last executing test programs: 1m23.715269578s ago: executing program 2 (id=161): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 1m23.439238658s ago: executing program 2 (id=164): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 1m23.209294606s ago: executing program 2 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1m22.988265391s ago: executing program 2 (id=169): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 1m22.358730165s ago: executing program 2 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m21.669684195s ago: executing program 2 (id=182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) 1m20.94569706s ago: executing program 32 (id=182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 5.207489594s ago: executing program 6 (id=1035): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 4.868529211s ago: executing program 6 (id=1040): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) 4.515032059s ago: executing program 6 (id=1043): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000240)={0x20, 0x3, 0xc, {0xc, 0x10, "5cd81bc50145e3f8193b"}}, 0x0, 0x0, 0x0}, 0x0) 3.570101743s ago: executing program 0 (id=1055): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 3.169862656s ago: executing program 0 (id=1059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2.825273885s ago: executing program 0 (id=1062): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) 2.572787428s ago: executing program 6 (id=1064): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/111) 2.546340098s ago: executing program 5 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.511040863s ago: executing program 1 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00c70028bd70000000000002200000000000000020000006001c004e210000080001"], 0x2c}}, 0x880) 2.383408525s ago: executing program 0 (id=1068): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800800, &(0x7f0000000180)={[{@sys_tz}, {@gid}, {@gid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@dmask={'dmask', 0x3d, 0x10000}}, {@namecase}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x9fd1}}, {@utf8}]}, 0x1, 0x1534, &(0x7f0000001f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r0, &(0x7f00000044c0)=""/218, 0xda) 2.264653109s ago: executing program 6 (id=1070): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000280), 0x2, 0xbc1, &(0x7f00000028c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) 2.206997426s ago: executing program 1 (id=1072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@local]}) 2.136259612s ago: executing program 5 (id=1073): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0, 0xd296895ede2f911a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) 1.844718755s ago: executing program 0 (id=1074): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e220000050009002900000008001400"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 1.69817528s ago: executing program 5 (id=1075): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='maps\x00') exit(0xffff) lseek(r0, 0x9, 0x0) 1.621840389s ago: executing program 3 (id=1077): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="5b0300000202001f051a020000ffffffff0000000000000000000000000000008102"], 0x35b) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8108"], 0x8) 1.567524378s ago: executing program 1 (id=1078): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040082}, 0xc000) r0 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 1.458267557s ago: executing program 6 (id=1079): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000009000000000000000400150018160000", @ANYRES32=r0, @ANYBLOB="000000000000000085100000fbffffff95"], &(0x7f0000000080)='GPL\x00', 0x5, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.318389011s ago: executing program 3 (id=1081): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 1.31737885s ago: executing program 0 (id=1093): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x0, 0x9e, 0x88, 0x33}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) 1.236820634s ago: executing program 1 (id=1082): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x4000010) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.168347114s ago: executing program 4 (id=1083): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 910.28317ms ago: executing program 4 (id=1084): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xc761148f284a8a58, 0x0, 0x2, 0x2}}, 0x48) 884.094025ms ago: executing program 1 (id=1085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xcb09cbbcfc46d513}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 626.9014ms ago: executing program 4 (id=1086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) uname(&(0x7f0000000000)=""/40) 611.500794ms ago: executing program 1 (id=1087): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "f7d998d8"}]}}, 0x0}, 0x0) 607.093228ms ago: executing program 3 (id=1088): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x4, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x7, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x4, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) 431.901755ms ago: executing program 5 (id=1089): r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) 430.530847ms ago: executing program 4 (id=1090): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x38}, 0x0) listen(r0, 0x1) 393.922327ms ago: executing program 3 (id=1091): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x2, 0xfffffffe, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) 241.239793ms ago: executing program 3 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 230.918118ms ago: executing program 5 (id=1094): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, r0, 0x3, 0x80}, 0x50) 211.182753ms ago: executing program 4 (id=1095): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000002340)={&(0x7f0000000040)={0x2, 0x4e28, @local}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@mask_fadd={0x58, 0x114, 0x8, {{0x6, 0xfffff001}, 0x0, 0x0, 0xffffffff, 0x7, 0x2, 0x6958, 0x247b90a34cd14ed8, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x2}, 0x0, 0x0, 0xffe, 0xa, 0x2c1, 0x1, 0x0, 0x9}}], 0xb0, 0x8004}, 0x0) 58.416203ms ago: executing program 3 (id=1096): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) 56.949868ms ago: executing program 4 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 0s ago: executing program 5 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) kernel console output (not intermixed with test programs): EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.30: couldn't read orphan inode 15 (err -117) [ 114.838992][ T6029] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.26: Deleting old file: nlink 4, error=-117 [ 114.871577][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.885454][ T6029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.26: bg 0: block 465: padding at end of block bitmap is not set [ 114.912902][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.949022][ T6029] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 114.957526][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.980633][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.984398][ T6029] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.26: invalid indirect mapped block 234881024 (level 0) [ 115.009179][ T24] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 115.010308][ T6036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.30: bg 0: block 5: invalid block bitmap [ 115.037848][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.054784][ T24] usb 3-1: config 0 descriptor?? [ 115.079870][ T6036] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 115.221527][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.294486][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.700947][ T24] usb 3-1: string descriptor 0 read error: -71 [ 115.711063][ T24] uclogic 0003:5543:3031.0003: failed retrieving string descriptor #200: -71 [ 115.737536][ T24] uclogic 0003:5543:3031.0003: failed retrieving pen parameters: -71 [ 115.757196][ T24] uclogic 0003:5543:3031.0003: failed probing pen v2 parameters: -71 [ 115.782752][ T24] uclogic 0003:5543:3031.0003: failed probing parameters: -71 [ 115.793414][ T6040] loop5: detected capacity change from 0 to 32768 [ 115.807717][ T24] uclogic 0003:5543:3031.0003: probe with driver uclogic failed with error -71 [ 115.825996][ T6040] ======================================================= [ 115.825996][ T6040] WARNING: The mand mount option has been deprecated and [ 115.825996][ T6040] and is ignored by this kernel. Remove the mand [ 115.825996][ T6040] option from the mount to silence this warning. [ 115.825996][ T6040] ======================================================= [ 115.893183][ T24] usb 3-1: USB disconnect, device number 2 [ 116.018368][ T6040] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 116.083243][ T6040] JBD2: Ignoring recovery information on journal [ 116.185707][ T6040] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 116.466432][ T6066] vlan0: entered promiscuous mode [ 116.490406][ T6066] team0: Port device vlan0 added [ 116.506262][ T6065] loop2: detected capacity change from 0 to 512 [ 116.590454][ T5831] ocfs2: Unmounting device (7,5) on (node local) [ 116.637879][ T6065] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 116.692710][ T6065] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.711764][ T6065] EXT4-fs (loop2): mount failed [ 117.066987][ T6076] exfat: Deprecated parameter 'utf8' [ 117.141191][ T31] audit: type=1326 audit(1770494952.420:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50b19aeb9 code=0x0 [ 117.193953][ T6076] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 117.249845][ T6080] set_capacity_and_notify: 1 callbacks suppressed [ 117.249874][ T6080] loop5: detected capacity change from 0 to 256 [ 117.329696][ T6080] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 117.407381][ T6058] loop1: detected capacity change from 0 to 32768 [ 117.490612][ T6058] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 117.490612][ T6058] [ 117.507074][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.551897][ T6087] xt_socket: unknown flags 0xe4 [ 117.689296][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 117.698916][ T5836] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 117.716226][ T6089] loop0: detected capacity change from 0 to 64 [ 117.725776][ T5836] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 117.776259][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.815464][ T5836] usb 5-1: Product: syz [ 117.833983][ T5836] usb 5-1: Manufacturer: syz [ 117.846601][ T5836] usb 5-1: SerialNumber: syz [ 117.896516][ T5836] usb 5-1: config 0 descriptor?? [ 117.919337][ T5836] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.945986][ T5836] usb 5-1: setting power ON [ 117.993235][ T5836] dvb-usb: bulk message failed: -22 (2/0) [ 118.050355][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.122300][ T6082] dvb-usb: bulk message failed: -22 (3/0) [ 118.132626][ T5836] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 118.170227][ T5836] usb 5-1: media controller created [ 118.218831][ T6104] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 118.283362][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.303364][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 118.343605][ T6109] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 118.369207][ T5836] usb 5-1: selecting invalid altsetting 6 [ 118.379019][ T5836] usb 5-1: digital interface selection failed (-22) [ 118.388033][ T5836] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 118.397703][ T5836] usb 5-1: setting power OFF [ 118.411062][ T5836] dvb-usb: bulk message failed: -22 (2/0) [ 118.427303][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 118.447203][ T5836] (NULL device *): no alternate interface [ 118.531117][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 118.614598][ T6114] loop1: detected capacity change from 0 to 128 [ 118.618336][ T5836] usb 5-1: USB disconnect, device number 3 [ 118.664004][ T6114] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.830245][ T6114] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.988435][ T847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.073472][ T5826] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.125085][ T6128] Bluetooth: MGMT ver 1.23 [ 119.158614][ T6101] loop2: detected capacity change from 0 to 32768 [ 119.182580][ T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.216079][ T6101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.57 (6101) [ 119.239018][ T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.271993][ T847] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 119.317835][ T6101] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.338336][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.362177][ T847] usb 1-1: config 0 descriptor?? [ 119.373936][ T6101] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 119.565881][ T6135] loop5: detected capacity change from 0 to 4096 [ 119.587953][ T6101] BTRFS info (device loop2): rebuilding free space tree [ 119.755744][ T6101] BTRFS info (device loop2): disabling free space tree [ 119.793419][ T6101] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.800533][ T847] hid-picolcd 0003:04D8:C002.0004: item fetching failed at offset 5/7 [ 119.851225][ T6135] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 119.861209][ T6101] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.873864][ T847] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 119.893748][ T6101] BTRFS info (device loop2): enabling ssd optimizations [ 119.908127][ T847] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22 [ 119.911868][ T6101] BTRFS info (device loop2): turning on async discard [ 119.946989][ T6101] BTRFS info (device loop2): force clearing of disk cache [ 119.951140][ T6135] ntfs3(loop5): Failed to load $Extend (-22). [ 119.978474][ T6101] BTRFS info (device loop2): enabling auto defrag [ 119.989748][ T6135] ntfs3(loop5): Failed to initialize $Extend. [ 120.004045][ T6101] BTRFS info (device loop2): max_inline set to 4096 [ 120.052311][ T847] usb 1-1: USB disconnect, device number 2 [ 120.104798][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.228908][ T6164] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.309047][ T5836] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 120.348458][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.391146][ T5836] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 120.427454][ T5836] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 120.444147][ T5829] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.478794][ T5836] usb 5-1: Manufacturer: syz [ 120.515591][ T5836] usb 5-1: config 0 descriptor?? [ 120.721824][ T5836] rc_core: IR keymap rc-hauppauge not found [ 120.797448][ T5836] Registered IR keymap rc-empty [ 120.804588][ T5836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 120.885687][ T5836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 121.027586][ T5946] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.089502][ T6186] process 'syz.0.84' launched '/dev/fd/3' with NULL argv: empty string added [ 121.100738][ C0] igorplugusb 5-1:0.0: receive overflow, at least 20 lost [ 121.117484][ T6184] rc rc0: two consecutive events of type space [ 121.209504][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.252133][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.299822][ T5946] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 121.359414][ T979] usb 5-1: USB disconnect, device number 4 [ 121.367111][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.423662][ T5946] usb 4-1: config 0 descriptor?? [ 121.909162][ T5946] steelseries 0003:1038:1410.0005: missing HID_OUTPUT_REPORT 0 [ 122.108595][ T5946] usb 4-1: USB disconnect, device number 3 [ 122.769033][ T6221] loop5: detected capacity change from 0 to 512 [ 122.809223][ T6221] EXT4-fs: Ignoring removed i_version option [ 122.852985][ T6218] loop1: detected capacity change from 0 to 32768 [ 122.902517][ T6218] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 122.950374][ T6218] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 122.950588][ T6221] EXT4-fs: Ignoring removed bh option [ 122.996997][ T6218] OCFS2: File system is now read-only. [ 123.030899][ T6218] (syz.1.100,6218,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 123.066439][ T6221] EXT4-fs: inline encryption not supported [ 123.073148][ T6218] (syz.1.100,6218,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 123.076751][ T6221] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.120681][ T6218] (syz.1.100,6218,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 123.164693][ T6218] (syz.1.100,6218,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 123.182239][ T6221] EXT4-fs (loop5): Test dummy encryption mode enabled [ 123.199818][ T6221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.215752][ T6218] (syz.1.100,6218,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 123.229479][ T6227] loop4: detected capacity change from 0 to 256 [ 123.265165][ T6227] exfat: Deprecated parameter 'utf8' [ 123.274165][ T6221] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.286113][ T6218] (syz.1.100,6218,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 123.302049][ T6227] exfat: Deprecated parameter 'namecase' [ 123.311358][ T6227] exfat: Deprecated parameter 'namecase' [ 123.329751][ T6227] exfat: Deprecated parameter 'utf8' [ 123.339944][ T6221] EXT4-fs (loop5): 1 truncate cleaned up [ 123.360143][ T6221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.411103][ T6221] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 123.443866][ T6227] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 123.469992][ T6235] loop3: detected capacity change from 0 to 64 [ 123.517898][ T6227] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 123.624027][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'. [ 123.730030][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.164462][ T6218] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.251836][ T6218] CIFS mount error: No usable UNC path provided in device string! [ 124.251836][ T6218] [ 124.272966][ T6218] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.632948][ T6266] loop3: detected capacity change from 0 to 256 [ 124.883999][ T6270] loop0: detected capacity change from 0 to 512 [ 124.953204][ T6270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.997657][ T6270] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 125.006170][ T6270] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 125.119120][ T6270] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.122: attempt to clear invalid blocks 2 len 1 [ 125.184972][ T6270] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 0) [ 125.276608][ T6270] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 1) [ 125.338401][ T6270] EXT4-fs (loop0): 1 truncate cleaned up [ 125.379460][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.465615][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 125.468549][ T6283] tmpfs: Cannot disable swap on remount [ 125.484971][ T6270] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 125.504739][ T6270] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.122: Abort forced by user [ 125.535489][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 125.565549][ T6270] EXT4-fs (loop0): Remounting filesystem read-only [ 125.599392][ T6270] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 125.638724][ T6285] vxlan0: entered promiscuous mode [ 125.643905][ T6285] vxlan0: entered allmulticast mode [ 125.701043][ T1104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.740947][ T1104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.778204][ T1104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.797245][ T1104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.888885][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.236471][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 126.468052][ T6307] loop4: detected capacity change from 0 to 2048 [ 126.525674][ T6312] loop0: detected capacity change from 0 to 2048 [ 126.576051][ T6307] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.626028][ T6312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.639539][ T6288] loop2: detected capacity change from 0 to 32768 [ 126.643375][ T6309] loop5: detected capacity change from 0 to 4096 [ 126.686450][ T5848] udevd[5848]: incorrect nilfs2 checksum on /dev/loop4 [ 126.724009][ T6288] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 126.800953][ T6288] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 126.888124][ T6319] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.907585][ T31] audit: type=1800 audit(1770494962.160:3): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file3" dev="loop1" ino=22 res=0 errno=0 [ 126.928956][ T6288] OCFS2: File system is now read-only. [ 126.975681][ T6288] (syz.2.131,6288,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 127.022567][ T6288] (syz.2.131,6288,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 127.053794][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.081099][ T6288] (syz.2.131,6288,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 127.128892][ T6288] (syz.2.131,6288,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 127.192408][ T6288] (syz.2.131,6288,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 127.236493][ T6288] (syz.2.131,6288,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 128.026525][ T6288] CIFS mount error: No usable UNC path provided in device string! [ 128.026525][ T6288] [ 128.106619][ T6288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.127572][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.317519][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 128.335637][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 128.388896][ T5836] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 128.417265][ T5836] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 128.457447][ T5836] usb 5-1: Product: syz [ 128.467647][ T5836] usb 5-1: Manufacturer: syz [ 128.478866][ T5836] usb 5-1: SerialNumber: syz [ 128.834925][ T5836] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 128.851455][ T5836] visor 5-1:1.0: probe with driver visor failed with error -110 [ 129.131282][ T6363] set_capacity_and_notify: 1 callbacks suppressed [ 129.131304][ T6363] loop0: detected capacity change from 0 to 4096 [ 129.811985][ T6377] loop2: detected capacity change from 0 to 2048 [ 129.856872][ T6377] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 129.925697][ T6377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.189714][ T5829] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 130.224827][ T5829] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 130.330763][ T6392] team0: Port device syz_tun added [ 130.352180][ T6395] loop0: detected capacity change from 0 to 2048 [ 130.398492][ T6397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.774552][ T6403] capability: warning: `syz.1.180' uses deprecated v2 capabilities in a way that may be insecure [ 130.956515][ T5946] usb 5-1: USB disconnect, device number 5 [ 131.272185][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.681564][ T6417] loop0: detected capacity change from 0 to 256 [ 131.756817][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.909308][ T6417] FAT-fs (loop0): Directory bread(block 64) failed [ 131.926372][ T6417] FAT-fs (loop0): Directory bread(block 65) failed [ 131.960400][ T6417] FAT-fs (loop0): Directory bread(block 66) failed [ 131.990121][ T6417] FAT-fs (loop0): Directory bread(block 67) failed [ 131.996790][ T6417] FAT-fs (loop0): Directory bread(block 68) failed [ 132.037731][ T6417] FAT-fs (loop0): Directory bread(block 69) failed [ 132.044640][ T6417] FAT-fs (loop0): Directory bread(block 70) failed [ 132.072384][ T6417] FAT-fs (loop0): Directory bread(block 71) failed [ 132.090428][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.129775][ T6417] FAT-fs (loop0): Directory bread(block 72) failed [ 132.141523][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.151936][ T6417] FAT-fs (loop0): Directory bread(block 73) failed [ 132.152058][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.191340][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.210300][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.219838][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.233856][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.363036][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 132.381446][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 132.419778][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 132.438803][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 132.452558][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 132.467485][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.503231][ T6408] loop1: detected capacity change from 0 to 32768 [ 132.506178][ T24] usb 5-1: Product: syz [ 132.543214][ T24] usb 5-1: Manufacturer: syz [ 132.553854][ T24] usb 5-1: SerialNumber: syz [ 132.557112][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.581429][ T24] usb 5-1: config 0 descriptor?? [ 132.624452][ T6421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.654408][ T6408] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.713813][ T24] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 132.749789][ T6408] XFS (loop1): Ending clean mount [ 132.778612][ T6441] loop5: detected capacity change from 0 to 64 [ 132.786089][ T24] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 132.813773][ T6408] XFS (loop1): Quotacheck needed: Please wait. [ 132.937296][ T6441] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 133.031734][ T6408] XFS (loop1): Quotacheck: Done. [ 133.050181][ T847] usb 5-1: USB disconnect, device number 6 [ 133.247655][ T5826] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.351707][ T6448] loop5: detected capacity change from 0 to 736 [ 133.566455][ T12] bridge_slave_1: left allmulticast mode [ 133.618657][ T12] bridge_slave_1: left promiscuous mode [ 133.646937][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.821862][ T12] bridge_slave_0: left allmulticast mode [ 133.857521][ T12] bridge_slave_0: left promiscuous mode [ 133.867845][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.091979][ T6467] netlink: 'syz.4.201': attribute type 11 has an invalid length. [ 134.108071][ T6467] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.201'. [ 134.327724][ T5835] Bluetooth: hci3: command tx timeout [ 134.387370][ T6475] netlink: 128 bytes leftover after parsing attributes in process `syz.5.202'. [ 134.732523][ T6489] sctp: [Deprecated]: syz.4.207 (pid 6489) Use of int in max_burst socket option. [ 134.732523][ T6489] Use struct sctp_assoc_value instead [ 134.858434][ T6492] CIFS: Unable to determine destination address [ 135.232208][ T6477] loop3: detected capacity change from 0 to 32768 [ 135.292511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.309185][ T6477] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.388245][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.405257][ T6511] loop4: detected capacity change from 0 to 512 [ 135.443092][ T12] bond0 (unregistering): Released all slaves [ 135.473408][ T6511] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 135.499758][ T6511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 135.510484][ T6477] XFS (loop3): Ending clean mount [ 135.531694][ T6477] XFS (loop3): Quotacheck needed: Please wait. [ 135.556354][ T6511] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.592213][ T6511] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.612414][ T31] audit: type=1326 audit(1770494970.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.5.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2da979aeb9 code=0x0 [ 135.637934][ T6511] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 135.676189][ T6477] XFS (loop3): Quotacheck: Done. [ 135.695749][ T6511] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.795664][ T6511] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 135.846319][ T6511] EXT4-fs (loop4): 1 truncate cleaned up [ 135.882235][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 135.929305][ T6511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.991032][ T6511] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 136.000390][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.058615][ T6511] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 136.129894][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 136.162463][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.222151][ T6535] loop0: detected capacity change from 0 to 64 [ 136.340872][ T31] audit: type=1800 audit(1770494971.630:5): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.221" name="file3" dev="loop0" ino=22 res=0 errno=0 [ 136.407632][ T5835] Bluetooth: hci3: command tx timeout [ 136.702964][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.5.227'. [ 136.713798][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 136.789773][ T6546] netlink: 56 bytes leftover after parsing attributes in process `syz.5.227'. [ 137.274269][ T6572] block nbd5: Unsupported socket: should be TCP or UNIX. [ 137.321257][ T6574] hub 9-0:1.0: USB hub found [ 137.339991][ T6574] hub 9-0:1.0: 1 port detected [ 137.486501][ T12] hsr_slave_0: left promiscuous mode [ 137.501505][ T12] hsr_slave_1: left promiscuous mode [ 137.523280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.562796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.585636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.613965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.732815][ T12] veth1_macvtap: left promiscuous mode [ 137.745924][ T6586] loop3: detected capacity change from 0 to 256 [ 137.761459][ T6586] exfat: Deprecated parameter 'namecase' [ 137.772747][ T12] veth0_macvtap: left promiscuous mode [ 137.784850][ T12] veth1_vlan: left promiscuous mode [ 137.791858][ T31] audit: type=1326 audit(1770494973.080:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.5.241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2da979aeb9 code=0x0 [ 137.801890][ T6586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 137.827061][ T12] veth0_vlan: left promiscuous mode [ 137.925942][ T6589] loop0: detected capacity change from 0 to 4096 [ 137.950630][ T6589] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 137.999423][ T6586] Invalid source name [ 138.055190][ T6589] ntfs3(loop0): ino=1a, mi_enum_attr [ 138.085569][ T6589] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 138.125759][ T6589] ntfs3(loop0): ino=1a, mi_enum_attr [ 138.169737][ T6589] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 138.487889][ T5835] Bluetooth: hci3: command tx timeout [ 139.490232][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.556242][ T6628] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 139.556481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.999633][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.006871][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.039790][ T6426] bridge_slave_0: entered allmulticast mode [ 140.060253][ T6426] bridge_slave_0: entered promiscuous mode [ 140.093277][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.102925][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.112166][ T6426] bridge_slave_1: entered allmulticast mode [ 140.120249][ T6426] bridge_slave_1: entered promiscuous mode [ 140.261117][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.284528][ T6639] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.304448][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.552464][ T6426] team0: Port device team_slave_0 added [ 140.576270][ T5835] Bluetooth: hci3: command tx timeout [ 140.582683][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.589233][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.648995][ T6426] team0: Port device team_slave_1 added [ 140.697928][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 140.798031][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.805160][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.911050][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.954946][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.999234][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.125693][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.533268][ T6426] hsr_slave_0: entered promiscuous mode [ 141.561730][ T6426] hsr_slave_1: entered promiscuous mode [ 141.578769][ T6426] debugfs: 'hsr0' already exists in 'hsr' [ 141.593568][ T6426] Cannot create hsr debugfs directory [ 141.801437][ T6681] loop0: detected capacity change from 0 to 128 [ 142.250654][ T6693] loop3: detected capacity change from 0 to 256 [ 142.365879][ T6693] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 142.639355][ T6426] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.693271][ T6426] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.756680][ T6426] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.806478][ T6705] loop1: detected capacity change from 0 to 4096 [ 142.829449][ T6426] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.847214][ T6705] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 142.966705][ T6715] loop0: detected capacity change from 0 to 1024 [ 143.022573][ T6715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.068776][ T6724] loop4: detected capacity change from 0 to 128 [ 143.108874][ T6724] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.145762][ T6715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.169948][ T31] audit: type=1800 audit(1770494978.460:7): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 143.234674][ T6734] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 143.287608][ T6724] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.301466][ T6734] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 143.352654][ T6734] cramfs: wrong magic [ 143.390072][ T5836] Process accounting resumed [ 143.398629][ T38] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.422722][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.450342][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.544293][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.624719][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.631937][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.702883][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.710078][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.858839][ T6750] netlink: 512 bytes leftover after parsing attributes in process `syz.4.298'. [ 144.212708][ T6759] hub 9-0:1.0: USB hub found [ 144.225459][ T6759] hub 9-0:1.0: 1 port detected [ 144.330830][ T6767] loop1: detected capacity change from 0 to 128 [ 144.519944][ T6767] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.601322][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.658634][ T6767] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.829628][ T6771] loop5: detected capacity change from 0 to 4096 [ 144.859446][ T5826] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.878928][ T6771] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 144.929535][ T6771] ntfs3(loop5): ino=0, mi_enum_attr [ 144.931199][ T6785] loop3: detected capacity change from 0 to 1024 [ 144.934882][ T6771] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 144.969043][ T6785] EXT4-fs: inline encryption not supported [ 145.019977][ T6785] EXT4-fs: Ignoring removed i_version option [ 145.056363][ T6771] ntfs3(loop5): try to read out of volume at offset 0x1ff000 [ 145.098528][ T6785] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.117730][ T6771] ntfs3(loop5): Failed to load $MFT. [ 145.315137][ T6785] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.309: lblock 2 mapped to illegal pblock 2 (length 1) [ 145.390397][ T6785] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 145.426145][ T6785] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.309: lblock 0 mapped to illegal pblock 48 (length 1) [ 145.446604][ T6426] veth0_vlan: entered promiscuous mode [ 145.528928][ T6785] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 145.548012][ T6426] veth1_vlan: entered promiscuous mode [ 145.576734][ T6785] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.309: Failed to acquire dquot type 0 [ 145.606297][ T6785] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 145.658515][ T6426] veth0_macvtap: entered promiscuous mode [ 145.694114][ T6785] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.309: mark_inode_dirty error [ 145.713647][ T6426] veth1_macvtap: entered promiscuous mode [ 145.793134][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.805393][ T6785] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 145.842731][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.853375][ T6785] EXT4-fs (loop3): 1 orphan inode deleted [ 145.874750][ T38] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.905990][ T1104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.914232][ T6812] loop1: detected capacity change from 0 to 16 [ 145.930598][ T6785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.960640][ T1104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.974691][ T38] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 145.999963][ T6812] erofs (device loop1): mounted with root inode @ nid 36. [ 146.004177][ T38] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 146.068404][ T1104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.087222][ T6785] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.309: Invalid inode table block 1 in block_group 0 [ 146.096303][ T1104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.147231][ T6785] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 146.349243][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.414094][ T5827] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 146.480217][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.482588][ T5827] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 146.520876][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.589894][ T5827] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 146.651224][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.664927][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.867651][ T31] audit: type=1326 audit(1770494982.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 146.982373][ T31] audit: type=1326 audit(1770494982.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 147.075588][ T31] audit: type=1326 audit(1770494982.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 147.145287][ T31] audit: type=1326 audit(1770494982.140:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 147.189674][ T31] audit: type=1326 audit(1770494982.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 147.227556][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.253174][ T31] audit: type=1326 audit(1770494982.140:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb50b19aeb9 code=0x7ffc0000 [ 147.280694][ T6848] ipvlan2: entered promiscuous mode [ 147.302256][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 147.408352][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 147.430671][ T5837] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.468713][ T5837] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.475381][ T5837] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 147.488046][ T5836] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.516861][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.525067][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.571446][ T5836] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.578668][ T5837] usb 1-1: config 0 descriptor?? [ 147.583582][ T5836] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.596649][ T5836] usb 7-1: Manufacturer: syz [ 147.608308][ T6814] loop5: detected capacity change from 0 to 32768 [ 147.625523][ T5836] usb 7-1: config 0 descriptor?? [ 147.710713][ T6814] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.809314][ T5836] rc_core: IR keymap rc-hauppauge not found [ 147.859018][ T5836] Registered IR keymap rc-empty [ 147.898033][ T6814] XFS (loop5): Ending clean mount [ 147.904787][ T5836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 147.986652][ T5836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 148.048296][ T5837] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 148.155567][ T5831] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 148.200430][ C0] igorplugusb 7-1:0.0: receive overflow, at least 20 lost [ 148.275471][ T5837] usb 1-1: USB disconnect, device number 3 [ 148.387993][ T6887] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 148.395645][ T6887] ALSA: mixer_oss: invalid index 1374389 [ 148.469805][ T24] usb 7-1: USB disconnect, device number 2 [ 148.616164][ T6893] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 148.616790][ T6885] fido_id[6885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 148.652369][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 148.702592][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 148.727061][ T6893] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 148.789731][ T6893] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 148.830320][ T6893] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 148.874890][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 149.415261][ T6909] loop3: detected capacity change from 0 to 4096 [ 149.500287][ T6921] loop1: detected capacity change from 0 to 64 [ 149.603332][ T6923] loop0: detected capacity change from 0 to 2048 [ 149.775362][ T6923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.949279][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.068076][ T6938] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 150.075762][ T6938] netlink: 232 bytes leftover after parsing attributes in process `syz.3.369'. [ 150.450765][ T6949] loop3: detected capacity change from 0 to 1024 [ 151.019561][ T6970] loop6: detected capacity change from 0 to 2048 [ 151.119511][ T6980] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.169937][ T6979] loop5: detected capacity change from 0 to 1024 [ 151.237539][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.258127][ T6979] hfsplus: bad catalog entry type [ 151.417509][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 151.470837][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.509994][ T38] hfsplus: b-tree write err: -5, ino 4 [ 151.517619][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.548486][ T24] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 151.591384][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.645969][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 151.697502][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.726036][ T5946] IPVS: starting estimator thread 0... [ 151.728809][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 151.749747][ T24] usb 4-1: config 0 descriptor?? [ 151.799583][ T6987] loop4: detected capacity change from 0 to 8192 [ 151.828327][ T6991] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.010578][ T6965] loop1: detected capacity change from 0 to 32768 [ 152.052589][ T6965] [ 152.052589][ T6965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.052589][ T6965] [ 152.139762][ T6977] loop0: detected capacity change from 0 to 32768 [ 152.197716][ T6977] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.390 (6977) [ 152.209705][ T24] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 152.217204][ T24] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 152.251428][ T5826] [ 152.251428][ T5826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.251428][ T5826] [ 152.294955][ T5826] [ 152.294955][ T5826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.294955][ T5826] [ 152.305614][ T24] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 152.328631][ T24] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 152.359994][ T6977] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.380706][ T24] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 152.402440][ T6977] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 152.432075][ T24] wacom 0003:056A:0094.0007: Using device in hidraw-only mode [ 152.474134][ T24] wacom 0003:056A:0094.0007: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 152.568038][ T24] usb 4-1: USB disconnect, device number 4 [ 152.667725][ T5913] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.731537][ T7022] fido_id[7022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 152.738588][ T6977] BTRFS info (device loop0): rebuilding free space tree [ 152.818507][ T6977] BTRFS info (device loop0): disabling free space tree [ 152.867687][ T6977] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.867736][ T6977] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.885891][ T6977] BTRFS info (device loop0): enabling ssd optimizations [ 152.885921][ T6977] BTRFS info (device loop0): turning on async discard [ 152.885940][ T6977] BTRFS info (device loop0): force clearing of disk cache [ 152.885959][ T6977] BTRFS info (device loop0): enabling auto defrag [ 152.885980][ T6977] BTRFS info (device loop0): max_inline set to 4096 [ 152.920218][ T5913] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.920254][ T5913] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.920277][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.920348][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.920379][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.933395][ T5913] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.933430][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.933454][ T5913] usb 6-1: Product: syz [ 152.933471][ T5913] usb 6-1: Manufacturer: syz [ 152.941901][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 152.941933][ T5913] cdc_wdm 6-1:1.0: skipping garbage [ 152.977494][ T5913] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 153.047815][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 153.047852][ T31] audit: type=1800 audit(1770495501.285:16): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.390" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 153.199807][ T5828] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.334914][ T5913] cdc_wdm 6-1:1.0: Unknown control protocol [ 153.391185][ T5913] usb 6-1: USB disconnect, device number 2 [ 153.792350][ T7041] loop4: detected capacity change from 0 to 2048 [ 153.819124][ T7044] Bluetooth: MGMT ver 1.23 [ 153.902948][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.021446][ T31] audit: type=1800 audit(1770495502.275:17): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.409" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 154.190203][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.328896][ T7020] loop6: detected capacity change from 0 to 40427 [ 154.390124][ T7020] F2FS-fs (loop6): build fault injection rate: 14 [ 154.396733][ T7020] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 154.467814][ T7020] F2FS-fs (loop6): invalid crc value [ 154.533873][ C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 154.607762][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 154.810157][ T7072] loop1: detected capacity change from 0 to 16 [ 154.846891][ T7020] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.880269][ T7074] loop0: detected capacity change from 0 to 64 [ 154.889557][ T7020] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x551/0x8c30 [ 154.960947][ T7020] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 155.880878][ T7106] loop4: detected capacity change from 0 to 512 [ 155.998302][ T7106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.086393][ T7106] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.239962][ T7106] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 156.432137][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.527986][ T847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.767865][ T847] usb 6-1: Using ep0 maxpacket: 16 [ 156.777264][ T847] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.836536][ T847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 156.871253][ T847] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 156.927456][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.993327][ T847] usb 6-1: config 0 descriptor?? [ 157.434096][ T7159] tipc: Enabling of bearer rejected, media not registered [ 157.462957][ T847] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 157.682204][ T5913] usb 6-1: USB disconnect, device number 3 [ 157.785016][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 158.550242][ T7202] ptrace attach of "./syz-executor exec"[6426] was attempted by "\x22"[7202] [ 158.787793][ T5946] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.949516][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 158.988040][ T5946] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.021740][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.068123][ T5946] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 159.098543][ T7218] ptrace attach of "./syz-executor exec"[5826] was attempted by "ýßu+íO'Uçl$WB·ivÏQåÈ°&*\x07¥ -ä:Ma{MræÏ°ØÄZï‰øÓT!kúWŒ_~—¤{&¿Tçvf<¤×{t‘žýªôV\x0d7á1™¥%Ú^~›‚Åõy’—Ä\x5c>¸qX\x09aŸéEÌx¨–~$ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒ÷Íãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dà䧥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3 [ 159.122577][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.217996][ T7222] loop0: detected capacity change from 0 to 256 [ 159.251435][ T7171] loop4: detected capacity change from 0 to 32768 [ 159.312675][ T7222] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 159.333766][ T7224] loop5: detected capacity change from 0 to 512 [ 159.372598][ T7224] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 159.396302][ T5946] usb 4-1: config 0 descriptor?? [ 159.425658][ T7171] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.453374][ T7224] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.528419][ T7224] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.481: corrupted inode contents [ 159.571422][ T7224] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #11: comm syz.5.481: mark_inode_dirty error [ 159.606904][ T7171] XFS (loop4): Ending clean mount [ 159.626060][ T7224] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.481: invalid indirect mapped block 1 (level 1) [ 159.691017][ T7224] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.481: corrupted inode contents [ 159.772625][ T7224] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 159.861352][ T7224] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.481: corrupted inode contents [ 159.898496][ T7224] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.481: mark_inode_dirty error [ 159.941474][ T5830] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.950244][ T7224] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 159.952112][ T5946] sony 0003:054C:024B.0009: hiddev0,hidraw0: USB HID v0.09 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 159.996700][ T7224] EXT4-fs (loop5): 1 truncate cleaned up [ 160.036215][ T5946] sony 0003:054C:024B.0009: failed to claim input [ 160.090928][ T7224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.172210][ T5946] usb 4-1: USB disconnect, device number 5 [ 160.359351][ T7244] fido_id[7244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 160.519678][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.656344][ T7258] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 160.728132][ T7238] loop1: detected capacity change from 0 to 32768 [ 160.756979][ T7238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.482 (7238) [ 160.813656][ T7238] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.861627][ T7238] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 161.095823][ T7238] BTRFS info (device loop1): enabling ssd optimizations [ 161.147522][ T7238] BTRFS info (device loop1): turning on async discard [ 161.154374][ T7238] BTRFS info (device loop1): enabling free space tree [ 161.337508][ T5946] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.506274][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 161.567071][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 161.605344][ T5946] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 161.625947][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.641716][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.692174][ T5946] usb 1-1: config 0 descriptor?? [ 162.150561][ T5946] steelseries 0003:1038:12C2.000A: unknown main item tag 0x1 [ 162.197661][ T7263] loop6: detected capacity change from 0 to 32768 [ 162.273522][ T7263] JBD2: Ignoring recovery information on journal [ 162.361362][ T5913] usb 1-1: USB disconnect, device number 4 [ 162.432715][ T7263] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 162.600710][ T7332] loop4: detected capacity change from 0 to 128 [ 162.638797][ T7332] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.703432][ T7332] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.871300][ T6426] ocfs2: Unmounting device (7,6) on (node local) [ 162.904137][ T7341] loop3: detected capacity change from 0 to 512 [ 163.080014][ T7341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.118011][ T7341] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.230112][ T7350] loop1: detected capacity change from 0 to 2048 [ 163.351692][ T7350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.445817][ T7360] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.500751][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.581099][ T7363] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 164.106463][ T7376] loop6: detected capacity change from 0 to 1764 [ 164.653167][ T7402] loop4: detected capacity change from 0 to 512 [ 164.687493][ T847] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.697525][ T7402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.759759][ T7402] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.919637][ T847] usb 4-1: Using ep0 maxpacket: 8 [ 164.948160][ T847] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 164.979447][ T847] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 165.001755][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.003573][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.019886][ T847] usb 4-1: Product: syz [ 165.024056][ T847] usb 4-1: Manufacturer: syz [ 165.029224][ T847] usb 4-1: SerialNumber: syz [ 165.073118][ T847] usb 4-1: config 0 descriptor?? [ 165.091242][ T847] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 165.107538][ T847] usb 4-1: setting power ON [ 165.112115][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 165.135278][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.186556][ T847] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 165.228555][ T847] usb 4-1: media controller created [ 165.285638][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.312640][ T7421] mmap: syz.5.545 (7421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.329305][ T7391] dvb-usb: bulk message failed: -22 (4/0) [ 165.335071][ T7391] cxusb: i2c read failed [ 165.392184][ T847] usb 4-1: selecting invalid altsetting 6 [ 165.400489][ T847] usb 4-1: digital interface selection failed (-22) [ 165.407098][ T847] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 165.473979][ T847] usb 4-1: setting power OFF [ 165.497477][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 165.510458][ T847] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 165.551503][ T847] (NULL device *): no alternate interface [ 165.764430][ T847] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.845991][ T847] usb 4-1: USB disconnect, device number 6 [ 166.114482][ T7448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.249171][ T7451] loop6: detected capacity change from 0 to 128 [ 166.276973][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 166.319030][ T7451] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 166.411635][ T31] audit: type=1326 audit(1770495514.695:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2e9d9aeb9 code=0x0 [ 167.911252][ T7515] loop5: detected capacity change from 0 to 64 [ 168.055967][ T7474] loop4: detected capacity change from 0 to 32768 [ 168.066415][ T7515] hfs: keylen 56 too large [ 168.157636][ T7474] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.218034][ T7512] loop0: detected capacity change from 0 to 32768 [ 168.237870][ T7512] gfs2: Invalid block size shift [ 168.375191][ T7474] XFS (loop4): Ending clean mount [ 168.381806][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 168.431988][ T7474] XFS (loop4): Quotacheck needed: Please wait. [ 168.520917][ T7474] XFS (loop4): Quotacheck: Done. [ 168.558516][ T7540] loop3: detected capacity change from 0 to 64 [ 168.619087][ T7537] loop1: detected capacity change from 0 to 4096 [ 168.619566][ T7540] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 168.670207][ T7540] hfs: filesystem is marked locked, mounting read-only. [ 168.705987][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.932918][ T7544] loop5: detected capacity change from 0 to 4096 [ 168.973112][ T7548] capability: warning: `syz.0.602' uses 32-bit capabilities (legacy support in use) [ 169.070160][ T7549] loop6: detected capacity change from 0 to 2048 [ 169.307456][ T7557] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.349484][ T7555] loop1: detected capacity change from 0 to 2048 [ 169.412593][ T7544] ntfs3(loop5): failed to convert "0000" to iso8859-15 [ 169.443576][ T7555] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.512589][ T7557] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 169.525314][ T6013] udevd[6013]: incorrect nilfs2 checksum on /dev/loop1 [ 169.548304][ T7561] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.563262][ T7557] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 169.616636][ T7557] Remounting filesystem read-only [ 169.825025][ T7565] pvfs2: Unexpected value for 'acl' [ 169.837888][ T6426] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 170.164270][ T7578] usb usb9: usbfs: process 7578 (syz.3.616) did not claim interface 0 before use [ 170.453719][ T7582] loop4: detected capacity change from 0 to 4096 [ 170.495217][ T7586] loop6: detected capacity change from 0 to 2048 [ 170.500921][ T7582] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 170.535946][ T7586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.719360][ T7582] ntfs3(loop4): ino=19, mi_enum_attr [ 170.724708][ T7582] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 170.789331][ T7590] loop0: detected capacity change from 0 to 4096 [ 170.839329][ T7590] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 170.869767][ T7593] can0: slcan on ttyS3. [ 170.925786][ T7596] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 170.955350][ T7596] netlink: 'syz.3.624': attribute type 3 has an invalid length. [ 171.000606][ T7596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.624'. [ 171.023946][ T7590] ntfs3(loop0): ino=19, mi_enum_attr [ 171.033913][ T7590] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 171.043392][ T7592] can0 (unregistered): slcan off ttyS3. [ 171.161201][ T31] audit: type=1800 audit(1770495519.445:19): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.622" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 171.565341][ T7574] loop5: detected capacity change from 0 to 32768 [ 171.656046][ T7574] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.751324][ T31] audit: type=1326 audit(1770495520.035:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.6.631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f520399aeb9 code=0x0 [ 171.903863][ T7574] XFS (loop5): Ending clean mount [ 172.134342][ T5831] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.980606][ T7665] loop4: detected capacity change from 0 to 256 [ 173.009989][ T7665] exfat: Deprecated parameter 'namecase' [ 173.037664][ T7665] exfat: Deprecated parameter 'utf8' [ 173.108111][ T5913] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 173.150261][ T7665] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 173.318139][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 173.350159][ T5913] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 173.374026][ T5913] usb 6-1: config 2 has no interface number 0 [ 173.415956][ T5913] usb 6-1: config 2 interface 88 has no altsetting 0 [ 173.449261][ T5913] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 173.479048][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.487135][ T5913] usb 6-1: Product: syz [ 173.555639][ T5913] usb 6-1: Manufacturer: syz [ 173.570169][ T5913] usb 6-1: SerialNumber: syz [ 173.640023][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.6.656'. [ 173.711859][ T7692] loop1: detected capacity change from 0 to 512 [ 173.813737][ T7692] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 173.873928][ T7694] netlink: 'syz.4.658': attribute type 22 has an invalid length. [ 173.889023][ T7692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 173.931661][ T7694] netlink: 'syz.4.658': attribute type 22 has an invalid length. [ 173.943815][ T7692] System zones: 1-12 [ 173.970960][ T7698] loop3: detected capacity change from 0 to 256 [ 173.980436][ T7692] EXT4-fs (loop1): 1 truncate cleaned up [ 173.994221][ T7694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.658'. [ 174.006726][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.020969][ T7703] loop6: detected capacity change from 0 to 16 [ 174.045336][ T7698] exfat: Deprecated parameter 'utf8' [ 174.048077][ T7703] erofs (device loop6): mounted with root inode @ nid 36. [ 174.138297][ T7698] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 174.273718][ T5913] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 174.313623][ T5913] asix 6-1:2.88: probe with driver asix failed with error -71 [ 174.355508][ T5913] usb 6-1: USB disconnect, device number 4 [ 174.391529][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.724900][ T7678] loop0: detected capacity change from 0 to 32768 [ 174.937007][ T7678] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.103827][ T7678] XFS (loop0): Ending clean mount [ 175.171191][ T7678] XFS (loop0): Quotacheck needed: Please wait. [ 175.183952][ T7727] loop4: detected capacity change from 0 to 256 [ 175.307240][ T7678] XFS (loop0): Quotacheck: Done. [ 175.379572][ T7727] FAT-fs (loop4): Directory bread(block 64) failed [ 175.450417][ T7727] FAT-fs (loop4): Directory bread(block 65) failed [ 175.498657][ T7729] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.529485][ T7729] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.668: bg 0: block 63: padding at end of block bitmap is not set [ 175.613026][ T7727] FAT-fs (loop4): Directory bread(block 66) failed [ 175.659686][ T7729] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.668: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 175.706206][ T7727] FAT-fs (loop4): Directory bread(block 67) failed [ 175.777372][ T7727] FAT-fs (loop4): Directory bread(block 68) failed [ 175.784056][ T7727] FAT-fs (loop4): Directory bread(block 69) failed [ 175.834198][ T7729] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.668: ea_inode dec ref err=-117 [ 175.907720][ T7727] FAT-fs (loop4): Directory bread(block 70) failed [ 175.958147][ T7729] EXT4-fs (loop1): 1 orphan inode deleted [ 175.975530][ T7727] FAT-fs (loop4): Directory bread(block 71) failed [ 176.017656][ T7727] FAT-fs (loop4): Directory bread(block 72) failed [ 176.024235][ T7727] FAT-fs (loop4): Directory bread(block 73) failed [ 176.034222][ T7729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.421825][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 176.459920][ T5828] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.477187][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.727358][ T7709] set_capacity_and_notify: 1 callbacks suppressed [ 176.727382][ T7709] loop6: detected capacity change from 0 to 262144 [ 176.771987][ T7744] loop4: detected capacity change from 0 to 512 [ 176.779417][ T7744] EXT4-fs: Ignoring removed oldalloc option [ 176.786975][ T7709] F2FS-fs (loop6): invalid crc value [ 176.819483][ T7744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.901533][ T7709] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.913576][ T7709] F2FS-fs (loop6): checkpoint=disable on readonly fs [ 176.947904][ T7744] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 177.000460][ T7744] EXT4-fs (loop4): 1 truncate cleaned up [ 177.007529][ T7749] loop1: detected capacity change from 0 to 1024 [ 177.010374][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.015606][ T7749] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.207102][ T7749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.407206][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.166916][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.195200][ T7770] loop0: detected capacity change from 0 to 4096 [ 178.326340][ T7776] loop5: detected capacity change from 0 to 16 [ 178.333066][ T7770] NILFS (loop0): invalid segment: Checksum error in segment payload [ 178.333130][ T7770] NILFS (loop0): trying rollback from an earlier position [ 178.393979][ T7770] NILFS (loop0): recovery complete [ 178.437141][ T7780] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.446592][ T7776] erofs (device loop5): mounted with root inode @ nid 36. [ 179.454813][ T5946] IPVS: starting estimator thread 0... [ 179.550771][ T7818] IPVS: using max 28 ests per chain, 67200 per kthread [ 180.019620][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 180.407077][ T7849] loop5: detected capacity change from 0 to 128 [ 180.445082][ T7849] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.569270][ T7854] netlink: 'syz.0.720': attribute type 2 has an invalid length. [ 180.721041][ T7823] loop3: detected capacity change from 0 to 32768 [ 180.860098][ T7862] loop1: detected capacity change from 0 to 256 [ 181.017164][ T7862] FAT-fs (loop1): Directory bread(block 64) failed [ 181.059621][ T7862] FAT-fs (loop1): Directory bread(block 65) failed [ 181.066353][ T7862] FAT-fs (loop1): Directory bread(block 66) failed [ 181.097720][ T7862] FAT-fs (loop1): Directory bread(block 67) failed [ 181.137625][ T7862] FAT-fs (loop1): Directory bread(block 68) failed [ 181.144212][ T7862] FAT-fs (loop1): Directory bread(block 69) failed [ 181.168154][ T7862] FAT-fs (loop1): Directory bread(block 70) failed [ 181.174718][ T7862] FAT-fs (loop1): Directory bread(block 71) failed [ 181.263769][ T7862] FAT-fs (loop1): Directory bread(block 72) failed [ 181.304180][ T7862] FAT-fs (loop1): Directory bread(block 73) failed [ 181.330280][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 181.493121][ T7871] loop6: detected capacity change from 0 to 4096 [ 181.735041][ T7878] loop0: detected capacity change from 0 to 64 [ 181.774454][ T7846] loop4: detected capacity change from 0 to 40427 [ 181.833705][ T7846] F2FS-fs (loop4): invalid crc value [ 181.890662][ T7878] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 182.214193][ T7864] loop5: detected capacity change from 0 to 32768 [ 182.302458][ T7890] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.346202][ T7890] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 182.352956][ T7846] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.442585][ T7846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.602073][ T5830] syz-executor: attempt to access beyond end of device [ 182.602073][ T5830] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.682833][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 182.682872][ T5830] Tainted: [L]=SOFTLOCKUP [ 182.682881][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.682899][ T5830] Call Trace: [ 182.682913][ T5830] [ 182.682933][ T5830] dump_stack_lvl+0xe8/0x150 [ 182.682981][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 182.683024][ T5830] f2fs_write_end_io+0xc1d/0xfd0 [ 182.683081][ T5830] __submit_merged_bio+0x256/0x650 [ 182.683120][ T5830] __submit_merged_write_cond+0x269/0x530 [ 182.683158][ T5830] f2fs_write_data_pages+0x2806/0x3360 [ 182.683235][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.683271][ T5830] ? is_bpf_text_address+0x26/0x2b0 [ 182.683322][ T5830] ? arch_stack_walk+0xfb/0x150 [ 182.683392][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683422][ T5830] ? add_lock_to_list+0xc7/0x100 [ 182.683452][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683480][ T5830] ? __lock_acquire+0x146e/0x2cf0 [ 182.683552][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683579][ T5830] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.683617][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683651][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683679][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 182.683709][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.683743][ T5830] do_writepages+0x32e/0x550 [ 182.683784][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683823][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683856][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.683885][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 182.683921][ T5830] filemap_fdatawrite+0x1e9/0x2f0 [ 182.683963][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 182.684052][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.684084][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.684118][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 182.684155][ T5830] f2fs_sync_dirty_inodes+0x30e/0x810 [ 182.684212][ T5830] f2fs_write_checkpoint+0x9c6/0x2490 [ 182.684290][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 182.684323][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.684429][ T5830] kill_f2fs_super+0x308/0x710 [ 182.684475][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 182.684543][ T5830] deactivate_locked_super+0xbc/0x130 [ 182.684583][ T5830] cleanup_mnt+0x437/0x4d0 [ 182.684618][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.684652][ T5830] task_work_run+0x1d9/0x270 [ 182.684690][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 182.684722][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.684765][ T5830] exit_to_user_mode_loop+0xed/0x480 [ 182.684810][ T5830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.684839][ T5830] ? rcu_is_watching+0x15/0xb0 [ 182.684869][ T5830] do_syscall_64+0x2b7/0xf80 [ 182.684898][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.684922][ T5830] ? trace_irq_disable+0x37/0x100 [ 182.684955][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.684980][ T5830] RIP: 0033:0x7f79e039c117 [ 182.685010][ T5830] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 182.685033][ T5830] RSP: 002b:00007ffc52979ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.685061][ T5830] RAX: 0000000000000000 RBX: 00007f79e040471f RCX: 00007f79e039c117 [ 182.685078][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc52979f90 [ 182.685094][ T5830] RBP: 00007ffc52979f90 R08: 00007ffc5297af90 R09: 00000000ffffffff [ 182.685115][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5297b020 [ 182.685131][ T5830] R13: 00007f79e040471f R14: 000000000002c8f7 R15: 00007ffc5297b060 [ 182.685174][ T5830] [ 182.685184][ T5830] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 183.398374][ T7914] loop6: detected capacity change from 0 to 64 [ 183.426141][ T7916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.748'. [ 183.487527][ T31] audit: type=1800 audit(1770495531.745:21): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.750" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 183.767599][ T7928] sctp: [Deprecated]: syz.0.755 (pid 7928) Use of int in max_burst socket option. [ 183.767599][ T7928] Use struct sctp_assoc_value instead [ 183.977288][ T7934] loop6: detected capacity change from 0 to 256 [ 184.026304][ T7936] loop1: detected capacity change from 0 to 1024 [ 184.046783][ T7936] hfsplus: catalog searching failed [ 184.159792][ T7934] FAT-fs (loop6): Directory bread(block 64) failed [ 184.190092][ T7934] FAT-fs (loop6): Directory bread(block 65) failed [ 184.196753][ T7934] FAT-fs (loop6): Directory bread(block 66) failed [ 184.235683][ T7934] FAT-fs (loop6): Directory bread(block 67) failed [ 184.245883][ T7934] FAT-fs (loop6): Directory bread(block 68) failed [ 184.272088][ T7941] loop0: detected capacity change from 0 to 512 [ 184.283653][ T7934] FAT-fs (loop6): Directory bread(block 69) failed [ 184.301350][ T12] hfsplus: b-tree write err: -5, ino 4 [ 184.346305][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 184.361404][ T7934] FAT-fs (loop6): Directory bread(block 70) failed [ 184.373762][ T7934] FAT-fs (loop6): Directory bread(block 71) failed [ 184.388974][ T7941] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.404994][ T7934] FAT-fs (loop6): Directory bread(block 72) failed [ 184.447502][ T7934] FAT-fs (loop6): Directory bread(block 73) failed [ 184.579020][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.765'. [ 184.619358][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 184.635853][ T7950] loop4: detected capacity change from 0 to 4096 [ 184.666476][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 184.721466][ T7957] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.758135][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.883575][ T7950] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 184.943184][ T7950] Remounting filesystem read-only [ 184.964084][ T5837] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 184.987969][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.020076][ T5837] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.033842][ T5837] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.052005][ T5837] usb 2-1: Manufacturer: syz [ 185.081501][ T5837] usb 2-1: config 0 descriptor?? [ 185.137579][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 185.199700][ T5836] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.258441][ T5837] rc_core: IR keymap rc-hauppauge not found [ 185.267620][ T7968] loop5: detected capacity change from 0 to 2048 [ 185.274739][ T5837] Registered IR keymap rc-empty [ 185.309292][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 185.318433][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 185.333089][ T7968] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.346192][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.357157][ T7972] loop4: detected capacity change from 0 to 128 [ 185.378942][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 185.379915][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 185.398572][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 185.418603][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.452238][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.454802][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.487893][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.506459][ T24] usb 7-1: config 0 descriptor?? [ 185.552991][ T5836] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 185.607600][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.648846][ T5836] usb 1-1: config 0 descriptor?? [ 185.777257][ T7978] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 185.841854][ T7978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.899904][ T5913] usb 2-1: USB disconnect, device number 2 [ 185.980694][ T24] apple 0003:05AC:026C.000B: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.6-1/input0 [ 186.106114][ T5836] nzxt-kraken2 0003:1E71:170E.000C: unknown main item tag 0x0 [ 186.139149][ T5836] nzxt-kraken2 0003:1E71:170E.000C: unknown main item tag 0x0 [ 186.175772][ T5836] nzxt-kraken2 0003:1E71:170E.000C: unknown main item tag 0x0 [ 186.201478][ T7980] FAT-fs (loop5): Directory bread(block 64) failed [ 186.211367][ T5836] nzxt-kraken2 0003:1E71:170E.000C: unknown main item tag 0x0 [ 186.226315][ T847] usb 7-1: USB disconnect, device number 3 [ 186.259760][ T5836] nzxt-kraken2 0003:1E71:170E.000C: item fetching failed at offset 4/5 [ 186.279900][ T5836] nzxt-kraken2 0003:1E71:170E.000C: hid parse failed with -22 [ 186.287936][ T5836] nzxt-kraken2 0003:1E71:170E.000C: probe with driver nzxt-kraken2 failed with error -22 [ 186.307699][ T7980] FAT-fs (loop5): Directory bread(block 65) failed [ 186.328145][ T7980] FAT-fs (loop5): Directory bread(block 66) failed [ 186.335436][ T5836] usb 1-1: USB disconnect, device number 5 [ 186.417650][ T7980] FAT-fs (loop5): Directory bread(block 67) failed [ 186.494633][ T7965] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.507364][ T7980] FAT-fs (loop5): Directory bread(block 68) failed [ 186.537588][ T7980] FAT-fs (loop5): Directory bread(block 69) failed [ 186.548693][ T7981] fido_id[7981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 186.591935][ T7980] FAT-fs (loop5): Directory bread(block 70) failed [ 186.642274][ T7965] XFS (loop3): Ending clean mount [ 186.643530][ T7980] FAT-fs (loop5): Directory bread(block 71) failed [ 186.657301][ T7980] FAT-fs (loop5): Directory bread(block 72) failed [ 186.664930][ T7983] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.675658][ T7983] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.691444][ T7980] FAT-fs (loop5): Directory bread(block 73) failed [ 186.706979][ T7965] XFS (loop3): Quotacheck needed: Please wait. [ 186.726141][ T7983] gfs2: fsid=syz:syz.s: gfs2_dirent_offset: wrong block type 100663300 [ 186.734684][ T7983] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 3 2074, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 567 [ 186.749029][ T7983] gfs2: fsid=syz:syz.s: G: s:SH n:2/81a f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 186.758235][ T7983] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:7983 [syz.4.777] init_inodes+0xdb/0x320 [ 186.767786][ T7983] gfs2: fsid=syz:syz.s: I: n:3/2074 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 186.776176][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.4.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.776215][ T7983] Tainted: [L]=SOFTLOCKUP [ 186.776224][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.776239][ T7983] Call Trace: [ 186.776250][ T7983] [ 186.776260][ T7983] dump_stack_lvl+0xe8/0x150 [ 186.776298][ T7983] gfs2_withdraw+0xc3/0x1b0 [ 186.776336][ T7983] gfs2_dirent_scan+0x545/0x690 [ 186.776364][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776396][ T7983] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 186.776427][ T7983] gfs2_dirent_search+0x358/0x920 [ 186.776454][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776479][ T7983] ? sprintf+0xe7/0x140 [ 186.776511][ T7983] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 186.776537][ T7983] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 186.776573][ T7983] ? __pfx_sprintf+0x10/0x10 [ 186.776607][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776638][ T7983] gfs2_dir_check+0x4a/0x240 [ 186.776669][ T7983] init_journal+0x3c2/0x2260 [ 186.776710][ T7983] ? init_inodes+0xdb/0x320 [ 186.776734][ T7983] ? vsnprintf+0x38b/0xee0 [ 186.776767][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776794][ T7983] ? __pfx_init_journal+0x10/0x10 [ 186.776819][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776846][ T7983] ? vsnprintf+0xdf1/0xee0 [ 186.776892][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.776920][ T7983] ? snprintf+0xe8/0x140 [ 186.776955][ T7983] ? init_inodes+0xdb/0x320 [ 186.776981][ T7983] ? __pfx_snprintf+0x10/0x10 [ 186.777015][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777041][ T7983] ? gfs2_glock_nq_num+0x13d/0x170 [ 186.777074][ T7983] init_inodes+0xdb/0x320 [ 186.777103][ T7983] gfs2_fill_super+0x1a38/0x21d0 [ 186.777144][ T7983] ? __pfx_gfs2_fill_super+0x10/0x10 [ 186.777166][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777198][ T7983] ? init_locking+0xb8/0x210 [ 186.777220][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777246][ T7983] ? sb_set_blocksize+0x155/0x240 [ 186.777274][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777301][ T7983] ? setup_bdev_super+0x4c1/0x5b0 [ 186.777342][ T7983] get_tree_bdev_flags+0x431/0x4f0 [ 186.777381][ T7983] ? __pfx_gfs2_fill_super+0x10/0x10 [ 186.777413][ T7983] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 186.777447][ T7983] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 186.777481][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777518][ T7983] gfs2_get_tree+0x51/0x1e0 [ 186.777564][ T7983] vfs_get_tree+0x92/0x2a0 [ 186.777606][ T7983] do_new_mount+0x329/0xa50 [ 186.777632][ T7983] ? apparmor_capable+0x137/0x1a0 [ 186.777677][ T7983] ? __pfx_do_new_mount+0x10/0x10 [ 186.777703][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777730][ T7983] ? ns_capable+0x89/0xe0 [ 186.777755][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777800][ T7983] __se_sys_mount+0x31d/0x420 [ 186.777835][ T7983] ? __pfx___se_sys_mount+0x10/0x10 [ 186.777860][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777896][ T7983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.777923][ T7983] ? __x64_sys_mount+0x20/0xc0 [ 186.777953][ T7983] do_syscall_64+0xe2/0xf80 [ 186.777982][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.778005][ T7983] ? trace_irq_disable+0x37/0x100 [ 186.778036][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.778060][ T7983] RIP: 0033:0x7f79e039c14a [ 186.778084][ T7983] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.778103][ T7983] RSP: 002b:00007f79e11f1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.778134][ T7983] RAX: ffffffffffffffda RBX: 00007f79e11f1ee0 RCX: 00007f79e039c14a [ 186.778153][ T7983] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 00007f79e11f1ea0 [ 186.778170][ T7983] RBP: 00002000000001c0 R08: 00007f79e11f1ee0 R09: 0000000000208c1b [ 186.778187][ T7983] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 186.778203][ T7983] R13: 00007f79e11f1ea0 R14: 0000000000012790 R15: 0000200000000300 [ 186.778241][ T7983] [ 187.177046][ T7983] gfs2: fsid=syz:syz.s: can't read journal index: -5 [ 187.245463][ T7995] set_capacity_and_notify: 4 callbacks suppressed [ 187.245487][ T7995] loop1: detected capacity change from 0 to 1024 [ 187.612101][ T7965] XFS (loop3): Quotacheck: Done. [ 187.857335][ T5827] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.357524][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.546665][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 188.573065][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.573099][ T24] usb 2-1: Product: syz [ 188.573118][ T24] usb 2-1: Manufacturer: syz [ 188.573136][ T24] usb 2-1: SerialNumber: syz [ 188.613922][ T24] usb 2-1: config 0 descriptor?? [ 188.808425][ T8036] loop6: detected capacity change from 0 to 1024 [ 188.826387][ T8036] EXT4-fs: Ignoring removed orlov option [ 188.908907][ T8036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.979363][ T24] usb 2-1: USB disconnect, device number 3 [ 189.051448][ T8036] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.798: bit already cleared for inode 13 [ 189.114521][ T8036] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 189.219413][ T847] IPVS: starting estimator thread 0... [ 189.272490][ T6426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.327919][ T8053] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.445158][ T8025] loop4: detected capacity change from 0 to 32768 [ 189.457582][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.488035][ T8025] (syz.4.795,8025,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.504925][ T8025] (syz.4.795,8025,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.579091][ T8025] JBD2: Ignoring recovery information on journal [ 189.643243][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 189.654604][ T9] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 189.677584][ T9] usb 6-1: config 254 has no interface number 0 [ 189.683939][ T9] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 189.702519][ T9] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 189.730890][ T8025] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.748497][ T9] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 189.803287][ T9] usb 6-1: config 254 interface 235 has no altsetting 0 [ 189.814398][ T8065] loop6: detected capacity change from 0 to 128 [ 189.835219][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 189.875350][ T9] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 189.886097][ T9] usb 6-1: Product: syz [ 189.892081][ T9] usb 6-1: Manufacturer: syz [ 189.896820][ T9] usb 6-1: SerialNumber: syz [ 189.937883][ T8049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.171315][ T8049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.191976][ T9] usbtest 6-1:254.235: Linux gadget zero [ 190.225909][ T9] usbtest 6-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 190.247365][ T5830] ocfs2: Unmounting device (7,4) on (node local) [ 190.404313][ T9] usb 6-1: USB disconnect, device number 5 [ 190.781311][ T8095] sctp: [Deprecated]: syz.3.825 (pid 8095) Use of int in maxseg socket option. [ 190.781311][ T8095] Use struct sctp_assoc_value instead [ 191.140715][ T8115] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 191.327603][ T5837] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 191.362665][ T8121] delete_channel: no stack [ 191.372171][ T31] audit: type=1326 audit(1770495539.645:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.5.837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2da979aeb9 code=0x0 [ 191.399105][ T8120] delete_channel: no stack [ 191.512338][ T5837] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 191.521847][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.534066][ T8130] loop1: detected capacity change from 0 to 2048 [ 191.540692][ T5837] usb 1-1: Product: syz [ 191.546613][ T5837] usb 1-1: Manufacturer: syz [ 191.552849][ T8130] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.565334][ T5837] usb 1-1: SerialNumber: syz [ 191.582470][ T5837] usb 1-1: config 0 descriptor?? [ 191.593869][ T5835] Bluetooth: hci3: link tx timeout [ 191.605624][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.609545][ T8133] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.688564][ T979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.807010][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.831062][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.848327][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 191.862416][ T5851] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 191.862503][ T5851] Bluetooth: hci2: Malformed LE Event: 0x02 [ 191.879084][ T979] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 191.888734][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.896803][ T979] usb 4-1: Product: syz [ 191.906730][ T5837] usb-storage 1-1:0.0: USB Mass Storage device detected [ 191.914561][ T979] usb 4-1: Manufacturer: syz [ 191.919754][ T979] usb 4-1: SerialNumber: syz [ 191.969446][ T979] usb 4-1: config 0 descriptor?? [ 192.018939][ T979] gspca_main: se401-2.14.0 probing 047d:5003 [ 192.123127][ T5837] usb 1-1: USB disconnect, device number 6 [ 192.143880][ T8138] loop6: detected capacity change from 0 to 40427 [ 192.152326][ T8138] F2FS-fs: inline encryption not supported [ 192.159114][ T8138] F2FS-fs (loop6): build fault injection rate: 6 [ 192.165454][ T8138] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 192.176153][ T8138] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of get_checkpoint_version+0x3e/0x400 [ 192.187258][ T8138] F2FS-fs (loop6): invalid crc value [ 192.195134][ T8138] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of build_curseg+0x179b/0x2c70 [ 192.206670][ T8138] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x269/0x1f30 [ 192.225067][ T8138] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x756/0x1260 [ 192.238927][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 192.303089][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 192.378979][ T8138] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_iget+0x75c/0x5a00 [ 192.384503][ T979] gspca_se401: Wrong descriptor type [ 192.389008][ T8138] F2FS-fs (loop6): Failed to read root inode [ 192.589428][ T5837] usb 4-1: USB disconnect, device number 7 [ 192.668695][ T8147] loop1: detected capacity change from 0 to 8192 [ 192.689655][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 193.004570][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 193.066525][ T8165] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 193.081661][ T8159] loop4: detected capacity change from 0 to 4096 [ 193.180438][ T8166] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.559791][ T8175] loop4: detected capacity change from 0 to 1024 [ 193.687763][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 193.798985][ T62] hfsplus: b-tree write err: -5, ino 4 [ 193.837557][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.004216][ T8157] loop5: detected capacity change from 0 to 32768 [ 194.021209][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 194.030968][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.043269][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 194.052950][ T8157] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.053310][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.106084][ T9] usb 2-1: config 0 descriptor?? [ 194.210351][ T8157] XFS (loop5): Ending clean mount [ 194.288935][ T8157] XFS (loop5): Quotacheck needed: Please wait. [ 194.333977][ T8203] loop3: detected capacity change from 0 to 64 [ 194.392249][ T8157] XFS (loop5): Quotacheck: Done. [ 194.576346][ T8207] overlayfs: missing 'lowerdir' [ 194.594304][ T5831] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.627224][ T9] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.f4 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 194.835894][ T847] usb 2-1: USB disconnect, device number 4 [ 194.978528][ T8210] fido_id[8210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 195.450151][ T8231] loop6: detected capacity change from 0 to 256 [ 195.913059][ T8247] loop3: detected capacity change from 0 to 64 [ 196.046292][ T8247] syz.3.887: attempt to access beyond end of device [ 196.046292][ T8247] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 196.098053][ T8247] Buffer I/O error on dev loop3, logical block 512, async page read [ 196.123117][ T8247] syz.3.887: attempt to access beyond end of device [ 196.123117][ T8247] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 196.189526][ T8247] Buffer I/O error on dev loop3, logical block 56576, async page read [ 196.492071][ T8236] loop0: detected capacity change from 0 to 32768 [ 196.537030][ T8236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.881 (8236) [ 196.648407][ T8236] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.689187][ T8236] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 196.934274][ T8236] BTRFS info (device loop0): checking UUID tree [ 196.956060][ T8289] loop6: detected capacity change from 0 to 256 [ 196.968255][ T8236] BTRFS info (device loop0): setting nodatasum [ 196.976250][ T8236] BTRFS info (device loop0): setting nodatacow [ 196.982945][ T8236] BTRFS info (device loop0): turning on async discard [ 196.997349][ T8236] BTRFS info (device loop0): enabling free space tree [ 197.007476][ T8236] BTRFS info (device loop0): max_inline set to 23 [ 197.309644][ T5828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.581423][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 197.746473][ T5837] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.778200][ T5837] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.828630][ T8314] loop4: detected capacity change from 0 to 512 [ 197.848165][ T5837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.891106][ T8314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.897583][ T5837] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 197.935396][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.989693][ T5837] usb 6-1: config 0 descriptor?? [ 198.008306][ T8314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.132411][ T8314] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.396021][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.413611][ T5837] waltop 0003:172F:0500.000E: item fetching failed at offset 12/13 [ 198.441190][ T5837] waltop 0003:172F:0500.000E: probe with driver waltop failed with error -22 [ 198.594401][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 198.654250][ T5837] usb 6-1: USB disconnect, device number 6 [ 198.887604][ T847] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 199.057713][ T847] usb 2-1: Using ep0 maxpacket: 32 [ 199.065016][ T8353] loop0: detected capacity change from 0 to 16 [ 199.079490][ T847] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.097620][ T8353] erofs (device loop0): mounted with root inode @ nid 36. [ 199.099410][ T847] usb 2-1: config 0 has no interface number 0 [ 199.155067][ T847] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 199.165501][ T8353] erofs (device loop0): inconsistent algorithmtype 2 for nid 36 [ 199.176135][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.207620][ T8353] erofs (device loop0): inconsistent algorithmtype 2 for nid 36 [ 199.222804][ T847] usb 2-1: Product: syz [ 199.251538][ T8353] erofs (device loop0): read error -117 @ 43 of nid 36 [ 199.253971][ T847] usb 2-1: Manufacturer: syz [ 199.279849][ T847] usb 2-1: SerialNumber: syz [ 199.335579][ T847] usb 2-1: config 0 descriptor?? [ 199.360724][ T847] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 199.430624][ T8359] netlink: 104 bytes leftover after parsing attributes in process `syz.5.930'. [ 199.487541][ T5946] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.594192][ T847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 199.648239][ T847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 199.684941][ T5946] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 199.728130][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.728166][ T5946] usb 4-1: Product: syz [ 199.728185][ T5946] usb 4-1: Manufacturer: syz [ 199.728203][ T5946] usb 4-1: SerialNumber: syz [ 199.745576][ T5946] usb 4-1: config 0 descriptor?? [ 199.817327][ T5946] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 199.861693][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.913251][ T5946] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 199.956502][ T5946] usb 4-1: media controller created [ 199.987779][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 200.029991][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.037696][ T8357] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 200.051149][ T8357] dvb-usb: bulk message failed: -22 (7/0) [ 200.086011][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 200.086546][ T5837] usb 2-1: USB disconnect, device number 5 [ 200.124878][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'. [ 200.150434][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.176438][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.180872][ T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 200.192374][ T5837] quatech2 2-1:0.51: device disconnected [ 200.229630][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.268436][ T9] usb 7-1: Product: syz [ 200.272662][ T9] usb 7-1: Manufacturer: syz [ 200.319579][ T5946] DVB: Unable to find symbol mt352_attach() [ 200.320567][ T9] usb 7-1: SerialNumber: syz [ 200.359210][ T9] usb 7-1: config 0 descriptor?? [ 200.369844][ T31] audit: type=1326 audit(1770495548.655:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.386542][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 200.451343][ T31] audit: type=1326 audit(1770495548.655:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.498628][ T5946] DVB: Unable to find symbol nxt6000_attach() [ 200.504748][ T5946] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 200.524733][ T31] audit: type=1326 audit(1770495548.655:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.584390][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 200.601308][ T31] audit: type=1326 audit(1770495548.685:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.644390][ T5946] dvb-usb: schedule remote query interval to 1000 msecs. [ 200.657603][ T5946] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 200.679511][ T31] audit: type=1326 audit(1770495548.685:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.717567][ T5946] dvb-usb: bulk message failed: -22 (7/0) [ 200.740643][ T5946] dvb-usb: bulk message failed: -22 (7/0) [ 200.753352][ T5946] usb 4-1: USB disconnect, device number 8 [ 200.766333][ T31] audit: type=1326 audit(1770495548.685:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.792691][ T31] audit: type=1326 audit(1770495548.655:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.824503][ T31] audit: type=1326 audit(1770495548.705:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 200.982407][ T31] audit: type=1326 audit(1770495548.705:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 201.011050][ T9] usb 7-1: USB disconnect, device number 4 [ 201.036900][ T5946] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 201.050478][ T8405] loop0: detected capacity change from 0 to 512 [ 201.091345][ T8405] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.949: inode #13: comm syz.0.949: iget: illegal inode # [ 201.096763][ T31] audit: type=1326 audit(1770495548.705:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fd40499aeb9 code=0x7ffc0000 [ 201.179803][ T8404] loop1: detected capacity change from 0 to 4096 [ 201.206151][ T8405] EXT4-fs (loop0): Remounting filesystem read-only [ 201.249676][ T8405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.519485][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.015882][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.022499][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.377581][ T5913] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 202.770872][ T8454] loop4: detected capacity change from 0 to 32768 [ 202.778427][ T8454] xfs: Deprecated parameter 'ikeep' [ 202.783642][ T8454] XFS: ikeep mount option is deprecated. [ 202.792402][ T5913] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 42660, setting to 64 [ 202.806074][ T5913] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.836499][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 202.847815][ T8454] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.897701][ T5913] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 202.907144][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.920967][ T5913] usb 7-1: config 0 descriptor?? [ 202.926854][ T8441] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 203.010003][ T8454] XFS (loop4): Starting recovery (logdev: internal) [ 203.035380][ T8454] XFS (loop4): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 [ 203.046198][ T8454] XFS (loop4): Unmount and run xfs_repair [ 203.052004][ T8454] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 203.059467][ T8454] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 203.070333][ T8454] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 203.079251][ T8454] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 203.088229][ T8454] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 203.097122][ T8454] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 203.106346][ T8454] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 203.115446][ T8454] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 203.124390][ T8454] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 203.133868][ T8454] XFS (loop4): metadata I/O error in "xfs_read_agi+0x270/0x5a0" at daddr 0x2 len 1 error 74 [ 203.145367][ T8454] XFS (loop4): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 203.154712][ T8454] XFS (loop4): Failed to read root inode 0x1140, error 117 [ 203.162607][ T8454] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 203.398013][ T5913] hid-corsair-void 0003:1B1C:0A0F.000F: item fetching failed at offset 2/5 [ 203.449115][ T5913] hid-corsair-void 0003:1B1C:0A0F.000F: parse failed (reason: -22) [ 203.492518][ T5913] hid-corsair-void 0003:1B1C:0A0F.000F: probe with driver hid-corsair-void failed with error -22 [ 203.614951][ T5913] usb 7-1: USB disconnect, device number 5 [ 203.622057][ T8444] loop0: detected capacity change from 0 to 32768 [ 203.719679][ T8444] [ 203.719679][ T8444] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.719679][ T8444] [ 203.892052][ T8492] loop3: detected capacity change from 0 to 512 [ 204.013018][ T5828] [ 204.013018][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.013018][ T5828] [ 204.028021][ T8492] FAT-fs (loop3): error, invalid FAT chain (i_pos 51, last_block 64) [ 204.081130][ T5828] [ 204.081130][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.081130][ T5828] [ 204.153899][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 204.514682][ T8513] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 204.591121][ T8516] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 204.591393][ T8513] team0: Port device dummy0 added [ 204.680394][ T8516] team0: Port device dummy0 removed [ 204.742232][ T8516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.972041][ T8526] loop5: detected capacity change from 0 to 64 [ 205.576176][ T8543] loop5: detected capacity change from 0 to 1024 [ 205.607321][ T8546] loop6: detected capacity change from 0 to 128 [ 205.615262][ T8543] EXT4-fs: inline encryption not supported [ 205.621280][ T5946] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 205.690178][ T8543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.732498][ T8546] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.797526][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 205.804858][ T8546] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.836147][ T5946] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 205.857094][ T5946] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 205.881709][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 205.899772][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 205.939825][ T5946] usb 5-1: config 1 has no interface number 0 [ 205.943497][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 205.977836][ T5946] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.993720][ T8555] netlink: 'syz.0.1015': attribute type 15 has an invalid length. [ 206.012741][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.024665][ T5946] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.052471][ T6426] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.062419][ T5946] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 206.072535][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.153412][ T5946] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 206.366523][ T5946] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 206.432483][ T8565] loop6: detected capacity change from 0 to 4096 [ 206.767630][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 206.767669][ T31] audit: type=1804 audit(1770495555.045:36): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1019" name=2F6E6577726F6F742F3130372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop6" ino=33 res=1 errno=0 [ 206.829560][ T5836] usb 5-1: USB disconnect, device number 7 [ 206.871744][ T5836] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 207.125667][ T8587] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1030'. [ 207.166485][ T8589] loop0: detected capacity change from 0 to 512 [ 207.218566][ T8589] EXT4-fs: inline encryption not supported [ 207.224554][ T8589] EXT4-fs: Ignoring removed i_version option [ 207.346685][ T8589] EXT4-fs (loop0): 1 orphan inode deleted [ 207.429787][ T8589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.489833][ T8560] loop3: detected capacity change from 0 to 32768 [ 207.540509][ T8598] sctp: [Deprecated]: syz.6.1035 (pid 8598) Use of int in max_burst socket option. [ 207.540509][ T8598] Use struct sctp_assoc_value instead [ 207.624299][ T8560] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 207.699121][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.794593][ T8612] loop5: detected capacity change from 0 to 64 [ 207.902175][ T8560] XFS (loop3): Ending clean mount [ 207.943262][ T8560] XFS (loop3): Quotacheck needed: Please wait. [ 208.048223][ T8560] XFS (loop3): Quotacheck: Done. [ 208.232758][ T5827] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.264670][ T8627] loop4: detected capacity change from 0 to 512 [ 208.302094][ T8627] EXT4-fs: Ignoring removed orlov option [ 208.349871][ T8627] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.397901][ T5837] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 208.440583][ T8627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 208.471235][ T8629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.484902][ T8627] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1046: corrupted in-inode xattr: e_value size too large [ 208.567589][ T8627] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1046: couldn't read orphan inode 15 (err -117) [ 208.581519][ T8629] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.588566][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 208.609845][ T5837] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.631637][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.654318][ T5837] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.721740][ T5837] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.757708][ T5837] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 208.787729][ T5837] usb 7-1: Product: syz [ 208.798235][ T5837] usb 7-1: Manufacturer: syz [ 208.819936][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.834871][ T5837] hub 7-1:4.0: USB hub found [ 208.925226][ T8644] set_capacity_and_notify: 1 callbacks suppressed [ 208.925251][ T8644] loop3: detected capacity change from 0 to 512 [ 208.963375][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.000773][ T8644] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1047: corrupted in-inode xattr: e_value size too large [ 209.031674][ T8644] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1047: couldn't read orphan inode 15 (err -117) [ 209.047000][ T8644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.102893][ T5837] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 209.150783][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.346514][ T8656] loop5: detected capacity change from 0 to 1024 [ 209.460792][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 209.483237][ T5837] usb 7-1: USB disconnect, device number 6 [ 209.540626][ T31] audit: type=1800 audit(1770495557.815:37): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1057" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 209.757599][ T60] hfsplus: b-tree write err: -5, ino 4 [ 209.872832][ T31] audit: type=1400 audit(1770495558.155:38): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8669 comm="syz.5.1063" [ 209.899511][ T8666] loop3: detected capacity change from 0 to 4096 [ 209.906895][ T8671] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 209.929704][ T8671] romfs: block size(16384) > page size(4096) not supported by filesystem [ 209.958413][ T8671] VFS: Can't find a romfs filesystem on dev nullb0. [ 209.958413][ T8671] [ 209.987949][ T8672] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.333781][ T8682] loop0: detected capacity change from 0 to 256 [ 210.376031][ T8682] exfat: Deprecated parameter 'namecase' [ 210.414710][ T8682] exfat: Deprecated parameter 'namecase' [ 210.444057][ T8682] exfat: Deprecated parameter 'utf8' [ 210.471056][ T8684] hsr0: entered promiscuous mode [ 210.516730][ T8682] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 210.552477][ T8691] loop5: detected capacity change from 0 to 4096 [ 210.649745][ T8694] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.671916][ T8692] loop6: detected capacity change from 0 to 4096 [ 210.743867][ T8691] syz.5.1073 (8691) used greatest stack depth: 18176 bytes left [ 210.821197][ T8692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.942617][ T8698] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1074'. [ 211.014310][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 211.134912][ T6426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.152404][ T8705] syz.1.1078 (8705): /proc/8704/oom_adj is deprecated, please use /proc/8704/oom_score_adj instead. [ 211.597798][ T5946] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.777835][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 211.797894][ T5946] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 211.831920][ T5946] usb 1-1: config 0 has no interface number 0 [ 211.843297][ T5946] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 211.863173][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.884075][ T5946] usb 1-1: Product: syz [ 211.894233][ T5946] usb 1-1: Manufacturer: syz [ 211.904366][ T5946] usb 1-1: SerialNumber: syz [ 211.969715][ T5946] usb 1-1: config 0 descriptor?? [ 211.998918][ T5946] asix 1-1:0.188: probe with driver asix failed with error -22 [ 212.227013][ T9] usb 1-1: USB disconnect, device number 7 [ 212.277530][ T5913] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 212.450780][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.471550][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.527815][ T5913] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 212.536949][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.590478][ T5913] usb 2-1: config 0 descriptor?? [ 212.620130][ T8747] ------------[ cut here ]------------ [ 212.625906][ T8747] RTNL: assertion failed at net/core/dev.c (9542) [ 212.632423][ T8747] WARNING: net/core/dev.c:9542 at __dev_set_promiscuity+0x530/0x710, CPU#1: syz.3.1096/8747 [ 212.642615][ T8747] Modules linked in: [ 212.646839][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.3.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.657892][ T8747] Tainted: [L]=SOFTLOCKUP [ 212.662224][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.672407][ T8747] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 212.678542][ T8747] Code: 42 2f 02 e9 06 fc ff ff e8 81 c2 59 f8 e9 fc fb ff ff e8 77 c2 59 f8 48 8d 3d 40 fb 92 06 48 c7 c6 80 f1 ba 8c ba 46 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 55 c2 59 f8 48 8b 7c 24 08 48 c7 [ 212.698236][ T8747] RSP: 0018:ffffc90003117820 EFLAGS: 00010283 [ 212.704323][ T8747] RAX: ffffffff896ab7a9 RBX: ffff888054684000 RCX: 0000000000080000 [ 212.712373][ T8747] RDX: 0000000000002546 RSI: ffffffff8cbaf180 RDI: ffffffff8ffdb2f0 [ 212.720418][ T8747] RBP: 0000000000000000 R08: ffffffff8f9ac667 R09: 1ffffffff1f358cc [ 212.728504][ T8747] R10: dffffc0000000000 R11: fffffbfff1f358cd R12: 00000000ffffffff [ 212.736502][ T8747] R13: 0000000000000000 R14: ffff8880546840b0 R15: 1ffff1100a8d0816 [ 212.744581][ T8747] FS: 00007fb5093f66c0(0000) GS:ffff8881257f3000(0000) knlGS:0000000000000000 [ 212.753581][ T8747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.760255][ T8747] CR2: 000000110c2c635b CR3: 0000000020bc0000 CR4: 0000000000350ef0 [ 212.768298][ T8747] Call Trace: [ 212.771600][ T8747] [ 212.774542][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.780255][ T8747] ? __hw_addr_add_ex+0x361/0x650 [ 212.785320][ T8747] __dev_set_rx_mode+0x17c/0x260 [ 212.790322][ T8747] dev_mc_add+0xc8/0x120 [ 212.794595][ T8747] igmp6_group_added+0x234/0x820 [ 212.799596][ T8747] ? __pfx_igmp6_group_added+0x10/0x10 [ 212.805085][ T8747] __ipv6_dev_mc_inc+0x897/0xa50 [ 212.810109][ T8747] __ipv6_sock_mc_join+0x503/0x750 [ 212.815242][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.820965][ T8747] ? _copy_from_user+0x94/0xb0 [ 212.825754][ T8747] do_ipv6_setsockopt+0x22eb/0x31c0 [ 212.831063][ T8747] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 212.836631][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.842356][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.848053][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.853702][ T8747] ? futex_wait+0x29a/0x380 [ 212.858278][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.864022][ T8747] ? __lock_acquire+0x6b5/0x2cf0 [ 212.869034][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.874864][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.880580][ T8747] ? aa_sk_perm+0x15a/0x960 [ 212.885106][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.890812][ T8747] ? aa_sk_perm+0x82d/0x960 [ 212.895346][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.901056][ T8747] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.905920][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.911626][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.917280][ T8747] ? aa_sock_opt_perm+0xff/0x1a0 [ 212.922300][ T8747] ipv6_setsockopt+0x59/0x170 [ 212.927001][ T8747] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.932987][ T8747] do_sock_setsockopt+0x17c/0x1b0 [ 212.938071][ T8747] __x64_sys_setsockopt+0x13d/0x1b0 [ 212.943313][ T8747] do_syscall_64+0xe2/0xf80 [ 212.947886][ T8747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.953973][ T8747] ? trace_irq_disable+0x37/0x100 [ 212.959062][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.964966][ T8747] RIP: 0033:0x7fb50b19aeb9 [ 212.967321][ T8756] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1100'. [ 212.969417][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.969482][ T8747] RSP: 002b:00007fb5093f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.969514][ T8747] RAX: ffffffffffffffda RBX: 00007fb50b415fa0 RCX: 00007fb50b19aeb9 [ 212.969535][ T8747] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 212.969552][ T8747] RBP: 00007fb50b208c1f R08: 0000000000000120 R09: 0000000000000000 [ 212.969595][ T8747] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 212.969614][ T8747] R13: 00007fb50b416038 R14: 00007fb50b415fa0 R15: 00007fffe82fa458 [ 212.969654][ T8747] [ 212.969669][ T8747] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.969692][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.3.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.969726][ T8747] Tainted: [L]=SOFTLOCKUP [ 212.969736][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.969753][ T8747] Call Trace: [ 212.969764][ T8747] [ 212.969775][ T8747] vpanic+0x1e0/0x670 [ 212.969816][ T8747] panic+0xc5/0xd0 [ 212.969854][ T8747] ? __pfx_panic+0x10/0x10 [ 212.969907][ T8747] __warn+0x315/0x4a0 [ 212.969937][ T8747] ? __dev_set_promiscuity+0x530/0x710 [ 212.969975][ T8747] ? __dev_set_promiscuity+0x530/0x710 [ 212.970011][ T8747] __report_bug+0x29a/0x540 [ 212.970039][ T8747] ? __ipv6_dev_mc_inc+0x897/0xa50 [ 212.970067][ T8747] ? __ipv6_sock_mc_join+0x503/0x750 [ 212.970090][ T8747] ? do_ipv6_setsockopt+0x22eb/0x31c0 [ 212.970130][ T8747] ? __dev_set_promiscuity+0x530/0x710 [ 212.970166][ T8747] ? __pfx___report_bug+0x10/0x10 [ 212.970217][ T8747] report_bug_entry+0x19a/0x290 [ 212.970245][ T8747] ? __dev_set_promiscuity+0x53c/0x710 [ 212.970277][ T8747] ? __dev_set_promiscuity+0x541/0x710 [ 212.970310][ T8747] handle_bug+0xca/0x200 [ 212.970344][ T8747] exc_invalid_op+0x1a/0x50 [ 212.970378][ T8747] asm_exc_invalid_op+0x1a/0x20 [ 212.970402][ T8747] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 212.970437][ T8747] Code: 42 2f 02 e9 06 fc ff ff e8 81 c2 59 f8 e9 fc fb ff ff e8 77 c2 59 f8 48 8d 3d 40 fb 92 06 48 c7 c6 80 f1 ba 8c ba 46 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 55 c2 59 f8 48 8b 7c 24 08 48 c7 [ 212.970459][ T8747] RSP: 0018:ffffc90003117820 EFLAGS: 00010283 [ 212.970482][ T8747] RAX: ffffffff896ab7a9 RBX: ffff888054684000 RCX: 0000000000080000 [ 212.970502][ T8747] RDX: 0000000000002546 RSI: ffffffff8cbaf180 RDI: ffffffff8ffdb2f0 [ 212.970521][ T8747] RBP: 0000000000000000 R08: ffffffff8f9ac667 R09: 1ffffffff1f358cc [ 212.970540][ T8747] R10: dffffc0000000000 R11: fffffbfff1f358cd R12: 00000000ffffffff [ 212.970575][ T8747] R13: 0000000000000000 R14: ffff8880546840b0 R15: 1ffff1100a8d0816 [ 212.970603][ T8747] ? __dev_set_promiscuity+0x529/0x710 [ 212.970648][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.970678][ T8747] ? __hw_addr_add_ex+0x361/0x650 [ 212.970720][ T8747] __dev_set_rx_mode+0x17c/0x260 [ 212.970758][ T8747] dev_mc_add+0xc8/0x120 [ 212.970799][ T8747] igmp6_group_added+0x234/0x820 [ 212.970839][ T8747] ? __pfx_igmp6_group_added+0x10/0x10 [ 212.970885][ T8747] __ipv6_dev_mc_inc+0x897/0xa50 [ 212.970927][ T8747] __ipv6_sock_mc_join+0x503/0x750 [ 212.970960][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.970989][ T8747] ? _copy_from_user+0x94/0xb0 [ 212.971020][ T8747] do_ipv6_setsockopt+0x22eb/0x31c0 [ 212.971066][ T8747] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 212.971098][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971132][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971167][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971196][ T8747] ? futex_wait+0x29a/0x380 [ 212.971230][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971260][ T8747] ? __lock_acquire+0x6b5/0x2cf0 [ 212.971304][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971339][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971373][ T8747] ? aa_sk_perm+0x15a/0x960 [ 212.971406][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971436][ T8747] ? aa_sk_perm+0x82d/0x960 [ 212.971468][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971504][ T8747] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.971534][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971567][ T8747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.971596][ T8747] ? aa_sock_opt_perm+0xff/0x1a0 [ 212.971633][ T8747] ipv6_setsockopt+0x59/0x170 [ 212.971667][ T8747] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.971699][ T8747] do_sock_setsockopt+0x17c/0x1b0 [ 212.971740][ T8747] __x64_sys_setsockopt+0x13d/0x1b0 [ 212.971782][ T8747] do_syscall_64+0xe2/0xf80 [ 212.971811][ T8747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.971842][ T8747] ? trace_irq_disable+0x37/0x100 [ 212.971875][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.971900][ T8747] RIP: 0033:0x7fb50b19aeb9 [ 212.971923][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.971944][ T8747] RSP: 002b:00007fb5093f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.971974][ T8747] RAX: ffffffffffffffda RBX: 00007fb50b415fa0 RCX: 00007fb50b19aeb9 [ 212.971994][ T8747] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 212.972010][ T8747] RBP: 00007fb50b208c1f R08: 0000000000000120 R09: 0000000000000000 [ 212.972028][ T8747] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 212.972045][ T8747] R13: 00007fb50b416038 R14: 00007fb50b415fa0 R15: 00007fffe82fa458 [ 212.972085][ T8747] [ 212.979190][ T8747] Kernel Offset: disabled