last executing test programs: 3m15.902592112s ago: executing program 0 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="c9", 0x1) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 3m15.694328625s ago: executing program 0 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240000000000800054000000000080003400000000008000640000020"], 0x9c}}, 0x0) 3m15.579515822s ago: executing program 0 (id=114): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000000) 3m15.498476606s ago: executing program 0 (id=116): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x4800, &(0x7f0000000380)={[{@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@gid}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@errors_continue}, {@errors_remount}]}, 0x1, 0x152a, &(0x7f00000037c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) 3m15.147599877s ago: executing program 0 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200e70308000300", @ANYBLOB="408d"], 0x40}}, 0x0) 3m14.75150127s ago: executing program 0 (id=126): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x30, 0x1000300, 0x0, 0x10}]) 3m14.213371141s ago: executing program 32 (id=126): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x30, 0x1000300, 0x0, 0x10}]) 1m12.251810621s ago: executing program 1 (id=1204): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x2, 0x1}, 0x10) 1m11.991823777s ago: executing program 1 (id=1205): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1}) 1m11.712113473s ago: executing program 1 (id=1207): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1m11.287885617s ago: executing program 1 (id=1213): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc02, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {}]}, 0x1, 0x151e, &(0x7f0000007640)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) 1m10.756088589s ago: executing program 1 (id=1218): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0x6, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f00000007c0)="a33399a946aa", 0x0, 0x75, 0x12, 0x2, 0x0}) 1m9.991906054s ago: executing program 1 (id=1223): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x6077, &(0x7f0000006480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x50) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 1m9.440607906s ago: executing program 33 (id=1223): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x6077, &(0x7f0000006480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x50) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 1m6.28881478s ago: executing program 2 (id=1247): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x42, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf6, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00#M'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m4.0587555s ago: executing program 2 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m0.516371617s ago: executing program 2 (id=1274): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 1m0.217626494s ago: executing program 2 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 59.749599491s ago: executing program 2 (id=1277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x40000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}], 0x38) 59.468055998s ago: executing program 2 (id=1278): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x29}) 58.806492677s ago: executing program 34 (id=1278): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x29}) 10.386130613s ago: executing program 4 (id=1571): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$VT_DISALLOCATE(r0, 0x5608) 9.772107129s ago: executing program 4 (id=1576): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000200), 0x4) 9.631115908s ago: executing program 4 (id=1578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 9.431069799s ago: executing program 4 (id=1579): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 9.08010442s ago: executing program 4 (id=1581): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.292133476s ago: executing program 4 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000900aaaaaaaaaaaa43bf91dee581aaaaaaaaaaaa0980c2000002aaaaaaaaaabbaaaaaaaaaaaa32bcaebfad9a574b6b261db7ff"]) 7.768911696s ago: executing program 35 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000900aaaaaaaaaaaa43bf91dee581aaaaaaaaaaaa0980c2000002aaaaaaaaaabbaaaaaaaaaaaa32bcaebfad9a574b6b261db7ff"]) 5.188743727s ago: executing program 3 (id=1602): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 3.404393351s ago: executing program 6 (id=1609): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x4a8, 0x1d8, 0x0, 0x1d8, 0x3c0, 0x3c0, 0x3c0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x81, 0x2}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x3, 0x2}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0xffffff00, 0xff, 0xd, 0x10, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x200, 0xc6, 0x1, 0x7f, 0x1, 0x8, 'veth0_virt_wifi\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x204}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:gpg_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f8) 3.280082298s ago: executing program 3 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3.179205954s ago: executing program 5 (id=1611): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9002000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 3.017753323s ago: executing program 3 (id=1612): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000500)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="a766d5a074a1c7176499812de870e534700859c06038b2298b48eceea64946ea1127d1049b6e059da541c60fa161afe57fc947e3833db5368ecff6d54a33d6648531fa8b1fd179d46cc861548fb6628821f4a1b11f471c734164745ec865e399f89c8f5b682a7df3d7c693f27f5d52c55781cd0f48435df45959faa4f8", @ANYRESOCT, @ANYBLOB="755b154ec75d71524d6613c415e10839b8ae000000000000ffff3b3ac69b748c4314d22ec85487abc5c78285138c51d979f457ee167c34bb9e2d88d15ddf56f006eab8f8b4155bd1aac2a44e1d52ee5402b2bfbc1242ec6930b178d71d374ce907288e233b9cd39d67476fd3ab3c9a84fce295ec770000000000000000002000000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x21, 0x61dc, &(0x7f0000007cc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2.989488005s ago: executing program 6 (id=1613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r1, 0x321, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x4008080) 2.717612941s ago: executing program 5 (id=1614): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000900)={{0x80}}) 2.703839882s ago: executing program 6 (id=1615): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@discard}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x183341, 0x60) 2.367908332s ago: executing program 5 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcb9334c04f4b3ee2}, 0x0) close(0x3) 2.203890621s ago: executing program 6 (id=1617): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x101) 2.04357647s ago: executing program 5 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 1.966769415s ago: executing program 6 (id=1619): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@swalloc}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000100)={0x4, 0x1, 0x1}) 1.681277861s ago: executing program 5 (id=1620): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x1800004, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0x84}}, {@noload}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x3, 0x47e, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0xc0506617, &(0x7f0000000080)={0x8, 0x4, 0xfffffffe, 0xe4d, 0x4}) 1.437338636s ago: executing program 3 (id=1621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.204290679s ago: executing program 5 (id=1622): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "2a0ae418"}, @main=@item_012={0x1, 0x0, 0x8, 'Q'}]}}, 0x0}, 0x0) 1.092616776s ago: executing program 3 (id=1623): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,noquota,discard=0x0000000000000007,discard=0x00000000000004e5,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 536.201309ms ago: executing program 6 (id=1624): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000001c40)={0x2, 0xff, @multicast2}, 0x10) 0s ago: executing program 3 (id=1625): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) kernel console output (not intermixed with test programs): 024][ T8527] loop3: detected capacity change from 0 to 1024 [ 183.743794][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.833118][ T8529] loop2: detected capacity change from 0 to 512 [ 183.867248][ T8527] hfsplus: bad catalog entry type [ 183.952923][ T8529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.986498][ T1109] hfsplus: b-tree write err: -5, ino 4 [ 184.062288][ T8529] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.311901][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.441107][ T8545] loop3: detected capacity change from 0 to 512 [ 184.472237][ T8545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.503499][ T8545] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.916: inode has both inline data and extents flags [ 184.524280][ T8545] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.916: couldn't read orphan inode 15 (err -117) [ 184.618283][ T8545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.836761][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.201274][ T8551] loop4: detected capacity change from 0 to 32768 [ 185.219335][ T8566] loop2: detected capacity change from 0 to 256 [ 185.291384][ T8566] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc1a35cbb, utbl_chksum : 0xe619d30d) [ 185.348214][ T8551] ERROR: (device loop4): duplicateIXtree: [ 185.348214][ T8551] [ 185.376332][ T8551] ERROR: (device loop4): remounting filesystem as read-only [ 185.409296][ T8568] loop1: detected capacity change from 0 to 1024 [ 185.559516][ T8568] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 185.589933][ T8568] hfsplus: xattr search failed [ 186.458372][ T8588] netlink: 'syz.2.936': attribute type 6 has an invalid length. [ 186.892176][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.122184][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 187.144090][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.174268][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.192591][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 187.205078][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.224949][ T23] usb 5-1: config 0 descriptor?? [ 187.249749][ T8604] set_capacity_and_notify: 1 callbacks suppressed [ 187.249767][ T8604] loop1: detected capacity change from 0 to 64 [ 187.701644][ T23] apple 0003:05AC:024B.000D: unknown global tag 0xe [ 187.719360][ T23] apple 0003:05AC:024B.000D: item 0 1 1 14 parsing failed [ 187.743059][ T23] apple 0003:05AC:024B.000D: parse failed [ 187.759334][ T23] apple: probe of 0003:05AC:024B.000D failed with error -22 [ 187.847859][ T8600] loop3: detected capacity change from 0 to 40427 [ 187.882145][ T8600] F2FS-fs (loop3): invalid crc value [ 187.922663][ T8600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.948261][ T9] usb 5-1: USB disconnect, device number 7 [ 188.066205][ T8596] loop2: detected capacity change from 0 to 65536 [ 188.113155][ T8600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 188.131353][ T8596] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 188.221462][ T5775] syz-executor: attempt to access beyond end of device [ 188.221462][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.251670][ T8596] XFS (loop2): Ending clean mount [ 188.280359][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 188.314553][ T8606] loop1: detected capacity change from 0 to 32768 [ 188.360768][ T8606] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.944 (8606) [ 188.409124][ T5767] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 188.448387][ T8606] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 188.496801][ T8606] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 188.522143][ T8606] BTRFS info (device loop1): turning on sync discard [ 188.573372][ T8606] BTRFS info (device loop1): turning on async discard [ 188.580267][ T8606] BTRFS info (device loop1): using free space tree [ 188.928343][ T8606] BTRFS info (device loop1): enabling ssd optimizations [ 189.118837][ T8642] loop4: detected capacity change from 0 to 512 [ 189.155017][ T8642] EXT4-fs: Ignoring removed orlov option [ 189.197320][ T8642] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 189.293028][ T8642] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.948: corrupted in-inode xattr: e_value size too large [ 189.360546][ T8642] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.948: couldn't read orphan inode 15 (err -117) [ 189.468676][ T5776] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.481821][ T8642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.704334][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.357320][ T8663] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 190.379460][ T8646] loop2: detected capacity change from 0 to 32768 [ 190.448027][ T8667] loop4: detected capacity change from 0 to 1024 [ 190.482757][ T8667] EXT4-fs: Ignoring removed nobh option [ 190.504707][ T8646] JBD2: Ignoring recovery information on journal [ 190.574116][ T8667] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 190.649932][ T8667] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 190.721200][ T8667] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 190.795997][ T8646] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.817279][ T5769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.244263][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 191.748854][ T8681] loop1: detected capacity change from 0 to 32768 [ 191.761537][ T8681] (syz.1.964,8681,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.788501][ T8681] (syz.1.964,8681,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.841125][ T8681] JBD2: Ignoring recovery information on journal [ 192.057156][ T8681] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 192.203449][ T27] audit: type=1326 audit(1770332693.931:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.2.977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e2c99aeb9 code=0x0 [ 192.302450][ T8681] syz.1.964: attempt to access beyond end of device [ 192.302450][ T8681] loop1: rw=2051, sector=28680, nr_sectors = 28664 limit=32768 [ 192.331600][ T8681] (syz.1.964,8681,1):ocfs2_trim_group:7510 ERROR: status = -5 [ 192.345122][ T8681] (syz.1.964,8681,1):ocfs2_trim_mainbm:7621 ERROR: status = -5 [ 192.533431][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 192.823018][ T8699] loop3: detected capacity change from 0 to 40427 [ 192.845333][ T8699] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 192.858995][ T8699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 192.889324][ T8699] F2FS-fs (loop3): invalid crc value [ 192.940736][ T8699] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.983424][ T8725] loop1: detected capacity change from 0 to 2048 [ 193.027221][ T8725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.115827][ T8699] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.153621][ T8699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.829657][ T8740] sp0: Synchronizing with TNC [ 193.892253][ T8740] sp0: Found TNC [ 194.201657][ T8730] loop2: detected capacity change from 0 to 32768 [ 194.299194][ T8730] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.393670][ T8756] hpfs: Bad magic ... probably not HPFS [ 194.432976][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.442089][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479012][ T8730] XFS (loop2): Ending clean mount [ 194.509504][ T8730] XFS (loop2): Quotacheck needed: Please wait. [ 194.677738][ T8730] XFS (loop2): Quotacheck: Done. [ 194.754705][ T8738] loop4: detected capacity change from 0 to 40427 [ 194.807261][ T8738] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 194.837037][ T8738] F2FS-fs (loop4): invalid crc value [ 194.874907][ T8738] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.896201][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.962968][ T5835] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 195.022078][ T8738] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.190784][ T5835] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 195.217413][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.246553][ T5835] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 195.277050][ T6238] syz-executor: attempt to access beyond end of device [ 195.277050][ T6238] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.279179][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.303958][ T8759] loop1: detected capacity change from 0 to 32768 [ 195.313046][ T6238] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 195.376385][ T5835] usb 4-1: config 0 descriptor?? [ 195.383754][ T8760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.386816][ T8766] loop2: detected capacity change from 0 to 64 [ 195.412919][ T8759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 195.536152][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 195.903108][ T5835] ryos 0003:1E7D:3138.000E: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 196.220840][ T970] usb 4-1: USB disconnect, device number 6 [ 196.469913][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'. [ 196.746754][ T8775] loop1: detected capacity change from 0 to 32768 [ 197.192485][ T970] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 197.240062][ T8785] loop2: detected capacity change from 0 to 32768 [ 197.282809][ T8785] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.394192][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.436655][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.459037][ T970] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 197.469083][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.491866][ T970] usb 4-1: config 0 descriptor?? [ 197.526726][ T8785] XFS (loop2): Ending clean mount [ 197.550983][ T8785] XFS (loop2): Quotacheck needed: Please wait. [ 197.641733][ T8785] XFS (loop2): Quotacheck: Done. [ 197.778012][ T8812] loop1: detected capacity change from 0 to 64 [ 197.859782][ T8814] loop4: detected capacity change from 0 to 512 [ 197.896574][ T8814] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1013: inode has both inline data and extents flags [ 197.925596][ T970] zydacron 0003:13EC:0006.000F: unknown main item tag 0x6 [ 197.955133][ T970] zydacron 0003:13EC:0006.000F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 197.966848][ T8814] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1013: couldn't read orphan inode 15 (err -117) [ 197.976356][ T8814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.165494][ T970] usb 4-1: USB disconnect, device number 7 [ 198.166100][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.687787][ T8823] loop1: detected capacity change from 0 to 40427 [ 198.697225][ T8823] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 198.705158][ T8823] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 198.714109][ T8823] F2FS-fs (loop1): invalid crc value [ 198.745033][ T8823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.900084][ T8823] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.927343][ T8823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 199.020331][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.055845][ T8839] bridge0: port 3(vlan3) entered blocking state [ 199.098789][ T8839] bridge0: port 3(vlan3) entered disabled state [ 199.117033][ T8839] vlan3: entered allmulticast mode [ 199.126951][ T8839] bridge0: entered allmulticast mode [ 199.173387][ T8839] vlan3: left allmulticast mode [ 199.205309][ T8839] bridge0: left allmulticast mode [ 199.564639][ T8843] Zero length message leads to an empty skb [ 199.853273][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 200.170744][ T8864] loop1: detected capacity change from 0 to 1024 [ 200.226471][ T8868] loop4: detected capacity change from 0 to 128 [ 200.292643][ T8868] FAT-fs (loop4): Directory bread(block 32) failed [ 200.321008][ T8867] loop2: detected capacity change from 0 to 4096 [ 200.336839][ T8868] FAT-fs (loop4): Directory bread(block 33) failed [ 200.364237][ T11] hfsplus: b-tree write err: -5, ino 4 [ 200.383395][ T8868] FAT-fs (loop4): Directory bread(block 34) failed [ 200.390110][ T8868] FAT-fs (loop4): Directory bread(block 35) failed [ 200.412239][ T8868] FAT-fs (loop4): Directory bread(block 36) failed [ 200.432148][ T8868] FAT-fs (loop4): Directory bread(block 37) failed [ 200.455979][ T8868] FAT-fs (loop4): Directory bread(block 38) failed [ 200.482321][ T8868] FAT-fs (loop4): Directory bread(block 39) failed [ 200.500356][ T8867] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 200.501493][ T8868] FAT-fs (loop4): Directory bread(block 40) failed [ 200.551206][ T8868] FAT-fs (loop4): Directory bread(block 41) failed [ 201.240684][ T8887] loop1: detected capacity change from 0 to 64 [ 201.351489][ T8887] hfs: keylen 56 too large [ 201.627355][ T8899] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 201.640492][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 201.648522][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 201.648550][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.655319][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 201.783147][ T8901] loop4: detected capacity change from 0 to 1024 [ 201.864953][ T9] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.887434][ T9] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 201.911288][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.923619][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 201.940902][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.968615][ T9] usb 3-1: config 0 descriptor?? [ 202.009036][ T11] hfsplus: b-tree write err: -5, ino 4 [ 202.469659][ T9] logitech-djreceiver 0003:046D:C51B.0010: unknown main item tag 0x0 [ 202.498601][ T9] logitech-djreceiver 0003:046D:C51B.0010: unknown main item tag 0x0 [ 202.521818][ T8918] warning: `syz.3.1060' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.727215][ T5835] usb 3-1: USB disconnect, device number 11 [ 203.054086][ T8911] loop1: detected capacity change from 0 to 32768 [ 203.100526][ T8911] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 203.138414][ T8911] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 203.439295][ T8911] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 203.600935][ T8911] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 203.636647][ T8937] loop3: detected capacity change from 0 to 16 [ 203.652536][ T8937] erofs: (device loop3): mounted with root inode @ nid 36. [ 203.754520][ T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.962412][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 203.981802][ T970] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 204.022771][ T970] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 204.050870][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.066413][ T970] usb 5-1: Product: syz [ 204.076469][ T970] usb 5-1: Manufacturer: syz [ 204.081255][ T970] usb 5-1: SerialNumber: syz [ 204.096464][ T970] usb 5-1: config 0 descriptor?? [ 204.110653][ T970] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.130014][ T970] usb 5-1: setting power ON [ 204.140090][ T970] dvb-usb: bulk message failed: -22 (2/0) [ 204.161514][ T970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.197844][ T970] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 204.226644][ T970] usb 5-1: media controller created [ 204.272646][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.325464][ T970] usb 5-1: selecting invalid altsetting 6 [ 204.331867][ T970] usb 5-1: digital interface selection failed (-22) [ 204.350409][ T8935] dvb-usb: bulk message failed: -22 (3/0) [ 204.358114][ T970] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 204.368220][ T8935] cxusb: i2c wr: len=78 is too big! [ 204.368220][ T8935] [ 204.386078][ T970] usb 5-1: setting power OFF [ 204.409942][ T970] dvb-usb: bulk message failed: -22 (2/0) [ 204.418588][ T970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 204.436550][ T970] (NULL device *): no alternate interface [ 204.475324][ T8949] loop1: detected capacity change from 0 to 1024 [ 204.508715][ T970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 204.561245][ T970] usb 5-1: USB disconnect, device number 8 [ 204.712075][ T27] audit: type=1800 audit(1770332706.431:29): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1075" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 205.583590][ T8977] loop2: detected capacity change from 0 to 128 [ 206.007495][ T8987] loop4: detected capacity change from 0 to 512 [ 206.050380][ T8987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.096864][ T8987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 206.132295][ T8987] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.269156][ T8996] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 206.310675][ T8996] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 206.331109][ T8997] use of bytesused == 0 is deprecated and will be removed in the future, [ 206.339935][ T8996] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.1093: Failed to acquire dquot type 0 [ 206.354116][ T8997] use the actual size instead. [ 206.490689][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 207.042374][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 207.091575][ T8989] loop1: detected capacity change from 0 to 40427 [ 207.114117][ T9013] loop2: detected capacity change from 0 to 4096 [ 207.133753][ T9013] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 207.153229][ T9013] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 207.166403][ T8989] F2FS-fs (loop1): invalid crc value [ 207.174299][ T8989] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.186845][ T9013] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 207.209775][ T9013] ntfs: volume version 3.1. [ 207.228972][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.276382][ T23] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 207.324547][ T9017] loop4: detected capacity change from 0 to 2048 [ 207.345999][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.387047][ T9017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.405673][ T8989] F2FS-fs (loop1): Start checkpoint disabled! [ 207.419534][ T23] usb 4-1: config 0 descriptor?? [ 207.464950][ T8989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 207.504395][ T5767] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 207.798208][ T9023] loop4: detected capacity change from 0 to 164 [ 207.872268][ T9023] Unsupported NM flag settings (240) [ 207.899730][ T23] sigmamicro 0003:1C4F:0059.0011: collection stack underflow [ 207.942959][ T23] sigmamicro 0003:1C4F:0059.0011: item 0 1 0 12 parsing failed [ 207.955235][ T59] kworker/u4:4: attempt to access beyond end of device [ 207.955235][ T59] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 207.966306][ T23] sigmamicro: probe of 0003:1C4F:0059.0011 failed with error -22 [ 207.979042][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 207.990904][ T9026] program syz.2.1110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.001553][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 208.173186][ T8] usb 4-1: USB disconnect, device number 8 [ 208.786039][ T9040] [U] ÿ [ 208.866623][ T9032] loop2: detected capacity change from 0 to 32768 [ 209.462643][ T787] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 209.654597][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.672720][ T787] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.712351][ T787] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.742403][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.759359][ T787] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 209.794405][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.805330][ T9062] loop3: detected capacity change from 0 to 256 [ 209.833402][ T787] usb 2-1: config 0 descriptor?? [ 209.914543][ T9062] FAT-fs (loop3): Directory bread(block 64) failed [ 209.942043][ T9062] FAT-fs (loop3): Directory bread(block 65) failed [ 209.948863][ T9062] FAT-fs (loop3): Directory bread(block 66) failed [ 209.976063][ T9062] FAT-fs (loop3): Directory bread(block 67) failed [ 209.984345][ T9054] loop4: detected capacity change from 0 to 32768 [ 210.002319][ T9062] FAT-fs (loop3): Directory bread(block 68) failed [ 210.019188][ T9062] FAT-fs (loop3): Directory bread(block 69) failed [ 210.039302][ T9054] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1123 (9054) [ 210.051802][ T9062] FAT-fs (loop3): Directory bread(block 70) failed [ 210.051845][ T9062] FAT-fs (loop3): Directory bread(block 71) failed [ 210.051946][ T9062] FAT-fs (loop3): Directory bread(block 72) failed [ 210.100656][ T9062] FAT-fs (loop3): Directory bread(block 73) failed [ 210.127341][ T9054] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 210.153890][ T9054] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 210.191176][ T9054] BTRFS info (device loop4): using free space tree [ 210.357221][ T787] kye 0003:0458:5019.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 210.369227][ T9054] BTRFS info (device loop4): enabling ssd optimizations [ 210.380204][ T9054] BTRFS info (device loop4): auto enabling async discard [ 210.405431][ T967] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 210.427565][ T787] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 210.428686][ T967] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 210.475711][ T787] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 210.508691][ T787] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 210.521001][ T787] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 210.572995][ T27] audit: type=1800 audit(1770332712.301:30): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1123" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 210.580125][ T787] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 210.630897][ T787] kye 0003:0458:5019.0012: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 210.675412][ T787] kye 0003:0458:5019.0012: tablet-enabling feature report not found [ 210.701569][ T787] kye 0003:0458:5019.0012: tablet enabling failed [ 210.733014][ T6238] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 210.780429][ T9085] fido_id[9085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.827190][ T787] usb 2-1: USB disconnect, device number 7 [ 211.138995][ T9093] fido_id[9093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 211.176877][ T9098] loop4: detected capacity change from 0 to 128 [ 211.261073][ T9098] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.322267][ T9098] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.347546][ T9098] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 211.355009][ T9098] EXT4-fs warning (device loop4): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 211.555784][ T6238] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.728207][ T9107] loop1: detected capacity change from 0 to 4096 [ 211.863944][ T9107] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 211.928639][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 212.024941][ T9107] ntfs3: loop1: ino=0, "file1" failed to parse mft record [ 212.094061][ T9120] loop2: detected capacity change from 0 to 512 [ 212.121076][ T9120] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.177841][ T9120] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 212.215085][ T9120] EXT4-fs (loop2): 1 truncate cleaned up [ 212.239642][ T9120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.397681][ T9120] EXT4-fs: user quota file already specified [ 212.491665][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.060821][ T9119] loop4: detected capacity change from 0 to 32768 [ 213.126147][ T9119] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.295792][ T9119] XFS (loop4): Ending clean mount [ 213.507490][ T6238] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.696614][ T9152] loop2: detected capacity change from 0 to 8192 [ 213.770580][ T9152] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.862138][ T9152] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 213.871452][ T9152] REISERFS (device loop2): using ordered data mode [ 213.884548][ T9157] loop4: detected capacity change from 0 to 512 [ 213.916131][ T9157] EXT4-fs: Ignoring removed oldalloc option [ 213.954943][ T9152] reiserfs: using flush barriers [ 213.978672][ T9157] EXT4-fs (loop4): 1 truncate cleaned up [ 213.990701][ T9152] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.023135][ T9157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.058504][ T9152] REISERFS (device loop2): checking transaction log (loop2) [ 214.137321][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 214.154039][ T9152] REISERFS (device loop2): Using r5 hash to sort names [ 214.357310][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.183791][ T9166] loop3: detected capacity change from 0 to 32768 [ 215.229373][ T9166] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 215.266880][ T9191] loop4: detected capacity change from 0 to 2048 [ 215.286605][ T9191] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 215.317420][ T9166] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 215.385534][ T9191] UDF-fs: unknown compression code (0) [ 215.643998][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 215.700287][ T9202] loop4: detected capacity change from 0 to 256 [ 215.789778][ T9202] FAT-fs (loop4): Directory bread(block 64) failed [ 215.809947][ T9202] FAT-fs (loop4): Directory bread(block 65) failed [ 215.822409][ T9202] FAT-fs (loop4): Directory bread(block 66) failed [ 215.829019][ T9202] FAT-fs (loop4): Directory bread(block 67) failed [ 215.872399][ T9202] FAT-fs (loop4): Directory bread(block 68) failed [ 215.879018][ T9202] FAT-fs (loop4): Directory bread(block 69) failed [ 215.932311][ T9202] FAT-fs (loop4): Directory bread(block 70) failed [ 215.939830][ T9202] FAT-fs (loop4): Directory bread(block 71) failed [ 215.972381][ T9202] FAT-fs (loop4): Directory bread(block 72) failed [ 215.979012][ T9202] FAT-fs (loop4): Directory bread(block 73) failed [ 216.401018][ T9199] loop2: detected capacity change from 0 to 32768 [ 216.515364][ T9215] kernel profiling enabled (shift: 9) [ 216.586135][ T9217] loop1: detected capacity change from 0 to 1024 [ 216.589966][ T9199] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 216.589966][ T9199] [ 216.684613][ T9199] ERROR: (device loop2): remounting filesystem as read-only [ 216.702667][ T9199] ialloc: diAlloc returned -5! [ 216.739589][ T11] hfsplus: b-tree write err: -5, ino 4 [ 216.894448][ T9223] loop4: detected capacity change from 0 to 2048 [ 216.944735][ T9223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.986090][ T9223] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.1185: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 217.045020][ T9223] EXT4-fs (loop4): Remounting filesystem read-only [ 217.086674][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.474762][ T9237] loop2: detected capacity change from 0 to 1024 [ 217.530216][ T9237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 217.530343][ T9237] System zones: 0-1, 3-12 [ 217.547283][ T9237] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.636463][ T9241] loop1: detected capacity change from 0 to 256 [ 217.639620][ T9237] EXT4-fs error (device loop2): ext4_nfs_get_inode:1552: inode #11: comm syz.2.1186: iget: bad extra_isize 2080 (inode size 256) [ 217.788682][ T9241] FAT-fs (loop1): Directory bread(block 64) failed [ 217.788727][ T9241] FAT-fs (loop1): Directory bread(block 65) failed [ 217.788837][ T9241] FAT-fs (loop1): Directory bread(block 66) failed [ 217.788870][ T9241] FAT-fs (loop1): Directory bread(block 67) failed [ 217.788971][ T9241] FAT-fs (loop1): Directory bread(block 68) failed [ 217.788999][ T9241] FAT-fs (loop1): Directory bread(block 69) failed [ 217.789097][ T9241] FAT-fs (loop1): Directory bread(block 70) failed [ 217.789127][ T9241] FAT-fs (loop1): Directory bread(block 71) failed [ 217.789224][ T9241] FAT-fs (loop1): Directory bread(block 72) failed [ 217.789253][ T9241] FAT-fs (loop1): Directory bread(block 73) failed [ 217.799033][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 218.210831][ T9250] loop1: detected capacity change from 0 to 16 [ 218.226281][ T9250] erofs: (device loop1): mounted with root inode @ nid 36. [ 218.249600][ T27] audit: type=1800 audit(1770332719.971:31): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1194" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 218.282260][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.497615][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.529766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.571205][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00 [ 218.588155][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.609214][ T9] usb 3-1: config 0 descriptor?? [ 218.714467][ T9262] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.810084][ T9261] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 218.867004][ T9261] Remounting filesystem read-only [ 218.949583][ T6238] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 218.970261][ T6238] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 218.989811][ T6238] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 219.016797][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.043217][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.069131][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.082572][ T9268] vcan1: entered promiscuous mode [ 219.088204][ T9268] team0: Device vcan1 is of different type [ 219.097688][ T9] hid-generic 0003:046D:0026.0014: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.2-1/input0 [ 219.102878][ T6238] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 219.167216][ T6238] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 219.186582][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.202589][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.213975][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.227041][ T6238] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 219.234131][ T6238] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 219.241584][ T6238] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 219.249400][ T6238] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 219.292047][ T6238] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 219.308208][ T967] usb 3-1: USB disconnect, device number 12 [ 219.326283][ T6238] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 219.342185][ T6238] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 219.349671][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.369535][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.392265][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.424490][ T6238] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 219.431278][ T6238] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 219.472184][ T6238] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 219.493550][ T6238] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 219.500946][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.534068][ T6238] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 219.548068][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.573102][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.592170][ T6238] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 219.599451][ T6238] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.078986][ T5777] Bluetooth: hci1: link tx timeout [ 220.086090][ T5777] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.132186][ T9293] set_capacity_and_notify: 1 callbacks suppressed [ 220.132948][ T9293] loop1: detected capacity change from 0 to 256 [ 220.147393][ T9293] exfat: Deprecated parameter 'namecase' [ 220.171475][ T9293] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 220.190139][ T9295] loop4: detected capacity change from 0 to 1024 [ 220.209877][ T9288] loop2: detected capacity change from 0 to 2048 [ 220.283667][ T9300] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.291803][ T9295] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 220.308194][ T9295] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 220.333374][ T9295] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.1214: Failed to acquire dquot type 0 [ 220.377797][ T9288] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 220.419078][ T9295] EXT4-fs error (device loop4): mb_free_blocks:1954: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 220.428255][ T9288] Remounting filesystem read-only [ 220.496314][ T9295] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #13: comm syz.4.1214: corrupted inode contents [ 220.508680][ T5767] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 220.576293][ T9295] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #13: comm syz.4.1214: mark_inode_dirty error [ 220.576956][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 220.576978][ T5767] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 220.576995][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577011][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577028][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577286][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 220.577304][ T5767] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 220.577319][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577335][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577348][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577623][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 220.577640][ T5767] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 220.577655][ T5767] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 220.577668][ T5767] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 220.577682][ T5767] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 220.577701][ T5767] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 220.577716][ T5767] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 220.577730][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577745][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.577759][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.579854][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 220.579874][ T5767] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 220.579891][ T5767] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 220.579906][ T5767] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 220.579920][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.579942][ T5767] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 220.579957][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.579972][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.579988][ T5767] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 220.580003][ T5767] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.585397][ T9295] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #13: comm syz.4.1214: corrupted inode contents [ 220.594825][ T9295] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.1214: mark_inode_dirty error [ 220.907887][ T9295] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #13: comm syz.4.1214: corrupted inode contents [ 220.974440][ T9295] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 221.009434][ T9295] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #13: comm syz.4.1214: corrupted inode contents [ 221.036700][ T9295] EXT4-fs error (device loop4): ext4_truncate:4294: inode #13: comm syz.4.1214: mark_inode_dirty error [ 221.063331][ T9295] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 221.078586][ T9295] EXT4-fs (loop4): 1 truncate cleaned up [ 221.086584][ T9295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.197619][ T9295] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 221.230951][ T9309] loop2: detected capacity change from 0 to 256 [ 221.253258][ T9307] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 221.332579][ T9307] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 221.354181][ T9309] FAT-fs (loop2): Directory bread(block 64) failed [ 221.365872][ T9309] FAT-fs (loop2): Directory bread(block 65) failed [ 221.382165][ T9309] FAT-fs (loop2): Directory bread(block 66) failed [ 221.397565][ T9309] FAT-fs (loop2): Directory bread(block 67) failed [ 221.413863][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.429039][ T9309] FAT-fs (loop2): Directory bread(block 68) failed [ 221.447437][ T9309] FAT-fs (loop2): Directory bread(block 69) failed [ 221.467981][ T9309] FAT-fs (loop2): Directory bread(block 70) failed [ 221.485249][ T9309] FAT-fs (loop2): Directory bread(block 71) failed [ 221.502209][ T9309] FAT-fs (loop2): Directory bread(block 72) failed [ 221.508788][ T9309] FAT-fs (loop2): Directory bread(block 73) failed [ 221.585869][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.624488][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.790561][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.969842][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.103452][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 222.285117][ T9325] loop4: detected capacity change from 0 to 512 [ 222.297087][ T9311] loop3: detected capacity change from 0 to 32768 [ 222.322819][ T9325] EXT4-fs: Ignoring removed oldalloc option [ 222.359349][ T9325] EXT4-fs (loop4): 1 truncate cleaned up [ 222.399274][ T9311] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.400606][ T9325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.566279][ T9311] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 222.686426][ T9337] syz.2.1231 (9337) used greatest stack depth: 20688 bytes left [ 222.718892][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.741354][ T9311] XFS (loop3): Starting recovery (logdev: internal) [ 222.904749][ T9311] XFS (loop3): Ending recovery (logdev: internal) [ 222.930094][ T9311] XFS (loop3): Quotacheck needed: Please wait. [ 222.957159][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1233'. [ 223.032476][ T9343] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 223.066162][ T9311] XFS (loop3): Quotacheck: Done. [ 223.074585][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.085172][ T9347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 223.092145][ T9347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.100440][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.113638][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.126569][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.141809][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.151385][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.159661][ T9347] vhci_hcd vhci_hcd.0: Device attached [ 223.269405][ T9348] vhci_hcd: connection closed [ 223.282555][ T764] vhci_hcd: stop threads [ 223.328682][ T764] vhci_hcd: release socket [ 223.371736][ T764] vhci_hcd: disconnect device [ 223.385492][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.422116][ T967] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 223.429698][ T967] usb 41-1: enqueue for inactive port 0 [ 223.560331][ T967] vhci_hcd: vhci_device speed not set [ 223.971435][ T9369] loop3: detected capacity change from 0 to 512 [ 224.047368][ T9369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01d, mo2=0002] [ 224.070847][ T9369] System zones: 1-12 [ 224.130710][ T9369] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1235: Directory hole found for htree index block 0 [ 224.221392][ T9378] loop4: detected capacity change from 0 to 2048 [ 224.223983][ T9369] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 224.246040][ T9369] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1235: Directory hole found for htree index block 0 [ 224.275643][ T9369] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 224.297423][ T9378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.309273][ T9369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.387335][ T27] audit: type=1800 audit(1770332726.111:32): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1240" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 224.518843][ T9369] EXT4-fs: Ignoring removed orlov option [ 224.563315][ T9369] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 224.617099][ T9369] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 224.755332][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.920017][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 224.971852][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 225.222179][ T5777] Bluetooth: hci3: command tx timeout [ 225.432358][ T787] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 225.448107][ T11] hsr_slave_0: left promiscuous mode [ 225.498342][ T11] hsr_slave_1: left promiscuous mode [ 225.509391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.518191][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.533749][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.541324][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.550243][ T11] bridge_slave_1: left allmulticast mode [ 225.562119][ T11] bridge_slave_1: left promiscuous mode [ 225.580225][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.610333][ T11] bridge_slave_0: left allmulticast mode [ 225.622496][ T11] bridge_slave_0: left promiscuous mode [ 225.628435][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.662518][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 225.680819][ T787] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 225.740273][ T787] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.777093][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.802403][ T787] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 225.811538][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.811552][ T11] veth1_macvtap: left promiscuous mode [ 225.842178][ T11] veth0_macvtap: left promiscuous mode [ 225.853359][ T11] veth1_vlan: left promiscuous mode [ 225.862256][ T11] veth0_vlan: left promiscuous mode [ 225.892259][ T787] usb 3-1: config 0 descriptor?? [ 225.962323][ T9394] loop3: detected capacity change from 0 to 32768 [ 226.014103][ T9394] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.309185][ T9394] XFS (loop3): Ending clean mount [ 226.317836][ T9394] XFS (loop3): Quotacheck needed: Please wait. [ 226.329589][ T787] uclogic 0003:28BD:0074.0015: interface is invalid, ignoring [ 226.465538][ T9394] XFS (loop3): Quotacheck: Done. [ 226.601062][ T787] usb 3-1: USB disconnect, device number 13 [ 226.827771][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.312979][ T5777] Bluetooth: hci3: command tx timeout [ 227.782384][ T9437] loop4: detected capacity change from 0 to 32768 [ 227.841360][ T9437] diRead: diIAGRead returned -5 [ 228.095698][ T9444] loop3: detected capacity change from 0 to 32768 [ 228.202971][ T9444] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 228.536499][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 228.561384][ T11] team0 (unregistering): Port device team_slave_1 removed [ 228.712799][ T11] team0 (unregistering): Port device team_slave_0 removed [ 228.840620][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.956079][ T9452] loop3: detected capacity change from 0 to 128 [ 228.970475][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.257936][ T27] audit: type=1326 audit(1770332730.981:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.286967][ T27] audit: type=1326 audit(1770332730.981:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.309905][ T27] audit: type=1326 audit(1770332730.981:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.391415][ T5777] Bluetooth: hci3: command tx timeout [ 229.397656][ T27] audit: type=1326 audit(1770332730.981:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.436662][ T27] audit: type=1326 audit(1770332730.981:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.461169][ T27] audit: type=1326 audit(1770332731.021:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.494250][ T27] audit: type=1326 audit(1770332731.021:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.542713][ T27] audit: type=1326 audit(1770332730.981:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.571196][ T27] audit: type=1326 audit(1770332731.021:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.602751][ T27] audit: type=1326 audit(1770332731.021:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc5e39aeb9 code=0x7ffc0000 [ 229.951768][ T9464] loop3: detected capacity change from 0 to 64 [ 230.311571][ T11] bond0 (unregistering): Released all slaves [ 230.642323][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.692207][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.699588][ T9345] bridge_slave_0: entered allmulticast mode [ 230.734130][ T9345] bridge_slave_0: entered promiscuous mode [ 230.751036][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.776988][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.794294][ T9345] bridge_slave_1: entered allmulticast mode [ 230.803838][ T9345] bridge_slave_1: entered promiscuous mode [ 230.858503][ T9474] loop4: detected capacity change from 0 to 1024 [ 230.882133][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 230.924146][ T9474] EXT4-fs: Ignoring removed nobh option [ 230.931513][ T9474] EXT4-fs: Ignoring removed bh option [ 230.951839][ T9345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.963369][ T9474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.996297][ T9345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.087576][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 231.124624][ T787] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.142252][ T787] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.144305][ T9474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.163264][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.171515][ T787] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 231.202126][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.247782][ T787] usb 4-1: config 0 descriptor?? [ 231.276248][ T9345] team0: Port device team_slave_0 added [ 231.374154][ T9345] team0: Port device team_slave_1 added [ 231.402270][ T27] audit: type=1800 audit(1770332733.121:43): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1273" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 231.463444][ T5777] Bluetooth: hci3: command tx timeout [ 231.492254][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.513079][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.556108][ T9345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.558485][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.579638][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.587560][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.633271][ T9345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.793650][ T787] wacom 0003:056A:032C.0016: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0 [ 232.006737][ T787] usb 4-1: USB disconnect, device number 9 [ 232.018375][ T9491] fido_id[9491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:032C.0016/report_descriptor': No such device [ 232.091884][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.196015][ T9345] hsr_slave_0: entered promiscuous mode [ 232.213545][ T9345] hsr_slave_1: entered promiscuous mode [ 232.245740][ T9345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.262078][ T9345] Cannot create hsr debugfs directory [ 232.380925][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.545539][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.756010][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.770764][ T9504] loop3: detected capacity change from 0 to 256 [ 232.780255][ T9504] exfat: Deprecated parameter 'namecase' [ 232.810954][ T9504] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 233.443953][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.462525][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.487433][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.512771][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.520739][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.530444][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.873727][ T9345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.977656][ T9345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.168162][ T9345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.206227][ T9345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.319863][ T9534] team0: Device ip6tnl1 is of different type [ 234.807703][ T9548] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 234.860056][ T9548] team0: Port device dummy0 added [ 234.953970][ T9549] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 235.000450][ T9549] team0: Port device dummy0 removed [ 235.027608][ T9549] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.293109][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.313807][ T9543] loop4: detected capacity change from 0 to 40427 [ 235.343030][ T9543] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 235.388901][ T9543] F2FS-fs (loop4): invalid crc value [ 235.403045][ T9543] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.586409][ T9512] chnl_net:caif_netlink_parms(): no params data found [ 235.623780][ T51] Bluetooth: hci0: command tx timeout [ 235.633235][ T9543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.668052][ T9559] loop3: detected capacity change from 0 to 4096 [ 235.692117][ T11] hsr_slave_0: left promiscuous mode [ 235.729630][ T9559] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 235.742235][ T11] hsr_slave_1: left promiscuous mode [ 235.782973][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.790477][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.844718][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.863987][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.873354][ T6238] syz-executor: attempt to access beyond end of device [ 235.873354][ T6238] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.902577][ T6238] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 235.910949][ T11] bridge0: port 3(batadv0) entered disabled state [ 235.958936][ T11] bridge_slave_1: left allmulticast mode [ 235.965414][ T9559] ntfs3: loop3: Failed to load $Extend (-22). [ 235.971566][ T9559] ntfs3: loop3: Failed to initialize $Extend. [ 235.992771][ T11] bridge_slave_1: left promiscuous mode [ 235.998725][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.020041][ T11] bridge_slave_0: left allmulticast mode [ 236.032335][ T11] bridge_slave_0: left promiscuous mode [ 236.038377][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.121162][ T11] veth1_macvtap: left promiscuous mode [ 236.139153][ T11] veth0_macvtap: left promiscuous mode [ 236.157737][ T11] veth1_vlan: left promiscuous mode [ 236.177353][ T11] veth0_vlan: left promiscuous mode [ 236.379348][ T5777] Bluetooth: hci2: hardware error 0x09 [ 237.488234][ T9589] loop3: detected capacity change from 0 to 512 [ 237.513466][ T9589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.544418][ T9589] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.617161][ T9583] loop4: detected capacity change from 0 to 32768 [ 237.659832][ T9589] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.1301: Invalid block bitmap block 0 in block_group 0 [ 237.683184][ T9589] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 237.700096][ T9589] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1301: attempt to clear invalid blocks 983261 len 1 [ 237.702726][ T51] Bluetooth: hci0: command tx timeout [ 237.757386][ T9589] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.1301: Invalid inode table block 0 in block_group 0 [ 237.794824][ T9583] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 237.809513][ T9589] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 237.844895][ T9589] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 237.862334][ T9589] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.1301: Invalid inode table block 0 in block_group 0 [ 237.875698][ T9589] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 237.886271][ T9589] EXT4-fs error (device loop3): ext4_truncate:4294: inode #11: comm syz.3.1301: mark_inode_dirty error [ 237.900275][ T9589] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 237.917787][ T9589] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.1301: Invalid inode table block 0 in block_group 0 [ 237.933565][ T9589] EXT4-fs (loop3): 1 truncate cleaned up [ 237.940679][ T9589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.115392][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.504956][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 238.596120][ T11] team0 (unregistering): Port device team_slave_1 removed [ 238.707355][ T9600] loop4: detected capacity change from 0 to 1024 [ 238.743208][ T9600] EXT4-fs: inline encryption not supported [ 238.749217][ T9600] EXT4-fs: Ignoring removed bh option [ 238.756104][ T11] team0 (unregistering): Port device team_slave_0 removed [ 238.818513][ T9600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.898583][ T9600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.941874][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.218911][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.232654][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.784662][ T5777] Bluetooth: hci0: command tx timeout [ 239.849228][ T9607] loop4: detected capacity change from 0 to 4096 [ 239.871520][ T9607] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 239.919890][ T9607] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 239.962902][ T9607] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 239.995727][ T9607] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 240.032154][ T9607] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 240.100677][ T9607] ntfs: volume version 3.1. [ 240.142564][ T9607] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 240.202495][ T9607] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 240.270289][ T9607] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 240.294157][ T9607] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 240.327897][ T9607] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 240.714165][ T11] bond0 (unregistering): Released all slaves [ 240.894531][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.922293][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.999434][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.007657][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.015532][ T9512] bridge_slave_0: entered allmulticast mode [ 241.024735][ T9512] bridge_slave_0: entered promiscuous mode [ 241.060204][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.067462][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.112967][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.129003][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.136477][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 241.150441][ T9512] bridge_slave_1: entered allmulticast mode [ 241.159137][ T42] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 241.168226][ T9512] bridge_slave_1: entered promiscuous mode [ 241.174253][ T42] usb 5-1: config 0 has no interface number 0 [ 241.210151][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.217381][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.229908][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 241.239267][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.250446][ T42] usb 5-1: Product: syz [ 241.272028][ T42] usb 5-1: Manufacturer: syz [ 241.276718][ T42] usb 5-1: SerialNumber: syz [ 241.299101][ T42] usb 5-1: config 0 descriptor?? [ 241.317375][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.323240][ T42] hub 5-1:0.132: bad descriptor, ignoring hub [ 241.350010][ T42] hub: probe of 5-1:0.132 failed with error -5 [ 241.350635][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.367404][ T42] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input16 [ 241.509879][ T9512] team0: Port device team_slave_0 added [ 241.609500][ T9512] team0: Port device team_slave_1 added [ 241.646894][ T9345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.663508][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.682312][ T9345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.713318][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.863591][ T5777] Bluetooth: hci0: command tx timeout [ 241.890954][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.915672][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.969146][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.983080][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.010944][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.100204][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.259353][ T9512] hsr_slave_0: entered promiscuous mode [ 242.286908][ T9512] hsr_slave_1: entered promiscuous mode [ 242.590586][ T9345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.972472][ T9512] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.006471][ T9512] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.070894][ T9512] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.125728][ T9512] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.141522][ T9654] loop4: detected capacity change from 0 to 256 [ 243.151677][ T9636] loop3: detected capacity change from 0 to 32768 [ 243.184081][ T9636] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1315 (9636) [ 243.256690][ T9654] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 243.310404][ T9636] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.357792][ T9636] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 243.392394][ T9636] BTRFS info (device loop3): using free space tree [ 243.544383][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.672278][ T9636] BTRFS info (device loop3): enabling ssd optimizations [ 243.679340][ T9636] BTRFS info (device loop3): auto enabling async discard [ 243.763055][ T9512] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.834671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.841902][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.880128][ T9685] loop4: detected capacity change from 0 to 128 [ 243.909372][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.916728][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.948772][ T9685] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 244.001308][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.024067][ T9685] sysv_count_free_blocks: >flc_size entries in free-list block [ 244.211216][ T9685] sysv_count_free_inodes: unable to read inode table [ 244.336091][ T6238] sysv_free_block: flc_count > flc_size [ 244.341817][ T6238] sysv_free_block: flc_count > flc_size [ 244.371890][ T9512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.389313][ T6238] sysv_free_block: flc_count > flc_size [ 244.399394][ T6238] sysv_free_block: flc_count > flc_size [ 244.429149][ T9345] veth0_vlan: entered promiscuous mode [ 244.432199][ T6238] sysv_free_block: flc_count > flc_size [ 244.440314][ T6238] sysv_free_block: flc_count > flc_size [ 244.465437][ T6238] sysv_free_block: flc_count > flc_size [ 244.471080][ T6238] sysv_free_block: flc_count > flc_size [ 244.512042][ T6238] sysv_free_block: flc_count > flc_size [ 244.517685][ T6238] sysv_free_block: flc_count > flc_size [ 244.536025][ T9345] veth1_vlan: entered promiscuous mode [ 244.554847][ T6238] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 244.746603][ T9345] veth0_macvtap: entered promiscuous mode [ 244.792729][ T9345] veth1_macvtap: entered promiscuous mode [ 244.877329][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.942487][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.986448][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.033393][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.064580][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.106179][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.152176][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.182289][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.212115][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.264064][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.346411][ T9345] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.389428][ T9345] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.391682][ T9709] loop3: detected capacity change from 0 to 4096 [ 245.422348][ T9345] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.431742][ T9345] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.443985][ T9709] __ntfs_warning: 6 callbacks suppressed [ 245.444001][ T9709] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 245.631769][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.655484][ T9709] ntfs: volume version 3.1. [ 245.842570][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.850491][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.937743][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.000465][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.271147][ T9728] loop3: detected capacity change from 0 to 512 [ 246.437878][ T42] usb 5-1: USB disconnect, device number 9 [ 246.453896][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.514398][ T9728] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.827790][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.936386][ T9512] veth0_vlan: entered promiscuous mode [ 247.001448][ T9512] veth1_vlan: entered promiscuous mode [ 247.037699][ T9718] loop4: detected capacity change from 0 to 32768 [ 247.105385][ T9512] veth0_macvtap: entered promiscuous mode [ 247.120371][ T9512] veth1_macvtap: entered promiscuous mode [ 247.143870][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.161099][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.178535][ T9718] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.192153][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.222119][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.252309][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.295119][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.336283][ T9758] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1329'. [ 247.350361][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.436789][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.502609][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.534014][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.557181][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.573965][ T9512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.600266][ T9718] XFS (loop4): Ending clean mount [ 247.607427][ T9512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.640281][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.732513][ T9512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.761297][ T9512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.781048][ T9512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.801060][ T9512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.180350][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.224076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.341129][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.363843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.561430][ T6238] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 249.140450][ T9792] loop5: detected capacity change from 0 to 4096 [ 249.208589][ T9792] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 249.343646][ T9792] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 249.579186][ T9345] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 249.986272][ T9811] sctp: [Deprecated]: syz.5.1341 (pid 9811) Use of int in max_burst socket option deprecated. [ 249.986272][ T9811] Use struct sctp_assoc_value instead [ 250.099137][ T9814] loop3: detected capacity change from 0 to 4096 [ 250.126787][ T9814] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 250.128227][ T9817] loop6: detected capacity change from 0 to 64 [ 250.287977][ T9814] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 250.295567][ T9820] ip6gretap1: entered allmulticast mode [ 251.498562][ T9847] loop3: detected capacity change from 0 to 4096 [ 251.582636][ T9855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.441048][ T9881] tipc: Enabling of bearer rejected, failed to enable media [ 252.605988][ T9884] loop3: detected capacity change from 0 to 128 [ 252.641367][ T9884] ufs: You didn't specify the type of your ufs filesystem [ 252.641367][ T9884] [ 252.641367][ T9884] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 252.641367][ T9884] [ 252.641367][ T9884] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 252.697947][ T9884] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 253.502583][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.636194][ T9920] loop3: detected capacity change from 0 to 1764 [ 253.712453][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 253.729393][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.772570][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.802236][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.842071][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.863247][ T23] usb 5-1: config 0 descriptor?? [ 253.894154][ T23] hub 5-1:0.0: USB hub found [ 254.174934][ T23] hub 5-1:0.0: 2 ports detected [ 254.320579][ T9936] loop3: detected capacity change from 0 to 128 [ 254.330825][ T9928] loop6: detected capacity change from 0 to 8192 [ 254.366577][ T23] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 254.388903][ T9936] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 254.396667][ T23] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 254.413915][ T9928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.433480][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 254.440113][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 254.450317][ T9928] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 254.467605][ T9928] REISERFS (device loop6): using ordered data mode [ 254.475884][ T9936] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.486729][ T9928] reiserfs: using flush barriers [ 254.504760][ T23] usb 5-1: USB disconnect, device number 10 [ 254.530639][ T9928] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.592663][ T9928] REISERFS (device loop6): checking transaction log (loop6) [ 254.633590][ T9928] REISERFS (device loop6): Using r5 hash to sort names [ 254.672936][ T9928] reiserfs: enabling write barrier flush mode [ 254.713527][ T9928] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 254.750611][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.760108][ T9928] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 254.790196][ T9928] REISERFS (device loop6): Remounting filesystem read-only [ 254.815723][ T9928] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 254.852040][ T9928] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 254.916043][ T9928] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 254.946039][ T9928] REISERFS error (device loop6): zam-7001 reiserfs_find_entry: io error [ 254.982282][ T9928] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 255.051740][ T9928] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 255.095917][ T9928] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 255.115689][ T9947] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1382'. [ 255.175588][ T9928] REISERFS warning (device loop6): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 255.231865][ T9928] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 255.303294][ T9928] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 255.334434][ T9928] REISERFS (device loop6): Remounting filesystem read-only [ 255.352276][ T9928] REISERFS error (device loop6): zam-7001 reiserfs_find_entry: io error [ 255.683339][ T9933] loop5: detected capacity change from 0 to 32768 [ 255.704132][ T9933] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1380 (9933) [ 255.773618][ T9933] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.776394][ T9963] loop6: detected capacity change from 0 to 64 [ 255.828698][ T9933] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 255.861864][ T9933] BTRFS info (device loop5): using free space tree [ 255.878345][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.885863][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.917493][ T9963] syz.6.1386: attempt to access beyond end of device [ 255.917493][ T9963] loop6: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 255.966844][ T9963] Buffer I/O error on dev loop6, logical block 65, lost async page write [ 255.978308][ T9963] syz.6.1386: attempt to access beyond end of device [ 255.978308][ T9963] loop6: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 255.992647][ T9963] Buffer I/O error on dev loop6, logical block 66, lost async page write [ 256.001316][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.001316][ T9963] loop6: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 256.020753][ T9963] Buffer I/O error on dev loop6, logical block 67, lost async page write [ 256.048024][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.048024][ T9963] loop6: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 256.075263][ T9963] Buffer I/O error on dev loop6, logical block 68, lost async page write [ 256.085828][ T9964] loop4: detected capacity change from 0 to 4096 [ 256.113219][ T9964] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 256.184088][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.184088][ T9963] loop6: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 256.248814][ T9933] BTRFS info (device loop5): enabling ssd optimizations [ 256.256329][ T9963] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 256.265111][ T9933] BTRFS info (device loop5): auto enabling async discard [ 256.273902][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.273902][ T9963] loop6: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 256.291474][ T9963] Buffer I/O error on dev loop6, logical block 73, lost async page write [ 256.318117][ T9964] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 256.339205][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.339205][ T9963] loop6: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 256.392143][ T9964] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 256.423236][ T9963] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 256.431841][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.431841][ T9963] loop6: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 256.468041][ T9964] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 256.518025][ T9964] ntfs: volume version 3.1. [ 256.562058][ T9963] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 256.588709][ T9963] syz.6.1386: attempt to access beyond end of device [ 256.588709][ T9963] loop6: rw=2049, sector=78, nr_sectors = 95 limit=64 [ 256.635895][ T9964] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 256.664193][ T9345] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.716418][ T9964] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 256.962671][ T6238] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 257.022998][ T9991] loop3: detected capacity change from 0 to 1764 [ 257.196441][ T9991] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 257.339464][ T9998] loop4: detected capacity change from 0 to 128 [ 257.483986][ T9998] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.579894][T10006] loop3: detected capacity change from 0 to 128 [ 257.607246][ T9998] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.634284][T10006] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.697103][T10006] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.935243][ T6238] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.113202][ T2947] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.309476][T10023] smc: net device bond0 applied user defined pnetid SYZ2 [ 258.644076][T10033] loop3: detected capacity change from 0 to 1024 [ 258.651711][T10033] EXT4-fs: Ignoring removed nobh option [ 258.703411][T10033] EXT4-fs: Ignoring removed bh option [ 258.733329][T10033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.752464][T10040] loop5: detected capacity change from 0 to 512 [ 258.822350][ T8] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 258.915243][T10033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.051116][ T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 259.086380][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.143908][ T8] usb 5-1: config 0 descriptor?? [ 259.265363][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.644805][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 259.750727][ T8] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 259.775188][ T8] [drm] Initialized udl on minor 2 [ 259.848021][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 259.917355][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 259.990913][ T8] usb 5-1: USB disconnect, device number 11 [ 260.001153][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 260.043307][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 260.089877][T10070] loop3: detected capacity change from 0 to 4096 [ 260.147117][T10070] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.209150][T10070] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 260.323578][T10079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.642694][T10087] loop5: detected capacity change from 0 to 256 [ 260.768116][T10087] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 261.300976][T10099] 9pnet_fd: Insufficient options for proto=fd [ 261.312802][T10102] loop3: detected capacity change from 0 to 256 [ 261.466289][T10102] FAT-fs (loop3): Directory bread(block 64) failed [ 261.492459][T10102] FAT-fs (loop3): Directory bread(block 65) failed [ 261.518520][T10102] FAT-fs (loop3): Directory bread(block 66) failed [ 261.543065][T10102] FAT-fs (loop3): Directory bread(block 67) failed [ 261.576448][T10102] FAT-fs (loop3): Directory bread(block 68) failed [ 261.588871][T10102] FAT-fs (loop3): Directory bread(block 69) failed [ 261.612262][T10102] FAT-fs (loop3): Directory bread(block 70) failed [ 261.630777][T10102] FAT-fs (loop3): Directory bread(block 71) failed [ 261.651301][T10102] FAT-fs (loop3): Directory bread(block 72) failed [ 261.670951][T10111] loop5: detected capacity change from 0 to 512 [ 261.672231][T10102] FAT-fs (loop3): Directory bread(block 73) failed [ 261.754097][T10111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.821015][T10111] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.067117][ T9345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.374677][T10094] loop6: detected capacity change from 0 to 32768 [ 262.460776][T10094] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 262.634265][T10141] loop3: detected capacity change from 0 to 4096 [ 262.644131][T10141] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 262.675323][T10141] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 262.693028][T10094] XFS (loop6): Ending clean mount [ 262.736240][T10094] XFS (loop6): Quotacheck needed: Please wait. [ 262.771734][T10141] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 262.819932][T10141] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 262.922353][T10141] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 262.950806][T10094] XFS (loop6): Quotacheck: Done. [ 262.962240][T10141] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 263.000559][T10144] loop5: detected capacity change from 0 to 4096 [ 263.070284][T10141] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 263.082213][T10141] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 263.183424][T10141] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 263.240149][T10141] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 263.320481][ T9512] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.354771][T10141] ntfs: volume version 3.1. [ 263.445068][T10144] ntfs3: loop5: ino=5, "/" directory corrupted [ 263.497798][T10144] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 263.523823][T10144] ntfs3: loop5: ino=5, "/" directory corrupted [ 263.908854][T10157] loop4: detected capacity change from 0 to 2048 [ 264.060156][T10157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 264.227305][T10157] EXT4-fs: Ignoring removed orlov option [ 264.238931][T10157] EXT4-fs (loop4): stripe (18) is not aligned with cluster size (16), stripe is disabled [ 264.242283][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.266317][T10157] EXT4-fs (loop4): can't enable nombcache during remount [ 264.379706][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 264.421499][T10165] loop3: detected capacity change from 0 to 8192 [ 264.462707][T10165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.502174][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 264.507434][T10165] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 264.517321][T10165] REISERFS (device loop3): using ordered data mode [ 264.524178][T10165] reiserfs: using flush barriers [ 264.543472][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.589129][T10165] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.606817][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.639065][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.683143][T10165] REISERFS (device loop3): checking transaction log (loop3) [ 264.702030][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.711308][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.773405][ T42] usb 6-1: config 0 descriptor?? [ 264.965306][T10165] REISERFS (device loop3): Using tea hash to sort names [ 264.984725][T10165] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 265.261189][ T42] microsoft 0003:045E:07DA.0017: collection stack underflow [ 265.291280][ T42] microsoft 0003:045E:07DA.0017: item 0 4 0 12 parsing failed [ 265.303586][ T42] microsoft 0003:045E:07DA.0017: parse failed [ 265.314932][ T42] microsoft: probe of 0003:045E:07DA.0017 failed with error -22 [ 265.501911][ T970] usb 6-1: USB disconnect, device number 2 [ 265.706444][T10186] loop3: detected capacity change from 0 to 4096 [ 265.714708][T10175] loop4: detected capacity change from 0 to 40427 [ 265.723462][T10175] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 265.731420][T10175] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 265.752097][T10186] ntfs: volume version 3.1. [ 265.757305][T10175] F2FS-fs (loop4): invalid crc value [ 265.787062][T10175] F2FS-fs (loop4): Found nat_bits in checkpoint [ 265.946629][T10175] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 265.964218][T10175] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 266.165621][ T2947] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 266.207825][ T2947] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 267.127758][T10215] loop5: detected capacity change from 0 to 2048 [ 267.180996][T10215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.718365][T10231] smc: net device bond0 applied user defined pnetid SYZ0 [ 267.819271][T10235] bridge_slave_0: default FDB implementation only supports local addresses [ 268.006741][ T5777] Bluetooth: to_multiplier 0 < 10 [ 268.291348][T10250] Bluetooth: MGMT ver 1.22 [ 268.598634][T10258] loop4: detected capacity change from 0 to 512 [ 268.637995][T10258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.705484][T10258] EXT4-fs (loop4): 1 truncate cleaned up [ 268.753615][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.799217][T10237] loop5: detected capacity change from 0 to 32768 [ 268.838104][T10237] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1464 (10237) [ 268.864288][T10258] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.1471: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 268.920032][T10237] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 268.946712][T10237] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 268.956890][T10237] BTRFS info (device loop5): enabling disk space caching [ 268.972084][T10237] BTRFS info (device loop5): force clearing of disk cache [ 268.994005][T10237] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 269.021362][T10258] EXT4-fs (loop4): Remounting filesystem read-only [ 269.030210][T10237] BTRFS info (device loop5): use zstd compression, level 3 [ 269.044043][T10237] BTRFS info (device loop5): disk space caching is enabled [ 269.048718][T10258] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.1471: Deleting old file: nlink 5, error=-117 [ 269.115573][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.333195][T10237] BTRFS info (device loop5): enabling ssd optimizations [ 269.368621][T10237] BTRFS info (device loop5): auto enabling async discard [ 269.417887][T10237] BTRFS info (device loop5): rebuilding free space tree [ 269.633411][T10237] BTRFS info (device loop5): disabling free space tree [ 269.654586][T10237] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.679678][T10237] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.696814][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1478'. [ 270.023973][ T5777] Bluetooth: hci0: command tx timeout [ 270.095139][T10265] loop6: detected capacity change from 0 to 32768 [ 270.225062][ T9345] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 270.290111][T10265] overlayfs: upper fs needs to support d_type. [ 270.298606][T10265] overlayfs: upper fs does not support tmpfile. [ 270.314022][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.331738][T10265] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 270.405617][T10265] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 270.405617][T10265] [ 270.523438][T10265] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 270.542235][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 270.562204][T10265] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 270.562204][T10265] [ 270.568446][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.592440][T10265] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 270.630973][T10265] overlayfs: failed to verify upper root origin [ 270.651706][ T5857] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 270.693252][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.723366][ T5857] usb 4-1: config 0 descriptor?? [ 270.767193][ T12] read_mapping_page failed! [ 270.771771][ T12] ERROR: (device loop6): txCommit: [ 270.771771][ T12] [ 270.811820][ T12] jfs_write_inode: jfs_commit_inode failed! [ 271.171345][ T5857] wacom 0003:056A:005B.0018: unknown main item tag 0x0 [ 271.203383][ T5857] wacom 0003:056A:005B.0018: unknown main item tag 0x0 [ 271.210352][ T5857] wacom 0003:056A:005B.0018: unknown main item tag 0x0 [ 271.262114][ T5857] wacom 0003:056A:005B.0018: unknown main item tag 0x0 [ 271.291700][ T5857] wacom 0003:056A:005B.0018: unknown main item tag 0x0 [ 271.327001][ T5857] wacom 0003:056A:005B.0018: hidraw0: USB HID v0.00 Device [HID 056a:005b] on usb-dummy_hcd.3-1/input0 [ 271.369650][ T5857] usb 4-1: USB disconnect, device number 10 [ 271.385102][T10329] loop5: detected capacity change from 0 to 4096 [ 271.449155][T10329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.591097][T10335] fido_id[10335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.637125][T10329] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.1488: corrupted inode contents [ 271.664540][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 271.664555][ T27] audit: type=1326 audit(1770332773.391:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 271.756040][T10329] EXT4-fs error (device loop5): ext4_dirty_inode:6124: inode #15: comm syz.5.1488: mark_inode_dirty error [ 271.763347][ T27] audit: type=1326 audit(1770332773.431:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 271.815474][ T27] audit: type=1326 audit(1770332773.431:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 271.839373][T10329] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.1488: corrupted inode contents [ 271.859972][T10329] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.1488: mark_inode_dirty error [ 271.873771][ T27] audit: type=1326 audit(1770332773.431:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 271.898073][T10329] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.1488: corrupted inode contents [ 271.913025][T10329] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.1488: mark_inode_dirty error [ 271.927605][ T27] audit: type=1326 audit(1770332773.431:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 271.953816][T10329] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.1488: corrupted inode contents [ 271.978701][ T27] audit: type=1326 audit(1770332773.431:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 272.014912][T10329] EXT4-fs error (device loop5): ext4_truncate:4294: inode #15: comm syz.5.1488: mark_inode_dirty error [ 272.040321][T10329] EXT4-fs error (device loop5) in ext4_setattr:5663: Corrupt filesystem [ 272.056989][ T27] audit: type=1326 audit(1770332773.431:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 272.113500][T10329] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.1488: corrupted inode contents [ 272.129473][ T27] audit: type=1326 audit(1770332773.431:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 272.202983][T10329] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 272.218978][ T27] audit: type=1326 audit(1770332773.431:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 272.306543][ T27] audit: type=1326 audit(1770332773.441:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.4.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fb207d9aeb9 code=0x7ffc0000 [ 272.394272][ T9345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.453056][T10350] loop6: detected capacity change from 0 to 1764 [ 272.547439][T10355] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1496'. [ 272.597204][T10355] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 273.442283][ T9687] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 273.654508][ T9687] usb 5-1: Using ep0 maxpacket: 16 [ 273.662316][ T9687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 273.685404][ T9687] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 273.715534][ T9687] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 273.736333][ T9687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.764062][ T9687] usb 5-1: config 0 descriptor?? [ 274.052265][ T5835] IPVS: starting estimator thread 0... [ 274.082590][T10392] IPVS: ip_vs_edit_dest(): server weight less than zero [ 274.162303][T10393] IPVS: using max 16 ests per chain, 38400 per kthread [ 274.215539][T10386] loop5: detected capacity change from 0 to 32768 [ 274.222654][ T9687] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 274.347513][T10386] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.531846][ T5815] usb 5-1: USB disconnect, device number 12 [ 274.630040][T10386] XFS (loop5): Ending clean mount [ 274.641202][T10400] fido_id[10400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 274.833442][ T9345] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.947068][T10396] loop6: detected capacity change from 0 to 32768 [ 275.040397][T10396] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 275.118199][T10396] XFS (loop6): Ending clean mount [ 275.342277][T10396] syz.6.1507 (10396) used greatest stack depth: 20552 bytes left [ 275.362865][T10433] loop5: detected capacity change from 0 to 512 [ 275.432963][T10433] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1511: corrupted in-inode xattr: invalid ea_ino [ 275.468589][T10433] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1511: couldn't read orphan inode 15 (err -117) [ 275.499899][ T9512] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 275.547830][T10433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.786113][ T9345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.942324][ T5815] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 275.996631][T10445] loop3: detected capacity change from 0 to 256 [ 276.023281][T10445] exfat: Deprecated parameter 'utf8' [ 276.028690][T10445] exfat: Deprecated parameter 'namecase' [ 276.119296][T10445] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 276.163383][ T5815] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.192536][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.220070][ T5815] usb 5-1: config 0 descriptor?? [ 276.253644][ T5815] cp210x 5-1:0.0: cp210x converter detected [ 276.328913][T10454] batadv0: entered promiscuous mode [ 276.370789][T10454] batadv0: left promiscuous mode [ 276.678195][ T5815] usb 5-1: cp210x converter now attached to ttyUSB0 [ 276.900804][ T5815] usb 5-1: USB disconnect, device number 13 [ 276.918581][T10466] loop5: detected capacity change from 0 to 4096 [ 276.933360][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.968620][T10466] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.994920][ T5815] cp210x 5-1:0.0: device disconnected [ 277.038634][T10466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.212981][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 277.212997][ T27] audit: type=1800 audit(1770332778.941:57): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1523" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 277.284581][T10450] loop6: detected capacity change from 0 to 32768 [ 277.312450][T10450] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1515 (10450) [ 277.377398][T10450] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 277.418538][ T9345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.455351][T10450] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 277.492634][T10450] BTRFS info (device loop6): using free space tree [ 277.702320][T10497] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 277.702320][T10497] The task syz.4.1528 (10497) triggered the difference, watch for misbehavior. [ 277.743413][T10450] BTRFS info (device loop6): enabling ssd optimizations [ 277.792179][T10450] BTRFS info (device loop6): auto enabling async discard [ 277.995908][ T9512] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 278.014223][T10510] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 278.208838][T10515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 278.753142][T10535] hfs: can't find a HFS filesystem on dev nullb0 [ 278.775298][T10536] loop5: detected capacity change from 0 to 128 [ 278.832031][T10536] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 279.046607][ T9345] sysv_free_block: flc_count > flc_size [ 279.063175][ T9345] sysv_free_block: flc_count > flc_size [ 279.082060][ T9345] sysv_free_block: flc_count > flc_size [ 279.087665][ T9345] sysv_free_block: flc_count > flc_size [ 279.132093][ T9345] sysv_free_block: flc_count > flc_size [ 279.137708][ T9345] sysv_free_block: flc_count > flc_size [ 279.185142][ T9345] sysv_free_block: flc_count > flc_size [ 279.191169][ T9345] sysv_free_block: flc_count > flc_size [ 279.209496][ T9345] sysv_free_block: flc_count > flc_size [ 279.232020][ T9345] sysv_free_block: flc_count > flc_size [ 279.254836][ T9345] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 279.289161][T10552] Bluetooth: MGMT ver 1.22 [ 279.852239][T10575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1554'. [ 279.885259][T10577] ptrace attach of "./syz-executor exec"[9512] was attempted by ""[10577] [ 280.047575][T10584] loop5: detected capacity change from 0 to 512 [ 280.080772][T10584] EXT4-fs: Invalid uid value -1 [ 280.346908][T10597] loop6: detected capacity change from 0 to 128 [ 280.398191][T10597] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 280.469075][T10597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.566579][ T5777] Bluetooth: hci0: link tx timeout [ 280.572726][ T5777] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.783818][T10605] loop3: detected capacity change from 0 to 40427 [ 281.816112][T10605] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 281.842067][T10605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 281.870780][T10605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.953543][T10652] loop4: detected capacity change from 0 to 512 [ 281.973987][T10652] EXT4-fs: Ignoring removed oldalloc option [ 282.033723][T10652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.089783][T10605] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 282.097143][T10652] EXT4-fs (loop4): 1 truncate cleaned up [ 282.111607][T10605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 282.121572][T10652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.207766][ T6238] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 282.327822][ T5775] syz-executor: attempt to access beyond end of device [ 282.327822][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.362450][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 282.666188][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 282.905857][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.103805][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.182043][ T5835] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 283.294409][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.434793][ T5835] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.481208][ T5835] usb 6-1: config 0 has no interface number 0 [ 283.489986][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.492785][ T5835] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 283.552246][ T5835] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 283.592136][ T5835] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.601294][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.638422][ T5835] usb 6-1: config 0 descriptor?? [ 283.654479][T10668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 283.713026][ T5835] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 283.714446][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.012354][ T5857] usb 6-1: USB disconnect, device number 3 [ 284.406186][T10675] loop3: detected capacity change from 0 to 40427 [ 284.424858][T10675] F2FS-fs (loop3): inline encryption not supported [ 284.496578][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.508313][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.520297][T10675] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.532188][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.540219][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.553944][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.561345][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.659873][T10675] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 285.682711][T10727] loop5: detected capacity change from 0 to 64 [ 285.794648][T10727] hfs: request for non-existent node 131072 in B*Tree [ 285.803428][T10695] chnl_net:caif_netlink_parms(): no params data found [ 285.817111][T10727] hfs: request for non-existent node 131072 in B*Tree [ 286.308604][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.317243][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.326048][T10695] bridge_slave_0: entered allmulticast mode [ 286.335749][T10695] bridge_slave_0: entered promiscuous mode [ 286.400726][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.423664][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.441238][T10695] bridge_slave_1: entered allmulticast mode [ 286.468304][T10695] bridge_slave_1: entered promiscuous mode [ 286.503270][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 286.673462][ T51] Bluetooth: hci1: command tx timeout [ 286.722386][ T787] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.750071][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.783600][ T787] usb 4-1: Product: syz [ 286.787865][ T787] usb 4-1: Manufacturer: syz [ 286.820270][ T787] usb 4-1: SerialNumber: syz [ 286.846242][ T787] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.899977][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 286.961435][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.991370][T10736] loop5: detected capacity change from 0 to 32768 [ 287.013573][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.059593][T10736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1601 (10736) [ 287.144129][T10736] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.189063][ T1109] hsr_slave_0: left promiscuous mode [ 287.198574][T10736] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 287.229835][T10736] BTRFS info (device loop5): setting nodatacow, compression disabled [ 287.262942][ T1109] hsr_slave_1: left promiscuous mode [ 287.288498][T10736] BTRFS info (device loop5): force clearing of disk cache [ 287.325302][T10736] BTRFS info (device loop5): enabling ssd optimizations [ 287.335563][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.345495][T10736] BTRFS info (device loop5): using spread ssd allocation scheme [ 287.365081][T10736] BTRFS info (device loop5): turning off barriers [ 287.371606][T10736] BTRFS info (device loop5): disabling free space tree [ 287.383141][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.395435][ T787] usb 4-1: USB disconnect, device number 11 [ 287.419348][T10736] BTRFS info (device loop5): not using ssd optimizations [ 287.425485][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.448671][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.451474][T10736] BTRFS info (device loop5): not using spread ssd allocation scheme [ 287.467398][ T1109] bridge_slave_1: left allmulticast mode [ 287.482012][ T1109] bridge_slave_1: left promiscuous mode [ 287.487869][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.544022][ T1109] bridge_slave_0: left allmulticast mode [ 287.601580][T10736] BTRFS info (device loop5): rebuilding free space tree [ 287.609376][ T1109] bridge_slave_0: left promiscuous mode [ 287.621558][T10783] loop6: detected capacity change from 0 to 2048 [ 287.632322][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.653730][T10783] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.691145][T10787] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.718727][T10736] BTRFS info (device loop5): disabling free space tree [ 287.756756][T10736] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.797497][T10736] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.828008][ T1109] veth1_macvtap: left promiscuous mode [ 287.842947][ T1109] veth0_macvtap: left promiscuous mode [ 287.849000][ T1109] veth1_vlan: left promiscuous mode [ 287.859599][ T1109] veth0_vlan: left promiscuous mode [ 288.042579][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 288.050096][ T9] ath9k_htc: Failed to initialize the device [ 288.121702][ T9345] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.143857][ T787] usb 4-1: ath9k_htc: USB layer deinitialized [ 288.733257][T10807] loop6: detected capacity change from 0 to 256 [ 288.742449][ T51] Bluetooth: hci1: command tx timeout [ 288.772629][T10807] exfat: Deprecated parameter 'utf8' [ 288.810133][T10807] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 288.921648][ T27] audit: type=1800 audit(1770332790.641:58): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1615" name="file1" dev="loop6" ino=1048791 res=0 errno=0 [ 289.382662][T10813] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1618'. [ 289.404895][T10813] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1618'. [ 289.449945][T10813] netlink: 'syz.5.1618': attribute type 5 has an invalid length. [ 289.461349][T10813] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1618'. [ 289.463560][T10802] loop3: detected capacity change from 0 to 32768 [ 289.560852][T10802] add_index: next_index = 0. Resetting! [ 289.582111][T10802] find_entry called with index >= next_index [ 289.588232][T10802] find_entry called with index >= next_index [ 289.631556][T10802] find_entry called with index >= next_index [ 289.644545][T10802] find_entry called with index >= next_index [ 289.737560][T10818] loop5: detected capacity change from 0 to 512 [ 289.796418][T10818] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #12: comm syz.5.1620: corrupted in-inode xattr: overlapping e_value [ 289.946193][T10818] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1620: couldn't read orphan inode 12 (err -117) [ 289.974132][T10818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.995906][T10815] loop6: detected capacity change from 0 to 32768 [ 290.022892][T10815] XFS: ikeep mount option is deprecated. [ 290.093549][T10815] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.116896][ T9345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.349618][T10815] XFS (loop6): Ending clean mount [ 290.378422][T10815] XFS (loop6): Quotacheck needed: Please wait. [ 290.533473][T10815] XFS (loop6): Quotacheck: Done. [ 290.712032][ T5857] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.752261][ T9512] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.822130][ T51] Bluetooth: hci1: command tx timeout [ 290.875676][T10832] loop3: detected capacity change from 0 to 32768 [ 290.959940][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.980229][ T5857] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 291.021771][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.044989][ T5857] usb 6-1: config 0 descriptor?? [ 291.118432][T10832] read_mapping_page failed! [ 291.129034][T10832] ERROR: (device loop3): txCommit: [ 291.129034][T10832] [ 291.192996][T10832] ERROR: (device loop3): remounting filesystem as read-only [ 291.260341][ T111] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 291.272468][ T111] ------------[ cut here ]------------ [ 291.277978][ T111] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 291.315172][ T111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 291.321317][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 291.328531][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.338613][ T111] RIP: 0010:txUnlock+0xc87/0xcb0 [ 291.343583][ T111] Code: ef 80 71 07 0f 0b e8 c8 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba a4 03 00 00 48 c7 c1 60 28 04 8b e8 c9 80 71 07 <0f> 0b e8 a2 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba [ 291.363213][ T111] RSP: 0018:ffffc900025c7d08 EFLAGS: 00010246 [ 291.369314][ T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 7a213690f0748f00 [ 291.377320][ T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 291.385320][ T111] RBP: ffffc9000285a4c8 R08: ffffc900025c7a07 R09: 1ffff920004b8f40 [ 291.393316][ T111] R10: dffffc0000000000 R11: fffff520004b8f41 R12: ffff88804fbce1f0 [ 291.401310][ T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888031033094 [ 291.409316][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 291.418269][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.424885][ T111] CR2: 00007fb6d5fe12f8 CR3: 00000000654e1000 CR4: 00000000003506f0 [ 291.432881][ T111] Call Trace: [ 291.436194][ T111] [ 291.439152][ T111] ? lockdep_hardirqs_on+0x98/0x150 [ 291.444397][ T111] jfs_lazycommit+0x56e/0xa70 [ 291.449100][ T111] ? txFreelock+0x5a0/0x5a0 [ 291.453621][ T111] ? do_task_dead+0xd0/0xd0 [ 291.458146][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 291.463109][ T111] kthread+0x2fa/0x390 [ 291.467214][ T111] ? txFreelock+0x5a0/0x5a0 [ 291.471736][ T111] ? kthread_blkcg+0xd0/0xd0 [ 291.476341][ T111] ret_from_fork+0x48/0x80 [ 291.480783][ T111] ? kthread_blkcg+0xd0/0xd0 [ 291.485391][ T111] ret_from_fork_asm+0x11/0x20 [ 291.490183][ T111] [ 291.493228][ T111] Modules linked in: [ 291.501271][ T5857] logitech-djreceiver 0003:046D:C71F.001A: unbalanced collection at end of report description [ 291.536639][ T111] ---[ end trace 0000000000000000 ]--- [ 291.542217][ T111] RIP: 0010:txUnlock+0xc87/0xcb0 [ 291.547211][ T111] Code: ef 80 71 07 0f 0b e8 c8 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba a4 03 00 00 48 c7 c1 60 28 04 8b e8 c9 80 71 07 <0f> 0b e8 a2 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba [ 291.572951][ T111] RSP: 0018:ffffc900025c7d08 EFLAGS: 00010246 [ 291.579087][ T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 7a213690f0748f00 [ 291.587148][ T5857] logitech-djreceiver 0003:046D:C71F.001A: logi_dj_probe: parse failed [ 291.599324][ T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 291.611485][ T111] RBP: ffffc9000285a4c8 R08: ffffc900025c7a07 R09: 1ffff920004b8f40 [ 291.619160][ T5857] logitech-djreceiver: probe of 0003:046D:C71F.001A failed with error -22 [ 291.620880][ T111] R10: dffffc0000000000 R11: fffff520004b8f41 R12: ffff88804fbce1f0 [ 291.656364][ T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888031033094 [ 291.665734][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 291.674742][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.681352][ T111] CR2: 00007fffcf95adc8 CR3: 000000002f5dd000 CR4: 00000000003506f0 [ 291.689488][ T111] Kernel panic - not syncing: Fatal exception [ 291.697780][ T111] Kernel Offset: disabled [ 291.702115][ T111] Rebooting in 86400 seconds..