T8109] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 200.653274][ T8109] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 200.653274][ T8109] [ 200.685039][ T8109] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: writeback. [ 200.726097][ T8125] loop3: detected capacity change from 0 to 512 [ 200.754235][ T8125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.895164][ T8109] EXT4-fs (loop1): Cannot change quota options when quota turned on [ 200.998236][ T8127] loop0: detected capacity change from 0 to 4096 [ 201.019450][ T8125] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 201.102971][ T8127] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 201.115874][ T8125] EXT4-fs (loop3): 1 truncate cleaned up [ 201.136184][ T8125] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 201.257371][ T8127] ntfs3: loop0: Failed to load $Extend. [ 201.735634][ T8151] loop1: detected capacity change from 0 to 512 [ 201.858600][ T8157] syz.3.1617 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.922604][ T8151] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.956636][ T8151] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.020202][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 202.099771][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.201764][ T8146] loop0: detected capacity change from 0 to 32768 [ 202.238963][ T8137] loop4: detected capacity change from 0 to 40427 [ 202.260845][ T8137] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 202.287107][ T8146] XFS (loop0): Mounting V5 Filesystem [ 202.294458][ T8137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.336181][ T8137] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.342728][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 202.360259][ T8146] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 202.427763][ T8146] XFS (loop0): Starting recovery (logdev: internal) [ 202.456190][ T8146] XFS (loop0): Ending recovery (logdev: internal) [ 202.470764][ T7] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.480758][ T8137] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 202.489345][ T8137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 202.503611][ T7] usb 3-1: config 0 has no interface number 0 [ 202.567460][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/616.tmp-b7:4' failed: Read-only file system [ 202.606316][ T4190] XFS (loop0): Unmounting Filesystem [ 202.614785][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 202.667644][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-diskseq/615.tmp-b7:0' failed: Read-only file system [ 202.682607][ T7] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.716413][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.742271][ T7] usb 3-1: Product: syz [ 202.747983][ T5110] udevd[5110]: symlink '../../loop0' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:0' failed: Read-only file system [ 202.779117][ T7] usb 3-1: Manufacturer: syz [ 202.787981][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/611.tmp-b7:3' failed: Read-only file system [ 202.794184][ T7] usb 3-1: SerialNumber: syz [ 202.822993][ T7] usb 3-1: config 0 descriptor?? [ 202.878757][ T7] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.982574][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/615.tmp-b7:0' failed: Read-only file system [ 203.019628][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/616.tmp-b7:4' failed: Read-only file system [ 203.044358][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/615.tmp-b7:0' failed: Read-only file system [ 203.091421][ T7] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.105205][ T4937] udevd[4937]: symlink '../../loop4' '/dev/disk/by-diskseq/616.tmp-b7:4' failed: Read-only file system [ 203.141480][ T7] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.212441][ T5110] udevd[5110]: setting mode of /dev/ttyUSB0 to 020660 failed: Read-only file system [ 203.490424][ T8174] loop1: detected capacity change from 0 to 40427 [ 203.525514][ T8174] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 203.541870][ T4270] usb 3-1: USB disconnect, device number 12 [ 203.549068][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 203.606279][ T8174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.621336][ T4270] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.662963][ T4270] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.689410][ T8174] F2FS-fs (loop1): invalid crc value [ 203.738004][ T8190] jffs2: notice: (8190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 203.759488][ T4270] quatech2 3-1:0.51: device disconnected [ 203.780932][ T8174] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.821375][ T8179] loop3: detected capacity change from 0 to 32768 [ 203.848068][ T8187] loop4: detected capacity change from 0 to 32768 [ 203.890577][ T8187] XFS (loop4): sunit and swidth must be specified together [ 203.939743][ T8174] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 203.946854][ T8174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.078333][ T26] audit: type=1800 audit(1788882893.261:10): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1638" name="file1" dev="loop0" ino=1048692 res=0 errno=0 [ 204.502410][ T8206] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 204.630120][ T8206] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 204.665591][ T8206] ntfs3: loop4: mft corrupted [ 204.674495][ T8206] ntfs3: loop4: Failed to load $Extend. [ 204.765449][ T8206] ntfs3: loop4: mft corrupted [ 204.797898][ T8225] binder: 8224:8225 ioctl c018620c 2000000001c0 returned -22 [ 204.889697][ T8227] netem: change failed [ 204.942533][ T8229] EXT4-fs (loop0): Ignoring removed nobh option [ 204.983260][ T8229] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 205.016499][ T8229] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.199389][ T4175] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.327878][ T8254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1652'. [ 205.469305][ T4175] usb 5-1: Using ep0 maxpacket: 32 [ 205.542544][ T8261] hfsplus: invalid xattr key length: 0 [ 205.589133][ T4175] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.638581][ T4175] usb 5-1: config 0 has no interface number 0 [ 205.668513][ T4280] hfsplus: b-tree write err: -5, ino 8 [ 205.682354][ T8265] set_capacity_and_notify: 5 callbacks suppressed [ 205.682371][ T8265] loop2: detected capacity change from 0 to 2048 [ 205.796109][ T8265] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.829285][ T4175] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.850035][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.884192][ T8276] loop3: detected capacity change from 0 to 128 [ 205.915546][ T4175] usb 5-1: Product: syz [ 205.949870][ T4175] usb 5-1: Manufacturer: syz [ 205.955486][ T8276] EXT4-fs (loop3): Ignoring removed nobh option [ 205.981994][ T4175] usb 5-1: SerialNumber: syz [ 206.012646][ T4175] usb 5-1: config 0 descriptor?? [ 206.070663][ T4175] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 206.101134][ T8276] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 206.115484][ T8276] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.281184][ T4175] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.321397][ T4175] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.600966][ T8303] loop1: detected capacity change from 0 to 1024 [ 206.693522][ T8303] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 206.743079][ T4175] usb 5-1: USB disconnect, device number 16 [ 206.759097][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.787561][ T4175] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.831091][ T8309] loop2: detected capacity change from 0 to 16 [ 206.862846][ T8309] erofs: (device loop2): mounted with root inode @ nid 36. [ 206.876092][ T4175] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.941332][ T4175] quatech2 5-1:0.51: device disconnected [ 207.017003][ T8293] loop0: detected capacity change from 0 to 32768 [ 207.144494][ T8293] XFS (loop0): Mounting V5 Filesystem [ 207.230385][ T8293] XFS (loop0): Ending clean mount [ 207.259105][ T4230] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.343051][ T4190] XFS (loop0): Unmounting Filesystem [ 207.392242][ T8327] sch_fq: defrate 4294967295 ignored. [ 207.557350][ T8313] loop3: detected capacity change from 0 to 40427 [ 207.593168][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/642.tmp-b7:0' failed: Read-only file system [ 207.609254][ T8313] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 207.639471][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.652310][ T8313] F2FS-fs (loop3): invalid crc value [ 207.658815][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.679115][ T8313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.690327][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/642.tmp-b7:0' failed: Read-only file system [ 207.712380][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.757879][ T4230] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 207.778002][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/644.tmp-b7:3' failed: Read-only file system [ 207.788829][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.800231][ T4230] usb 2-1: config 0 descriptor?? [ 207.847161][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 207.867557][ T8313] F2FS-fs (loop3): Start checkpoint disabled! [ 207.875083][ T4937] udevd[4937]: symlink '../../loop0' '/dev/disk/by-diskseq/645.tmp-b7:0' failed: Read-only file system [ 207.892921][ T8322] loop2: detected capacity change from 0 to 32768 [ 207.915606][ T8313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 208.035241][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/645.tmp-b7:0' failed: Read-only file system [ 208.058086][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-diskseq/644.tmp-b7:3' failed: Read-only file system [ 208.095716][ T4937] udevd[4937]: symlink '../../loop2' '/dev/disk/by-diskseq/646.tmp-b7:2' failed: Read-only file system [ 208.120830][ T5110] udevd[5110]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 208.150462][ T4937] udevd[4937]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 208.296349][ T4230] thrustmaster 0003:044F:B324.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.1-1/input0 [ 208.367979][ T8342] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 208.384296][ T4230] thrustmaster 0003:044F:B324.0015: no inputs found [ 208.392074][ T8342] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 208.412045][ T8342] netlink: 'syz.4.1690': attribute type 29 has an invalid length. [ 208.427556][ T4746] attempt to access beyond end of device [ 208.427556][ T4746] loop3: rw=2049, want=40976, limit=40427 [ 208.548122][ T4412] usb 2-1: USB disconnect, device number 15 [ 208.612782][ T8350] loop4: detected capacity change from 0 to 16 [ 208.642069][ T8345] fido_id[8345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.759931][ T8350] erofs: (device loop4): mounted with root inode @ nid 36. [ 209.160824][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 209.427756][ T8386] wireguard: wg2: Could not create IPv4 socket [ 209.504722][ T8392] loop1: detected capacity change from 0 to 128 [ 209.556984][ T8392] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 209.591292][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 209.610523][ T8392] hpfs: filesystem error: improperly stopped [ 209.661668][ T8392] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 209.699631][ T8392] hpfs: You really don't want any checks? You are crazy... [ 209.764967][ T8392] hpfs: hpfs_map_sector(): read error [ 209.809524][ T8392] hpfs: code page support is disabled [ 209.856071][ T8392] ================================================================== [ 209.865282][ T8392] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 209.871681][ T8392] Read of size 1 at addr ffff88804e9348a6 by task syz.1.1713/8392 [ 209.879531][ T8392] [ 209.882240][ T8392] CPU: 1 PID: 8392 Comm: syz.1.1713 Not tainted syzkaller #0 [ 209.889783][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.900093][ T8392] Call Trace: [ 209.903591][ T8392] [ 209.906580][ T8392] dump_stack_lvl+0x188/0x250 [ 209.911525][ T8392] ? show_regs_print_info+0x20/0x20 [ 209.916860][ T8392] ? _printk+0xda/0x130 [ 209.921157][ T8392] ? strcmp+0x67/0xb0 [ 209.925285][ T8392] ? load_image+0x410/0x410 [ 209.930291][ T8392] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 209.935910][ T8392] print_address_description+0x60/0x2d0 [ 209.941695][ T8392] ? strcmp+0x67/0xb0 [ 209.945746][ T8392] kasan_report+0xdf/0x130 [ 209.950249][ T8392] ? strcmp+0x67/0xb0 [ 209.954315][ T8392] strcmp+0x67/0xb0 [ 209.958176][ T8392] hpfs_get_ea+0x134/0xda0 [ 209.963178][ T8392] ? hpfs_read_ea+0xc20/0xc20 [ 209.968099][ T8392] ? __getblk_gfp+0x51/0xb20 [ 209.972979][ T8392] ? __might_sleep+0xf0/0xf0 [ 209.977832][ T8392] ? __bread_gfp+0x132/0x380 [ 209.983022][ T8392] ? hpfs_map_sector+0x146/0x2e0 [ 209.988023][ T8392] hpfs_read_inode+0x1a6/0x1050 [ 209.992920][ T8392] ? __lock_acquire+0x7b50/0x7b50 [ 209.998013][ T8392] ? hpfs_init_inode+0x2c0/0x2c0 [ 210.003572][ T8392] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 210.009704][ T8392] ? do_raw_spin_unlock+0x11d/0x230 [ 210.015199][ T8392] ? hpfs_init_inode+0x1cc/0x2c0 [ 210.020993][ T8392] hpfs_fill_super+0x12ee/0x1f30 [ 210.026386][ T8392] ? hpfs_mount+0x40/0x40 [ 210.032626][ T8392] ? snprintf+0xe5/0x140 [ 210.037254][ T8392] ? set_blocksize+0x1f1/0x360 [ 210.042281][ T8392] ? sb_set_blocksize+0xa5/0xe0 [ 210.047206][ T8392] mount_bdev+0x28a/0x3c0 [ 210.052566][ T8392] ? hpfs_mount+0x40/0x40 [ 210.057155][ T8392] legacy_get_tree+0xe6/0x180 [ 210.062060][ T8392] ? hpfs_ioctl+0x260/0x260 [ 210.066704][ T8392] vfs_get_tree+0x88/0x270 [ 210.071179][ T8392] do_new_mount+0x247/0xa40 [ 210.075756][ T8392] __se_sys_mount+0x2e3/0x3d0 [ 210.080582][ T8392] ? __x64_sys_mount+0xc0/0xc0 [ 210.085518][ T8392] ? lockdep_hardirqs_on+0x94/0x140 [ 210.090773][ T8392] ? __x64_sys_mount+0x1c/0xc0 [ 210.095599][ T8392] do_syscall_64+0x4c/0xa0 [ 210.100334][ T8392] ? clear_bhb_loop+0x30/0x80 [ 210.105054][ T8392] ? clear_bhb_loop+0x30/0x80 [ 210.109785][ T8392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.115773][ T8392] RIP: 0033:0x7f73883c73ca [ 210.120241][ T8392] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.140007][ T8392] RSP: 002b:00007f738661de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.148706][ T8392] RAX: ffffffffffffffda RBX: 00007f738661dee0 RCX: 00007f73883c73ca [ 210.156735][ T8392] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f738661dea0 [ 210.164768][ T8392] RBP: 000020000000a000 R08: 00007f738661dee0 R09: 0000000003200041 [ 210.172792][ T8392] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 210.181128][ T8392] R13: 00007f738661dea0 R14: 0000000000009e15 R15: 0000200000000040 [ 210.189176][ T8392] [ 210.192274][ T8392] [ 210.194653][ T8392] The buggy address belongs to the page: [ 210.200441][ T8392] page:ffffea00013a4d00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x4e934 [ 210.211030][ T8392] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 210.218218][ T8392] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 210.227295][ T8392] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 210.235923][ T8392] page dumped because: kasan: bad access detected [ 210.242391][ T8392] page_owner tracks the page as freed [ 210.247799][ T8392] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 8187, ts 203765966107, free_ts 204541219505 [ 210.262619][ T8392] get_page_from_freelist+0x24f6/0x2670 [ 210.269711][ T8392] __alloc_pages+0x1ee/0x480 [ 210.274561][ T8392] alloc_pages_vma+0x2bc/0x790 [ 210.279379][ T8392] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 210.285275][ T8392] shmem_getpage_gfp+0x14be/0x2c10 [ 210.290529][ T8392] shmem_write_begin+0xcd/0x1a0 [ 210.295523][ T8392] generic_perform_write+0x2b6/0x550 [ 210.300931][ T8392] __generic_file_write_iter+0x261/0x4e0 [ 210.306717][ T8392] generic_file_write_iter+0xa6/0x1b0 [ 210.312126][ T8392] vfs_write+0x748/0xd70 [ 210.316421][ T8392] ksys_write+0x153/0x260 [ 210.321061][ T8392] do_syscall_64+0x4c/0xa0 [ 210.326402][ T8392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.333226][ T8392] page last free stack trace: [ 210.338233][ T8392] free_unref_page_prepare+0x637/0x6c0 [ 210.343776][ T8392] free_unref_page_list+0x119/0x830 [ 210.349231][ T8392] release_pages+0x185f/0x1bd0 [ 210.354219][ T8392] __pagevec_release+0x6d/0xe0 [ 210.359112][ T8392] shmem_undo_range+0x5cd/0x19a0 [ 210.364096][ T8392] shmem_evict_inode+0x1e2/0x9a0 [ 210.369375][ T8392] evict+0x4b6/0x8b0 [ 210.373435][ T8392] __dentry_kill+0x412/0x630 [ 210.378472][ T8392] dentry_kill+0xb8/0x290 [ 210.382843][ T8392] dput+0xd8/0x1a0 [ 210.386661][ T8392] __fput+0x5a5/0x8c0 [ 210.391392][ T8392] task_work_run+0x125/0x1a0 [ 210.396140][ T8392] exit_to_user_mode_loop+0x10f/0x130 [ 210.401659][ T8392] exit_to_user_mode_prepare+0xee/0x180 [ 210.407352][ T8392] syscall_exit_to_user_mode+0x16/0x40 [ 210.412907][ T8392] do_syscall_64+0x58/0xa0 [ 210.417373][ T8392] [ 210.419737][ T8392] Memory state around the buggy address: [ 210.425411][ T8392] ffff88804e934780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.433899][ T8392] ffff88804e934800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.442246][ T8392] >ffff88804e934880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.450523][ T8392] ^ [ 210.455687][ T8392] ffff88804e934900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.464110][ T8392] ffff88804e934980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.472773][ T8392] ================================================================== [ 210.480960][ T8392] Disabling lock debugging due to kernel taint [ 210.487183][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.595645][ T8392] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.602933][ T8392] CPU: 1 PID: 8392 Comm: syz.1.1713 Tainted: G B syzkaller #0 [ 210.611828][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.621941][ T8392] Call Trace: [ 210.625441][ T8392] [ 210.628407][ T8392] dump_stack_lvl+0x188/0x250 [ 210.633134][ T8392] ? show_regs_print_info+0x20/0x20 [ 210.639113][ T8392] ? load_image+0x410/0x410 [ 210.643766][ T8392] panic+0x2f8/0x850 [ 210.647819][ T8392] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 210.654026][ T8392] ? bpf_jit_dump+0xd0/0xd0 [ 210.658680][ T8392] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 210.664701][ T8392] ? _raw_spin_unlock+0x40/0x40 [ 210.669769][ T8392] ? strcmp+0x67/0xb0 [ 210.673884][ T8392] check_panic_on_warn+0x80/0xa0 [ 210.678905][ T8392] ? strcmp+0x67/0xb0 [ 210.682922][ T8392] end_report+0x6d/0xf0 [ 210.687301][ T8392] kasan_report+0x102/0x130 [ 210.691859][ T8392] ? strcmp+0x67/0xb0 [ 210.695904][ T8392] strcmp+0x67/0xb0 [ 210.699930][ T8392] hpfs_get_ea+0x134/0xda0 [ 210.704394][ T8392] ? hpfs_read_ea+0xc20/0xc20 [ 210.709108][ T8392] ? __getblk_gfp+0x51/0xb20 [ 210.713904][ T8392] ? __might_sleep+0xf0/0xf0 [ 210.718546][ T8392] ? __bread_gfp+0x132/0x380 [ 210.723267][ T8392] ? hpfs_map_sector+0x146/0x2e0 [ 210.728345][ T8392] hpfs_read_inode+0x1a6/0x1050 [ 210.733235][ T8392] ? __lock_acquire+0x7b50/0x7b50 [ 210.738402][ T8392] ? hpfs_init_inode+0x2c0/0x2c0 [ 210.743582][ T8392] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 210.749963][ T8392] ? do_raw_spin_unlock+0x11d/0x230 [ 210.755351][ T8392] ? hpfs_init_inode+0x1cc/0x2c0 [ 210.761050][ T8392] hpfs_fill_super+0x12ee/0x1f30 [ 210.766429][ T8392] ? hpfs_mount+0x40/0x40 [ 210.770814][ T8392] ? snprintf+0xe5/0x140 [ 210.775646][ T8392] ? set_blocksize+0x1f1/0x360 [ 210.780477][ T8392] ? sb_set_blocksize+0xa5/0xe0 [ 210.785473][ T8392] mount_bdev+0x28a/0x3c0 [ 210.789959][ T8392] ? hpfs_mount+0x40/0x40 [ 210.795321][ T8392] legacy_get_tree+0xe6/0x180 [ 210.800140][ T8392] ? hpfs_ioctl+0x260/0x260 [ 210.804985][ T8392] vfs_get_tree+0x88/0x270 [ 210.809801][ T8392] do_new_mount+0x247/0xa40 [ 210.814444][ T8392] __se_sys_mount+0x2e3/0x3d0 [ 210.819330][ T8392] ? __x64_sys_mount+0xc0/0xc0 [ 210.824130][ T8392] ? lockdep_hardirqs_on+0x94/0x140 [ 210.829369][ T8392] ? __x64_sys_mount+0x1c/0xc0 [ 210.834256][ T8392] do_syscall_64+0x4c/0xa0 [ 210.838944][ T8392] ? clear_bhb_loop+0x30/0x80 [ 210.844032][ T8392] ? clear_bhb_loop+0x30/0x80 [ 210.849193][ T8392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.855151][ T8392] RIP: 0033:0x7f73883c73ca [ 210.859728][ T8392] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.880097][ T8392] RSP: 002b:00007f738661de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.888762][ T8392] RAX: ffffffffffffffda RBX: 00007f738661dee0 RCX: 00007f73883c73ca [ 210.897361][ T8392] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f738661dea0 [ 210.905663][ T8392] RBP: 000020000000a000 R08: 00007f738661dee0 R09: 0000000003200041 [ 210.914294][ T8392] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 210.923335][ T8392] R13: 00007f738661dea0 R14: 0000000000009e15 R15: 0000200000000040 [ 210.931633][ T8392] [ 210.934989][ T8392] Kernel Offset: disabled [ 210.939591][ T8392] Rebooting in 86400 seconds..