last executing test programs: 17.451739181s ago: executing program 2 (id=795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x7a3101, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='erofs\x00', 0x401, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 13.710983252s ago: executing program 2 (id=811): fsopen(0x0, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000400)={0x690, 0x4b0, 0x1e0, 0x10, 0x9, 0x9, 0x4, 0x2, {0x4, 0x7, 0x1}, {0x8, 0x4, 0x1}, {0xd, 0x3}, {0x3, 0x3, 0x1}, 0x1, 0x40, 0x8000, 0x6, 0x1, 0x7, 0x10, 0x0, 0x1, 0x7c14, 0x1, 0x40, 0x0, 0x4, 0x0, 0x8}) clock_nanosleep(0x5, 0x1, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027150c18955042", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030067656e6576653000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 11.538553239s ago: executing program 3 (id=815): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{@time_offset}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@gid}, {@namecase}, {@errors_remount}, {@discard}], [{@flag='async'}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) 10.669765759s ago: executing program 2 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00', 0x20}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x80078b, &(0x7f0000000200)={[{@nodioread_nolock}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nobh}, {@quota}, {@init_itable}, {@user_xattr}, {@nojournal_checksum}, {@errors_remount}, {@nombcache}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x3) 9.780851518s ago: executing program 1 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0xff0f000020008000) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x25, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x5000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) getgroups(0x0, &(0x7f00000001c0)) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x1) sched_setaffinity(0x0, 0x0, 0x0) 8.741799341s ago: executing program 1 (id=822): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000180)) 8.410765548s ago: executing program 3 (id=825): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000200)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x30) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000034) close(r6) 8.199210932s ago: executing program 1 (id=826): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000200)=@tcp, 0x2}, 0x20) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xff000000, 0x0, 0x100000}) 6.92174681s ago: executing program 1 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0xfff, "6e61c204ba0a3c81ba43c3dceb1aed757e2ced73b52e6a695d3861cebbf9baf1", 0x2, 0x100, 0x6, 0x4, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB], 0x10) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) 6.833168222s ago: executing program 3 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 6.062776219s ago: executing program 3 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0xffe0}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5.963401571s ago: executing program 3 (id=835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x7a3101, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='erofs\x00', 0x401, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf252100000009001f007068793000000000050020000000000031a32fffac70e4f47e954ffcd785b527d698c8a7d57c336157a3b7f4e6f74824baac42ba62eccf84bddebe29bea81321c57fa506e250c5ce4fa915aaaec886ca03965a77bf1952b97fe3b73eef4f779b4c1eaa099f7180945651c9bddbeec44bb3247e555d7add73a7c690d6c2d6744aa4767f4ddf77d9d4e82c5a55cd5e389cbbeaca9e357dc0d13c3c6c5ac3b5a2e43ecde84f9fdf24b71bdd78ac5ccf1bb926736c461f213f5c657f4fd793c8b8703cdc7d2d38f4d91817ea3ba8e69319ed92c00c0b5e5a65022992ee45d93e8dadc686c117fc042b39810d6c3bf588427b1e604b27186d088b7b24e93612983fa4333ba5de8a805d72588d882edec1f2877ea76dcf77c16f9196b67cc1fd49245abecf8ce542dedcbc8f3fd576a9a3f215c8dc3b88c8ba1574a665e72d717225e4615b01086f54a2f4124858a60000aab8437badee0967a311bbd2291369ded770173d00b4be86853b20e73e65b0f22c1640b61cdb7c24124fb86bc5ada60f68e86cc72e9291bc017ef05423072ab60efa5aa28e02a0b68ede7b0831269fb430df9760e8f0e2637493b1f7d3cd7282639c8919a08280"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 5.007134991s ago: executing program 2 (id=839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 4.649257849s ago: executing program 0 (id=841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3f8, 0x1, 0x32, 0x10, 0x47}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x3, 0x5, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0xb0, 0x2, 0x4, 0x40, 0x845, {}, {0x2, 0x8, 0xea, 0xcf, 0x4, 0x5, "b653caa4"}, 0x2, 0x3, {&(0x7f0000000440)=[{0x61f0, 0x1200, {0x8}, 0xff}, {0x9, 0x0, {0x8}, 0xffffffff}]}, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x10}}, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc020) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.67169676s ago: executing program 0 (id=842): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000200)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000034) close(r4) 3.634862211s ago: executing program 4 (id=843): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000003780)={0x18, 0x0, {0x3, @empty, 'wg2\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x1, 0x2, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x10}}, {{0x0, 0x0, &(0x7f0000000f80)}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)='l;', 0x2}], 0x1}}], 0x3, 0x4000091) 3.198398841s ago: executing program 0 (id=844): fsopen(0x0, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000400)={0x690, 0x4b0, 0x1e0, 0x10, 0x9, 0x9, 0x4, 0x2, {0x4, 0x7, 0x1}, {0x8, 0x4, 0x1}, {0xd, 0x3}, {0x3, 0x3, 0x1}, 0x1, 0x40, 0x8000, 0x6, 0x1, 0x7, 0x10, 0x0, 0x1, 0x7c14, 0x1, 0x40, 0x0, 0x4, 0x0, 0x8}) clock_nanosleep(0x5, 0x1, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027150c18955042", @ANYBLOB="20100000000004001400030067656e657665300000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.020243094s ago: executing program 1 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0xffe0}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.256274231s ago: executing program 1 (id=846): syz_usb_connect(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120150027ad07c4024042c01d72e0102030109022400010381909809045c01025b4e190e090503023004"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 2.207599392s ago: executing program 0 (id=847): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000ac8020000090a0200000000000000000003000003000209800800014000000530500002804c0001800800014000000000080001400000000c08000140000000100800014000000007080001400000059f08000140ffffffff08000140000000070800014000000008080001400000000d8c01"], 0x478}, 0x1, 0x0, 0x0, 0x40}, 0x8005) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e00fc4020"], 0x7) 2.133980074s ago: executing program 3 (id=848): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@heartbeat_none}, {@coherency_full}, {@data_writeback}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}, {@err_cont}, {@coherency_buffered}]}, 0x5, 0x4443, &(0x7f0000004480)="$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") 2.115187374s ago: executing program 2 (id=849): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{@time_offset}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@gid}, {@namecase}, {@errors_remount}, {@discard}], [{@flag='async'}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.86489899s ago: executing program 0 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00', 0x20}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x80078b, &(0x7f0000000200)={[{@nodioread_nolock}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nobh}, {@quota}, {@init_itable}, {@user_xattr}, {@nojournal_checksum}, {@errors_remount}, {@nombcache}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x3) 1.84396906s ago: executing program 4 (id=851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x30}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 1.564075466s ago: executing program 2 (id=852): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0xacab87cbc9617a27, 0x2e, {0x2e, 0x1b, "b6758fae5cd33b73a41777ec12a76d1e03fa35a9f79679e7ba51aa3b797a849dbe6ff41af92f530e708a6715"}}, 0x0}, 0x0) 1.551291346s ago: executing program 4 (id=853): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x880c, &(0x7f0000000100)=ANY=[], 0xf, 0xb9, &(0x7f0000000640)="$eJzs1zFKxEAYBeCXKJJWBBsLaxvv4FHEUhuxUgRvIF7EygN4A4+Q3sIirYUjySi7y5YLWRa+r5jhzWPgb/+P79eTl7OkPCXlLbefZeHu/uH68qaeqY6GUrLkvQm7rE32x7tLcno45Xxd1K6pffrh8aof9tY/HzzPPS4AALCBNuer+af8PYwbwbgFTuH4v+9mng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg234DAAD//3rfKMs=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x5c) 487.30894ms ago: executing program 4 (id=854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 486.123989ms ago: executing program 0 (id=855): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000200)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000034) close(r4) 154.710736ms ago: executing program 4 (id=856): r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x40380) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 0s ago: executing program 4 (id=857): fsopen(0x0, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000400)={0x690, 0x4b0, 0x1e0, 0x10, 0x9, 0x9, 0x4, 0x2, {0x4, 0x7, 0x1}, {0x8, 0x4, 0x1}, {0xd, 0x3}, {0x3, 0x3, 0x1}, 0x1, 0x40, 0x8000, 0x6, 0x1, 0x7, 0x10, 0x0, 0x1, 0x7c14, 0x1, 0x40, 0x0, 0x4, 0x0, 0x8}) clock_nanosleep(0x5, 0x1, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027150c18955042", @ANYBLOB="20100000000004001400030067656e657665300000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) kernel console output (not intermixed with test programs): 17] BTRFS info (device loop3): using free space tree [ 121.393649][ T4720] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 121.509617][ T4717] BTRFS error (device loop3): failed to load root extent [ 121.516960][ T4717] BTRFS warning (device loop3): try to load backup roots slot 1 [ 121.558937][ T4720] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 121.678798][ T4717] BTRFS warning (device loop3): couldn't read tree root [ 121.685880][ T4717] BTRFS warning (device loop3): try to load backup roots slot 2 [ 121.694112][ T4717] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 121.705908][ T4717] BTRFS warning (device loop3): couldn't read tree root [ 121.713011][ T4717] BTRFS warning (device loop3): try to load backup roots slot 3 [ 121.769382][ T4717] BTRFS info (device loop3): enabling ssd optimizations [ 121.777605][ T4717] BTRFS info (device loop3): rebuilding free space tree [ 121.790383][ T4717] BTRFS info (device loop3): checking UUID tree [ 122.333627][ T4740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.91'. [ 122.379322][ T4318] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.603903][ T4744] loop2: detected capacity change from 0 to 1024 [ 122.611115][ T4318] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.637457][ T4744] EXT4-fs: Ignoring removed bh option [ 123.709574][ T4282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.767336][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.393729][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 125.470940][ T4383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4383) [ 125.483965][ T4752] fido_id[4752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.021106][ T4784] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.068690][ T4791] loop2: detected capacity change from 0 to 16 [ 127.183957][ T4791] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.260549][ T4759] loop0: detected capacity change from 0 to 40427 [ 127.450286][ T4759] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 127.476999][ T4759] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.541201][ T4759] F2FS-fs (loop0): invalid crc value [ 127.615046][ T4795] loop4: detected capacity change from 0 to 32768 [ 127.666608][ T4759] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 129.246256][ T4801] netlink: 68 bytes leftover after parsing attributes in process `syz.2.106'. [ 129.749815][ T4795] XFS (loop4): Mounting V5 Filesystem [ 129.809144][ T4795] XFS (loop4): Ending clean mount [ 130.017798][ T4759] F2FS-fs (loop0): Start checkpoint disabled! [ 130.421381][ T4820] loop1: detected capacity change from 0 to 4096 [ 130.575979][ T4283] XFS (loop4): Unmounting Filesystem [ 130.697761][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 130.719312][ T4825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.206637][ T4830] loop0: detected capacity change from 0 to 256 [ 131.237520][ T4830] exfat: Deprecated parameter 'utf8' [ 131.287016][ T4830] exFAT-fs (loop0): bogus number of FAT structure [ 131.307198][ T4830] exFAT-fs (loop0): failed to read boot sector [ 131.313747][ T4830] exFAT-fs (loop0): failed to recognize exfat type [ 131.794579][ T4838] loop1: detected capacity change from 0 to 2048 [ 132.900287][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906997][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979004][ T4838] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.042165][ T4838] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.053416][ T4838] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 133.061329][ T4838] UDF-fs: Scanning with blocksize 512 failed [ 133.087755][ T4838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.997502][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 134.181456][ T4458] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.251557][ T22] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.439118][ T4841] loop3: detected capacity change from 0 to 1024 [ 134.601104][ T4841] EXT4-fs: Ignoring removed bh option [ 134.873618][ T4841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.469688][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 135.653388][ T4856] loop4: detected capacity change from 0 to 512 [ 135.688310][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 135.712833][ T4851] fido_id[4851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.716581][ T4856] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 135.793865][ T4856] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.122: corrupted in-inode xattr [ 135.858262][ T4856] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.122: couldn't read orphan inode 15 (err -117) [ 135.871583][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.966329][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 136.022722][ T4854] Zero length message leads to an empty skb [ 136.057936][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 136.203517][ T4868] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 137.436937][ T4877] netlink: 68 bytes leftover after parsing attributes in process `syz.4.129'. [ 139.964690][ T4897] loop2: detected capacity change from 0 to 256 [ 139.995028][ T4897] exfat: Deprecated parameter 'utf8' [ 140.001647][ T4897] exFAT-fs (loop2): bogus number of FAT structure [ 140.022352][ T4897] exFAT-fs (loop2): failed to read boot sector [ 140.042695][ T4897] exFAT-fs (loop2): failed to recognize exfat type [ 140.097035][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 141.174698][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 141.448737][ T4909] loop4: detected capacity change from 0 to 32768 [ 141.462698][ T4909] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 141.477914][ T4920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.864210][ T4924] loop1: detected capacity change from 0 to 256 [ 142.633952][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 143.280105][ T4932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.146'. [ 143.356867][ T4383] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 144.223817][ T4948] loop1: detected capacity change from 0 to 64 [ 144.250575][ T4948] hfs: invalid btree extent records [ 144.280848][ T4948] hfs: unable to open extent tree [ 144.286015][ T4948] hfs: can't find a HFS filesystem on dev loop1 [ 144.421710][ T4458] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.354273][ T4956] loop4: detected capacity change from 0 to 4096 [ 145.604273][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 145.634497][ T4968] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.504390][ T4985] netlink: 68 bytes leftover after parsing attributes in process `syz.4.166'. [ 147.788938][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 148.243987][ T5004] loop0: detected capacity change from 0 to 256 [ 150.393558][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 150.622075][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 152.746373][ T5053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.192'. [ 153.165343][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 153.246856][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.456293][ T4320] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 153.670892][ T4320] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 153.741000][ T4320] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 153.768460][ T4320] usb 4-1: config 220 has no interface number 2 [ 153.788360][ T4320] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 153.810482][ T4320] usb 4-1: config 220 interface 0 has no altsetting 0 [ 153.819169][ T4320] usb 4-1: config 220 interface 76 has no altsetting 0 [ 153.826273][ T4320] usb 4-1: config 220 interface 1 has no altsetting 0 [ 153.846068][ T4320] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 153.876104][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.903413][ T4320] usb 4-1: Product: syz [ 153.909229][ T4320] usb 4-1: Manufacturer: syz [ 153.913899][ T4320] usb 4-1: SerialNumber: syz [ 153.951259][ T5071] comedi comedi1: comedi_test: 256 microvolt, 100000 microsecond waveform attached [ 154.184321][ T4320] usb 4-1: selecting invalid altsetting 0 [ 154.202322][ T4320] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 154.223385][ T4320] usb 4-1: No valid video chain found. [ 154.233692][ T5075] loop2: detected capacity change from 0 to 128 [ 154.288123][ T5075] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.289042][ T4320] usb 4-1: selecting invalid altsetting 0 [ 154.329114][ T4320] usbtest: probe of 4-1:220.1 failed with error -22 [ 154.361702][ T4320] usb 4-1: USB disconnect, device number 2 [ 154.413031][ T5075] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.605225][ T5077] loop1: detected capacity change from 0 to 8192 [ 156.201720][ T4320] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.209677][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 156.242307][ T4320] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.254640][ T5093] loop3: detected capacity change from 0 to 1024 [ 156.292585][ T5093] EXT4-fs: Ignoring removed bh option [ 156.487959][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.821627][ T5118] loop1: detected capacity change from 0 to 512 [ 158.828885][ T5118] EXT4-fs: Ignoring removed nobh option [ 159.504505][ T5118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.512253][ T5118] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.216: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 159.534322][ T5118] EXT4-fs (loop1): Remounting filesystem read-only [ 159.540998][ T5118] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.216: ea_inode dec ref err=-117 [ 159.553923][ T5118] EXT4-fs (loop1): 1 orphan inode deleted [ 159.559728][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.634641][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 159.837999][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 160.768923][ T5137] loop2: detected capacity change from 0 to 16 [ 160.821311][ T5137] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 160.909214][ T4383] udevd[4383]: incorrect erofs checksum on /dev/loop2 [ 160.957158][ T5137] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x84daf7b1, 0xa48ae4e5 expected [ 161.116626][ T5143] loop0: detected capacity change from 0 to 764 [ 162.133981][ T4485] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 162.156449][ T5153] loop4: detected capacity change from 0 to 1024 [ 162.185721][ T4485] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.218331][ T5153] EXT4-fs: Ignoring removed bh option [ 162.386024][ T5153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.881982][ T5166] loop2: detected capacity change from 0 to 512 [ 162.893721][ T5166] EXT4-fs: Ignoring removed nobh option [ 163.469374][ T5166] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.483512][ T5166] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.233: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 163.502789][ T5166] EXT4-fs (loop2): Remounting filesystem read-only [ 163.509550][ T5166] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.233: ea_inode dec ref err=-117 [ 163.524871][ T5166] EXT4-fs (loop2): 1 orphan inode deleted [ 163.530941][ T5166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.694114][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 163.829291][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 164.104347][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 164.166677][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 164.176346][ T5178] netlink: 'syz.0.238': attribute type 12 has an invalid length. [ 164.970908][ T5170] fido_id[5170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.012588][ T5176] loop2: detected capacity change from 0 to 4096 [ 165.406258][ T5189] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.948461][ T5201] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 167.884277][ T4772] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 167.928256][ T4772] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.944534][ T5204] loop2: detected capacity change from 0 to 1024 [ 167.977672][ T5204] EXT4-fs: Ignoring removed bh option [ 168.047964][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.143638][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'. [ 168.663254][ T5209] fido_id[5209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.794996][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 168.814014][ T5221] loop0: detected capacity change from 0 to 1024 [ 169.332938][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 169.606309][ T5240] loop1: detected capacity change from 0 to 256 [ 169.629226][ T5240] exfat: Deprecated parameter 'utf8' [ 169.669824][ T5240] exFAT-fs (loop1): bogus number of FAT structure [ 169.676324][ T5240] exFAT-fs (loop1): failed to read boot sector [ 169.707146][ T5240] exFAT-fs (loop1): failed to recognize exfat type [ 169.726830][ T4772] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.037408][ T4772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.053244][ T4772] usb 1-1: config 3 has an invalid interface number: 92 but max is 0 [ 170.137122][ T4772] usb 1-1: config 3 has no interface number 0 [ 170.276899][ T4772] usb 1-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 170.568303][ T4772] usb 1-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 170.636906][ T4772] usb 1-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.694324][ T5248] loop2: detected capacity change from 0 to 1024 [ 170.705774][ T4772] usb 1-1: config 3 interface 92 has no altsetting 0 [ 170.736711][ T4773] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 170.767050][ T4772] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 170.777880][ T5248] EXT4-fs: Ignoring removed bh option [ 170.793412][ T4773] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.816573][ T4772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.863399][ T4772] usb 1-1: Product: syz [ 170.875105][ T4772] usb 1-1: Manufacturer: syz [ 170.881458][ T4772] usb 1-1: SerialNumber: syz [ 170.888437][ T5248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.909609][ T5234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.406448][ T4772] usb 1-1: probing VID:PID(0424:012C) [ 171.422123][ T4772] usb 1-1: vub300 testing BULK OUT EndPoint(0) 03 [ 171.428800][ T4772] usb 1-1: vub300 testing UNKNOWN EndPoint(1) 8B [ 171.435228][ T4772] usb 1-1: vub300 ignoring EndPoint(1) 8B [ 171.441184][ T4772] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 171.456193][ T4772] vub300: probe of 1-1:3.92 failed with error -22 [ 171.466928][ T4772] usb 1-1: USB disconnect, device number 3 [ 171.590630][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 171.682619][ T5256] fido_id[5256]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.782160][ T4773] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 171.967741][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 171.979610][ T4773] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 172.007613][ T4773] usb 4-1: config 0 has no interface number 0 [ 172.046124][ T4773] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 172.086839][ T4773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.117051][ T4773] usb 4-1: Product: syz [ 172.121308][ T4773] usb 4-1: Manufacturer: syz [ 172.162641][ T4773] usb 4-1: SerialNumber: syz [ 172.188121][ T4773] usb 4-1: config 0 descriptor?? [ 172.444297][ T4773] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 172.481952][ T4773] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 172.500227][ T4773] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 172.513139][ T4773] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 172.531879][ T4773] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 172.562434][ T5283] loop4: detected capacity change from 0 to 256 [ 172.605601][ T5283] exfat: Deprecated parameter 'utf8' [ 172.622928][ T5283] exFAT-fs (loop4): bogus number of FAT structure [ 172.636548][ T5283] exFAT-fs (loop4): failed to read boot sector [ 172.646345][ T5283] exFAT-fs (loop4): failed to recognize exfat type [ 173.127048][ T4320] usb 4-1: USB disconnect, device number 3 [ 173.494630][ T4320] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 173.584101][ T4320] keyspan 4-1:0.133: device disconnected [ 173.736290][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 173.801704][ T5291] loop0: detected capacity change from 0 to 512 [ 174.214439][ T5291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.264866][ T5291] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.318710][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 174.485416][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 175.224766][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.490871][ T5331] loop3: detected capacity change from 0 to 256 [ 175.557899][ T5331] exfat: Deprecated parameter 'utf8' [ 175.671821][ T5331] exFAT-fs (loop3): bogus number of FAT structure [ 175.705868][ T5331] exFAT-fs (loop3): failed to read boot sector [ 175.730984][ T5331] exFAT-fs (loop3): failed to recognize exfat type [ 176.369250][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 176.666831][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.795007][ T4707] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 176.841376][ T5349] loop3: detected capacity change from 0 to 1024 [ 176.867061][ T4707] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.888331][ T5349] EXT4-fs: Ignoring removed bh option [ 176.987093][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 177.014596][ T5349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.093023][ T4320] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.104608][ T4320] usb 5-1: config 0 has no interface number 0 [ 177.112027][ T4320] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.123046][ T4320] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.133752][ T4320] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 177.142965][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.168608][ T4320] usb 5-1: config 0 descriptor?? [ 177.386480][ T5352] fido_id[5352]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.441274][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 177.801437][ T4320] uclogic 0003:28BD:0071.000B: failed retrieving string descriptor #100: -71 [ 177.825903][ T4320] uclogic 0003:28BD:0071.000B: failed retrieving pen parameters: -71 [ 177.844514][ T4320] uclogic 0003:28BD:0071.000B: pen probing failed: -71 [ 177.856695][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 177.866412][ T4320] uclogic 0003:28BD:0071.000B: failed probing parameters: -71 [ 177.885961][ T4320] uclogic: probe of 0003:28BD:0071.000B failed with error -71 [ 177.935077][ T4320] usb 5-1: USB disconnect, device number 3 [ 178.492372][ T5377] loop4: detected capacity change from 0 to 1024 [ 178.503153][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 178.528596][ T5377] EXT4-fs: Ignoring removed bh option [ 178.534470][ T4485] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.549150][ T5379] loop2: detected capacity change from 0 to 256 [ 178.556354][ T5379] exfat: Deprecated parameter 'utf8' [ 178.573015][ T5379] exFAT-fs (loop2): bogus number of FAT structure [ 178.597620][ T5379] exFAT-fs (loop2): failed to read boot sector [ 178.611735][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.624496][ T5379] exFAT-fs (loop2): failed to recognize exfat type [ 178.806943][ T4485] usb 4-1: Using ep0 maxpacket: 8 [ 178.831373][ T4485] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.961436][ T4485] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 179.971286][ T4485] usb 4-1: can't read configurations, error -71 [ 180.134327][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 181.203405][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 181.455606][ T5380] loop0: detected capacity change from 0 to 32768 [ 181.544157][ T5414] loop3: detected capacity change from 0 to 64 [ 181.816340][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 182.059881][ T5426] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 182.335104][ T5424] loop3: detected capacity change from 0 to 1024 [ 182.667615][ T5424] EXT4-fs: Ignoring removed bh option [ 182.924193][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.453948][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 184.558848][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 184.609759][ T5455] loop3: detected capacity change from 0 to 512 [ 184.667825][ T5455] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.741825][ T5463] capability: warning: `syz.0.333' uses deprecated v2 capabilities in a way that may be insecure [ 184.760560][ T5455] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.329: Allocating blocks 41-42 which overlap fs metadata [ 184.778978][ T5463] program syz.0.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.825775][ T5455] Quota error (device loop3): write_blk: dquota write failed [ 184.857007][ T5455] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 184.866595][ T5455] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.329: Allocating blocks 41-42 which overlap fs metadata [ 184.906588][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 184.977686][ T5455] Quota error (device loop3): write_blk: dquota write failed [ 184.985613][ T5455] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 185.043843][ T5455] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.329: Failed to acquire dquot type 1 [ 185.081678][ T5470] loop0: detected capacity change from 0 to 64 [ 185.098193][ T5455] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 185.134150][ T5470] hfs: dir_umask requires a value [ 185.146865][ T5470] hfs: unable to parse mount options [ 185.152511][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.329: corrupted inode contents [ 185.196970][ T5455] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.329: mark_inode_dirty error [ 185.284416][ T5476] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 186.477468][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.329: corrupted inode contents [ 186.552312][ T5455] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.329: mark_inode_dirty error [ 186.650584][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.329: corrupted inode contents [ 186.713568][ T5455] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 186.774855][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.329: corrupted inode contents [ 186.806897][ T5455] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.329: mark_inode_dirty error [ 186.838496][ T5455] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 186.870605][ T5455] EXT4-fs (loop3): 1 truncate cleaned up [ 186.875694][ T5484] loop0: detected capacity change from 0 to 1024 [ 186.876352][ T5455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.911089][ T5484] EXT4-fs: Ignoring removed bh option [ 186.955120][ T5455] EXT4-fs (loop3): unmounting filesystem. [ 186.968217][ T5484] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.761866][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 187.798831][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 188.000008][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 188.426925][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.708231][ T4318] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 188.888928][ T4318] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 188.987033][ T4318] usb 3-1: config 220 interface 0 has no altsetting 0 [ 189.070282][ T5512] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 190.448725][ T4318] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 190.459129][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.467257][ T4318] usb 3-1: Product: syz [ 190.471511][ T4318] usb 3-1: Manufacturer: syz [ 190.476154][ T4318] usb 3-1: SerialNumber: syz [ 190.574007][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 190.660616][ T5522] loop4: detected capacity change from 0 to 128 [ 190.719839][ T4318] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 190.743412][ T4318] usb 3-1: No valid video chain found. [ 190.760182][ T4318] usb 3-1: USB disconnect, device number 2 [ 190.767293][ T5522] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 190.790488][ T5522] hpfs: filesystem error: improperly stopped [ 190.796567][ T5522] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 190.865362][ T5534] loop1: detected capacity change from 0 to 512 [ 190.873504][ T5531] loop3: detected capacity change from 0 to 1024 [ 190.881126][ T5534] EXT4-fs: Ignoring removed orlov option [ 190.889012][ T5531] EXT4-fs: Ignoring removed bh option [ 190.940405][ T5534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.967112][ T5534] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.973172][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.032166][ T5541] loop4: detected capacity change from 0 to 1024 [ 191.043589][ T5541] EXT4-fs (loop4): too many log groups per flexible block group [ 191.052377][ T5541] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 191.077531][ T5541] EXT4-fs (loop4): mount failed [ 191.775490][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 192.095668][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 192.263113][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 194.538184][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544564][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.237189][ T4707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.487000][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.526860][ T4707] usb 3-1: Using ep0 maxpacket: 16 [ 195.541328][ T4707] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.677295][ T4707] usb 3-1: config 0 has no interface number 0 [ 195.764203][ T4707] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.795945][ T4707] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.806331][ T4707] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 195.825651][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 195.832418][ T4707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.874954][ T4318] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.890541][ T4318] usb 1-1: config 0 has no interface number 0 [ 195.911279][ T4707] usb 3-1: config 0 descriptor?? [ 195.941735][ T4318] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.953550][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.963453][ T4318] usb 1-1: Product: syz [ 195.968500][ T4318] usb 1-1: Manufacturer: syz [ 195.974329][ T4318] usb 1-1: SerialNumber: syz [ 196.097550][ T4318] usb 1-1: config 0 descriptor?? [ 196.118576][ T4318] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 196.177668][ T5580] loop1: detected capacity change from 0 to 512 [ 196.191930][ T5580] EXT4-fs: Ignoring removed orlov option [ 196.206992][ T4324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.268483][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.307054][ T5580] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.339078][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 196.364432][ T4707] usbhid 3-1:0.1: can't add hid device: -71 [ 196.375367][ T4707] usbhid: probe of 3-1:0.1 failed with error -71 [ 196.383282][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.403455][ T4707] usb 3-1: USB disconnect, device number 3 [ 196.419471][ T4324] usb 5-1: config 1 has an invalid interface number: 108 but max is 1 [ 196.449739][ T4324] usb 5-1: config 1 has an invalid interface number: 109 but max is 1 [ 196.468338][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 196.506937][ T4324] usb 5-1: config 1 has no interface number 0 [ 196.517373][ T4324] usb 5-1: config 1 has no interface number 1 [ 196.527034][ T4324] usb 5-1: config 1 interface 108 has no altsetting 0 [ 196.555422][ T4324] usb 5-1: config 1 interface 109 has no altsetting 0 [ 196.555452][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 196.592910][ T4324] usb 5-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=14.92 [ 196.623964][ T5585] loop1: detected capacity change from 0 to 1024 [ 196.641032][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.650022][ T5585] EXT4-fs: Ignoring removed bh option [ 196.656271][ T4324] usb 5-1: Product: syz [ 196.675417][ T4324] usb 5-1: Manufacturer: syz [ 196.698596][ T4324] usb 5-1: SerialNumber: syz [ 196.721560][ T5585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.758635][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.767119][ T4338] usb 1-1: USB disconnect, device number 4 [ 196.825718][ T4338] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.371673][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 198.115583][ T4324] usb 5-1: Found UVC 0.00 device syz (045e:0723) [ 198.123606][ T4324] usb 5-1: No valid video chain found. [ 198.135011][ T4338] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 198.155471][ T4324] usb 5-1: USB disconnect, device number 4 [ 198.194710][ T4338] quatech2 1-1:0.51: device disconnected [ 198.269853][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 198.632055][ T5613] loop0: detected capacity change from 0 to 512 [ 198.767149][ T4338] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 198.824871][ T5613] EXT4-fs: Ignoring removed orlov option [ 198.977674][ T5614] netlink: 68 bytes leftover after parsing attributes in process `syz.3.382'. [ 198.981602][ T4338] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 198.996342][ T4338] usb 5-1: config 0 has no interface number 0 [ 199.002889][ T4338] usb 5-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.061500][ T4338] usb 5-1: config 0 interface 235 has no altsetting 0 [ 199.111217][ T4338] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 199.130064][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.152279][ T4338] usb 5-1: Product: syz [ 199.167613][ T4338] usb 5-1: Manufacturer: syz [ 199.182578][ T4338] usb 5-1: SerialNumber: syz [ 199.208920][ T4338] usb 5-1: config 0 descriptor?? [ 199.220076][ T4338] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 199.227959][ T4338] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 199.236015][ T4338] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 199.245711][ T5613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.328817][ T4338] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 199.337099][ T5613] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.351780][ T4338] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 199.362855][ T4338] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 199.371886][ T4338] keyspan 5-1:0.235: unsupported endpoint type 0 [ 199.379911][ T4338] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 199.549012][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 199.562015][ T4707] usb 5-1: USB disconnect, device number 5 [ 199.602222][ T4707] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 199.664788][ T4707] keyspan 5-1:0.235: device disconnected [ 200.841390][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 200.885644][ T5636] loop0: detected capacity change from 0 to 1024 [ 200.913287][ T5636] EXT4-fs: Ignoring removed bh option [ 200.984032][ T5636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.848163][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 202.166552][ T5654] binder: BINDER_SET_CONTEXT_MGR already set [ 202.191352][ T5654] binder: 5652:5654 ioctl 4018620d 200000004a80 returned -16 [ 203.427002][ T4320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.486631][ T5668] netlink: 68 bytes leftover after parsing attributes in process `syz.2.402'. [ 203.667669][ T4320] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.738121][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.451387][ T5655] loop1: detected capacity change from 0 to 32768 [ 204.504834][ T5651] loop0: detected capacity change from 0 to 32768 [ 204.517281][ T4320] usb 5-1: config 0 descriptor?? [ 204.527743][ T5655] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 204.550326][ T4320] cp210x 5-1:0.0: cp210x converter detected [ 204.710963][ T5651] (syz.0.396,5651,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 204.793381][ T5651] (syz.0.396,5651,0):ocfs2_mount_volume:1808 ERROR: status = -22 [ 204.930516][ T4320] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 204.960678][ T4320] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 204.983500][ T5651] (syz.0.396,5651,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 204.985749][ T4320] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 205.092743][ T4320] usb 5-1: cp210x converter now attached to ttyUSB0 [ 206.571189][ T4383] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 206.583016][ T4320] usb 5-1: USB disconnect, device number 6 [ 206.667138][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 206.673224][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 206.679367][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 206.679400][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 206.699665][ T4320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.709428][ T4320] cp210x 5-1:0.0: device disconnected [ 207.117665][ T5688] binder: BINDER_SET_CONTEXT_MGR already set [ 207.164503][ T5688] binder: 5687:5688 ioctl 4018620d 200000004a80 returned -16 [ 207.516620][ T5695] loop0: detected capacity change from 0 to 256 [ 207.591190][ T5697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.414'. [ 210.776294][ T4485] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.583387][ T5706] loop4: detected capacity change from 0 to 32768 [ 211.623062][ T5706] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 211.636113][ T4485] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 211.650176][ T5725] loop1: detected capacity change from 0 to 256 [ 211.666917][ T4485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.691577][ T5727] loop0: detected capacity change from 0 to 256 [ 211.700535][ T5725] exfat: Deprecated parameter 'utf8' [ 211.706003][ T5725] exfat: Deprecated parameter 'utf8' [ 211.734235][ T4485] usb 3-1: config 0 descriptor?? [ 211.757996][ T4485] cp210x 3-1:0.0: cp210x converter detected [ 211.789158][ T5727] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 211.806890][ T5725] exfat: Deprecated parameter 'utf8' [ 211.832274][ T5725] exfat: Deprecated parameter 'namecase' [ 211.916576][ T5731] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 212.140293][ T5725] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 212.717693][ T4485] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 212.736998][ T4485] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 212.744760][ T4485] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 212.787175][ T4485] usb 3-1: cp210x converter now attached to ttyUSB0 [ 212.855022][ T5734] binder: BINDER_SET_CONTEXT_MGR already set [ 212.905089][ T5734] binder: 5733:5734 ioctl 4018620d 200000004a80 returned -16 [ 212.920245][ T4773] usb 3-1: USB disconnect, device number 4 [ 212.947237][ T4773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.955517][ T4773] cp210x 3-1:0.0: device disconnected [ 213.786010][ T4383] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 214.763340][ T5751] loop4: detected capacity change from 0 to 512 [ 214.779359][ T5749] netlink: 68 bytes leftover after parsing attributes in process `syz.3.430'. [ 215.856862][ T4484] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.058455][ T4484] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 216.075488][ T4484] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 216.127326][ T4484] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.173162][ T4484] usb 1-1: config 220 has no interface number 2 [ 216.196324][ T4484] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 216.242313][ T4484] usb 1-1: config 220 interface 0 has no altsetting 0 [ 216.279347][ T4484] usb 1-1: config 220 interface 76 has no altsetting 0 [ 216.301575][ T4484] usb 1-1: config 220 interface 1 has no altsetting 0 [ 216.323745][ T4484] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 216.364117][ T4484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.389240][ T4484] usb 1-1: Product: syz [ 216.402576][ T4484] usb 1-1: Manufacturer: syz [ 216.417898][ T4484] usb 1-1: SerialNumber: syz [ 216.476244][ T5768] loop1: detected capacity change from 0 to 4096 [ 216.610556][ T5769] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.661679][ T4484] usb 1-1: selecting invalid altsetting 0 [ 216.698768][ T4484] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 216.733972][ T4484] usb 1-1: No valid video chain found. [ 216.796821][ T4484] usb 1-1: selecting invalid altsetting 0 [ 216.816093][ T4484] usbtest: probe of 1-1:220.1 failed with error -22 [ 216.867787][ T4484] usb 1-1: USB disconnect, device number 5 [ 217.024319][ T5763] loop2: detected capacity change from 0 to 32768 [ 217.080101][ T5763] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 217.886361][ T5773] erofs: (device loop1): erofs_read_superblock: cannot read erofs superblock [ 218.094928][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 218.157071][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 218.409960][ T4458] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 218.929058][ T4485] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 219.808943][ T4485] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.836990][ T4485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.892814][ T4485] usb 3-1: config 0 descriptor?? [ 219.929185][ T4485] cp210x 3-1:0.0: cp210x converter detected [ 220.930675][ T5799] loop1: detected capacity change from 0 to 4096 [ 221.036987][ T4773] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.068448][ T5803] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.090344][ T4485] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 221.098995][ T4485] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 221.127701][ T4485] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 221.146128][ T4485] usb 3-1: cp210x converter now attached to ttyUSB0 [ 221.187040][ T4485] usb 3-1: USB disconnect, device number 5 [ 221.223161][ T4485] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 221.236828][ T4773] usb 5-1: Using ep0 maxpacket: 16 [ 221.244420][ T4773] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.261146][ T4485] cp210x 3-1:0.0: device disconnected [ 221.273778][ T4773] usb 5-1: config 0 has no interface number 0 [ 221.301877][ T4773] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.379065][ T5808] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 221.580280][ T4773] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.749391][ T4773] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 221.864753][ T4773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.033777][ T4773] usb 5-1: config 0 descriptor?? [ 222.371427][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 222.400890][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 222.595450][ T5812] loop3: detected capacity change from 0 to 32768 [ 222.626292][ T5812] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.636593][ T5812] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 222.645450][ T5812] BTRFS info (device loop3): turning on sync discard [ 222.652272][ T5812] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.661789][ T5812] BTRFS info (device loop3): use zstd compression, level 3 [ 222.669336][ T5812] BTRFS info (device loop3): turning on async discard [ 222.676190][ T5812] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 222.686941][ T5812] BTRFS info (device loop3): trying to use backup root at mount time [ 222.695154][ T5812] BTRFS info (device loop3): enabling auto defrag [ 222.702504][ T5812] BTRFS info (device loop3): using free space tree [ 222.814046][ T4773] usbhid 5-1:0.1: can't add hid device: -71 [ 222.826854][ T4773] usbhid: probe of 5-1:0.1 failed with error -71 [ 222.845257][ T4773] usb 5-1: USB disconnect, device number 7 [ 222.966926][ T56] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 223.015481][ T5809] loop1: detected capacity change from 0 to 32768 [ 223.026948][ T5812] BTRFS error (device loop3): failed to load root extent [ 223.034086][ T5812] BTRFS warning (device loop3): try to load backup roots slot 1 [ 223.044834][ T56] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 223.065093][ T5812] BTRFS warning (device loop3): couldn't read tree root [ 223.072619][ T5812] BTRFS warning (device loop3): try to load backup roots slot 2 [ 223.082226][ T5812] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 223.093562][ T5812] BTRFS warning (device loop3): couldn't read tree root [ 223.100629][ T5812] BTRFS warning (device loop3): try to load backup roots slot 3 [ 223.143533][ T5809] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.451 (5809) [ 223.206360][ T5812] BTRFS info (device loop3): enabling ssd optimizations [ 223.216514][ T5812] BTRFS info (device loop3): rebuilding free space tree [ 223.230421][ T5812] BTRFS info (device loop3): checking UUID tree [ 223.447193][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 224.328141][ T4282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.357531][ T4458] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4458) [ 224.442214][ T5843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.456'. [ 227.097167][ T4485] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 227.176152][ T4484] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.288448][ T4485] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.301352][ T4485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.337624][ T4485] usb 1-1: config 0 descriptor?? [ 227.357319][ T4485] cp210x 1-1:0.0: cp210x converter detected [ 227.368822][ T4484] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 227.390701][ T4484] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 227.426689][ T4484] usb 3-1: config 220 has no interface number 2 [ 227.450875][ T4484] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 227.499739][ T4484] usb 3-1: config 220 interface 0 has no altsetting 0 [ 227.528045][ T4484] usb 3-1: config 220 interface 76 has no altsetting 0 [ 227.555576][ T4484] usb 3-1: config 220 interface 1 has no altsetting 0 [ 227.586916][ T4484] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 227.625523][ T4484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.651993][ T4484] usb 3-1: Product: syz [ 227.672208][ T4484] usb 3-1: Manufacturer: syz [ 227.695024][ T4484] usb 3-1: SerialNumber: syz [ 227.768595][ T4485] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 227.789558][ T4485] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 227.813460][ T4485] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 227.855330][ T4485] usb 1-1: cp210x converter now attached to ttyUSB0 [ 227.905552][ T4485] usb 1-1: USB disconnect, device number 6 [ 227.945565][ T4484] usb 3-1: selecting invalid altsetting 0 [ 227.965929][ T4484] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 227.981085][ T4485] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.004891][ T4484] usb 3-1: No valid video chain found. [ 228.018104][ T4485] cp210x 1-1:0.0: device disconnected [ 228.039435][ T4484] usb 3-1: selecting invalid altsetting 0 [ 228.078961][ T4484] usbtest: probe of 3-1:220.1 failed with error -22 [ 228.127253][ T4484] usb 3-1: USB disconnect, device number 6 [ 228.248454][ T5868] loop3: detected capacity change from 0 to 32768 [ 228.357041][ T5868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.466 (5868) [ 229.123833][ T5868] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.177056][ T5868] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 229.199514][ T5868] BTRFS info (device loop3): turning on sync discard [ 229.221952][ T5868] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.237165][ T4707] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.270216][ T5868] BTRFS info (device loop3): use zstd compression, level 3 [ 229.281182][ T5868] BTRFS info (device loop3): turning on async discard [ 229.288846][ T5868] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.306882][ T5868] BTRFS info (device loop3): trying to use backup root at mount time [ 229.319161][ T5868] BTRFS info (device loop3): enabling auto defrag [ 229.325967][ T5868] BTRFS info (device loop3): using free space tree [ 229.446888][ T4707] usb 5-1: Using ep0 maxpacket: 16 [ 229.455266][ T4707] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.491993][ T4707] usb 5-1: config 0 has no interface number 0 [ 229.502580][ T9] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 229.517218][ T4707] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.601514][ T5868] BTRFS error (device loop3): failed to load root extent [ 229.621264][ T5868] BTRFS warning (device loop3): try to load backup roots slot 1 [ 229.657278][ T56] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 229.701192][ T5868] BTRFS warning (device loop3): couldn't read tree root [ 229.717647][ T5868] BTRFS warning (device loop3): try to load backup roots slot 2 [ 229.735142][ T4707] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.745748][ T4707] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 229.754947][ T4707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.766452][ T4707] usb 5-1: config 0 descriptor?? [ 229.798182][ T5868] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 229.858534][ T5868] BTRFS warning (device loop3): couldn't read tree root [ 229.949230][ T5868] BTRFS warning (device loop3): try to load backup roots slot 3 [ 230.504831][ T5868] BTRFS error (device loop3): open_ctree failed: -22 [ 230.713597][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 230.845325][ T4707] usbhid 5-1:0.1: can't add hid device: -71 [ 230.860808][ T4707] usbhid: probe of 5-1:0.1 failed with error -71 [ 230.875342][ T4707] usb 5-1: USB disconnect, device number 8 [ 231.933737][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 231.986204][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 233.116840][ T4321] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 233.323968][ T4321] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.345646][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.641061][ T4321] usb 3-1: config 0 descriptor?? [ 233.798278][ T4321] cp210x 3-1:0.0: cp210x converter detected [ 234.145449][ T4321] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 234.162401][ T4321] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 234.177042][ T4768] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.196377][ T4321] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 234.222376][ T4321] usb 3-1: cp210x converter now attached to ttyUSB0 [ 234.402727][ T4768] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.434316][ T4321] usb 3-1: USB disconnect, device number 7 [ 234.442875][ T4321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.451812][ T4321] cp210x 3-1:0.0: device disconnected [ 234.486835][ T4768] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.500112][ T4768] usb 1-1: config 220 has no interface number 2 [ 234.506623][ T4768] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.522216][ T4768] usb 1-1: config 220 interface 0 has no altsetting 0 [ 234.560295][ T4768] usb 1-1: config 220 interface 76 has no altsetting 0 [ 234.738778][ T4768] usb 1-1: config 220 interface 1 has no altsetting 0 [ 234.918634][ T4768] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.074000][ T4768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.229775][ T4768] usb 1-1: Product: syz [ 235.307950][ T4768] usb 1-1: Manufacturer: syz [ 235.312722][ T4768] usb 1-1: SerialNumber: syz [ 235.584746][ T4768] usb 1-1: selecting invalid altsetting 0 [ 235.597223][ T4768] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 235.604742][ T4768] usb 1-1: No valid video chain found. [ 235.630403][ T4768] usb 1-1: selecting invalid altsetting 0 [ 235.636219][ T4768] usbtest: probe of 1-1:220.1 failed with error -22 [ 235.687124][ T4768] usb 1-1: USB disconnect, device number 7 [ 236.715615][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 236.724749][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 236.793912][ T5955] loop2: detected capacity change from 0 to 512 [ 236.801194][ T5955] EXT4-fs: Ignoring removed nobh option [ 236.833084][ T5955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 236.840416][ T5955] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.490: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 236.868372][ T5955] EXT4-fs (loop2): Remounting filesystem read-only [ 236.874975][ T5955] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.490: ea_inode dec ref err=-117 [ 236.888166][ T5955] EXT4-fs (loop2): 1 orphan inode deleted [ 236.893968][ T5955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.904230][ T5955] EXT4-fs (loop2): unmounting filesystem. [ 236.985646][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 238.503036][ T5969] loop0: detected capacity change from 0 to 4096 [ 238.790140][ T4773] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.062945][ T4773] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.138910][ T4773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.372151][ T4773] usb 5-1: config 0 descriptor?? [ 239.477278][ T5969] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 239.511828][ T4773] cp210x 5-1:0.0: cp210x converter detected [ 239.524542][ T5969] ntfs3: loop0: Failed to load $Secure. [ 239.818498][ T5982] loop2: detected capacity change from 0 to 128 [ 239.850820][ T5982] qnx6: wrong signature (magic) in superblock #1. [ 239.921763][ T4773] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 240.364875][ T4773] usb 5-1: cp210x converter now attached to ttyUSB0 [ 240.538442][ T4773] usb 5-1: USB disconnect, device number 9 [ 240.598004][ T4773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.700832][ T4773] cp210x 5-1:0.0: device disconnected [ 240.766052][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 240.906380][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 240.964735][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.504'. [ 241.948148][ T6000] loop1: detected capacity change from 0 to 512 [ 241.955836][ T6000] EXT4-fs: Ignoring removed nobh option [ 242.007598][ T6000] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.014922][ T6000] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.507: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 242.037649][ T6000] EXT4-fs (loop1): Remounting filesystem read-only [ 242.044292][ T6000] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.507: ea_inode dec ref err=-117 [ 242.058167][ T6000] EXT4-fs (loop1): 1 orphan inode deleted [ 242.064006][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.074188][ T6000] EXT4-fs (loop1): unmounting filesystem. [ 244.137011][ T4321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.446400][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 244.501845][ T4321] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 244.511660][ T4321] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 244.524620][ T4321] usb 5-1: config 220 has no interface number 2 [ 244.954312][ T4321] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 244.967684][ T4321] usb 5-1: config 220 interface 0 has no altsetting 0 [ 244.979289][ T4321] usb 5-1: config 220 interface 76 has no altsetting 0 [ 244.990731][ T4321] usb 5-1: config 220 interface 1 has no altsetting 0 [ 245.002171][ T4321] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.019097][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.028028][ T4322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.036075][ T4321] usb 5-1: Product: syz [ 245.044328][ T4321] usb 5-1: Manufacturer: syz [ 245.055390][ T4321] usb 5-1: SerialNumber: syz [ 245.248849][ T4322] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.270220][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.289561][ T4321] usb 5-1: selecting invalid altsetting 0 [ 245.318532][ T4321] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 245.342864][ T4322] usb 1-1: config 0 descriptor?? [ 245.356795][ T4321] usb 5-1: No valid video chain found. [ 245.394907][ T4322] cp210x 1-1:0.0: cp210x converter detected [ 245.406692][ T4321] usb 5-1: selecting invalid altsetting 0 [ 245.425828][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 245.449783][ T4321] usbtest: probe of 5-1:220.1 failed with error -22 [ 245.460272][ T4321] usb 5-1: USB disconnect, device number 10 [ 245.502974][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 245.573384][ T6045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.521'. [ 245.803188][ T4322] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 245.827823][ T4322] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 245.882875][ T4322] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 245.918724][ T4322] usb 1-1: cp210x converter now attached to ttyUSB0 [ 246.029204][ T4767] usb 1-1: USB disconnect, device number 8 [ 246.062675][ T4767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.220873][ T4767] cp210x 1-1:0.0: device disconnected [ 246.250852][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 246.300335][ T6057] loop1: detected capacity change from 0 to 512 [ 246.307528][ T6057] EXT4-fs: Ignoring removed nobh option [ 246.352837][ T6057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 246.360122][ T6057] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.523: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 246.375784][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 246.382472][ T6057] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.523: ea_inode dec ref err=-117 [ 246.395605][ T6057] EXT4-fs (loop1): 1 orphan inode deleted [ 246.401456][ T6057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.411689][ T6057] EXT4-fs (loop1): unmounting filesystem. [ 246.732003][ T6061] loop4: detected capacity change from 0 to 2048 [ 246.747454][ T6061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.139159][ T6066] loop0: detected capacity change from 0 to 16 [ 247.191546][ T6066] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 248.485835][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 248.538635][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 249.081253][ T6089] loop2: detected capacity change from 0 to 64 [ 249.119062][ T6089] BFS-fs: bfs_iget(): Bad inode number loop2:00000002 [ 249.127742][ T4485] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.320154][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 249.329874][ T4485] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.348537][ T4485] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.377158][ T4485] usb 1-1: config 220 has no interface number 2 [ 249.404045][ T4485] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 249.442415][ T4485] usb 1-1: config 220 interface 0 has no altsetting 0 [ 249.452553][ T4485] usb 1-1: config 220 interface 76 has no altsetting 0 [ 249.503297][ T4485] usb 1-1: config 220 interface 1 has no altsetting 0 [ 249.530513][ T4485] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.560296][ T4485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.580608][ T4485] usb 1-1: Product: syz [ 249.584853][ T4485] usb 1-1: Manufacturer: syz [ 249.605235][ T4485] usb 1-1: SerialNumber: syz [ 249.870336][ T4768] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 250.104840][ T4768] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 250.126404][ T4768] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.156755][ T4768] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.195236][ T4768] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 250.225365][ T4768] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.246672][ T4485] usb 1-1: selecting invalid altsetting 0 [ 250.252974][ T4485] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 250.259665][ T4485] usb 1-1: No valid video chain found. [ 250.286903][ T4768] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 250.308659][ T4485] usb 1-1: selecting invalid altsetting 0 [ 250.314473][ T4485] usbtest: probe of 1-1:220.1 failed with error -22 [ 250.331062][ T4768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.356231][ T4768] usb 3-1: config 0 descriptor?? [ 250.514771][ T4485] usb 1-1: USB disconnect, device number 9 [ 250.527666][ T4770] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 250.777783][ T4770] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.874995][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 250.883778][ T4770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.943508][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.023630][ T4770] usb 2-1: config 0 descriptor?? [ 251.048350][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.116460][ T4770] cp210x 2-1:0.0: cp210x converter detected [ 251.174916][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.205423][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.239407][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.283798][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.314995][ T6106] loop0: detected capacity change from 0 to 128 [ 251.332900][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.348661][ T6106] qnx6: wrong signature (magic) in superblock #1. [ 251.371572][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.397076][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.434722][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.446915][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.454532][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.465945][ T6108] loop3: detected capacity change from 0 to 4096 [ 251.475001][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.488944][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.504224][ T4770] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 251.518163][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.525782][ T4770] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 251.540656][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.549540][ T4770] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 251.561389][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.571052][ T4770] usb 2-1: cp210x converter now attached to ttyUSB0 [ 251.584346][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.592877][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.601961][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.609365][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.616462][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.623906][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.631765][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.642434][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.649761][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.657120][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.664135][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.671589][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.680811][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.688208][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.695224][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.702665][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.710002][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.717457][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.724484][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.739164][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.746254][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.760072][ T4768] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 251.773046][ T4768] lenovo 0003:17EF:60EE.000C: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 251.796389][ T4770] usb 2-1: USB disconnect, device number 2 [ 251.810560][ T4770] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 251.823079][ T4770] cp210x 2-1:0.0: device disconnected [ 251.825036][ T6108] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 251.857009][ T4485] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 251.874978][ T6108] ntfs3: loop3: Failed to load $Extend. [ 251.886449][ T6116] netlink: 68 bytes leftover after parsing attributes in process `syz.4.546'. [ 251.995612][ T4768] lenovo 0003:17EF:60EE.000C: Fn-lock setting failed: -71 [ 252.004778][ T4768] lenovo 0003:17EF:60EE.000C: Sensitivity setting failed: -71 [ 252.040250][ T4768] usb 3-1: USB disconnect, device number 8 [ 252.058924][ T4485] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 252.071811][ T4485] usb 1-1: config 0 has no interface number 0 [ 252.099686][ T4485] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.142914][ T4485] usb 1-1: config 0 interface 235 has no altsetting 0 [ 252.167096][ T4485] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 252.191162][ T4485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.214262][ T4485] usb 1-1: Product: syz [ 252.224846][ T4485] usb 1-1: Manufacturer: syz [ 252.236360][ T4485] usb 1-1: SerialNumber: syz [ 252.284368][ T4485] usb 1-1: config 0 descriptor?? [ 252.330149][ T4485] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 252.356408][ T4485] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 252.387111][ T4485] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 252.419997][ T4485] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 252.466901][ T4485] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 252.533077][ T4485] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 252.605908][ T4485] keyspan 1-1:0.235: unsupported endpoint type 0 [ 252.639828][ T4485] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 252.695288][ T4485] usb 1-1: USB disconnect, device number 10 [ 252.784742][ T4485] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 252.822380][ T4485] keyspan 1-1:0.235: device disconnected [ 253.021017][ T6123] fido_id[6123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 255.067421][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 256.188680][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.195056][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.666951][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 256.878626][ T4318] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.904075][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.918339][ T6162] loop4: detected capacity change from 0 to 1024 [ 256.941979][ T4318] usb 2-1: config 0 descriptor?? [ 256.951019][ T6162] EXT4-fs: Ignoring removed bh option [ 256.973182][ T4318] cp210x 2-1:0.0: cp210x converter detected [ 257.006380][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 257.254655][ T6162] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.396622][ T4318] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 257.429780][ T4318] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 257.592696][ T4318] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 257.773266][ T4318] usb 2-1: cp210x converter now attached to ttyUSB0 [ 257.909029][ T4318] usb 2-1: USB disconnect, device number 3 [ 258.005532][ T6173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.567'. [ 258.027429][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.061373][ T4318] cp210x 2-1:0.0: device disconnected [ 258.233716][ T6180] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 259.701602][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 260.228149][ T6201] netlink: 68 bytes leftover after parsing attributes in process `syz.1.574'. [ 260.345696][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 261.856455][ T6215] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 262.226854][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.240623][ T6218] loop1: detected capacity change from 0 to 1024 [ 262.267847][ T6218] EXT4-fs: Ignoring removed bh option [ 262.311074][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.426956][ T14] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.452382][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.506568][ T14] usb 4-1: config 0 descriptor?? [ 263.110428][ T14] cp210x 4-1:0.0: cp210x converter detected [ 263.280580][ T14] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 263.297562][ T14] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 263.305500][ T14] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 263.320237][ T14] usb 4-1: cp210x converter now attached to ttyUSB0 [ 263.342521][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 263.500270][ T4767] usb 4-1: USB disconnect, device number 6 [ 263.530090][ T4767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.560910][ T4767] cp210x 4-1:0.0: device disconnected [ 263.756464][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 263.956342][ T6250] loop0: detected capacity change from 0 to 2048 [ 264.002786][ T6250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 264.126845][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.308040][ T14] usb 5-1: device descriptor read/64, error -71 [ 264.696777][ T6255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.593'. [ 264.837918][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 265.022777][ T14] usb 5-1: device descriptor read/64, error -71 [ 265.072385][ T4500] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 265.182036][ T14] usb usb5-port1: attempt power cycle [ 266.319640][ T4500] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 266.496937][ T4500] EXT4-fs (loop0): This should not happen!! Data will be lost [ 266.496937][ T4500] [ 266.507265][ T4500] EXT4-fs (loop0): Total free blocks count 0 [ 266.513419][ T4500] EXT4-fs (loop0): Free/Dirty block details [ 266.536842][ T4500] EXT4-fs (loop0): free_blocks=66060288 [ 266.542830][ T4500] EXT4-fs (loop0): dirty_blocks=8192 [ 266.565307][ T4500] EXT4-fs (loop0): Block reservation details [ 266.587531][ T6262] loop3: detected capacity change from 0 to 256 [ 266.594111][ T4500] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 266.639946][ T6262] exfat: Deprecated parameter 'utf8' [ 266.697627][ T6262] exFAT-fs (loop3): bogus number of FAT structure [ 266.714354][ T6262] exFAT-fs (loop3): failed to read boot sector [ 266.735459][ T6262] exFAT-fs (loop3): failed to recognize exfat type [ 266.757651][ T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 266.769877][ T4461] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 266.817594][ T14] usb 5-1: device descriptor read/8, error -71 [ 268.155054][ T6268] loop4: detected capacity change from 0 to 1024 [ 268.216633][ T6268] EXT4-fs: Ignoring removed bh option [ 268.258487][ T6268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.200604][ T4272] EXT4-fs: 7 callbacks suppressed [ 269.200620][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 270.096581][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 271.272493][ T4769] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 271.303800][ T6302] loop1: detected capacity change from 0 to 256 [ 271.346183][ T6302] exfat: Deprecated parameter 'utf8' [ 271.354314][ T4320] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 271.369831][ T6302] exFAT-fs (loop1): bogus number of FAT structure [ 271.384724][ T6302] exFAT-fs (loop1): failed to read boot sector [ 271.468632][ T4769] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.480966][ T4769] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.515687][ T4769] usb 5-1: config 220 has no interface number 2 [ 271.529040][ T6302] exFAT-fs (loop1): failed to recognize exfat type [ 271.529282][ T4769] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 271.568372][ T4769] usb 5-1: config 220 interface 0 has no altsetting 0 [ 271.699773][ T4769] usb 5-1: config 220 interface 76 has no altsetting 0 [ 271.707024][ T4769] usb 5-1: config 220 interface 1 has no altsetting 0 [ 271.719641][ T4320] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 271.736252][ T4320] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.739747][ T4769] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.761278][ T4320] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.356906][ T4320] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 272.378897][ T4769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.387644][ T4769] usb 5-1: Product: syz [ 272.392230][ T4769] usb 5-1: Manufacturer: syz [ 272.397142][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.404200][ T4320] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 272.413402][ T4769] usb 5-1: SerialNumber: syz [ 272.429670][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.500848][ T4320] usb 1-1: config 0 descriptor?? [ 272.527871][ T6306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.609'. [ 272.796531][ T4769] usb 5-1: selecting invalid altsetting 0 [ 272.806873][ T4769] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 272.813524][ T4769] usb 5-1: No valid video chain found. [ 272.878458][ T4769] usb 5-1: selecting invalid altsetting 0 [ 272.884593][ T4769] usbtest: probe of 5-1:220.1 failed with error -22 [ 272.915149][ T4769] usb 5-1: USB disconnect, device number 15 [ 273.019215][ T4320] usbhid 1-1:0.0: can't add hid device: -71 [ 273.025299][ T4320] usbhid: probe of 1-1:0.0 failed with error -71 [ 273.034226][ T4320] usb 1-1: USB disconnect, device number 11 [ 274.578392][ T6325] loop1: detected capacity change from 0 to 1024 [ 274.603256][ T6325] EXT4-fs: Ignoring removed bh option [ 274.763273][ T6325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 275.109643][ T6336] loop0: detected capacity change from 0 to 256 [ 275.164681][ T6338] loop4: detected capacity change from 0 to 512 [ 275.242156][ T6336] exfat: Deprecated parameter 'utf8' [ 275.309679][ T6336] exFAT-fs (loop0): bogus number of FAT structure [ 275.319712][ T6336] exFAT-fs (loop0): failed to read boot sector [ 275.325971][ T6336] exFAT-fs (loop0): failed to recognize exfat type [ 275.384462][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 275.540928][ T6338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.595637][ T6338] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.628244][ T6338] EXT4-fs (loop4): shut down requested (1) [ 275.637259][ T4768] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 275.968847][ T4768] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 276.038399][ T4768] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 276.111521][ T4768] usb 4-1: config 220 has no interface number 2 [ 276.128851][ T6353] binder: 6352:6353 ioctl 4018620d 0 returned -22 [ 276.157154][ T4768] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 276.241866][ T4768] usb 4-1: config 220 interface 0 has no altsetting 0 [ 276.294543][ T4768] usb 4-1: config 220 interface 76 has no altsetting 0 [ 276.329047][ T4768] usb 4-1: config 220 interface 1 has no altsetting 0 [ 276.342732][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 276.352906][ T4768] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 276.370890][ T4768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.392993][ T4768] usb 4-1: Product: syz [ 276.397859][ T4768] usb 4-1: Manufacturer: syz [ 276.407190][ T4768] usb 4-1: SerialNumber: syz [ 276.629617][ T6360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.628'. [ 276.745680][ T4768] usb 4-1: selecting invalid altsetting 0 [ 276.833948][ T4768] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 276.907853][ T4768] usb 4-1: No valid video chain found. [ 277.128976][ T4768] usb 4-1: selecting invalid altsetting 0 [ 277.192612][ T4768] usbtest: probe of 4-1:220.1 failed with error -22 [ 277.235424][ T4768] usb 4-1: USB disconnect, device number 7 [ 277.744606][ T6377] loop4: detected capacity change from 0 to 1024 [ 277.767167][ T6377] EXT4-fs: Ignoring removed bh option [ 277.814673][ T6379] loop2: detected capacity change from 0 to 128 [ 277.844296][ T6379] EXT4-fs: Ignoring removed i_version option [ 277.856774][ T4768] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.873319][ T6377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.982084][ T6379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.083091][ T4768] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.581352][ T6379] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.614034][ T4768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.688196][ T4768] usb 4-1: config 0 descriptor?? [ 278.739644][ T4768] cp210x 4-1:0.0: cp210x converter detected [ 278.759775][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 278.828545][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 279.030350][ T6393] loop0: detected capacity change from 0 to 256 [ 279.088691][ T6393] exfat: Deprecated parameter 'utf8' [ 279.128567][ T6393] exFAT-fs (loop0): bogus number of FAT structure [ 279.135287][ T4768] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 279.147183][ T6396] binder: 6395:6396 ioctl 4018620d 0 returned -22 [ 279.165666][ T4768] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 279.185784][ T6393] exFAT-fs (loop0): failed to read boot sector [ 279.203768][ T4768] usb 4-1: cp210x converter now attached to ttyUSB0 [ 279.221104][ T6393] exFAT-fs (loop0): failed to recognize exfat type [ 279.373779][ T4485] usb 4-1: USB disconnect, device number 8 [ 279.448244][ T4485] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.486077][ T4485] cp210x 4-1:0.0: device disconnected [ 279.716816][ T4320] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.908702][ T4320] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.927225][ T4320] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.958120][ T4320] usb 5-1: config 220 has no interface number 2 [ 279.964503][ T4320] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 280.003252][ T4320] usb 5-1: config 220 interface 0 has no altsetting 0 [ 280.013617][ T4320] usb 5-1: config 220 interface 76 has no altsetting 0 [ 280.036547][ T4320] usb 5-1: config 220 interface 1 has no altsetting 0 [ 280.176885][ T4320] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.395996][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.529929][ T4320] usb 5-1: Product: syz [ 280.604994][ T4320] usb 5-1: Manufacturer: syz [ 280.678268][ T4320] usb 5-1: SerialNumber: syz [ 280.696977][ T6410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.643'. [ 281.191665][ T4320] usb 5-1: selecting invalid altsetting 0 [ 281.209200][ T4320] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 281.215784][ T4320] usb 5-1: No valid video chain found. [ 281.267600][ T4320] usb 5-1: selecting invalid altsetting 0 [ 281.274627][ T4320] usbtest: probe of 5-1:220.1 failed with error -22 [ 281.323693][ T4320] usb 5-1: USB disconnect, device number 16 [ 281.608018][ T6415] loop3: detected capacity change from 0 to 1024 [ 281.616097][ T6415] EXT4-fs: Ignoring removed bh option [ 281.811897][ T6415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.531459][ T6430] binder: 6429:6430 ioctl 4018620d 0 returned -22 [ 282.622725][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 282.719008][ T6437] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 284.123857][ T6448] netlink: 68 bytes leftover after parsing attributes in process `syz.1.656'. [ 284.487005][ T4321] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 284.690541][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 284.697584][ T4321] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 284.753770][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.802550][ T4321] usb 1-1: config 0 descriptor?? [ 284.831153][ T4321] gspca_main: sunplus-2.14.0 probing 041e:400b [ 284.904621][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 285.085974][ T6465] loop2: detected capacity change from 0 to 1024 [ 285.104935][ T6465] EXT4-fs: Ignoring removed bh option [ 285.112441][ T4763] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 285.133019][ T6467] binder: BINDER_SET_CONTEXT_MGR already set [ 285.146538][ T6467] binder: 6466:6467 ioctl 4018620d 200000004a80 returned -16 [ 285.207838][ T6465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.302643][ T4763] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 285.359455][ T4763] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 285.507080][ T4763] usb 4-1: config 220 has no interface number 2 [ 285.612052][ T4763] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 285.753414][ T4763] usb 4-1: config 220 interface 0 has no altsetting 0 [ 285.819292][ T4763] usb 4-1: config 220 interface 76 has no altsetting 0 [ 285.903722][ T4763] usb 4-1: config 220 interface 1 has no altsetting 0 [ 285.927067][ T4321] gspca_sunplus: reg_w_riv err -71 [ 285.932370][ T4321] sunplus: probe of 1-1:0.0 failed with error -71 [ 285.958398][ T4321] usb 1-1: USB disconnect, device number 12 [ 286.251842][ T6476] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 286.271870][ T4763] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 286.286598][ T4763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.330078][ T4763] usb 4-1: Product: syz [ 286.334544][ T4763] usb 4-1: Manufacturer: syz [ 286.340146][ T4763] usb 4-1: SerialNumber: syz [ 286.351344][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 286.455438][ T6483] loop2: detected capacity change from 0 to 256 [ 286.463544][ T6483] exfat: Deprecated parameter 'utf8' [ 286.478903][ T6483] exFAT-fs (loop2): bogus number of FAT structure [ 286.491900][ T6483] exFAT-fs (loop2): failed to read boot sector [ 286.517242][ T6483] exFAT-fs (loop2): failed to recognize exfat type [ 286.572644][ T4763] usb 4-1: selecting invalid altsetting 0 [ 286.803378][ T4763] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 286.810815][ T4763] usb 4-1: No valid video chain found. [ 286.850001][ T4763] usb 4-1: selecting invalid altsetting 0 [ 286.855833][ T4763] usbtest: probe of 4-1:220.1 failed with error -22 [ 286.914058][ T4763] usb 4-1: USB disconnect, device number 9 [ 286.950864][ T6490] netlink: 68 bytes leftover after parsing attributes in process `syz.4.671'. [ 287.053736][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.669'. [ 287.741552][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 288.295235][ T4287] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 288.333392][ T6505] binder: BINDER_SET_CONTEXT_MGR already set [ 288.397210][ T6505] binder: 6504:6505 ioctl 4018620d 200000004a80 returned -16 [ 288.460518][ T6509] loop4: detected capacity change from 0 to 1024 [ 288.483268][ T6509] EXT4-fs: Ignoring removed bh option [ 288.627753][ T6509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.691327][ T6513] loop3: detected capacity change from 0 to 512 [ 288.751350][ T6513] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 289.110750][ T6511] loop1: detected capacity change from 0 to 512 [ 289.117859][ T6511] EXT4-fs: Ignoring removed nobh option [ 289.166951][ T6513] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.680: corrupted in-inode xattr [ 289.212951][ T6511] EXT4-fs (loop1): orphan cleanup on readonly fs [ 289.220217][ T6511] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.679: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 289.236058][ T6511] EXT4-fs (loop1): Remounting filesystem read-only [ 289.242655][ T6511] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.679: ea_inode dec ref err=-117 [ 289.255638][ T6511] EXT4-fs (loop1): 1 orphan inode deleted [ 289.262339][ T6511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.272509][ T6511] EXT4-fs (loop1): unmounting filesystem. [ 289.375082][ T6513] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.680: couldn't read orphan inode 15 (err -117) [ 289.456845][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.568446][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 289.869778][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 289.942682][ T6529] loop0: detected capacity change from 0 to 1024 [ 290.066503][ T6529] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 290.147217][ T6524] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 290.202581][ T6529] hfsplus: request for non-existent node 64 in B*Tree [ 290.217013][ T6529] hfsplus: request for non-existent node 64 in B*Tree [ 290.225539][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 290.236945][ T6529] hfsplus: failed to load root directory [ 290.505033][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 290.559468][ T6539] netlink: 68 bytes leftover after parsing attributes in process `syz.3.687'. [ 290.696913][ T4763] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 290.907252][ T4763] usb 5-1: Using ep0 maxpacket: 8 [ 290.933946][ T4763] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 290.944138][ T4763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 290.952929][ T4763] usb 5-1: Product: syz [ 290.957782][ T4763] usb 5-1: Manufacturer: syz [ 290.962547][ T4763] usb 5-1: SerialNumber: syz [ 291.017763][ T4763] usb 5-1: config 0 descriptor?? [ 291.073034][ T4763] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 291.272379][ T4763] gspca_sn9c2028: read1 error -32 [ 291.339163][ T6544] loop1: detected capacity change from 0 to 1024 [ 291.373865][ T6544] EXT4-fs: Ignoring removed bh option [ 291.447710][ T6550] binder: BINDER_SET_CONTEXT_MGR already set [ 291.476819][ T6550] binder: 6545:6550 ioctl 4018620d 200000004a80 returned -16 [ 291.486983][ T4763] gspca_sn9c2028: read1 error -71 [ 291.492125][ T4763] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 291.505525][ T4763] usb 5-1: USB disconnect, device number 17 [ 291.543352][ T6544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.830395][ T6553] loop2: detected capacity change from 0 to 512 [ 291.837383][ T6553] EXT4-fs: Ignoring removed nobh option [ 292.092596][ T6553] EXT4-fs (loop2): orphan cleanup on readonly fs [ 292.106609][ T6553] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.693: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 292.319305][ T6553] EXT4-fs (loop2): Remounting filesystem read-only [ 292.325911][ T6553] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.693: ea_inode dec ref err=-117 [ 292.341788][ T6553] EXT4-fs (loop2): 1 orphan inode deleted [ 292.347681][ T6553] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 292.357861][ T6553] EXT4-fs (loop2): unmounting filesystem. [ 292.364255][ T4287] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 292.373221][ T4287] Bluetooth: hci4: Injecting HCI hardware error event [ 292.383104][ T4279] Bluetooth: hci4: hardware error 0x00 [ 292.730866][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 292.742888][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 292.863523][ T6572] netlink: 68 bytes leftover after parsing attributes in process `syz.4.700'. [ 292.906866][ T4321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 293.377132][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.403058][ T4321] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 293.446907][ T4321] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 293.476261][ T4321] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 293.506287][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.530469][ T4321] usb 4-1: Product: syz [ 293.543227][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 293.553451][ T4321] usb 4-1: Manufacturer: syz [ 293.572796][ T4321] usb 4-1: SerialNumber: syz [ 293.801702][ T4768] usb 4-1: USB disconnect, device number 10 [ 293.825350][ T6588] binder: 6585:6588 ioctl c0306201 0 returned -14 [ 293.837540][ T6584] loop2: detected capacity change from 0 to 256 [ 293.879916][ T6584] exfat: Deprecated parameter 'utf8' [ 293.933999][ T6584] exFAT-fs (loop2): bogus number of FAT structure [ 293.971002][ T6584] exFAT-fs (loop2): failed to read boot sector [ 293.999321][ T6584] exFAT-fs (loop2): failed to recognize exfat type [ 294.112992][ T6591] loop0: detected capacity change from 0 to 128 [ 294.131018][ T6594] loop4: detected capacity change from 0 to 1024 [ 294.192389][ T6594] EXT4-fs: Ignoring removed bh option [ 294.203046][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 294.328321][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 294.427509][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 295.208150][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 295.444015][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 296.020215][ T6614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.712'. [ 296.177625][ T6592] loop1: detected capacity change from 0 to 512 [ 296.184843][ T6592] EXT4-fs: Ignoring removed nobh option [ 296.235074][ T6592] EXT4-fs (loop1): orphan cleanup on readonly fs [ 296.246198][ T6592] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.708: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 296.262497][ T6592] EXT4-fs (loop1): Remounting filesystem read-only [ 296.269208][ T6592] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.708: ea_inode dec ref err=-117 [ 296.282436][ T6592] EXT4-fs (loop1): 1 orphan inode deleted [ 296.288482][ T6592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 296.298698][ T6592] EXT4-fs (loop1): unmounting filesystem. [ 297.223276][ T6627] loop1: detected capacity change from 0 to 64 [ 297.280822][ T6630] binder: 6629:6630 ioctl c0306201 0 returned -14 [ 297.376340][ T6632] loop2: detected capacity change from 0 to 64 [ 297.411130][ T6632] hfs: session requires an argument [ 297.416424][ T6632] hfs: unable to parse mount options [ 297.467898][ T4383] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.585014][ T6636] loop4: detected capacity change from 0 to 1024 [ 297.650803][ T6636] EXT4-fs: Ignoring removed bh option [ 297.736844][ T4768] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 297.784199][ T6636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.865291][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 297.935706][ T4768] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.989956][ T4768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.110356][ T4768] usb 1-1: config 0 descriptor?? [ 298.204889][ T4768] cp210x 1-1:0.0: cp210x converter detected [ 298.418046][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 298.571061][ T4768] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 298.599458][ T4768] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 298.617054][ T4768] usb 1-1: cp210x converter now attached to ttyUSB0 [ 298.861607][ T6654] loop3: detected capacity change from 0 to 512 [ 298.868763][ T6654] EXT4-fs: Ignoring removed nobh option [ 298.895930][ T4485] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 298.912840][ T4768] usb 1-1: USB disconnect, device number 13 [ 298.922364][ T4768] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.931732][ T4768] cp210x 1-1:0.0: device disconnected [ 298.945989][ T6654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.953270][ T6654] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.729: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 298.969866][ T6654] EXT4-fs (loop3): Remounting filesystem read-only [ 298.976490][ T6654] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.3.729: ea_inode dec ref err=-117 [ 298.990468][ T6654] EXT4-fs (loop3): 1 orphan inode deleted [ 298.996278][ T6654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.006580][ T6654] EXT4-fs (loop3): unmounting filesystem. [ 299.024654][ T6659] loop1: detected capacity change from 0 to 256 [ 299.074168][ T6659] exfat: Deprecated parameter 'utf8' [ 299.101228][ T6659] exFAT-fs (loop1): bogus number of FAT structure [ 299.127177][ T4485] usb 5-1: Using ep0 maxpacket: 16 [ 299.137464][ T4485] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.147727][ T6659] exFAT-fs (loop1): failed to read boot sector [ 299.147768][ T6659] exFAT-fs (loop1): failed to recognize exfat type [ 299.291106][ T4485] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.333726][ T4485] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 299.388642][ T4485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.454912][ T4485] usb 5-1: config 0 descriptor?? [ 299.606326][ T6670] binder: 6669:6670 ioctl c0306201 0 returned -14 [ 299.659620][ T6672] loop0: detected capacity change from 0 to 16 [ 299.683550][ T6672] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 299.695174][ T6672] erofs: DAX unsupported by block device. Turning off DAX. [ 299.703715][ T6672] erofs: (device loop0): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 299.846972][ T4707] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 299.921830][ T6678] loop0: detected capacity change from 0 to 1024 [ 299.935262][ T6678] EXT4-fs: Ignoring removed bh option [ 299.990738][ T6678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 300.053686][ T4707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.079820][ T4707] usb 2-1: config 7 has an invalid interface number: 83 but max is 0 [ 300.167181][ T4707] usb 2-1: config 7 has no interface number 0 [ 300.186814][ T4768] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 300.212041][ T4707] usb 2-1: config 7 interface 83 has no altsetting 0 [ 300.301125][ T4707] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=68.62 [ 300.411848][ T4707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.504291][ T4707] usb 2-1: Product: syz [ 300.551900][ T4707] usb 2-1: Manufacturer: syz [ 300.632209][ T4707] usb 2-1: SerialNumber: syz [ 300.853774][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 300.898619][ T4768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.913746][ T4768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.927644][ T4768] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.941286][ T4768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.952745][ T4768] usb 4-1: config 0 descriptor?? [ 300.971567][ T4707] usb 2-1: USB disconnect, device number 4 [ 301.177780][ T4768] usbhid 4-1:0.0: can't add hid device: -71 [ 301.186632][ T4768] usbhid: probe of 4-1:0.0 failed with error -71 [ 301.231512][ T4768] usb 4-1: USB disconnect, device number 11 [ 302.026983][ T4763] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 302.041622][ T4321] usb 5-1: USB disconnect, device number 18 [ 302.179302][ T6699] loop1: detected capacity change from 0 to 256 [ 302.207838][ T6699] exfat: Deprecated parameter 'utf8' [ 302.228954][ T6699] exFAT-fs (loop1): bogus number of FAT structure [ 302.236578][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.268679][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.311611][ T6699] exFAT-fs (loop1): failed to read boot sector [ 302.319762][ T4763] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 302.342651][ T6699] exFAT-fs (loop1): failed to recognize exfat type [ 302.361655][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.065907][ T6701] loop4: detected capacity change from 0 to 32768 [ 303.104899][ T4763] usb 4-1: config 0 descriptor?? [ 303.434580][ T4763] usb 4-1: can't set config #0, error -71 [ 304.233994][ T4383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.240863][ T4763] usb 4-1: USB disconnect, device number 12 [ 304.444257][ T6701] XFS (loop4): Mounting V5 Filesystem [ 304.554311][ T6701] XFS (loop4): Ending clean mount [ 304.674598][ T6727] loop1: detected capacity change from 0 to 1024 [ 304.712975][ T4283] XFS (loop4): Unmounting Filesystem [ 304.733046][ T6727] EXT4-fs: Ignoring removed bh option [ 304.799924][ T6727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 304.996799][ T4485] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 305.057096][ T4327] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 305.280904][ T4327] usb 3-1: Using ep0 maxpacket: 8 [ 305.333805][ T4327] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.473529][ T4327] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 305.550060][ T4327] usb 3-1: can't read configurations, error -71 [ 305.638197][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 305.676801][ T4485] usb 4-1: Using ep0 maxpacket: 8 [ 305.686136][ T4485] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 305.704998][ T4485] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 305.755942][ T4485] usb 4-1: Product: syz [ 305.766094][ T4485] usb 4-1: Manufacturer: syz [ 305.781405][ T4485] usb 4-1: SerialNumber: syz [ 305.812650][ T4485] usb 4-1: config 0 descriptor?? [ 305.852953][ T4485] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 306.012330][ T6743] ubi16: attaching mtd0 [ 306.019622][ T6743] ubi16: scanning is finished [ 306.024431][ T6743] ubi16: empty MTD device detected [ 306.142464][ T6743] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 306.151487][ T6743] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 306.159559][ T6743] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 306.166753][ T6743] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 306.174297][ T6743] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 306.181535][ T6743] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 306.189694][ T6743] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 272716989 [ 306.199772][ T6743] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 306.235605][ T6749] ubi16: background thread "ubi_bgt16d" started, PID 6749 [ 306.270162][ T4485] gspca_zc3xx: reg_r err -71 [ 306.276633][ T4485] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 306.287198][ T6748] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 306.305648][ T4485] usb 4-1: USB disconnect, device number 13 [ 306.352596][ T6746] loop1: detected capacity change from 0 to 4096 [ 306.392286][ T6746] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 307.811172][ T6758] loop0: detected capacity change from 0 to 256 [ 307.856185][ T6758] exfat: Deprecated parameter 'utf8' [ 307.927200][ T6758] exFAT-fs (loop0): bogus number of FAT structure [ 307.964156][ T6758] exFAT-fs (loop0): failed to read boot sector [ 308.018711][ T6758] exFAT-fs (loop0): failed to recognize exfat type [ 308.834476][ T6768] loop4: detected capacity change from 0 to 32768 [ 308.837096][ T4485] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 308.928256][ T6768] XFS (loop4): Mounting V5 Filesystem [ 308.979239][ T6768] XFS (loop4): Ending clean mount [ 309.070012][ T4485] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.100011][ T4485] usb 4-1: config 3 has an invalid interface number: 92 but max is 0 [ 309.159066][ T4485] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 309.216903][ T4485] usb 4-1: config 3 has no interface number 0 [ 309.225213][ T6784] loop0: detected capacity change from 0 to 1024 [ 309.241720][ T4485] usb 4-1: config 3 interface 92 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.274589][ T4485] usb 4-1: config 3 interface 92 has no altsetting 0 [ 309.286033][ T6784] EXT4-fs: Ignoring removed bh option [ 309.309614][ T4485] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 309.355559][ T6784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.360414][ T4485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.974830][ T4485] usb 4-1: Product: syz [ 309.979396][ T4485] usb 4-1: Manufacturer: syz [ 309.984068][ T4485] usb 4-1: SerialNumber: syz [ 310.003318][ T6792] loop1: detected capacity change from 0 to 8 [ 310.086591][ T4283] XFS (loop4): Unmounting Filesystem [ 310.097446][ T6792] SQUASHFS error: zlib decompression failed, data probably corrupt [ 310.105994][ T6792] SQUASHFS error: Failed to read block 0x9b: -5 [ 310.113364][ T6792] SQUASHFS error: Unable to read metadata cache entry [99] [ 310.121725][ T6792] SQUASHFS error: Unable to read inode 0x127 [ 310.178802][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 310.185308][ T4383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.210385][ T4485] usb 4-1: probing VID:PID(0424:012C) [ 310.237896][ T4485] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 310.247747][ T4485] vub300: probe of 4-1:3.92 failed with error -22 [ 310.272223][ T4485] usb 4-1: USB disconnect, device number 14 [ 310.553098][ T6803] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 310.716099][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 311.225391][ T6814] loop1: detected capacity change from 0 to 32768 [ 311.244181][ T4763] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.261106][ T6809] loop3: detected capacity change from 0 to 256 [ 311.304090][ T6809] exfat: Deprecated parameter 'utf8' [ 311.369284][ T6809] exFAT-fs (loop3): bogus number of FAT structure [ 311.392315][ T6814] XFS (loop1): Mounting V5 Filesystem [ 311.426815][ T6809] exFAT-fs (loop3): failed to read boot sector [ 311.433493][ T6809] exFAT-fs (loop3): failed to recognize exfat type [ 311.477021][ T4763] usb 3-1: Using ep0 maxpacket: 8 [ 311.488915][ T4763] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 311.557838][ T6814] XFS (loop1): Ending clean mount [ 311.757915][ T4763] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 311.840741][ T4763] usb 3-1: Product: syz [ 311.857601][ T4763] usb 3-1: Manufacturer: syz [ 311.873419][ T4763] usb 3-1: SerialNumber: syz [ 311.906643][ T4763] usb 3-1: config 0 descriptor?? [ 311.969266][ T4763] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 312.372433][ T4763] gspca_zc3xx: reg_r err -71 [ 312.379918][ T4763] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 312.438603][ T4763] usb 3-1: USB disconnect, device number 11 [ 312.675489][ T6831] loop4: detected capacity change from 0 to 1024 [ 312.736205][ T6831] EXT4-fs: Ignoring removed bh option [ 312.819676][ T4281] XFS (loop1): Unmounting Filesystem [ 313.024238][ T6831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 314.504918][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 314.863879][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 314.921029][ T4769] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.046268][ T6860] loop2: detected capacity change from 0 to 256 [ 315.077993][ T6860] exfat: Deprecated parameter 'utf8' [ 315.106503][ T6860] exFAT-fs (loop2): bogus number of FAT structure [ 315.124512][ T4769] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.140026][ T6860] exFAT-fs (loop2): failed to read boot sector [ 315.153053][ T4769] usb 5-1: config 3 has an invalid interface number: 92 but max is 0 [ 315.171757][ T4769] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 315.184803][ T6860] exFAT-fs (loop2): failed to recognize exfat type [ 315.209291][ T4769] usb 5-1: config 3 has no interface number 0 [ 315.399419][ T4769] usb 5-1: config 3 interface 92 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.413871][ T4769] usb 5-1: config 3 interface 92 has no altsetting 0 [ 315.424342][ T4769] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 315.449742][ T4769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.460290][ T4769] usb 5-1: Product: syz [ 315.464535][ T4769] usb 5-1: Manufacturer: syz [ 315.470772][ T4769] usb 5-1: SerialNumber: syz [ 316.707072][ T4769] usb 5-1: probing VID:PID(0424:012C) [ 316.713870][ T4769] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 316.749282][ T4769] vub300: probe of 5-1:3.92 failed with error -22 [ 316.797355][ T4769] usb 5-1: USB disconnect, device number 19 [ 316.830895][ T6879] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 316.870930][ T6880] loop1: detected capacity change from 0 to 1024 [ 316.909829][ T6880] EXT4-fs: Ignoring removed bh option [ 316.971688][ T6880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 317.219555][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.228644][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.817905][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 317.881974][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 318.355523][ T6903] loop0: detected capacity change from 0 to 256 [ 318.405954][ T6903] exfat: Deprecated parameter 'utf8' [ 318.484615][ T6903] exFAT-fs (loop0): bogus number of FAT structure [ 318.511770][ T6903] exFAT-fs (loop0): failed to read boot sector [ 318.543577][ T6903] exFAT-fs (loop0): failed to recognize exfat type [ 319.532178][ T6913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.807'. [ 319.620987][ T6900] loop1: detected capacity change from 0 to 32768 [ 319.818601][ T6900] XFS (loop1): Mounting V5 Filesystem [ 320.048415][ T6900] XFS (loop1): Ending clean mount [ 322.012461][ T6934] loop2: detected capacity change from 0 to 1024 [ 322.031051][ T4281] XFS (loop1): Unmounting Filesystem [ 322.040838][ T6934] EXT4-fs: Ignoring removed bh option [ 322.467816][ T6934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 322.758266][ T6941] netlink: 68 bytes leftover after parsing attributes in process `syz.4.812'. [ 323.302543][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 323.539976][ T6948] loop0: detected capacity change from 0 to 4096 [ 323.616904][ T6948] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 324.666949][ T6960] loop2: detected capacity change from 0 to 512 [ 324.705871][ T6960] EXT4-fs: Ignoring removed nobh option [ 324.742424][ T6969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.821'. [ 324.878361][ T6960] EXT4-fs (loop2): orphan cleanup on readonly fs [ 324.936261][ T6960] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.817: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 325.030522][ T6972] loop3: detected capacity change from 0 to 256 [ 325.037851][ T6972] exfat: Deprecated parameter 'utf8' [ 325.042642][ T6960] EXT4-fs (loop2): Remounting filesystem read-only [ 325.043518][ T6972] exfat: Deprecated parameter 'utf8' [ 325.051006][ T6960] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.817: ea_inode dec ref err=-117 [ 325.073439][ T6972] exfat: Deprecated parameter 'utf8' [ 325.137045][ T6972] exfat: Deprecated parameter 'namecase' [ 325.184944][ T6972] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 325.236489][ T6960] EXT4-fs (loop2): 1 orphan inode deleted [ 325.242601][ T6960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 325.252768][ T6960] EXT4-fs (loop2): unmounting filesystem. [ 325.798360][ T6982] loop4: detected capacity change from 0 to 256 [ 326.121022][ T6986] loop1: detected capacity change from 0 to 32768 [ 326.151352][ T6986] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.826 (6986) [ 326.169079][ T6986] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.179728][ T6986] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 326.188594][ T6986] BTRFS info (device loop1): turning on sync discard [ 326.195438][ T6986] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 326.204955][ T6986] BTRFS info (device loop1): use zstd compression, level 3 [ 326.212361][ T6986] BTRFS info (device loop1): turning on async discard [ 326.230509][ T6986] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 326.241375][ T6986] BTRFS info (device loop1): trying to use backup root at mount time [ 326.249713][ T6986] BTRFS info (device loop1): enabling auto defrag [ 326.256332][ T6986] BTRFS info (device loop1): using free space tree [ 326.335403][ T6982] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 326.506355][ T9] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 326.565142][ T6986] BTRFS error (device loop1): failed to load root extent [ 326.572550][ T6986] BTRFS warning (device loop1): try to load backup roots slot 1 [ 326.581303][ T4408] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 326.688975][ T6986] BTRFS warning (device loop1): couldn't read tree root [ 326.696075][ T6986] BTRFS warning (device loop1): try to load backup roots slot 2 [ 326.704617][ T6986] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 326.716092][ T6986] BTRFS warning (device loop1): couldn't read tree root [ 326.723170][ T6986] BTRFS warning (device loop1): try to load backup roots slot 3 [ 326.793569][ T6986] BTRFS info (device loop1): enabling ssd optimizations [ 326.802044][ T6986] BTRFS info (device loop1): rebuilding free space tree [ 326.814664][ T6986] BTRFS info (device loop1): checking UUID tree [ 326.948178][ T7013] loop4: detected capacity change from 0 to 1024 [ 326.979856][ T7013] EXT4-fs: Ignoring removed bh option [ 327.064260][ T4281] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.116851][ T7013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 327.903197][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 327.942291][ T7024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.833'. [ 328.412277][ T7036] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 328.459167][ T7038] loop0: detected capacity change from 0 to 256 [ 328.488466][ T7038] exfat: Deprecated parameter 'utf8' [ 328.493856][ T7038] exfat: Deprecated parameter 'utf8' [ 328.537986][ T7038] exfat: Deprecated parameter 'utf8' [ 328.555950][ T7038] exfat: Deprecated parameter 'namecase' [ 328.621490][ T7038] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 329.300597][ T7030] loop4: detected capacity change from 0 to 32768 [ 329.351555][ T4319] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 329.435439][ T7030] XFS (loop4): Mounting V5 Filesystem [ 329.558590][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.586936][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.600338][ T4319] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.613898][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.624360][ T4319] usb 3-1: config 0 descriptor?? [ 329.679413][ T7030] XFS (loop4): Ending clean mount [ 330.033177][ T4319] usbhid 3-1:0.0: can't add hid device: -71 [ 330.044908][ T4319] usbhid: probe of 3-1:0.0 failed with error -71 [ 330.086205][ T4319] usb 3-1: USB disconnect, device number 12 [ 330.323553][ T4283] XFS (loop4): Unmounting Filesystem [ 330.667080][ T4319] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 330.806764][ T7062] loop0: detected capacity change from 0 to 1024 [ 330.814231][ T7062] EXT4-fs: Ignoring removed bh option [ 330.868558][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.889604][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.890538][ T7062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 330.950204][ T4319] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 330.961153][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.971787][ T4319] usb 3-1: config 0 descriptor?? [ 330.980596][ T4319] pegasus_notetaker 3-1:0.0: packet size is too small (0) [ 330.988226][ T4319] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 331.187240][ T4319] usbhid 3-1:0.0: can't add hid device: -71 [ 331.260914][ T4319] usbhid: probe of 3-1:0.0 failed with error -71 [ 331.431592][ T4319] usb 3-1: USB disconnect, device number 13 [ 331.661123][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.845'. [ 331.791236][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 331.960032][ T7075] loop2: detected capacity change from 0 to 256 [ 331.993240][ T7075] exfat: Deprecated parameter 'utf8' [ 332.019340][ T7075] exfat: Deprecated parameter 'utf8' [ 332.024730][ T7075] exfat: Deprecated parameter 'utf8' [ 332.066808][ T4707] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 332.086899][ T7075] exfat: Deprecated parameter 'namecase' [ 332.131677][ T7075] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 332.269645][ T4707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.292394][ T4707] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 332.354980][ T4707] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 332.423103][ T4707] usb 2-1: config 3 has no interface number 0 [ 332.447603][ T7084] loop4: detected capacity change from 0 to 64 [ 332.628719][ T7085] loop0: detected capacity change from 0 to 512 [ 332.637767][ T7085] EXT4-fs: Ignoring removed nobh option [ 332.760192][ T7085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 332.769251][ T7085] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.850: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 332.804620][ T7085] EXT4-fs (loop0): Remounting filesystem read-only [ 332.811449][ T7085] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.850: ea_inode dec ref err=-117 [ 332.825131][ T7085] EXT4-fs (loop0): 1 orphan inode deleted [ 332.831076][ T7085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 332.847163][ T7085] EXT4-fs (loop0): unmounting filesystem. [ 333.169091][ T4707] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 333.180413][ T4707] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 333.191046][ T4707] usb 2-1: config 3 interface 92 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.204775][ T4707] usb 2-1: config 3 interface 92 has no altsetting 0 [ 333.239455][ T4707] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 333.256769][ T4707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.265235][ T4707] usb 2-1: Product: syz [ 333.279733][ T4707] usb 2-1: Manufacturer: syz [ 333.285902][ T4707] usb 2-1: SerialNumber: syz [ 333.303666][ T7069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.532954][ T4707] usb 2-1: probing VID:PID(0424:012C) [ 333.539638][ T4707] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 333.546139][ T4707] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 333.626777][ T4318] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 333.654407][ T4707] vub300: probe of 2-1:3.92 failed with error -22 [ 333.672331][ T4707] usb 2-1: USB disconnect, device number 5 [ 333.836938][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 333.846264][ T4318] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.895473][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.943843][ T4318] usb 3-1: config 0 has no interface number 0 [ 333.995489][ T4318] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.002742][ T7077] loop3: detected capacity change from 0 to 32768 [ 334.033902][ T7077] ================================================================================ [ 334.043450][ T7077] UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2368:4 [ 334.050752][ T7077] shift exponent 32 is too large for 32-bit type 'int' [ 334.057755][ T7077] CPU: 1 PID: 7077 Comm: syz.3.848 Not tainted syzkaller #0 [ 334.065891][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.076185][ T7077] Call Trace: [ 334.079508][ T7077] [ 334.082479][ T7077] dump_stack_lvl+0x188/0x24e [ 334.087058][ T4318] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 334.087292][ T7077] ? show_regs_print_info+0x12/0x12 [ 334.101576][ T7077] ? load_image+0x410/0x410 [ 334.106129][ T7077] ? memset+0x1e/0x40 [ 334.110153][ T7077] ubsan_epilogue+0xa/0x30 [ 334.114612][ T7077] __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 [ 334.121095][ T7077] ocfs2_fill_super+0xf0d/0x5020 [ 334.126071][ T7077] ? mark_lock+0x94/0x320 [ 334.130447][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.135510][ T7077] ? ocfs2_mount+0x40/0x40 [ 334.139953][ T7077] ? mark_lock+0x94/0x320 [ 334.144330][ T7077] ? is_bpf_text_address+0x22/0x2a0 [ 334.149558][ T7077] ? mark_lock+0x94/0x320 [ 334.153927][ T7077] ? mark_lock+0x94/0x320 [ 334.158292][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.163361][ T7077] ? __kernel_text_address+0x9/0x30 [ 334.168629][ T7077] ? verify_lock_unused+0x140/0x140 [ 334.173866][ T7077] ? mark_lock+0x94/0x320 [ 334.178231][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.183300][ T7077] ? alloc_super+0x1fb/0x930 [ 334.187921][ T7077] ? reacquire_held_locks+0x319/0x5c0 [ 334.193329][ T7077] ? alloc_super+0x1fb/0x930 [ 334.197944][ T7077] ? string+0x257/0x290 [ 334.202131][ T7077] ? widen_string+0x3b/0x2b0 [ 334.206790][ T7077] ? string+0x257/0x290 [ 334.211014][ T7077] ? bdev_name+0x2c5/0x400 [ 334.215464][ T7077] ? pointer+0x122/0xfe0 [ 334.219749][ T7077] ? format_decode+0x8b1/0x1330 [ 334.224654][ T7077] ? snprintf+0xe5/0x140 [ 334.228940][ T7077] ? vscnprintf+0x80/0x80 [ 334.233306][ T7077] ? up_write+0x1b6/0x410 [ 334.237672][ T7077] ? set_blocksize+0x1d0/0x470 [ 334.242472][ T7077] ? sb_set_blocksize+0xa5/0xe0 [ 334.247355][ T7077] mount_bdev+0x28a/0x3c0 [ 334.251714][ T7077] ? ocfs2_mount+0x40/0x40 [ 334.256160][ T7077] legacy_get_tree+0xe6/0x180 [ 334.260867][ T7077] ? trace_raw_output_ocfs2_buffer_cached_end+0xf0/0xf0 [ 334.267832][ T7077] vfs_get_tree+0x88/0x270 [ 334.272279][ T7077] do_new_mount+0x247/0xa40 [ 334.276822][ T7077] __se_sys_mount+0x2e3/0x3d0 [ 334.281540][ T7077] ? __x64_sys_mount+0xc0/0xc0 [ 334.286341][ T7077] ? lockdep_hardirqs_on+0x94/0x140 [ 334.291573][ T7077] ? __x64_sys_mount+0x1c/0xc0 [ 334.296373][ T7077] do_syscall_64+0x4c/0xa0 [ 334.300819][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 334.305519][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 334.310321][ T7077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.316264][ T7077] RIP: 0033:0x7f1e3459e0ca [ 334.320743][ T7077] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.340407][ T7077] RSP: 002b:00007f1e353ede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.348855][ T7077] RAX: ffffffffffffffda RBX: 00007f1e353edee0 RCX: 00007f1e3459e0ca [ 334.356854][ T7077] RDX: 0000200000004440 RSI: 0000200000000040 RDI: 00007f1e353edea0 [ 334.364849][ T7077] RBP: 0000200000004440 R08: 00007f1e353edee0 R09: 00000000000008c0 [ 334.372843][ T7077] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000200000000040 [ 334.380835][ T7077] R13: 00007f1e353edea0 R14: 0000000000004443 R15: 0000200000000140 [ 334.388850][ T7077] [ 334.403651][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.414097][ T4318] usb 3-1: config 0 descriptor?? [ 334.422403][ T7077] ================================================================================ [ 334.469979][ T4318] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 334.477619][ T7077] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 334.479742][ T7098] loop4: detected capacity change from 0 to 1024 [ 334.491223][ T7077] CPU: 0 PID: 7077 Comm: syz.3.848 Not tainted syzkaller #0 [ 334.498568][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.502794][ T7098] EXT4-fs: Ignoring removed bh option [ 334.514186][ T7077] Call Trace: [ 334.517520][ T7077] [ 334.520501][ T7077] dump_stack_lvl+0x188/0x24e [ 334.525344][ T7077] ? memcpy+0x3c/0x60 [ 334.529402][ T7077] ? show_regs_print_info+0x12/0x12 [ 334.534670][ T7077] ? load_image+0x410/0x410 [ 334.539265][ T7077] panic+0x2d3/0x710 [ 334.543242][ T7077] ? bpf_jit_dump+0xd0/0xd0 [ 334.547820][ T7077] ? memset+0x1e/0x40 [ 334.552058][ T7077] check_panic_on_warn+0x80/0xa0 [ 334.557068][ T7077] __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 [ 334.563754][ T7077] ocfs2_fill_super+0xf0d/0x5020 [ 334.568760][ T7077] ? mark_lock+0x94/0x320 [ 334.573160][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.578432][ T7077] ? ocfs2_mount+0x40/0x40 [ 334.583260][ T7077] ? mark_lock+0x94/0x320 [ 334.587724][ T7077] ? is_bpf_text_address+0x22/0x2a0 [ 334.592984][ T7077] ? mark_lock+0x94/0x320 [ 334.597731][ T7077] ? mark_lock+0x94/0x320 [ 334.602133][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.607232][ T7077] ? __kernel_text_address+0x9/0x30 [ 334.612509][ T7077] ? verify_lock_unused+0x140/0x140 [ 334.617766][ T7077] ? mark_lock+0x94/0x320 [ 334.622249][ T7077] ? __lock_acquire+0x13e3/0x7bd0 [ 334.627534][ T7077] ? alloc_super+0x1fb/0x930 [ 334.632223][ T7077] ? reacquire_held_locks+0x319/0x5c0 [ 334.637673][ T7077] ? alloc_super+0x1fb/0x930 [ 334.642494][ T7077] ? string+0x257/0x290 [ 334.646712][ T7077] ? widen_string+0x3b/0x2b0 [ 334.651379][ T7077] ? string+0x257/0x290 [ 334.655596][ T7077] ? bdev_name+0x2c5/0x400 [ 334.660080][ T7077] ? pointer+0x122/0xfe0 [ 334.664427][ T7077] ? format_decode+0x8b1/0x1330 [ 334.669370][ T7077] ? snprintf+0xe5/0x140 [ 334.673680][ T7077] ? vscnprintf+0x80/0x80 [ 334.678815][ T7077] ? up_write+0x1b6/0x410 [ 334.683862][ T7077] ? set_blocksize+0x1d0/0x470 [ 334.688727][ T7077] ? sb_set_blocksize+0xa5/0xe0 [ 334.693647][ T7077] mount_bdev+0x28a/0x3c0 [ 334.698033][ T7077] ? ocfs2_mount+0x40/0x40 [ 334.702515][ T7077] legacy_get_tree+0xe6/0x180 [ 334.707247][ T7077] ? trace_raw_output_ocfs2_buffer_cached_end+0xf0/0xf0 [ 334.714382][ T7077] vfs_get_tree+0x88/0x270 [ 334.718866][ T7077] do_new_mount+0x247/0xa40 [ 334.724132][ T7077] __se_sys_mount+0x2e3/0x3d0 [ 334.728879][ T7077] ? __x64_sys_mount+0xc0/0xc0 [ 334.734189][ T7077] ? lockdep_hardirqs_on+0x94/0x140 [ 334.739571][ T7077] ? __x64_sys_mount+0x1c/0xc0 [ 334.744414][ T7077] do_syscall_64+0x4c/0xa0 [ 334.749016][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 334.754377][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 334.759707][ T7077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.766284][ T7077] RIP: 0033:0x7f1e3459e0ca [ 334.770863][ T7077] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.791225][ T7077] RSP: 002b:00007f1e353ede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.799725][ T7077] RAX: ffffffffffffffda RBX: 00007f1e353edee0 RCX: 00007f1e3459e0ca [ 334.807842][ T7077] RDX: 0000200000004440 RSI: 0000200000000040 RDI: 00007f1e353edea0 [ 334.815875][ T7077] RBP: 0000200000004440 R08: 00007f1e353edee0 R09: 00000000000008c0 [ 334.823902][ T7077] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000200000000040 [ 334.831933][ T7077] R13: 00007f1e353edea0 R14: 0000000000004443 R15: 0000200000000140 [ 334.839990][ T7077] [ 334.843692][ T7077] Kernel Offset: disabled [ 334.848134][ T7077] Rebooting in 86400 seconds..