last executing test programs: 2.489803148s ago: executing program 3 (id=1520): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0xffffffffffffffff, r0, 0x0, 0x6, 0xa) 2.342676355s ago: executing program 3 (id=1525): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) 2.127134561s ago: executing program 3 (id=1530): mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x10000, &(0x7f0000000380)='nocase') 2.04495157s ago: executing program 0 (id=1533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xfffffffffffffd7c, 0x44, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e7063e8729dee4da8c9a91b4a487529a1a448ba55956c7a15fa160fdc09bf6600000000000001c36c4f7b28e13627dce84b8b9b1288ca25dff3d80cb380a7639b9a3ea9e1adaae4ed469e1388151d485f3a210bd26e9e653315124584a1978d950e49c04b100ab4f694c051657f2dfd7c538c6f177aa5f6b6a88c2a3bfa8795faef98ead17065ceac2cac299760462e763c74bcc4a341914875d616d0", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x1b) 1.893051084s ago: executing program 0 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x7, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x1, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) 1.806970956s ago: executing program 3 (id=1539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x3, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x4, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x9, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x1000009, 0x200, 0x2, 0x6, 0x1, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x4000, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x1000008, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x3, 0x8001, 0x200, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6, 0x401, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8000, 0x7, 0x1, 0x9, 0x800, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x5, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x6, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x7, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x2, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff943, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0xb, 0x8, 0x6, 0x8, 0x6, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x2, 0x77e, 0xb95, 0x5, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x6, 0x8000, 0xa, 0x6, 0x4, 0xfffffff8, 0xd2, 0x4, 0x9, 0x2, 0xa16f, 0x81, 0x8008, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0x4, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x100, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x10, 0x8, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x101, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x10001, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0x8, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0x3986, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x88, 0xe7, 0xfffffff5, 0x4, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x3, 0x4155, 0xedb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) 1.696643097s ago: executing program 0 (id=1541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) 1.607209205s ago: executing program 3 (id=1543): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@max_inline={'max_inline', 0x3d, [0x78, 0x37, 0x65, 0x35, 0x67, 0x39, 0x37, 0x6b, 0x38, 0x39]}}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x0) 1.585559s ago: executing program 0 (id=1544): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x53) 1.526808532s ago: executing program 1 (id=1546): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x2, 0x6, 0x1, {0x9, @pix_mp={0x4, 0x5, 0x2c2ee969, 0x3, 0x4, [{0x3, 0x8}, {0x4, 0x403}, {0x0, 0x2f}, {0x8, 0x9}, {0x7, 0x7ff}, {0xffffffc0, 0xd}, {0x7, 0xa447}, {0x91a8, 0x6}], 0x4, 0x0, 0x4, 0x0, 0x7}}, 0x7}) 1.421801487s ago: executing program 0 (id=1548): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x10000, &(0x7f0000000480)={[{@bsdgroups}, {@commit}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x81}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000004c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.321688571s ago: executing program 1 (id=1551): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000001140)="7000000018002507b9409b14ffff00000204be040205fe050e0204094300080004000000060000000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66e", 0x70, 0x70, 0x0, 0x0) 1.136350829s ago: executing program 1 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x4840) 981.250821ms ago: executing program 2 (id=1555): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 975.218926ms ago: executing program 4 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 962.828719ms ago: executing program 1 (id=1557): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 823.589462ms ago: executing program 2 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000c40)={0xa, 0x4e21, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x1c) 822.849452ms ago: executing program 4 (id=1559): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x3, 0x7fff0000}]}) getgroups(0x0, 0x0) 679.225659ms ago: executing program 4 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 663.433974ms ago: executing program 2 (id=1561): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) 509.309652ms ago: executing program 4 (id=1562): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6f5f, 0x0, 0x0, 0x2, 0x60, 0x3, 0x40, 0x2}) 509.191455ms ago: executing program 2 (id=1563): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x7, 0x9}) 323.263378ms ago: executing program 4 (id=1564): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 309.867149ms ago: executing program 3 (id=1565): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f000079f000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9, 0x0, 0x0, 0x5c, 0x16, 0x0, 0x3a, 0x70}) 238.221851ms ago: executing program 2 (id=1566): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x60, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\xf4w\xd0\'\x12{p9\x8al\x8b\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x054\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a5\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) 236.1777ms ago: executing program 0 (id=1567): creat(&(0x7f0000000180)='./file0\x00', 0xe1cb6cbf51098d1e) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 171.953993ms ago: executing program 1 (id=1568): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x3, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x4}) 110.610124ms ago: executing program 4 (id=1569): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 73.923307ms ago: executing program 2 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) 0s ago: executing program 1 (id=1571): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xfff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) kernel console output (not intermixed with test programs): 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice= b.3e [ 149.412764][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.421585][ T5888] usb 2-1: Product: syz [ 149.425763][ T5888] usb 2-1: Manufacturer: syz [ 149.430368][ T5888] usb 2-1: SerialNumber: syz [ 149.477672][ T7658] loop3: detected capacity change from 0 to 40427 [ 149.485226][ T7658] F2FS-fs: heap/no_heap options were deprecated [ 149.494692][ T7658] F2FS-fs (loop3): Image doesn't support compression [ 149.502441][ T7658] F2FS-fs (loop3): build fault injection rate: 12 [ 149.509021][ T7658] F2FS-fs (loop3): build fault injection type: 0x77 [ 149.525261][ T7658] F2FS-fs (loop3): invalid crc value [ 149.532001][ T7658] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x491a/0x7740 [ 149.541946][ T7658] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 149.560593][ T5931] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 149.667400][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.734932][ T5888] snd-usb-audio 2-1:176.76: probe with driver snd-usb-audio failed with error -2 [ 149.765906][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 149.771636][ T7666] loop4: detected capacity change from 0 to 8 [ 149.780719][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.782980][ T7666] SQUASHFS error: zstd decompression error: 10 [ 149.803206][ T5888] usb 2-1: USB disconnect, device number 31 [ 149.821344][ T7666] SQUASHFS error: zstd decompression failed, data probably corrupt [ 149.829285][ T7666] SQUASHFS error: Failed to read block 0x4ec: -5 [ 149.836424][ T5931] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 149.858089][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.883745][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:176.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.899817][ T7666] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 149.899839][ T7666] SQUASHFS error: Unable to read inode 0x2011f [ 149.942769][ T5931] usb 1-1: config 0 descriptor?? [ 150.125049][ T1231] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 150.175692][ T5931] usbhid 1-1:0.0: can't add hid device: -71 [ 150.189849][ T5931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.217122][ T5931] usb 1-1: USB disconnect, device number 26 [ 150.299507][ T1231] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 150.330593][ T1231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.353907][ T1231] usb 4-1: config 0 has no interface number 0 [ 150.360047][ T1231] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 150.383935][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 150.393333][ T1231] usb 4-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.418796][ T1231] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 150.443557][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.459855][ T1231] usb 4-1: Product: syz [ 150.464091][ T1231] usb 4-1: Manufacturer: syz [ 150.468698][ T1231] usb 4-1: SerialNumber: syz [ 150.482447][ T1231] usb 4-1: config 0 descriptor?? [ 150.494441][ T1231] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 150.514621][ T1231] nokiaca42v2 ttyUSB0: required endpoint is missing [ 150.546428][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 150.557335][ T10] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 150.578626][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.600571][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 150.613492][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.627599][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 150.637101][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.637570][ T7684] loop1: detected capacity change from 0 to 32768 [ 150.666045][ T10] usb 3-1: Product: syz [ 150.670678][ T10] usb 3-1: Manufacturer: syz [ 150.675300][ T10] usb 3-1: SerialNumber: syz [ 150.680085][ T7684] (syz.1.784,7684,1):ocfs2_verify_volume:2308 ERROR: bad block number on superblock: found 0, should be 2 [ 150.684990][ T10] usb 3-1: config 0 descriptor?? [ 150.697479][ T7676] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 150.701113][ T7684] (syz.1.784,7684,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 150.717786][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 150.733505][ T1231] usb 4-1: USB disconnect, device number 22 [ 150.746542][ T1231] cypress_m8 4-1:0.35: device disconnected [ 150.753980][ T7684] (syz.1.784,7684,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 150.763225][ T7684] (syz.1.784,7684,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 150.847000][ T7682] loop4: detected capacity change from 0 to 32768 [ 150.937360][ T7682] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.939970][ T10] usb 3-1: USB disconnect, device number 32 [ 150.972245][ T7687] hpfs: Bad version 183,140. Mount readonly to go around [ 150.979317][ T7687] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 151.018315][ T7682] XFS (loop4): Log size 516 blocks too small, minimum size is 636 blocks [ 151.093562][ T7682] XFS (loop4): AAIEEE! Log failed size checks. Abort! [ 151.151179][ T7682] XFS (loop4): log mount failed [ 151.187064][ T5931] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 151.381231][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 151.398061][ T5931] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 151.406434][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.428745][ T5931] usb 2-1: config 0 has no interface number 0 [ 151.442359][ T5931] usb 2-1: too many endpoints for config 0 interface 1 altsetting 3: 74, using maximum allowed: 30 [ 151.489016][ T5931] usb 2-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 151.538007][ T5931] usb 2-1: config 0 interface 1 has no altsetting 0 [ 151.583266][ T5931] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 151.603157][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.631775][ T7707] EXT4-fs: journaled quota format not specified [ 151.647116][ T5931] usb 2-1: Product: syz [ 151.649745][ T7711] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 151.651318][ T5931] usb 2-1: Manufacturer: syz [ 151.685004][ T7711] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.713869][ T5931] usb 2-1: SerialNumber: syz [ 151.729692][ T5931] usb 2-1: config 0 descriptor?? [ 151.754781][ T7711] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.799835][ T7711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.824641][ T7720] hfs: Bad value for 'creator' [ 151.848405][ T7711] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.794: Inode bitmap for bg 0 marked uninitialized [ 151.886717][ T7722] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 151.895070][ T1231] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 151.907477][ T7711] loop2: lost filesystem error report for type 5 error -117 [ 151.909619][ T7711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.930964][ T7722] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.942236][ T7722] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 151.960497][ T7722] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.799: corrupted inode contents [ 151.972424][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 151.972447][ C1] EXT4-fs (loop3): initial error at time 1771348581: mb_free_blocks:2047: inode 11: block 64 [ 151.972481][ C1] EXT4-fs (loop3): last error at time 1771348581: mb_free_blocks:2047: inode 11: block 64 [ 151.984462][ T5931] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 151.989784][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.011251][ T7722] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.799: mark_inode_dirty error [ 152.033339][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.053357][ T7722] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.799: invalid indirect mapped block 327680 (level 0) [ 152.063575][ T5931] gspca_spca1528: reg_w err -71 [ 152.092557][ T1231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.102870][ T1231] usb 1-1: not running at top speed; connect to a high speed hub [ 152.112412][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.118381][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.124693][ T1231] usb 1-1: config 7 has an invalid interface number: 95 but max is 0 [ 152.128880][ T5931] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 152.139743][ T1231] usb 1-1: config 7 has no interface number 0 [ 152.163156][ T5931] usb 2-1: USB disconnect, device number 32 [ 152.167643][ T7722] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.799: corrupted inode contents [ 152.194881][ T1231] usb 1-1: config 7 interface 95 has no altsetting 0 [ 152.236741][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.247593][ T7722] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 152.265683][ T1231] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=16.18 [ 152.274831][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.297443][ T1231] usb 1-1: Product: syz [ 152.301764][ T7722] loop3: lost filesystem error report for type 5 error -117 [ 152.303252][ T7722] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.799: corrupted inode contents [ 152.333658][ T1231] usb 1-1: Manufacturer: syz [ 152.341664][ T1231] usb 1-1: SerialNumber: syz [ 152.341663][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.342055][ T7722] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.799: mark_inode_dirty error [ 152.373406][ T7722] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.373807][ T7722] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 152.394001][ T7722] loop3: lost filesystem error report for type 5 error -117 [ 152.401096][ T7722] EXT4-fs (loop3): 1 truncate cleaned up [ 152.438207][ T7722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.515350][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.598551][ T7725] set_capacity_and_notify: 5 callbacks suppressed [ 152.598570][ T7725] loop4: detected capacity change from 0 to 32768 [ 152.604496][ T1231] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 152.605583][ T5931] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 152.619216][ T1231] cxusb: set interface failed [ 152.624547][ T7725] (syz.4.800,7725,0):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 152.640647][ T1231] dvb-usb: bulk message failed: -22 (1/0) [ 152.643888][ T7725] (syz.4.800,7725,0):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 152.660839][ T7725] (syz.4.800,7725,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 152.675130][ T1231] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 152.687516][ T7725] (syz.4.800,7725,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 152.731356][ T1231] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-19) [ 152.751542][ T1231] dvb_usb_cxusb 1-1:7.95: probe with driver dvb_usb_cxusb failed with error -22 [ 152.781617][ T1231] usb 1-1: USB disconnect, device number 27 [ 152.799971][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 152.823767][ T5931] usb 3-1: config 10 has an invalid interface number: 80 but max is 0 [ 152.832302][ T5931] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 152.842679][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 152.868543][ T5931] usb 3-1: config 10 has no interface number 0 [ 152.901721][ T5931] usb 3-1: config 10 interface 80 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.928900][ T5931] usb 3-1: config 10 interface 80 has no altsetting 0 [ 152.950215][ T5931] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.983520][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.992813][ T5931] usb 3-1: Product: syz [ 153.000982][ T5931] usb 3-1: Manufacturer: syz [ 153.008181][ T5931] usb 3-1: SerialNumber: syz [ 153.029853][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.062937][ T5888] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.089033][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 153.103913][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.112076][ T5888] usb 4-1: SerialNumber: syz [ 153.169621][ T7745] loop4: detected capacity change from 0 to 22 [ 153.179614][ T7745] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 153.215675][ T7745] VFS: Can't find a romfs filesystem on dev loop4. [ 153.215675][ T7745] [ 153.365098][ T5888] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 153.371380][ T5888] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 153.381174][ T5931] usb 3-1: USB disconnect, device number 33 [ 153.431184][ T5888] usb 4-1: USB disconnect, device number 23 [ 153.459878][ T7752] loop4: detected capacity change from 0 to 1024 [ 153.505903][ T7752] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.551825][ T7752] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 153.582894][ T7752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.592411][ T7758] loop1: detected capacity change from 0 to 8 [ 153.611834][ T7752] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 153.633347][ T7752] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 153.665918][ T7752] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 153.700778][ T7752] EXT4-fs (loop4): 1 truncate cleaned up [ 153.708044][ T7752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.792569][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.805518][ T7764] loop0: detected capacity change from 0 to 128 [ 153.815349][ T7764] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 154.005322][ T5931] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 154.205142][ T5931] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 154.225293][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 154.257921][ T5931] usb 2-1: Product: syz [ 154.273153][ T5931] usb 2-1: SerialNumber: syz [ 154.287797][ T5931] usb 2-1: config 0 descriptor?? [ 154.314024][ T5931] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 154.340459][ T5931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.366643][ T5931] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 154.411276][ T7783] loop0: detected capacity change from 0 to 8192 [ 154.450285][ T7766] loop4: detected capacity change from 0 to 32768 [ 154.481553][ T7783] Dev loop0 Sun disklabel: Csum bad, label corrupted [ 154.488316][ T7766] (syz.4.820,7766,1):ocfs2_check_set_options:1265 ERROR: ACL support requested but extended attributes feature is not enabled [ 154.546018][ T7766] (syz.4.820,7766,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 154.562103][ T1231] usb 2-1: USB disconnect, device number 33 [ 154.580173][ T5931] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 154.659219][ T7791] cgroup: noprefix used incorrectly [ 154.794273][ T7793] loop0: detected capacity change from 0 to 8192 [ 154.806390][ T5931] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.827504][ T5931] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 154.836587][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.847504][ T7793] Dev loop0: RDB in block 1 has bad checksum [ 154.883974][ T5931] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 154.971306][ T1231] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 155.112298][ T5888] usb 4-1: USB disconnect, device number 24 [ 155.166889][ T1231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 155.188795][ T1231] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 155.216074][ T1231] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 155.242799][ T1231] usb 5-1: string descriptor 0 read error: -22 [ 155.259547][ T1231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.279796][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.302228][ T7795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.316548][ T7815] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 155.369029][ T5931] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 155.537321][ T1231] cdc_ncm 5-1:1.0: bind() failure [ 155.547090][ T1231] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 155.555436][ T1231] cdc_ncm 5-1:1.1: bind() failure [ 155.564457][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 155.566629][ T1231] usb 5-1: USB disconnect, device number 25 [ 155.575035][ T5931] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 155.583761][ T5931] usb 3-1: config 0 has no interface number 0 [ 155.594739][ T5931] usb 3-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=68.bd [ 155.604452][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.612554][ T5931] usb 3-1: Product: syz [ 155.616808][ T5931] usb 3-1: Manufacturer: syz [ 155.621409][ T5931] usb 3-1: SerialNumber: syz [ 155.627984][ T5931] usb 3-1: config 0 descriptor?? [ 155.635381][ T5931] usb-storage 3-1:0.76: USB Mass Storage device detected [ 155.655201][ T5931] usb-storage 3-1:0.76: Quirks match for vid 0781 pid 55e8: 800000 [ 155.663226][ T5938] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 155.779405][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 155.861463][ T5938] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 155.867226][ T1231] usb 3-1: USB disconnect, device number 34 [ 155.870646][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.885762][ T5938] usb 2-1: Product: syz [ 155.889977][ T5938] usb 2-1: Manufacturer: syz [ 155.894576][ T5938] usb 2-1: SerialNumber: syz [ 155.902396][ T5938] usb 2-1: config 0 descriptor?? [ 155.941901][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 155.948566][ T5908] usb 1-1: config 10 has an invalid interface number: 29 but max is 0 [ 155.956913][ T5908] usb 1-1: config 10 has no interface number 0 [ 155.963329][ T5908] usb 1-1: too many endpoints for config 10 interface 29 altsetting 0: 234, using maximum allowed: 30 [ 155.974811][ T5908] usb 1-1: config 10 interface 29 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 155.984733][ T5908] usb 1-1: config 10 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 234 [ 156.000239][ T5908] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=3f.7c [ 156.007138][ T5931] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 156.010687][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 156.025068][ T5908] usb 1-1: Product: syz [ 156.029280][ T5908] usb 1-1: Manufacturer: syz [ 156.033859][ T5908] usb 1-1: SerialNumber: syz [ 156.138341][ T5938] usb 2-1: USB disconnect, device number 34 [ 156.169066][ T7833] loop4: detected capacity change from 0 to 128 [ 156.180693][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 156.188890][ T5931] usb 4-1: config 0 has an invalid interface number: 218 but max is 0 [ 156.199839][ T5931] usb 4-1: config 0 has no interface number 0 [ 156.208785][ T5931] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 156.220850][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.232654][ T5931] usb 4-1: Product: syz [ 156.237842][ T5931] usb 4-1: Manufacturer: syz [ 156.242455][ T5931] usb 4-1: SerialNumber: syz [ 156.252838][ T5931] usb 4-1: config 0 descriptor?? [ 156.292334][ T5908] usb 1-1: unknown interface protocol 0xff, assuming v1 [ 156.328083][ T5908] usb 1-1: 29:2 : does not exist [ 156.404971][ T5908] usb 1-1: USB disconnect, device number 28 [ 156.430839][ T7839] loop4: detected capacity change from 0 to 4096 [ 156.437883][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.29/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.446017][ T7839] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 156.528034][ T7839] ntfs3(loop4): MFT: r=18, expect seq=1 instead of 0! [ 156.534977][ T7839] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 156.542141][ T5920] usb 4-1: USB disconnect, device number 25 [ 156.570970][ T7839] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 156.699562][ T7841] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 156.708962][ T7841] ntfs3(loop2): Failed to load $Extend (-22). [ 156.715396][ T7841] ntfs3(loop2): Failed to initialize $Extend. [ 156.805776][ T5839] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 157.311122][ T7863] EXT4-fs error (device loop3): __ext4_fill_super:5565: comm syz.3.867: inode #2: comm syz.3.867: iget: illegal inode # [ 157.335846][ T7863] loop3: lost filesystem error report for type 5 error -117 [ 157.339467][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 157.353267][ C1] EXT4-fs (loop3): initial error at time 1771348586: __ext4_fill_super:5565 [ 157.362001][ C1] EXT4-fs (loop3): last error at time 1771348586: __ext4_fill_super:5565 [ 157.404510][ T7863] EXT4-fs (loop3): Remounting filesystem read-only [ 157.411067][ T7863] EXT4-fs (loop3): get root inode failed [ 157.437486][ T7863] EXT4-fs (loop3): mount failed [ 157.524505][ T7864] loop2: p1 < > p2 p4 < p5 > [ 157.529254][ T7864] loop2: partition table partially beyond EOD, truncated [ 157.568641][ T7864] loop2: p1 start 393216 is beyond EOD, truncated [ 157.591381][ T7864] loop2: p2 start 2164300032 is beyond EOD, truncated [ 157.611936][ T7864] loop2: p5 start 2164300032 is beyond EOD, truncated [ 157.813978][ T6062] udevd[6062]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 157.827822][ T7860] F2FS-fs (loop4): Invalid log sectorsize (14) [ 157.834015][ T7860] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.850585][ T7860] F2FS-fs (loop4): old and new quota format mixing [ 157.870410][ T5938] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 157.878789][ T7845] gfs2: Invalid block size [ 158.055024][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 158.065913][ T5938] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 158.089351][ T7857] set_capacity_and_notify: 5 callbacks suppressed [ 158.089367][ T7857] loop0: detected capacity change from 0 to 32768 [ 158.126814][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.172504][ T7877] loop2: detected capacity change from 0 to 8 [ 158.196359][ T5938] usb 4-1: config 0 descriptor?? [ 158.196835][ T7857] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.204399][ T5938] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 158.229791][ T7877] SQUASHFS error: xz decompression failed, data probably corrupt [ 158.237555][ T7877] SQUASHFS error: Failed to read block 0x108: -5 [ 158.261648][ T7857] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 158.301163][ T7877] SQUASHFS error: Unable to read metadata cache entry [106] [ 158.309440][ T7877] SQUASHFS error: Unable to read inode 0x11f [ 158.353061][ T7857] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 158.418956][ T5920] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 158.455587][ T5920] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 158.485227][ T7889] loop4: detected capacity change from 0 to 512 [ 158.510810][ T5908] usb 4-1: USB disconnect, device number 26 [ 158.519365][ T7889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.537284][ T7889] EXT4-fs: Ignoring removed oldalloc option [ 158.608678][ T7889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.878: bg 0: block 5: invalid block bitmap [ 158.670239][ T7889] loop4: lost filesystem error report for type 5 error -117 [ 158.672103][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 158.685986][ C0] EXT4-fs (loop4): initial error at time 1771348587: ext4_validate_block_bitmap:432 [ 158.695432][ C0] EXT4-fs (loop4): last error at time 1771348587: ext4_validate_block_bitmap:432 [ 158.708535][ T7889] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 158.717430][ T7889] loop4: lost filesystem error report for type 5 error -117 [ 158.721773][ T7899] loop1: detected capacity change from 0 to 128 [ 158.769663][ T7889] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.878: invalid indirect mapped block 4294967295 (level 1) [ 158.781890][ T5920] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 301ms [ 158.791738][ T7889] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.802157][ T7899] FAT-fs (loop1): bogus sectors per cluster 0 [ 158.818440][ T5920] gfs2: fsid=syz:syz.0: jid=0: Done [ 158.828322][ T7889] EXT4-fs (loop4): 1 orphan inode deleted [ 158.834240][ T7889] EXT4-fs (loop4): 1 truncate cleaned up [ 158.834599][ T7857] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 158.840435][ T7899] FAT-fs (loop1): Can't find a valid FAT filesystem [ 158.870965][ T7857] syz.0.864: attempt to access beyond end of device [ 158.870965][ T7857] loop0: rw=8400896, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 158.896893][ T7889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.932742][ T7857] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 159.092120][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.407091][ T7910] loop3: detected capacity change from 0 to 8192 [ 159.812077][ T7907] loop2: detected capacity change from 0 to 32768 [ 159.848527][ T7933] loop0: detected capacity change from 0 to 128 [ 159.861962][ T7933] zonefs: Bad value for 'errors' [ 159.875237][ T7907] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 159.888338][ T7907] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has an invalid extent (next_free_rec 1537, count 19) [ 159.949945][ T7907] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 159.960169][ T5938] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 159.976065][ T5931] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 159.995272][ T7907] OCFS2: File system is now read-only. [ 160.003283][ T7907] (syz.2.885,7907,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 160.017890][ T7907] (syz.2.885,7907,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 160.026996][ T7907] (syz.2.885,7907,0):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0 [ 160.035588][ T7907] (syz.2.885,7907,0):ocfs2_bmap:470 ERROR: status = -30 [ 160.046241][ T7907] jbd2_journal_init_inode: Cannot locate journal superblock [ 160.053759][ T7907] (syz.2.885,7907,0):ocfs2_journal_init:966 ERROR: Linux journal layer error [ 160.062849][ T7907] (syz.2.885,7907,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 160.072785][ T7907] (syz.2.885,7907,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 160.080575][ T7907] (syz.2.885,7907,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 160.080727][ T5888] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 160.095760][ T7907] (syz.2.885,7907,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 160.146028][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 160.158807][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.171876][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.182315][ T5931] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.194588][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.207613][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.207763][ T5938] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 160.228320][ T5931] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.238010][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.246139][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.256191][ T5938] usb 4-1: Product: syz [ 160.261580][ T5938] usb 4-1: Manufacturer: syz [ 160.266343][ T5938] usb 4-1: SerialNumber: syz [ 160.274387][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.283821][ T5888] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 160.292635][ T5888] usb 2-1: config 5 has no interface number 0 [ 160.298876][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 160.308260][ T5931] usb 5-1: invalid MIDI out EP 0 [ 160.313578][ T5888] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 160.328881][ T5938] usb 4-1: config 0 descriptor?? [ 160.341792][ T5888] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 160.354875][ T5888] usb 2-1: config 5 interface 123 has no altsetting 0 [ 160.363395][ T5938] xr_serial 4-1:0.0: failed to claim sibling interface: -16 [ 160.370747][ T5938] xr_serial 4-1:0.0: probe with driver xr_serial failed with error -16 [ 160.429881][ T5888] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 160.448985][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.481400][ T5888] usb 2-1: Product: syz [ 160.485606][ T5888] usb 2-1: Manufacturer: syz [ 160.492570][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 160.501401][ T5888] usb 2-1: SerialNumber: syz [ 160.506335][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.527096][ T10] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 160.545469][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.563102][ T10] usb 1-1: Product: syz [ 160.567405][ T10] usb 1-1: Manufacturer: syz [ 160.585540][ T5931] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 160.596041][ T10] usb 1-1: SerialNumber: syz [ 160.617681][ T5920] usb 4-1: USB disconnect, device number 27 [ 160.636569][ T5931] usb 5-1: USB disconnect, device number 26 [ 160.651281][ T10] usb 1-1: config 0 descriptor?? [ 160.709409][ T7946] loop2: detected capacity change from 0 to 128 [ 160.722496][ T7946] Invalid source name [ 160.733902][ T7946] UBIFS error (pid: 7946): cannot open "/dev/loop2", error -22 [ 160.781982][ T5888] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 160.825534][ T5888] usb 2-1: USB disconnect, device number 35 [ 160.904874][ T10] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 160.953265][ T10] usb 1-1: USB disconnect, device number 29 [ 161.168666][ T7962] loop2: detected capacity change from 0 to 1024 [ 161.191154][ T7962] hfsplus: failed to load root directory [ 161.248380][ T7966] loop4: detected capacity change from 0 to 8 [ 161.279056][ T7966] SQUASHFS error: xz decompression failed, data probably corrupt [ 161.309555][ T7966] SQUASHFS error: Failed to read block 0x108: -5 [ 161.338655][ T7966] SQUASHFS error: Unable to read metadata cache entry [106] [ 161.346000][ T7966] SQUASHFS error: Unable to read inode 0x11f [ 161.432545][ T7972] SQUASHFS error: xz decompression failed, data probably corrupt [ 161.494378][ T7972] SQUASHFS error: Failed to read block 0x108: -5 [ 161.532856][ T7972] SQUASHFS error: Unable to read metadata cache entry [106] [ 161.540196][ T7972] SQUASHFS error: Unable to read inode 0x101f [ 161.705910][ T5908] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 161.714327][ T7984] SQUASHFS error: xz decompression failed, data probably corrupt [ 161.758642][ T7984] SQUASHFS error: Failed to read block 0x108: -5 [ 161.767582][ T7984] SQUASHFS error: Unable to read metadata cache entry [106] [ 161.786920][ T7984] SQUASHFS error: Unable to read inode 0x11f [ 161.878425][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 161.899799][ T5908] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 161.932801][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.976674][ T5908] usb 2-1: Product: syz [ 161.980879][ T5908] usb 2-1: Manufacturer: syz [ 161.985481][ T5908] usb 2-1: SerialNumber: syz [ 162.058795][ T5908] usb 2-1: config 0 descriptor?? [ 162.236640][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 162.250838][ T8010] mmap: syz.2.934 (8010) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.348720][ T5908] usb_8dev 2-1:0.0 can0: sending command message failed [ 162.370216][ T5908] usb_8dev 2-1:0.0 can0: can't get firmware version [ 162.412771][ T10] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 162.430300][ T10] usb 5-1: config 0 has no interface number 0 [ 162.437250][ T5908] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 162.443878][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 162.457430][ T5888] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 162.464479][ T5908] usb 2-1: USB disconnect, device number 36 [ 162.478981][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 144, setting to 64 [ 162.529631][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 162.539320][ T10] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 162.562482][ T10] usb 5-1: Product: syz [ 162.566676][ T10] usb 5-1: Manufacturer: syz [ 162.571258][ T10] usb 5-1: SerialNumber: syz [ 162.579963][ T10] usb 5-1: config 0 descriptor?? [ 162.587917][ T7994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.627370][ T6062] Dev loop0: RDB in block 1 has bad checksum [ 162.642298][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 162.647566][ T8015] Dev loop0: RDB in block 1 has bad checksum [ 162.672622][ T5888] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 162.686153][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.724138][ T5888] usb 4-1: Product: syz [ 162.728341][ T5888] usb 4-1: Manufacturer: syz [ 162.732939][ T5888] usb 4-1: SerialNumber: syz [ 162.779377][ T5888] usb 4-1: config 0 descriptor?? [ 162.786937][ T5888] hub 4-1:0.0: bad descriptor, ignoring hub [ 162.813120][ T5888] hub 4-1:0.0: probe with driver hub failed with error -5 [ 162.823289][ T10] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 162.831111][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 162.869060][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 162.887604][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 162.897354][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 162.916119][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 162.945452][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 162.967277][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 162.999499][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 163.038768][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 163.081724][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 163.089099][ T10] usb 5-1: USB disconnect, device number 27 [ 163.110463][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 163.166098][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 163.181756][ T24] usb 4-1: USB disconnect, device number 28 [ 163.194199][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 163.224780][ T8032] ntfs3(loop1): ino=0, mi_enum_attr [ 163.230107][ T8032] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 163.242113][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 163.257598][ T10] keyspan 5-1:0.107: device disconnected [ 163.260010][ T5908] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.283224][ T8032] ntfs3(loop1): mft corrupted [ 163.289879][ T8032] ntfs3(loop1): Failed to load $MFT. [ 163.295853][ T5908] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.309042][ T5908] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.327706][ T5908] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 163.340750][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.352582][ T8026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.462774][ T5920] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 163.582221][ T5908] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 163.590763][ T5908] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17 [ 163.656270][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 163.673872][ T5920] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 163.684799][ T5908] usb 3-1: USB disconnect, device number 35 [ 163.690997][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 163.701407][ T5920] usb 1-1: config 0 has no interface number 0 [ 163.708288][ T8046] set_capacity_and_notify: 6 callbacks suppressed [ 163.708304][ T8046] loop1: detected capacity change from 0 to 2048 [ 163.726047][ T5920] usb 1-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 163.740091][ T5920] usb 1-1: config 0 interface 25 has no altsetting 0 [ 163.761407][ T8046] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 163.772968][ T5920] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 163.786136][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.794153][ T5920] usb 1-1: Product: syz [ 163.802119][ T8046] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.816517][ T5920] usb 1-1: Manufacturer: syz [ 163.821813][ T8046] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 163.832779][ T5920] usb 1-1: SerialNumber: syz [ 163.857425][ T8046] EXT4-fs (loop1): group descriptors corrupted! [ 163.865638][ T5920] usb 1-1: config 0 descriptor?? [ 163.902421][ T8050] loop4: detected capacity change from 0 to 4096 [ 163.923623][ T8050] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 163.934838][ T8050] ntfs3(loop4): ino=3, mi_enum_attr [ 163.946510][ T8050] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 163.953910][ T8050] ntfs3(loop4): Failed to load $Bitmap (-2). [ 164.029277][ T8052] loop1: detected capacity change from 0 to 1024 [ 164.057704][ T5888] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 164.090896][ T8052] hfsplus: failed to load catalog file [ 164.115330][ T5920] usb 1-1: bad CDC descriptors [ 164.139728][ T5920] cp210x 1-1:0.25: cp210x converter detected [ 164.151347][ T5920] cp210x 1-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 164.180169][ T5920] cp210x 1-1:0.25: querying part number failed [ 164.198956][ T5920] usb 1-1: cp210x converter now attached to ttyUSB0 [ 164.229295][ T5920] usb 1-1: USB disconnect, device number 30 [ 164.246340][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 164.253483][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.262219][ T5920] cp210x 1-1:0.25: device disconnected [ 164.271188][ T5888] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 164.284238][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.294336][ T8058] loop2: detected capacity change from 0 to 512 [ 164.299186][ T8056] loop1: detected capacity change from 0 to 2048 [ 164.314762][ T8056] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.335136][ T8056] NILFS (loop1): too large checkpoint size: 1741 bytes [ 164.359623][ T5888] usb 4-1: config 0 descriptor?? [ 164.364176][ T8056] NILFS (loop1): error -22 while loading super root [ 164.372321][ T8058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.381459][ T5814] udevd[5814]: incorrect nilfs2 checksum on /dev/loop1 [ 164.383084][ T8058] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.959: ea_inode file size=0 entry size=21760 [ 164.389879][ T5931] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 164.440603][ T8058] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 164.476604][ T8058] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.959: corrupted inode contents [ 164.489990][ T8058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.497723][ T8058] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.959: mark_inode_dirty error [ 164.500898][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 164.524647][ C0] EXT4-fs (loop2): initial error at time 1771348592: ext4_do_update_inode:5569: inode 15 [ 164.532212][ T8058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.534513][ C0] EXT4-fs (loop2): last error at time 1771348592: ext4_do_update_inode:5569: inode 15 [ 164.562445][ T5836] Bluetooth: hci2: hcon ffff88807d158000 sent 1 < count 13 [ 164.579817][ T8058] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.959: corrupted inode contents [ 164.601315][ T8058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.604075][ T8058] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.959: mark_inode_dirty error [ 164.629789][ T8058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.629987][ T5888] usb 4-1: string descriptor 0 read error: -71 [ 164.636146][ T8058] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.959: mark inode dirty (error -117) [ 164.641784][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 164.664270][ T5888] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 164.671937][ T5888] uvcvideo 4-1:0.0: No valid video chain found. [ 164.674324][ T8058] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.680389][ T5888] usb 4-1: USB disconnect, device number 29 [ 164.699084][ T5931] usb 5-1: config 37 has an invalid interface number: 13 but max is 0 [ 164.702391][ T8058] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 164.707792][ T5931] usb 5-1: config 37 has no interface number 0 [ 164.723442][ T5931] usb 5-1: config 37 interface 13 has no altsetting 0 [ 164.734736][ T8058] EXT4-fs (loop2): 1 orphan inode deleted [ 164.742693][ T5931] usb 5-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 164.762538][ T8058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.776647][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.785515][ T5931] usb 5-1: Product: syz [ 164.789699][ T5931] usb 5-1: Manufacturer: syz [ 164.795141][ T5931] usb 5-1: SerialNumber: syz [ 164.857632][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.034484][ T5931] usb 5-1: bad CDC descriptors [ 165.064812][ T5931] usb 5-1: USB disconnect, device number 28 [ 165.311506][ T8079] loop2: detected capacity change from 0 to 256 [ 165.368715][ T8063] loop1: detected capacity change from 0 to 32768 [ 165.420795][ T8090] loop2: detected capacity change from 0 to 64 [ 165.458703][ T8063] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 165.479174][ T8092] loop0: detected capacity change from 0 to 2048 [ 165.524150][ T5814] loop0: p1 p3 < > p4 < p5 > [ 165.525440][ T8063] XFS (loop1): Ending clean mount [ 165.528973][ T5814] loop0: partition table partially beyond EOD, truncated [ 165.578801][ T5814] loop0: p1 size 33024 extends beyond EOD, truncated [ 165.587987][ T5814] loop0: p3 start 4284289 is beyond EOD, truncated [ 165.596533][ T5814] loop0: p5 size 33024 extends beyond EOD, truncated [ 165.616922][ T5920] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 165.619682][ T8092] loop0: p1 p3 < > p4 < p5 > [ 165.646855][ T8092] loop0: partition table partially beyond EOD, truncated [ 165.647166][ T5829] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 165.654590][ T8092] loop0: p1 size 33024 extends beyond EOD, truncated [ 165.675904][ T8092] loop0: p3 start 4284289 is beyond EOD, truncated [ 165.684365][ T8092] loop0: p5 size 33024 extends beyond EOD, truncated [ 165.724298][ T5199] loop0: p1 p3 < > p4 < p5 > [ 165.733643][ T5199] loop0: partition table partially beyond EOD, truncated [ 165.751988][ T5199] loop0: p1 size 33024 extends beyond EOD, truncated [ 165.767212][ T5199] loop0: p3 start 4284289 is beyond EOD, truncated [ 165.781467][ T5199] loop0: p5 size 33024 extends beyond EOD, truncated [ 165.783813][ T5920] usb 4-1: not running at top speed; connect to a high speed hub [ 165.835443][ T5920] usb 4-1: config 95 has an invalid interface number: 86 but max is 0 [ 165.853163][ T5920] usb 4-1: config 95 has no interface number 0 [ 165.869847][ T5920] usb 4-1: config 95 interface 86 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 165.895100][ T5920] usb 4-1: config 95 interface 86 has no altsetting 0 [ 165.913632][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 165.918031][ T6062] udevd[6062]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 165.937919][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 165.939640][ T5920] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=88.93 [ 166.021037][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.056046][ T5920] usb 4-1: Product: syz [ 166.060252][ T5920] usb 4-1: Manufacturer: syz [ 166.076465][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 166.090906][ T5817] udevd[5817]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 166.091600][ T5920] usb 4-1: SerialNumber: syz [ 166.110252][ T6062] udevd[6062]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 166.205584][ T5817] udevd[5817]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 166.220016][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 166.233094][ T6062] udevd[6062]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 166.397870][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 166.417022][ T5920] iguanair 4-1:95.86: probe with driver iguanair failed with error -12 [ 166.448068][ T5920] usb 4-1: USB disconnect, device number 30 [ 166.581084][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 166.594089][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.614765][ T24] usb 5-1: config 4 has an invalid interface number: 146 but max is 0 [ 166.622961][ T24] usb 5-1: config 4 has no interface number 0 [ 166.640103][ T24] usb 5-1: config 4 interface 146 has no altsetting 0 [ 166.660614][ T24] usb 5-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 166.678798][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.688132][ T8103] loop0: detected capacity change from 0 to 40427 [ 166.694971][ T24] usb 5-1: Product: syz [ 166.700576][ T24] usb 5-1: Manufacturer: syz [ 166.705186][ T24] usb 5-1: SerialNumber: syz [ 166.712323][ T8103] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 166.723489][ T5931] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 166.723735][ T8103] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 166.741912][ T8103] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 166.757889][ T8103] F2FS-fs (loop0): invalid crc value [ 166.784572][ T8109] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.898152][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 166.933363][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=04cc, bcdDevice= 2.10 [ 166.943140][ T8103] F2FS-fs (loop0): Failed to read root inode [ 166.953781][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.982864][ T5931] usb 2-1: config 0 descriptor?? [ 167.010988][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 167.023308][ T24] usbduxsigma 5-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 167.038650][ T24] usbduxsigma 5-1:4.146: probe with driver usbduxsigma failed with error -71 [ 167.060553][ T24] usb 5-1: USB disconnect, device number 29 [ 167.117231][ T8128] hfs: invalid btree extent records [ 167.123742][ T8128] hfs: unable to open extent tree [ 167.134691][ T8128] hfs: can't find a HFS filesystem on dev loop3 [ 167.219762][ T5920] usb 2-1: USB disconnect, device number 37 [ 167.358638][ T8109] XFS (loop2): Tail block (0x80) overwrite detected. Updated to 0x100 [ 167.375373][ T8109] XFS (loop2): Starting recovery (logdev: internal) [ 167.386676][ T8109] XFS (loop2): Ending recovery (logdev: internal) [ 167.444141][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.624252][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 167.751275][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 167.809297][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 167.813375][ T8140] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 167.830931][ T5931] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 167.849705][ T5931] usb 4-1: Product: syz [ 167.850190][ T8140] romfs: bad initial checksum on dev loop1. [ 167.859778][ T5931] usb 4-1: Manufacturer: syz [ 167.859796][ T5931] usb 4-1: SerialNumber: syz [ 167.870534][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 167.896260][ T5931] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 167.914810][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 167.921199][ T5931] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.932578][ T24] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 167.943496][ T5931] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 167.952842][ T24] usb 1-1: config 1 has no interface number 0 [ 167.973395][ T5931] usb 4-1: media controller created [ 167.983933][ T24] usb 1-1: config 1 interface 7 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.994953][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.005892][ T24] usb 1-1: config 1 interface 7 has no altsetting 0 [ 168.026407][ T5931] usb 4-1: selecting invalid altsetting 1 [ 168.032166][ T5931] set interface failed [ 168.032511][ T5931] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.042773][ T24] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00 [ 168.051369][ T5931] error writing reg: 0xff, val: 0x00 [ 168.066120][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 168.067830][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.078551][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.094279][ T8144] tmpfs: Bad value for 'mpol' [ 168.105467][ T10] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 168.134122][ T24] usb 1-1: Product: syz [ 168.139117][ T10] usb 5-1: config 0 has no interface number 0 [ 168.139165][ T10] usb 5-1: config 0 interface 104 altsetting 129 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 168.139193][ T10] usb 5-1: config 0 interface 104 has no altsetting 0 [ 168.142957][ T10] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=2f.46 [ 168.173949][ T24] usb 1-1: Manufacturer: syz [ 168.202316][ T24] usb 1-1: SerialNumber: syz [ 168.207707][ T5931] dvb_usb_mxl111sf 4-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 168.227093][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.235258][ T29] audit: type=1326 audit(1771348596.131:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4519bf79 code=0x0 [ 168.236542][ T8134] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.265060][ T5931] usb 4-1: USB disconnect, device number 31 [ 168.272198][ T10] usb 5-1: Product: syz [ 168.276377][ T10] usb 5-1: Manufacturer: syz [ 168.280970][ T10] usb 5-1: SerialNumber: syz [ 168.338583][ T10] usb 5-1: config 0 descriptor?? [ 168.350572][ T24] em28xx 1-1:1.7: New device syz syz @ 480 Mbps (eb1a:2885, interface 7, class 7) [ 168.369314][ T24] em28xx 1-1:1.7: Video interface 7 found: bulk [ 168.596506][ T10] option 5-1:0.104: GSM modem (1-port) converter detected [ 168.628148][ T10] usb 5-1: USB disconnect, device number 30 [ 168.656019][ T10] option 5-1:0.104: device disconnected [ 168.672998][ T24] em28xx 1-1:1.7: unknown em28xx chip ID (0) [ 168.742113][ T24] em28xx 1-1:1.7: reading from i2c device at 0xa0 failed (error=-5) [ 168.751126][ T24] em28xx 1-1:1.7: board has no eeprom [ 168.776921][ T8152] XFS (loop2): invalid logbufsize: 8 [not 16k,32k,64k,128k or 256k] [ 168.837763][ T24] em28xx 1-1:1.7: Identified as Terratec Cinergy H5 (card=79) [ 168.845304][ T24] em28xx 1-1:1.7: Currently, V4L2 is not supported on this model [ 168.877679][ T5920] em28xx 1-1:1.7: Binding DVB extension [ 168.886145][ T5920] em28xx 1-1:1.7: no endpoint for DVB mode and transfer type 0 [ 168.899691][ T5908] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 168.907492][ T24] usb 1-1: USB disconnect, device number 31 [ 168.916393][ T5920] em28xx 1-1:1.7: failed to pre-allocate USB transfer buffers for DVB. [ 168.930187][ T24] em28xx 1-1:1.7: Disconnecting em28xx [ 168.936686][ T5920] em28xx 1-1:1.7: Remote control support is not available for this card. [ 168.945797][ T24] em28xx 1-1:1.7: Closing input extension [ 168.971841][ T24] em28xx 1-1:1.7: Freeing device [ 169.094659][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 169.103565][ T5908] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 169.112723][ T5908] usb 2-1: config 252 has no interface number 0 [ 169.120098][ T5908] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 169.134282][ T5908] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 169.143810][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.148822][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 169.152776][ T5908] usb 2-1: Product: syz [ 169.164154][ T5908] usb 2-1: Manufacturer: syz [ 169.168757][ T5908] usb 2-1: SerialNumber: syz [ 169.240016][ T5908] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.245313][ T8158] set_capacity_and_notify: 4 callbacks suppressed [ 169.245330][ T8158] loop2: detected capacity change from 0 to 32768 [ 169.307166][ T8158] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 169.351140][ T10] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 169.369855][ T10] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 169.383565][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.394663][ T10] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 169.402567][ T8158] XFS (loop2): Starting recovery (logdev: internal) [ 169.408551][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 169.423609][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.458390][ T24] usb 2-1: USB disconnect, device number 38 [ 169.463058][ T971] usb 2-1: Failed to submit usb control message: -71 [ 169.488317][ T971] usb 2-1: unable to send the bmi data to the device: -71 [ 169.503248][ T8158] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 169.527204][ T971] usb 2-1: unable to get target info from device [ 169.543196][ T971] usb 2-1: could not get target info (-71) [ 169.548996][ T8158] XFS (loop2): Unmount and run xfs_repair [ 169.554822][ T8158] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 169.562325][ T5908] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 169.570068][ T8158] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 169.576831][ T971] usb 2-1: could not probe fw (-71) [ 169.578982][ T8158] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 169.593626][ T8158] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 169.602516][ T8158] 00000030: 00 00 00 00 05 1b 0d 00 02 00 00 00 00 00 00 01 ................ [ 169.622312][ T8158] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 169.636643][ T8158] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 169.645619][ T8158] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 169.667076][ T10] ath6kl: Failed to submit usb control message: -71 [ 169.684252][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 169.691486][ T8158] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 169.701334][ T10] ath6kl: Unable to send get target info: -71 [ 169.714739][ T10] ath6kl: Failed to init ath6kl core: -71 [ 169.721735][ T10] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 169.732475][ T8158] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 169.733913][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 169.740675][ T8158] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 169.768185][ T8158] XFS (loop2): log mount/recovery failed: error -74 [ 169.779130][ T10] usb 4-1: USB disconnect, device number 32 [ 169.799348][ T8158] XFS (loop2): log mount failed [ 169.804591][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.819904][ T5908] usb 5-1: config 106 has an invalid interface number: 8 but max is 0 [ 169.844908][ T5908] usb 5-1: config 106 has no interface number 0 [ 169.880612][ T5908] usb 5-1: config 106 interface 8 has no altsetting 0 [ 169.905119][ T5908] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 169.924283][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.939928][ T5908] usb 5-1: Product: syz [ 169.944170][ T5908] usb 5-1: Manufacturer: syz [ 169.948768][ T5908] usb 5-1: SerialNumber: syz [ 170.183891][ T8192] loop0: detected capacity change from 0 to 8 [ 170.193120][ T8192] SQUASHFS error: lzo decompression failed, data probably corrupt [ 170.198376][ T5908] kalmia 5-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 170.202176][ T8192] SQUASHFS error: Failed to read block 0x91: -5 [ 170.225799][ T5908] kalmia 5-1:106.8: probe with driver kalmia failed with error -22 [ 170.244295][ T5908] usb 5-1: USB disconnect, device number 31 [ 170.276517][ T8192] SQUASHFS error: Unable to read metadata cache entry [8f] [ 170.300086][ T8192] SQUASHFS error: Unable to read inode 0x11f [ 170.301917][ T8190] loop2: detected capacity change from 0 to 4096 [ 170.328451][ T8190] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 170.351475][ T5931] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 170.430826][ T8190] ntfs3(loop2): ino=a, mi_enum_attr [ 170.436080][ T8190] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 170.468091][ T8190] ntfs3(loop2): Failed to load $UpCase (-22). [ 170.541761][ T8198] loop0: detected capacity change from 0 to 8 [ 170.553402][ T5931] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 170.581227][ T5931] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 170.598694][ T8198] SQUASHFS error: lzo decompression failed, data probably corrupt [ 170.602053][ T5931] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 170.632157][ T8198] SQUASHFS error: Failed to read block 0x91: -5 [ 170.645077][ T8198] SQUASHFS error: Unable to read metadata cache entry [8f] [ 170.648714][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.665713][ T8198] SQUASHFS error: Unable to read inode 0x11f [ 170.678551][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 170.694779][ T8202] loop2: detected capacity change from 0 to 512 [ 170.698007][ T5931] usb 2-1: config 0 has no interface number 0 [ 170.717223][ T8204] loop3: detected capacity change from 0 to 724 [ 170.723940][ T5931] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.731699][ T8202] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.749669][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.765322][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.790583][ T8202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 170.800416][ T5931] usb 2-1: Product: syz [ 170.800439][ T5931] usb 2-1: Manufacturer: syz [ 170.800454][ T5931] usb 2-1: SerialNumber: syz [ 170.822170][ T5931] usb 2-1: config 0 descriptor?? [ 170.828670][ T8202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 170.837612][ T8202] System zones: 1-12 [ 170.849159][ T8202] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.861323][ T8202] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1015: bg 0: block 361: padding at end of block bitmap is not set [ 170.912003][ T8202] loop2: lost filesystem error report for type 5 error -117 [ 170.914770][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 170.928613][ C1] EXT4-fs (loop2): initial error at time 1771348598: ext4_validate_block_bitmap:441 [ 170.938052][ C1] EXT4-fs (loop2): last error at time 1771348598: ext4_validate_block_bitmap:441 [ 170.940429][ T8202] EXT4-fs (loop2): Remounting filesystem read-only [ 170.964057][ T8210] loop3: detected capacity change from 0 to 128 [ 170.998393][ T8202] EXT4-fs (loop2): 1 truncate cleaned up [ 171.009072][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 171.145688][ T5931] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 171.162556][ T5931] usb 2-1: MIDIStreaming interface descriptor not found [ 171.197011][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 171.363840][ T5931] usb 2-1: USB disconnect, device number 39 [ 171.369897][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 171.483824][ T8223] loop2: detected capacity change from 0 to 16 [ 171.512556][ T8223] erofs (device loop2): mounted with root inode @ nid 36. [ 171.566540][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.597370][ T5895] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 171.608581][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.610245][ T8226] loop2: detected capacity change from 0 to 16 [ 171.628689][ T8212] loop4: detected capacity change from 0 to 32768 [ 171.635468][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 171.644089][ T8212] XFS (loop4): no-recovery mounts must be read-only. [ 171.653082][ T8226] erofs (device loop2): mounted with root inode @ nid 36. [ 171.665016][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.684853][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.740767][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.791139][ T5895] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 171.830517][ T5895] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 171.866872][ T5895] usb 4-1: config 150 has no interface number 0 [ 171.911575][ T5895] usb 4-1: config 150 interface 204 has no altsetting 0 [ 171.931288][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 171.956634][ T5895] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 171.965889][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.981192][ T5895] usb 4-1: Product: syz [ 171.999117][ T5895] usb 4-1: Manufacturer: syz [ 172.003759][ T5895] usb 4-1: SerialNumber: syz [ 172.008466][ T10] usb 1-1: USB disconnect, device number 32 [ 172.266549][ T5895] xr_serial 4-1:150.204: skipping garbage [ 172.275926][ T5895] xr_serial 4-1:150.204: xr_serial converter detected [ 172.294544][ T5895] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 172.311977][ T5895] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 172.341165][ T5895] usb 4-1: USB disconnect, device number 33 [ 172.357567][ T5895] xr_serial 4-1:150.204: device disconnected [ 172.443464][ T8241] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 172.464103][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 172.505123][ T8233] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1028 (8233) [ 172.585078][ T8233] BTRFS info (device loop1): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 172.597867][ T8233] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 172.642399][ T24] usb 5-1: config 0 has an invalid interface number: 81 but max is 0 [ 172.664299][ T24] usb 5-1: config 0 has no interface number 0 [ 172.676471][ T8243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.684799][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=84.1a [ 172.702051][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.711078][ T24] usb 5-1: Product: syz [ 172.716615][ T24] usb 5-1: Manufacturer: syz [ 172.721568][ T24] usb 5-1: SerialNumber: syz [ 172.734234][ T8243] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.745677][ T24] usb 5-1: config 0 descriptor?? [ 172.814148][ T8233] BTRFS info (device loop1): enabling ssd optimizations [ 172.832122][ T8233] BTRFS info (device loop1): turning on async discard [ 172.839088][ T8233] BTRFS info (device loop1): enabling free space tree [ 172.852272][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.884195][ T24] rtsx_usb 5-1:0.81: probe with driver rtsx_usb failed with error -8 [ 173.018611][ T47] usb 5-1: USB disconnect, device number 32 [ 173.062220][ T5829] BTRFS info (device loop1): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 173.143594][ T8266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.226118][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.547310][ T8275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.692663][ T8246] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 173.701184][ T8246] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.723296][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.774036][ T8246] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 173.790841][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.818902][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 173.828196][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 173.845202][ T8270] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1037 (8270) [ 173.889843][ T8270] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 173.900516][ T8270] BTRFS info (device loop2): using blake2b checksum algorithm [ 173.998313][ T8286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.010354][ T10] kworker/0:1: attempt to access beyond end of device [ 174.010354][ T10] loop0: rw=0, sector=402653184, nr_sectors = 8 limit=32768 [ 174.102225][ T10] gfs2: fsid=syz:syz.0: jid=0: Failed [ 174.110294][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.139825][ T8246] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 174.193138][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.207203][ T8270] BTRFS info (device loop2): enabling ssd optimizations [ 174.232060][ T8270] BTRFS info (device loop2): turning on async discard [ 174.280273][ T8270] BTRFS info (device loop2): enabling free space tree [ 174.304612][ T8292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.394328][ T8307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.566652][ T5839] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 174.586037][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.626643][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.629419][ T8311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.932280][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.096834][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 175.238267][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 175.292045][ T24] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 175.313285][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.346528][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.356847][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.364857][ T24] usb 5-1: SerialNumber: syz [ 175.452259][ T8320] set_capacity_and_notify: 12 callbacks suppressed [ 175.452277][ T8320] loop1: detected capacity change from 0 to 32768 [ 175.454483][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 175.476739][ T8320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1046 (8320) [ 175.494814][ T5895] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 175.526210][ T8320] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.530475][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.556057][ T8320] BTRFS info (device loop1): using blake2b checksum algorithm [ 175.600486][ T5895] usb 3-1: config 0 descriptor?? [ 175.622615][ T24] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 175.639916][ T24] usb 5-1: bad CDC descriptors [ 175.667733][ T24] usb 5-1: USB disconnect, device number 33 [ 175.676839][ T5895] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 175.716531][ T5895] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 175.738815][ T5895] usb-storage 3-1:0.0: USB Mass Storage device detected [ 175.747071][ T8320] BTRFS info (device loop1): enabling ssd optimizations [ 175.768655][ T5895] usb-storage 3-1:0.0: device ignored [ 175.784136][ T8320] BTRFS info (device loop1): turning on async discard [ 175.806043][ T8320] BTRFS info (device loop1): enabling free space tree [ 175.853046][ T5895] usb 3-1: USB disconnect, device number 36 [ 175.935561][ T5829] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.184351][ T8325] loop0: detected capacity change from 0 to 32768 [ 176.236079][ T8325] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.278846][ T8325] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.374293][ T8325] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 176.422136][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 176.453475][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 176.743235][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 267ms [ 176.764711][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 176.784337][ T8325] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 178.289562][ T8356] loop0: detected capacity change from 0 to 32768 [ 178.337220][ T8356] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1055 (8356) [ 178.372622][ T8356] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 178.405259][ T8356] BTRFS info (device loop0): using sha256 checksum algorithm [ 178.495781][ T8356] BTRFS info (device loop0): enabling ssd optimizations [ 178.521207][ T8356] BTRFS info (device loop0): turning on async discard [ 178.565676][ T8356] BTRFS info (device loop0): enabling free space tree [ 178.726582][ T5824] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 179.117309][ T8375] loop0: detected capacity change from 0 to 1024 [ 179.308583][ T8352] loop2: detected capacity change from 0 to 131072 [ 179.390720][ T8379] loop0: detected capacity change from 0 to 1024 [ 179.546401][ T8352] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.589003][ T8352] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.668099][ T8385] loop0: detected capacity change from 0 to 1024 [ 180.582478][ T8387] loop0: detected capacity change from 0 to 32768 [ 180.621935][ T8387] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1062 (8387) [ 180.647804][ T8387] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 180.711101][ T8387] BTRFS info (device loop0): using blake2b checksum algorithm [ 180.796468][ T8389] loop1: detected capacity change from 0 to 1164 [ 180.922268][ T8387] BTRFS info (device loop0): enabling ssd optimizations [ 180.950839][ T8387] BTRFS info (device loop0): turning on async discard [ 180.958934][ T8387] BTRFS info (device loop0): enabling free space tree [ 180.988492][ T8406] loop2: detected capacity change from 0 to 1768 [ 181.257148][ T8410] loop4: detected capacity change from 0 to 256 [ 181.281378][ T5824] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 181.324355][ T8412] loop2: detected capacity change from 0 to 2 [ 181.351461][ T8412] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 181.578712][ T8417] loop2: detected capacity change from 0 to 64 [ 181.806176][ T8421] loop2: detected capacity change from 0 to 128 [ 181.905842][ T5895] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 181.986983][ T8423] loop2: detected capacity change from 0 to 2048 [ 182.100532][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 182.122559][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.161640][ T5895] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 182.198232][ T5895] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.232637][ T5895] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.245141][ T8425] loop2: detected capacity change from 0 to 128 [ 182.261187][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.302868][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.325309][ T5895] usb 1-1: Product: syz [ 182.329519][ T5895] usb 1-1: Manufacturer: syz [ 182.354458][ T5895] usb 1-1: SerialNumber: syz [ 182.612818][ T5895] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 182.631733][ T5895] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 182.647462][ T5895] usb 1-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 182.666536][ T5895] usb 1-1: 2:1 : invalid channels 0 [ 182.788560][ T5895] usb 1-1: USB disconnect, device number 33 [ 183.004572][ T8427] loop2: detected capacity change from 0 to 32768 [ 183.027265][ T8427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1073 (8427) [ 183.083419][ T8427] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.135914][ T8427] BTRFS info (device loop2): using sha256 checksum algorithm [ 183.301207][ T8427] BTRFS info (device loop2): enabling ssd optimizations [ 183.308491][ T8427] BTRFS info (device loop2): turning on async discard [ 183.330156][ T8427] BTRFS info (device loop2): enabling free space tree [ 183.536197][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.253699][ T8446] loop0: detected capacity change from 0 to 32768 [ 184.269268][ T8408] loop1: detected capacity change from 0 to 131072 [ 184.303408][ T8446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1075 (8446) [ 184.345693][ T8408] XFS (loop1): Mounting V5 Filesystem 22c32dcc-57bc-4919-aeb7-102e166434d7 [ 184.366999][ T8446] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.394860][ T8408] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 184.395346][ T8408] XFS (loop1): log mount failed [ 184.468698][ T8446] BTRFS info (device loop0): using crc32c checksum algorithm [ 184.476133][ T8446] BTRFS error (device loop0): ignorebadroots must be used with ro mount option [ 184.533512][ T8446] BTRFS error (device loop0): cannot disable free-space-tree [ 184.551874][ T8446] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 184.598063][ T8446] BTRFS error (device loop0): open_ctree failed: -22 [ 184.839596][ T8460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.095371][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.467410][ T8471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.074565][ T8474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.463450][ T8470] set_capacity_and_notify: 3 callbacks suppressed [ 186.463469][ T8470] loop1: detected capacity change from 0 to 32768 [ 186.517858][ T8470] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 186.542265][ T8470] dlm: no local IP address has been set [ 186.556779][ T8470] dlm: cannot start dlm midcomms -107 [ 186.571102][ T8470] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 186.947143][ T8476] loop0: detected capacity change from 0 to 32768 [ 187.043464][ T8476] (syz.0.1084,8476,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 187.088561][ T8476] (syz.0.1084,8476,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 187.226062][ T8478] loop4: detected capacity change from 0 to 32768 [ 187.286067][ T8478] (syz.4.1085,8478,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 187.329200][ T8478] (syz.4.1085,8478,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 187.618088][ T8482] loop1: detected capacity change from 0 to 32768 [ 187.695971][ T8482] (syz.1.1086,8482,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 187.740863][ T8482] (syz.1.1086,8482,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 187.893301][ T8491] loop1: detected capacity change from 0 to 8 [ 188.328337][ T8495] loop2: detected capacity change from 0 to 1024 [ 188.383640][ T8495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.548399][ T8497] loop3: detected capacity change from 0 to 128 [ 188.583393][ T8497] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 188.617357][ T8497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.663212][ T8486] loop0: detected capacity change from 0 to 32768 [ 188.686803][ T8499] loop2: detected capacity change from 0 to 2364 [ 188.720107][ T8486] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 188.826123][ T8486] dlm: no local IP address has been set [ 188.869572][ T8503] loop3: detected capacity change from 0 to 1024 [ 188.886181][ T8486] dlm: cannot start dlm midcomms -107 [ 188.930623][ T8486] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 189.000055][ T8503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.064429][ T8508] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 189.074000][ T8508] UDF-fs: Scanning with blocksize 512 failed [ 189.081173][ T8508] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 189.088879][ T8508] UDF-fs: Scanning with blocksize 1024 failed [ 189.103055][ T8508] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 189.137849][ T8508] UDF-fs: Scanning with blocksize 2048 failed [ 189.174579][ T8508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 189.189481][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.207167][ T8508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.298336][ T8493] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1090 (8493) [ 189.378537][ T8493] BTRFS info (device loop1): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 189.412025][ T8493] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 189.553333][ T8493] BTRFS info (device loop1): enabling ssd optimizations [ 189.560343][ T8493] BTRFS info (device loop1): turning on async discard [ 189.634912][ T8493] BTRFS info (device loop1): enabling free space tree [ 189.864179][ T5829] BTRFS info (device loop1): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 190.970547][ T8547] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.219321][ T8549] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 191.262312][ T8549] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 191.838214][ T8546] XFS (loop0): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 191.944206][ T8546] XFS (loop0): Log size 768 blocks too small, minimum size is 1056 blocks [ 192.009026][ T8546] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 192.059735][ T8546] XFS (loop0): log mount failed [ 192.988388][ T8551] set_capacity_and_notify: 11 callbacks suppressed [ 192.988407][ T8551] loop2: detected capacity change from 0 to 65536 [ 193.083663][ T8551] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 193.083786][ T8558] loop4: detected capacity change from 0 to 65536 [ 193.142604][ T8558] XFS (loop4): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 193.227530][ T8551] XFS (loop2): Ending clean mount [ 193.289700][ T8558] XFS (loop4): Ending clean mount [ 193.396493][ T5839] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 193.430886][ T5828] XFS (loop4): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 193.692119][ T8562] loop0: detected capacity change from 0 to 65536 [ 193.816235][ T8562] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 194.932769][ T5895] IPVS: starting estimator thread 0... [ 195.054099][ T8596] IPVS: using max 33 ests per chain, 79200 per kthread [ 195.685061][ T8589] loop2: detected capacity change from 0 to 65536 [ 195.744516][ T8589] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 195.937580][ T8602] loop3: detected capacity change from 0 to 32768 [ 196.273586][ T8611] loop2: detected capacity change from 0 to 512 [ 196.520359][ T8615] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 196.549027][ T8615] netlink: 'syz.2.1123': attribute type 2 has an invalid length. [ 196.622789][ T8580] loop4: detected capacity change from 0 to 131072 [ 196.704976][ T8580] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 196.810790][ T8627] loop3: detected capacity change from 0 to 16 [ 196.824972][ T8627] erofs (device loop3): mounted with root inode @ nid 36. [ 196.871654][ T8627] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 196.890060][ T8580] XFS (loop4): Ending clean mount [ 196.927367][ T8627] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 196.970888][ T8627] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 196.978969][ T5828] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 196.990558][ T8627] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 197.010573][ T8627] erofs (device loop3): readahead error at folio 0 @ nid 89 [ 197.045502][ T8627] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 197.061113][ T8587] loop0: detected capacity change from 0 to 131072 [ 197.082663][ T8627] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 197.090392][ T8587] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 197.134511][ T8627] erofs (device loop3): read error -117 @ 0 of nid 89 [ 197.201145][ T29] audit: type=1800 audit(1771348622.861:6): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1125" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 197.785239][ T8650] comedi comedi4: commands at RT priority not supported in this driver [ 197.907318][ T8654] random: crng reseeded on system resumption [ 197.973960][ T8657] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 198.011993][ T8657] veth1_macvtap: left promiscuous mode [ 198.229325][ T8664] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 198.388768][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 198.518049][ T8673] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 198.699558][ T8679] netlink: 'syz.0.1148': attribute type 21 has an invalid length. [ 198.738158][ T8679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1148'. [ 198.773781][ T8679] netlink: 'syz.0.1148': attribute type 5 has an invalid length. [ 198.793897][ T8679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1148'. [ 198.926007][ T8660] loop3: detected capacity change from 0 to 32768 [ 198.952687][ T8660] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 199.012415][ T8660] XFS (loop3): Ending clean mount [ 199.096389][ T5831] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 199.159331][ T8697] bridge0: entered allmulticast mode [ 199.412432][ T8705] tmpfs: Bad value for 'mpol' [ 199.637163][ T8714] program syz.0.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.860265][ T8723] loop4: detected capacity change from 0 to 4096 [ 199.968628][ T8723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.028242][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.037943][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.158160][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.301793][ T8741] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 200.318974][ T8741] nbd: must specify at least one socket [ 200.394788][ T5888] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 200.457730][ T8747] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.570315][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 200.597013][ T5888] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 200.613705][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.644336][ T5888] usb 1-1: Product: syz [ 200.648546][ T5888] usb 1-1: Manufacturer: syz [ 200.653181][ T5888] usb 1-1: SerialNumber: syz [ 200.688650][ T5888] usb 1-1: config 0 descriptor?? [ 200.726422][ T5888] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 201.034078][ T8765] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1185'. [ 201.144679][ T8770] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 201.163309][ T5888] gspca_sonixj: reg_r err -71 [ 201.174307][ T5888] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 201.209150][ T5888] usb 1-1: USB disconnect, device number 34 [ 201.368938][ T8777] loop3: detected capacity change from 0 to 1764 [ 201.409113][ T8681] loop2: detected capacity change from 0 to 131072 [ 201.576138][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.613583][ T8681] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.623578][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.644820][ T8681] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955 [ 201.888156][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1200'. [ 202.026774][ T8806] loop1: detected capacity change from 0 to 512 [ 202.069983][ T8808] loop0: detected capacity change from 0 to 64 [ 202.086858][ T8806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.141620][ T8808] hfs: unable to read tree header [ 202.146981][ T8808] hfs: unable to open catalog tree [ 202.169849][ T8806] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 202.183364][ T8806] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 202.191568][ T8806] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.198019][ T8808] hfs: can't find a HFS filesystem on dev loop0 [ 202.271471][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 202.278409][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 202.281058][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 202.284583][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 202.298947][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 202.301795][ T8806] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 202.322366][ T8806] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 202.347879][ T8806] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 202.383167][ T8806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1203: bg 0: block 40: padding at end of block bitmap is not set [ 202.425907][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 202.426425][ T8806] EXT4-fs (loop1): Remounting filesystem read-only [ 202.433809][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 202.433829][ C0] EXT4-fs (loop1): initial error at time 1771348627: ext4_validate_block_bitmap:441 [ 202.433852][ C0] EXT4-fs (loop1): last error at time 1771348627: ext4_validate_block_bitmap:441 [ 202.469002][ T8806] EXT4-fs (loop1): 1 truncate cleaned up [ 202.474358][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 202.477750][ T8806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.569339][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.019533][ T8841] loop4: detected capacity change from 0 to 1024 [ 203.325013][ T8845] loop0: detected capacity change from 0 to 2048 [ 203.390591][ T8845] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 203.456778][ T8845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.501397][ T8833] loop1: detected capacity change from 0 to 32768 [ 203.545524][ T8833] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1212 (8833) [ 203.602646][ T8833] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 203.655880][ T8833] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 203.663490][ T8833] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 203.917714][ T8833] BTRFS info (device loop1): rebuilding free space tree [ 204.050065][ T8833] BTRFS info (device loop1): disabling free space tree [ 204.085372][ T8833] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.120965][ T8833] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.198639][ T8833] BTRFS info (device loop1): allowing degraded mounts [ 204.205462][ T8833] BTRFS info (device loop1): enabling ssd optimizations [ 204.216507][ T8897] netlink: 'syz.2.1238': attribute type 8 has an invalid length. [ 204.249956][ T8833] BTRFS info (device loop1): turning on async discard [ 204.281168][ T8833] BTRFS info (device loop1): enabling disk space caching [ 204.316775][ T8833] BTRFS info (device loop1): force clearing of disk cache [ 204.323947][ T8833] BTRFS info (device loop1): use zlib compression, level 3 [ 204.348566][ T8903] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 204.416317][ T8906] loop0: detected capacity change from 0 to 256 [ 204.507943][ T5829] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 204.544029][ T8906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.870878][ T8923] loop2: detected capacity change from 0 to 512 [ 204.949848][ T8923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.989398][ T8926] loop3: detected capacity change from 0 to 256 [ 204.994974][ T8922] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 205.007766][ T8923] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.011446][ T8926] exfat: Deprecated parameter 'namecase' [ 205.026793][ T8923] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1252: corrupted xattr block 33: invalid ea_ino [ 205.095498][ T8926] exfat: Deprecated parameter 'utf8' [ 205.096345][ T8922] bond1 (unregistering): Released all slaves [ 205.117958][ T8926] exfat: Deprecated parameter 'utf8' [ 205.128047][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.155815][ T8926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 205.266718][ T8937] warning: `syz.1.1258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.442602][ T8943] loop3: detected capacity change from 0 to 16 [ 205.452052][ T8943] erofs (device loop3): mounted with root inode @ nid 36. [ 205.464463][ T8943] cifs: Unknown parameter 'cache_strategy' [ 205.741215][ T8955] kernel profiling enabled (shift: 9) [ 205.971154][ T8966] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 206.166125][ T8976] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1276'. [ 207.133945][ T5920] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 207.210799][ T9026] loop0: detected capacity change from 0 to 1764 [ 207.329140][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 207.340377][ T5920] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 207.384623][ T5920] usb 4-1: config 0 has no interface number 0 [ 207.411519][ T5920] usb 4-1: config 0 interface 235 has no altsetting 0 [ 207.439568][ T5920] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 207.449087][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.457100][ T5920] usb 4-1: Product: syz [ 207.480987][ T5920] usb 4-1: Manufacturer: syz [ 207.499787][ T5920] usb 4-1: SerialNumber: syz [ 207.514618][ T5920] usb 4-1: config 0 descriptor?? [ 207.689574][ T9052] loop1: detected capacity change from 0 to 1024 [ 207.734366][ T9052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.742895][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 207.773312][ T9057] bridge1: entered allmulticast mode [ 207.787124][ T9052] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1313: missing EA_INODE flag [ 207.798149][ T5895] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 207.811839][ T9052] EXT4-fs (loop1): Remounting filesystem read-only [ 207.823076][ T9052] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 207.873645][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.982577][ T5895] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 207.993497][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.011248][ T5895] usb 5-1: Product: syz [ 208.020318][ T5895] usb 5-1: Manufacturer: syz [ 208.031280][ T5895] usb 5-1: SerialNumber: syz [ 208.053840][ T5895] usb 5-1: config 0 descriptor?? [ 208.070619][ T5895] usb 5-1: selecting invalid altsetting 1 [ 208.082861][ T5895] technisat-usb2: could not set alternate setting to 0 [ 208.289654][ T5895] technisat-usb2: firmware version: 0.0 [ 208.301264][ T5895] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 208.399193][ T9065] loop1: detected capacity change from 0 to 32768 [ 208.423080][ T9065] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1318 (9065) [ 208.474822][ T9065] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 208.491620][ T9065] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 208.500734][ T9065] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 208.524610][ T5895] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 208.595227][ T5895] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 208.622526][ T9065] BTRFS info (device loop1): rebuilding free space tree [ 208.642840][ T5895] usb 5-1: USB disconnect, device number 34 [ 208.692348][ T9065] BTRFS info (device loop1): disabling free space tree [ 208.703416][ T9065] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.722654][ T9065] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.744600][ T9065] BTRFS info (device loop1): allowing degraded mounts [ 208.751593][ T9065] BTRFS info (device loop1): enabling ssd optimizations [ 208.758785][ T9065] BTRFS info (device loop1): turning on async discard [ 208.765714][ T9065] BTRFS info (device loop1): enabling disk space caching [ 208.773338][ T9065] BTRFS info (device loop1): force clearing of disk cache [ 208.781127][ T9065] BTRFS info (device loop1): use zlib compression, level 3 [ 208.897277][ T5829] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 208.967585][ T29] audit: type=1326 audit(1771348633.734:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.028922][ T29] audit: type=1326 audit(1771348633.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.160714][ T29] audit: type=1326 audit(1771348633.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.192350][ T9109] comedi comedi0: Cannot bond this driver to itself! [ 209.263981][ T29] audit: type=1326 audit(1771348633.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.338680][ T29] audit: type=1326 audit(1771348633.771:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.407943][ T29] audit: type=1326 audit(1771348633.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.434390][ T29] audit: type=1326 audit(1771348633.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.530195][ T29] audit: type=1326 audit(1771348633.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.614487][ T29] audit: type=1326 audit(1771348633.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8df019bf79 code=0x7ffc0000 [ 209.752426][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1343'. [ 209.776216][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1343'. [ 209.841323][ T9132] loop0: detected capacity change from 0 to 4096 [ 209.898607][ T9132] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 209.911589][ T9132] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 209.926827][ T9132] ntfs3(loop0): ino=5, mi_enum_attr [ 209.955377][ T9140] loop4: detected capacity change from 0 to 2048 [ 209.978576][ T9132] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 210.027169][ T9140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.101441][ T24] usb 4-1: USB disconnect, device number 34 [ 210.376371][ T9150] loop3: detected capacity change from 0 to 4096 [ 210.415870][ T9155] Cannot find set identified by id 0 to match [ 210.429355][ T9150] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 210.586182][ T9150] ntfs3(loop3): ino=1a, mi_enum_attr [ 210.599436][ T9161] netlink: 'syz.4.1357': attribute type 6 has an invalid length. [ 210.636484][ T9150] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 210.655543][ T9150] ntfs3(loop3): ino=1a, mi_enum_attr [ 210.660967][ T9150] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 210.776230][ T5895] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 210.794342][ T9165] loop4: detected capacity change from 0 to 1024 [ 210.896451][ T9165] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 210.953669][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 210.960334][ T9170] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 210.968079][ T9170] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1360'. [ 210.991134][ T1330] hfsplus: b-tree write err: -5, ino 25 [ 211.012033][ T5895] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 211.014433][ T1330] hfsplus: b-tree write err: -5, ino 4 [ 211.027394][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.040770][ T9170] NCSI netlink: No device for ifindex 0 [ 211.051123][ T5895] usb 1-1: Product: syz [ 211.051637][ T1330] hfsplus: b-tree write err: -5, ino 2 [ 211.055311][ T5895] usb 1-1: Manufacturer: syz [ 211.076629][ T5895] usb 1-1: SerialNumber: syz [ 211.188080][ T5895] r8152-cfgselector 1-1: Unknown version 0x0000 [ 211.198870][ T5895] r8152-cfgselector 1-1: config 0 descriptor?? [ 211.419924][ T9189] loop2: detected capacity change from 0 to 8 [ 211.462630][ T5895] r8152-cfgselector 1-1: Unknown version 0x0000 [ 211.500262][ T5895] r8152-cfgselector 1-1: bad CDC descriptors [ 211.752537][ T24] r8152-cfgselector 1-1: USB disconnect, device number 35 [ 211.908539][ T9212] dlm: no local IP address has been set [ 211.911527][ T29] audit: type=1326 audit(1771348636.447:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.2.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4519bf79 code=0x7ffc0000 [ 211.927497][ T9212] dlm: cannot start dlm midcomms -107 [ 212.059273][ T9219] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 212.366583][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 212.569805][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.591753][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 212.605275][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.636685][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 212.670307][ T5895] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 212.767185][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 212.857036][ T5895] usb 1-1: not running at top speed; connect to a high speed hub [ 212.869077][ T5895] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 212.887758][ T5895] usb 1-1: config 95 has no interface number 0 [ 212.905004][ T5895] usb 1-1: config 95 interface 1 has no altsetting 0 [ 212.923057][ T5895] usb 1-1: string descriptor 0 read error: -22 [ 212.929537][ T5895] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 212.949791][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.111204][ T9246] loop4: detected capacity change from 0 to 40427 [ 213.130813][ T9246] F2FS-fs: heap/no_heap options were deprecated [ 213.135869][ T5888] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 213.151062][ T9246] F2FS-fs (loop4): build fault injection rate: 19 [ 213.172336][ T9246] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 213.211369][ T9246] F2FS-fs (loop4): invalid crc value [ 213.249063][ T9246] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 213.324626][ T5888] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 213.339405][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.349330][ T5888] usb 2-1: SerialNumber: syz [ 213.360398][ T5888] usb 2-1: config 0 descriptor?? [ 213.368228][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 213.378709][ T9274] netlink: 'syz.2.1408': attribute type 3 has an invalid length. [ 213.380821][ T9246] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 213.390823][ T5888] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 213.405781][ T9246] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 213.406385][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 213.432154][ T5888] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 213.435427][ T5908] usb 1-1: USB disconnect, device number 36 [ 213.447513][ T9246] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.451364][ T5888] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 213.485924][ T5888] usb 2-1: media controller created [ 213.491291][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 213.508817][ T5888] dvb-usb: MAC address reading failed. [ 213.523901][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.543629][ T9277] loop2: detected capacity change from 0 to 256 [ 213.558025][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 213.573354][ T9277] exfat: Deprecated parameter 'namecase' [ 213.584781][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 213.592543][ T9277] exfat: Deprecated parameter 'utf8' [ 213.604263][ T5888] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 213.615314][ T9277] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 213.632664][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 213.649462][ T9277] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 213.668376][ T5888] dvb-usb: schedule remote query interval to 100 msecs. [ 213.682019][ T5888] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 213.716220][ T5888] usb 2-1: USB disconnect, device number 40 [ 213.801788][ T24] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 213.804038][ T5888] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 214.037419][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 214.045626][ T24] stv0680 4-1:4.0: last error: 86, command = 0x17 [ 214.070363][ T24] usb 4-1: USB disconnect, device number 35 [ 214.525429][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1424'. [ 214.540607][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 214.541162][ T9310] loop2: detected capacity change from 0 to 8 [ 214.557023][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 214.601475][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 214.701311][ T9314] overlayfs: unescaped trailing colons in lowerdir mount option. [ 215.063568][ T9335] loop2: detected capacity change from 0 to 128 [ 215.066781][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'. [ 215.106491][ T9335] FAT-fs (loop2): Directory bread(block 162) failed [ 215.128376][ T9335] FAT-fs (loop2): Directory bread(block 163) failed [ 215.153826][ T9335] FAT-fs (loop2): Directory bread(block 164) failed [ 215.161338][ T9335] FAT-fs (loop2): Directory bread(block 165) failed [ 215.168158][ T9335] FAT-fs (loop2): Directory bread(block 166) failed [ 215.174952][ T9335] FAT-fs (loop2): Directory bread(block 167) failed [ 215.181742][ T9335] FAT-fs (loop2): Directory bread(block 168) failed [ 215.190743][ T9335] FAT-fs (loop2): Directory bread(block 169) failed [ 215.194348][ T5931] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 215.215198][ T9335] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.237445][ T9335] FAT-fs (loop2): Directory bread(block 162) failed [ 215.263601][ T9335] FAT-fs (loop2): Directory bread(block 163) failed [ 215.273062][ T9340] loop4: detected capacity change from 0 to 512 [ 215.280579][ T9335] syz.2.1437: attempt to access beyond end of device [ 215.280579][ T9335] loop2: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 215.297170][ T9335] syz.2.1437: attempt to access beyond end of device [ 215.297170][ T9335] loop2: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 215.321393][ T9340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.381110][ T9340] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 215.400112][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 215.406567][ C0] EXT4-fs (loop4): initial error at time 1771348639: ext4_mb_generate_buddy:1315 [ 215.415760][ C0] EXT4-fs (loop4): last error at time 1771348639: ext4_mb_generate_buddy:1315 [ 215.428979][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.437938][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.444495][ T9348] loop0: detected capacity change from 0 to 256 [ 215.449164][ T5931] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.480052][ T9340] EXT4-fs (loop4): 1 truncate cleaned up [ 215.521737][ T5931] usb 2-1: config 1 has no interface number 1 [ 215.541885][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.575477][ T5931] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.581195][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.581226][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.581245][ T5931] usb 2-1: Product: syz [ 215.581260][ T5931] usb 2-1: Manufacturer: syz [ 215.581274][ T5931] usb 2-1: SerialNumber: syz [ 215.683891][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.731403][ T9354] loop0: detected capacity change from 0 to 2048 [ 215.777637][ T9354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.833529][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 215.847854][ T5931] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 215.970751][ T5931] usb 2-1: USB disconnect, device number 41 [ 216.008567][ T24] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 216.030822][ T9362] loop0: detected capacity change from 0 to 128 [ 216.061631][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.075984][ T9362] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 216.088404][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.093567][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.135377][ T9362] FAT-fs (loop0): Filesystem has been set read-only [ 216.155769][ T24] usb 3-1: Product: syz [ 216.174499][ T24] usb 3-1: Manufacturer: syz [ 216.179168][ T24] usb 3-1: SerialNumber: syz [ 216.222162][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.286711][ T5908] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.815000][ T9392] ubi1: attaching mtd0 [ 216.834458][ T9392] ubi1 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 216.958018][ T47] usb 3-1: USB disconnect, device number 37 [ 217.102922][ T9405] netlink: 'syz.0.1469': attribute type 23 has an invalid length. [ 217.274505][ T5931] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 217.341103][ T9416] loop3: detected capacity change from 0 to 2048 [ 217.396998][ T9420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.438361][ T5908] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 217.445575][ T5908] ath9k_htc: Failed to initialize the device [ 217.458695][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 217.476437][ T5931] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 217.500384][ T47] usb 3-1: ath9k_htc: USB layer deinitialized [ 217.507458][ T5931] usb 2-1: config 0 has no interface number 0 [ 217.538227][ T5931] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 217.574679][ T5931] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 217.586753][ T9420] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 217.589784][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.607150][ T5931] usb 2-1: Product: syz [ 217.612342][ T5931] usb 2-1: Manufacturer: syz [ 217.616953][ T5931] usb 2-1: SerialNumber: syz [ 217.623704][ T9420] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 217.637521][ T5931] usb 2-1: config 0 descriptor?? [ 217.643438][ T9398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.699585][ T9420] Remounting filesystem read-only [ 217.708148][ T5831] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 217.903351][ T9398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.956114][ T9439] loop2: detected capacity change from 0 to 64 [ 218.002296][ T9439] Trying to free block not in datazone [ 218.164476][ T5931] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 218.187274][ T5931] asix 2-1:0.191: probe with driver asix failed with error -71 [ 218.213081][ T5931] usb 2-1: USB disconnect, device number 42 [ 218.216623][ T9445] bridge2: entered promiscuous mode [ 218.363955][ T9447] loop4: detected capacity change from 0 to 4096 [ 218.553233][ T9434] loop3: detected capacity change from 0 to 32768 [ 218.593569][ T9434] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1476 (9434) [ 218.643234][ T9434] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.664630][ T9434] BTRFS info (device loop3): using sha256 checksum algorithm [ 218.686388][ T9459] loop4: detected capacity change from 0 to 1024 [ 218.707688][ T9434] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 218.932603][ T9434] BTRFS info (device loop3): rebuilding free space tree [ 218.982159][ T9434] BTRFS info (device loop3): disabling free space tree [ 218.997313][ T9434] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.006999][ T9434] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.033454][ T9482] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.077578][ T9485] loop1: detected capacity change from 0 to 256 [ 219.085409][ T9485] exfat: Deprecated parameter 'namecase' [ 219.091511][ T9434] BTRFS info (device loop3): enabling ssd optimizations [ 219.099122][ T9485] exfat: Deprecated parameter 'utf8' [ 219.141253][ T9434] BTRFS info (device loop3): enabling disk space caching [ 219.148898][ T9434] BTRFS info (device loop3): force clearing of disk cache [ 219.156041][ T9434] BTRFS info (device loop3): enabling auto defrag [ 219.165218][ T9434] BTRFS info (device loop3): max_inline set to 0 [ 219.196682][ T9485] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 219.217412][ T9490] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 219.549984][ T5831] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.610990][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.985077][ T9522] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 220.323119][ T9538] loop0: detected capacity change from 0 to 256 [ 220.425107][ T9543] netlink: 'syz.2.1524': attribute type 5 has an invalid length. [ 220.620346][ T9552] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 220.690575][ T9559] !: renamed from dummy0 (while UP) [ 220.702351][ T9552] CIFS mount error: No usable UNC path provided in device string! [ 220.702351][ T9552] [ 220.712769][ T9552] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 220.902920][ T9566] loop1: detected capacity change from 0 to 2048 [ 220.949334][ T9566] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 220.987833][ T9566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.323551][ T9588] loop0: detected capacity change from 0 to 512 [ 221.370752][ T9588] EXT4-fs: Ignoring removed orlov option [ 221.388458][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 221.408917][ T9588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.482381][ T9588] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1548: bg 0: block 248: padding at end of block bitmap is not set [ 221.500011][ T9588] loop0: lost filesystem error report for type 5 error -117 [ 221.514045][ T9588] __quota_error: 4 callbacks suppressed [ 221.514064][ T9588] Quota error (device loop0): write_blk: dquota write failed [ 221.521794][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 221.521815][ C1] EXT4-fs (loop0): last error at time 1771348645: ext4_validate_block_bitmap:441 [ 221.644729][ T9588] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 221.704327][ T9588] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.1548: Failed to acquire dquot type 1 [ 221.736336][ T9588] loop0: lost filesystem error report for type 5 error -117 [ 221.761054][ T9588] EXT4-fs (loop0): 1 truncate cleaned up [ 221.794248][ T9588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.818576][ T9579] loop3: detected capacity change from 0 to 32768 [ 221.841103][ T9579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1543 (9579) [ 221.842972][ T9588] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.915330][ T9579] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.949465][ T9579] BTRFS info (device loop3): using crc32c checksum algorithm [ 222.008035][ T9588] EXT4-fs: Ignoring removed orlov option [ 222.069224][ T9588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.141823][ T9579] BTRFS info (device loop3): enabling ssd optimizations [ 222.149917][ T9579] BTRFS info (device loop3): turning on async discard [ 222.156731][ T9579] BTRFS info (device loop3): enabling free space tree [ 222.218124][ T9579] BTRFS info (device loop3): max_inline set to 0 [ 222.225347][ T9588] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.1548: Abort forced by user [ 222.253706][ T9588] EXT4-fs (loop0): Remounting filesystem read-only [ 222.269133][ T9588] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 222.366907][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.423329][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.583611][ T9642] ------------[ cut here ]------------ [ 222.589137][ T9642] old_ns_root->mnt_id_unique != 1 [ 222.589166][ T9642] WARNING: fs/namespace.c:3112 at vfs_open_tree+0xf35/0xfb0, CPU#1: syz.0.1567/9642 [ 222.603651][ T9642] Modules linked in: [ 222.607869][ T9642] CPU: 1 UID: 0 PID: 9642 Comm: syz.0.1567 Not tainted syzkaller #0 PREEMPT(full) [ 222.617209][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.627348][ T9642] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 222.632761][ T9642] Code: 35 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 5e 35 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 4c 35 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 3e 35 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 222.652693][ T9642] RSP: 0018:ffffc9001bacfd80 EFLAGS: 00010287 [ 222.659918][ T9642] RAX: ffffffff824d7d44 RBX: 000000008000003c RCX: 0000000000080000 [ 222.669286][ T9642] RDX: ffffc90005152000 RSI: 000000000000010e RDI: 000000000000010f [ 222.677334][ T9642] RBP: ffffc9001bacfeb0 R08: ffffffff8e5fa2eb R09: 1ffffffff1cbf45d [ 222.685972][ T9642] R10: dffffc0000000000 R11: fffffbfff1cbf45e R12: ffff888030d8e540 [ 222.694483][ T9642] R13: 0000000000000002 R14: ffff8880325f9100 R15: dffffc0000000000 [ 222.702556][ T9642] FS: 00007f8df10dd6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 222.711509][ T9642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.718471][ T9642] CR2: 00007f7c45f456b8 CR3: 0000000044b42000 CR4: 00000000003526f0 [ 222.726872][ T9642] Call Trace: [ 222.730169][ T9642] [ 222.733436][ T9642] ? __pfx_vfs_open_tree+0x10/0x10 [ 222.738849][ T9642] ? _raw_spin_unlock+0x28/0x50 [ 222.743952][ T9642] ? alloc_fd+0x64b/0x6c0 [ 222.748679][ T9642] __x64_sys_open_tree+0x96/0x110 [ 222.754548][ T9642] do_syscall_64+0x14d/0xf80 [ 222.759565][ T9642] ? trace_irq_disable+0x3b/0x150 [ 222.764614][ T9642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.770765][ T9642] ? clear_bhb_loop+0x40/0x90 [ 222.775469][ T9642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.781404][ T9642] RIP: 0033:0x7f8df019bf79 [ 222.785844][ T9642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.806166][ T9642] RSP: 002b:00007f8df10dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 222.815043][ T9642] RAX: ffffffffffffffda RBX: 00007f8df0415fa0 RCX: 00007f8df019bf79 [ 222.823096][ T9642] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 222.831091][ T9642] RBP: 00007f8df02327e0 R08: 0000000000000000 R09: 0000000000000000 [ 222.839135][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.847171][ T9642] R13: 00007f8df0416038 R14: 00007f8df0415fa0 R15: 00007ffc9afe3288 [ 222.855216][ T9642] [ 222.858279][ T9642] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.865573][ T9642] CPU: 1 UID: 0 PID: 9642 Comm: syz.0.1567 Not tainted syzkaller #0 PREEMPT(full) [ 222.874862][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.884914][ T9642] Call Trace: [ 222.888189][ T9642] [ 222.891112][ T9642] vpanic+0x56c/0xa60 [ 222.895093][ T9642] ? __pfx__printk+0x10/0x10 [ 222.899675][ T9642] ? __pfx_vpanic+0x10/0x10 [ 222.904184][ T9642] ? is_bpf_text_address+0x292/0x2b0 [ 222.909472][ T9642] ? is_bpf_text_address+0x26/0x2b0 [ 222.914674][ T9642] panic+0xc5/0xd0 [ 222.918401][ T9642] ? __pfx_panic+0x10/0x10 [ 222.922826][ T9642] __warn+0x315/0x4f0 [ 222.926802][ T9642] ? vfs_open_tree+0xf35/0xfb0 [ 222.931559][ T9642] ? vfs_open_tree+0xf35/0xfb0 [ 222.936313][ T9642] __report_bug+0x29a/0x540 [ 222.940813][ T9642] ? vfs_open_tree+0xf35/0xfb0 [ 222.945570][ T9642] ? __pfx___report_bug+0x10/0x10 [ 222.950588][ T9642] ? ida_alloc_range+0x843/0x8a0 [ 222.955527][ T9642] ? __pfx_ida_alloc_range+0x10/0x10 [ 222.960808][ T9642] ? vfs_open_tree+0xf35/0xfb0 [ 222.965561][ T9642] report_bug+0x16a/0x220 [ 222.969886][ T9642] ? vfs_open_tree+0xf35/0xfb0 [ 222.974640][ T9642] ? vfs_open_tree+0xf37/0xfb0 [ 222.979394][ T9642] handle_bug+0x98/0x200 [ 222.983628][ T9642] exc_invalid_op+0x1a/0x50 [ 222.988120][ T9642] asm_exc_invalid_op+0x1a/0x20 [ 222.992966][ T9642] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 222.998328][ T9642] Code: 35 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 5e 35 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 4c 35 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 3e 35 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 223.017928][ T9642] RSP: 0018:ffffc9001bacfd80 EFLAGS: 00010287 [ 223.024003][ T9642] RAX: ffffffff824d7d44 RBX: 000000008000003c RCX: 0000000000080000 [ 223.031973][ T9642] RDX: ffffc90005152000 RSI: 000000000000010e RDI: 000000000000010f [ 223.039936][ T9642] RBP: ffffc9001bacfeb0 R08: ffffffff8e5fa2eb R09: 1ffffffff1cbf45d [ 223.047897][ T9642] R10: dffffc0000000000 R11: fffffbfff1cbf45e R12: ffff888030d8e540 [ 223.055876][ T9642] R13: 0000000000000002 R14: ffff8880325f9100 R15: dffffc0000000000 [ 223.063851][ T9642] ? vfs_open_tree+0xf34/0xfb0 [ 223.068629][ T9642] ? __pfx_vfs_open_tree+0x10/0x10 [ 223.073731][ T9642] ? _raw_spin_unlock+0x28/0x50 [ 223.078585][ T9642] ? alloc_fd+0x64b/0x6c0 [ 223.083002][ T9642] __x64_sys_open_tree+0x96/0x110 [ 223.088049][ T9642] do_syscall_64+0x14d/0xf80 [ 223.092653][ T9642] ? trace_irq_disable+0x3b/0x150 [ 223.097697][ T9642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.103795][ T9642] ? clear_bhb_loop+0x40/0x90 [ 223.108481][ T9642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.114380][ T9642] RIP: 0033:0x7f8df019bf79 [ 223.118809][ T9642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.138410][ T9642] RSP: 002b:00007f8df10dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 223.146839][ T9642] RAX: ffffffffffffffda RBX: 00007f8df0415fa0 RCX: 00007f8df019bf79 [ 223.154822][ T9642] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 223.162797][ T9642] RBP: 00007f8df02327e0 R08: 0000000000000000 R09: 0000000000000000 [ 223.170768][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.178730][ T9642] R13: 00007f8df0416038 R14: 00007f8df0415fa0 R15: 00007ffc9afe3288 [ 223.186712][ T9642] [ 223.190082][ T9642] Kernel Offset: disabled [ 223.194408][ T9642] Rebooting in 86400 seconds..