last executing test programs: 4.160341622s ago: executing program 2 (id=669): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') getdents64(r0, &(0x7f0000000480)=""/27, 0x1b) getdents64(r0, 0xfffffffffffffffe, 0x64) 4.021977296s ago: executing program 2 (id=671): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) bind$can_raw(r0, 0x0, 0x0) 3.714904377s ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) 2.733038665s ago: executing program 1 (id=677): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.527520416s ago: executing program 1 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) 2.39133132s ago: executing program 1 (id=680): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 2.302812369s ago: executing program 1 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) 2.148345584s ago: executing program 1 (id=685): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000440)={0x20, 0xd, 0xa0, {0xa0, 0xb, "1cca9778e2ed78ba8ed804bc0f548bba7e4ec01902dace7e44b0ac2ef98b0c0126a1d6c0f702df95968d6d579d462786b487e657f222b660eebd8f70d5181cb84744a32f9a57d9b33eb4599f26ecb62b3eb1d0773071e935eeb77c47cf444c00898ac020f832a7059fccfe9eeff6928835db61418c13d4beaf08a111b132c7adf0b839894e581c853cb1fadefa3fdd4a93c8c12e31a5d22e9fbf04a28c62"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.053792693s ago: executing program 2 (id=687): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='stat\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) 1.643929995s ago: executing program 3 (id=693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x80) 1.561698743s ago: executing program 3 (id=694): ioperm(0x0, 0x1, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xba6eb000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) 1.39079392s ago: executing program 3 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) 1.380474352s ago: executing program 0 (id=697): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x24060400) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0xfd}, 0x18) 1.244489015s ago: executing program 3 (id=698): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1) 1.229382396s ago: executing program 0 (id=699): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 1.116183688s ago: executing program 2 (id=700): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) 1.084665931s ago: executing program 0 (id=701): unshare(0x22020600) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x6) 932.381876ms ago: executing program 0 (id=702): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x80c2, &(0x7f0000000080)=ANY=[], 0x1, 0xadf, &(0x7f00000001c0)="$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") r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 783.247321ms ago: executing program 3 (id=703): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000a80)=[{0x1d, 0x0, 0x3, 0xfff00002}]}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 436.276176ms ago: executing program 0 (id=704): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000002780)=""/103, 0x67) 399.06229ms ago: executing program 3 (id=705): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 107.333879ms ago: executing program 0 (id=706): iopl(0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\v\x00'], 0x50) 462.35µs ago: executing program 1 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 0s ago: executing program 2 (id=708): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000008c40)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f00000088c0)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001a80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): _1 [ 93.682762][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.694463][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.716223][ T5788] veth0_macvtap: entered promiscuous mode [ 93.727776][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.737694][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.750527][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.759469][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.775283][ T5789] veth1_macvtap: entered promiscuous mode [ 93.798501][ T5788] veth1_macvtap: entered promiscuous mode [ 93.904583][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.932114][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.946206][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.961007][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.973727][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.985108][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.001880][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.022525][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.048732][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.063384][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.074924][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.087879][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.162094][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.199404][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.216118][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.227117][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.239696][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.261650][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.276815][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.293134][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.304436][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.319309][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.330334][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.342285][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.352678][ T5803] Bluetooth: hci0: command tx timeout [ 94.359139][ T5803] Bluetooth: hci2: command tx timeout [ 94.378533][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388359][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397506][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.407067][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.424027][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.434977][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.435022][ T5803] Bluetooth: hci1: command tx timeout [ 94.445531][ T51] Bluetooth: hci3: command tx timeout [ 94.450819][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.465687][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.483848][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.510682][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.663874][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.694234][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.879225][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.893433][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.952633][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.967086][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.027962][ T5896] syz.1.9[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.113488][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.131291][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.141127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.181505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.982561][ T5910] netlink: 'syz.2.14': attribute type 12 has an invalid length. [ 96.019010][ T5910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.060800][ T5912] loop3: detected capacity change from 0 to 128 [ 96.086357][ T5896] loop1: detected capacity change from 0 to 32768 [ 96.090554][ T5912] ======================================================= [ 96.090554][ T5912] WARNING: The mand mount option has been deprecated and [ 96.090554][ T5912] and is ignored by this kernel. Remove the mand [ 96.090554][ T5912] option from the mount to silence this warning. [ 96.090554][ T5912] ======================================================= [ 96.185390][ T5896] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.261949][ T5912] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.309620][ T5912] hpfs: filesystem error: improperly stopped [ 96.350742][ T5912] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 96.378739][ T5896] XFS (loop1): Ending clean mount [ 96.389086][ T5912] hpfs: You really don't want any checks? You are crazy... [ 96.403534][ T5912] hpfs: hpfs_map_sector(): read error [ 96.434003][ T51] Bluetooth: hci2: command tx timeout [ 96.437183][ T5803] Bluetooth: hci0: command tx timeout [ 96.448209][ T5896] XFS (loop1): Quotacheck needed: Please wait. [ 96.465297][ T5912] hpfs: code page support is disabled [ 96.476558][ T5912] hpfs: hpfs_map_4sectors(): unaligned read [ 96.499382][ T5912] hpfs: hpfs_map_4sectors(): unaligned read [ 96.508896][ T5803] Bluetooth: hci3: command tx timeout [ 96.508974][ T51] Bluetooth: hci1: command tx timeout [ 96.528573][ T5912] hpfs: filesystem error: unable to find root dir [ 96.653227][ T5896] XFS (loop1): Quotacheck: Done. [ 96.861274][ T5902] loop0: detected capacity change from 0 to 40427 [ 96.894821][ T5801] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.915886][ T5902] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 96.957343][ T5902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 97.003157][ T5902] F2FS-fs (loop0): invalid crc value [ 97.084156][ T5902] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.353677][ T5902] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 97.369171][ T5902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.751135][ T5789] syz-executor: attempt to access beyond end of device [ 97.751135][ T5789] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.790693][ T5789] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 97.947578][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.363596][ T5956] loop3: detected capacity change from 0 to 4096 [ 98.445344][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.543033][ T28] audit: type=1800 audit(1763469490.254:2): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 98.722008][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.767305][ T5946] loop2: detected capacity change from 0 to 32768 [ 98.868879][ T5946] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.869701][ T5968] loop0: detected capacity change from 0 to 1024 [ 98.887057][ T5968] EXT4-fs: Ignoring removed nobh option [ 98.892841][ T5968] EXT4-fs: Ignoring removed bh option [ 98.979911][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.108013][ T5946] XFS (loop2): Ending clean mount [ 99.215778][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.363669][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.590231][ T5989] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 99.613256][ T5989] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 99.634820][ T5989] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 99.656831][ T5989] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 100.136185][ T6001] loop2: detected capacity change from 0 to 1024 [ 100.144336][ T6003] loop3: detected capacity change from 0 to 512 [ 100.164151][ T5999] loop0: detected capacity change from 0 to 4096 [ 100.192909][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.227236][ T5999] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 100.304467][ T5999] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 100.314831][ T5999] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 100.328557][ T5999] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.389422][ T5999] ntfs: volume version 3.1. [ 100.423051][ T5999] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.479847][ T5999] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.532971][ T5999] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 100.581614][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.611386][ T6003] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.618437][ T6003] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.672135][ T6003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.739215][ T6003] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.48: bad orphan inode 131083 [ 100.819435][ T6003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.862881][ T6017] rdma_op ffff88805ee761f0 conn xmit_rdma 0000000000000000 [ 101.130125][ T6003] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 101.322212][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.606537][ T6038] loop0: detected capacity change from 0 to 64 [ 101.959646][ T6046] loop0: detected capacity change from 0 to 64 [ 102.077675][ T6046] syz.0.59: attempt to access beyond end of device [ 102.077675][ T6046] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 102.118899][ T6046] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 102.279241][ T6046] Trying to free block not in datazone [ 102.426881][ T6023] loop2: detected capacity change from 0 to 40427 [ 102.440500][ T6031] loop1: detected capacity change from 0 to 32768 [ 102.481848][ T6023] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 102.516831][ T6023] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 102.527671][ T6023] F2FS-fs (loop2): Image doesn't support compression [ 102.561015][ T6023] F2FS-fs (loop2): invalid crc value [ 102.584708][ T6023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.594473][ T6031] [ 102.594473][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.594473][ T6031] [ 102.816220][ T6031] find_entry called with index = 0 [ 102.851168][ T6023] F2FS-fs (loop2): Start checkpoint disabled! [ 102.858435][ T6031] find_entry called with index = 0 [ 102.899015][ T6031] read_mapping_page failed! [ 102.919099][ T6031] ERROR: (device loop1): txCommit: [ 102.919099][ T6031] [ 102.932902][ T6023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 103.007304][ T6061] loop0: detected capacity change from 0 to 256 [ 103.094465][ T5801] [ 103.094465][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.094465][ T5801] [ 103.155986][ T5801] [ 103.155986][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.155986][ T5801] [ 103.164270][ T6023] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 103.254508][ T6061] FAT-fs (loop0): Directory bread(block 64) failed [ 103.283217][ T6061] FAT-fs (loop0): Directory bread(block 65) failed [ 103.317721][ T6061] FAT-fs (loop0): Directory bread(block 66) failed [ 103.350256][ T6061] FAT-fs (loop0): Directory bread(block 67) failed [ 103.372457][ T6061] FAT-fs (loop0): Directory bread(block 68) failed [ 103.409493][ T6061] FAT-fs (loop0): Directory bread(block 69) failed [ 103.446807][ T6061] FAT-fs (loop0): Directory bread(block 70) failed [ 103.466984][ T6061] FAT-fs (loop0): Directory bread(block 71) failed [ 103.492609][ T6064] loop3: detected capacity change from 0 to 4096 [ 103.517856][ T6061] FAT-fs (loop0): Directory bread(block 72) failed [ 103.546875][ T6061] FAT-fs (loop0): Directory bread(block 73) failed [ 103.597930][ T55] kworker/u4:4: attempt to access beyond end of device [ 103.597930][ T55] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 103.695500][ T2936] kworker/u4:9: attempt to access beyond end of device [ 103.695500][ T2936] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 103.757658][ T2936] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.792522][ T2936] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.961708][ T6064] ntfs3: loop3: failed to convert "0080" to maccenteuro [ 104.029093][ T6064] ntfs3: loop3: failed to convert name for inode 1e. [ 104.129289][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.745047][ T6089] loop2: detected capacity change from 0 to 1024 [ 104.774554][ T6089] EXT4-fs: Ignoring removed bh option [ 104.814427][ T6089] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 104.876260][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.000266][ T6071] loop1: detected capacity change from 0 to 32768 [ 105.105360][ T6071] read_mapping_page failed! [ 105.115080][ T6071] ERROR: (device loop1): txCommit: [ 105.115080][ T6071] [ 105.166283][ T6071] find_entry called with index = 0 [ 105.183182][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.189518][ T6071] read_mapping_page failed! [ 105.219005][ T6071] ERROR: (device loop1): txCommit: [ 105.219005][ T6071] [ 105.360062][ T6104] netlink: 128 bytes leftover after parsing attributes in process `syz.0.76'. [ 105.387916][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 105.585344][ T6112] loop0: detected capacity change from 0 to 128 [ 105.628558][ T6112] EXT4-fs: Ignoring removed nobh option [ 105.680111][ T6112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.744345][ T6112] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.875879][ T6112] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 1073745927 (only 1 groups) [ 105.938404][ T6114] loop2: detected capacity change from 0 to 8192 [ 105.960722][ T6114] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.975041][ T6114] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 105.984660][ T6114] REISERFS (device loop2): using ordered data mode [ 105.989413][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.991545][ T6114] reiserfs: using flush barriers [ 106.023249][ T6114] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.042637][ T6114] REISERFS (device loop2): checking transaction log (loop2) [ 106.092363][ T6114] REISERFS (device loop2): Using r5 hash to sort names [ 106.143742][ T6114] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 106.675405][ T6132] loop3: detected capacity change from 0 to 4096 [ 106.759585][ T6132] NILFS (loop3): invalid segment: Checksum error in segment payload [ 106.789768][ T6132] NILFS (loop3): trying rollback from an earlier position [ 106.879507][ T6132] NILFS (loop3): recovery complete [ 106.936472][ T6141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.260407][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.464935][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 107.487371][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.500167][ T5841] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 107.514185][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.547037][ T5841] usb 2-1: Product: syz [ 107.551655][ T5841] usb 2-1: Manufacturer: syz [ 107.556322][ T5841] usb 2-1: SerialNumber: syz [ 107.625277][ T5841] usb 2-1: config 0 descriptor?? [ 107.733451][ T6145] loop0: detected capacity change from 0 to 32768 [ 107.742458][ T6158] loop2: detected capacity change from 0 to 512 [ 107.771282][ T6160] loop3: detected capacity change from 0 to 1024 [ 107.783851][ T6145] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.93 (6145) [ 107.827193][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.848794][ T6160] hfsplus: bad catalog entry type [ 107.931867][ T2973] hfsplus: b-tree write err: -5, ino 4 [ 107.938975][ T6145] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.950021][ T6145] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 107.958845][ T6145] BTRFS info (device loop0): enabling auto defrag [ 107.965484][ T6145] BTRFS info (device loop0): doing ref verification [ 107.973565][ T6145] BTRFS info (device loop0): use no compression [ 107.980075][ T6145] BTRFS info (device loop0): force clearing of disk cache [ 107.987372][ T6145] BTRFS info (device loop0): max_inline at 57 [ 107.993840][ T6145] BTRFS info (device loop0): disabling free space tree [ 108.056671][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.112006][ T5841] gs_usb 2-1:0.0: Configuring for 256 interfaces [ 108.138319][ T5841] gs_usb 2-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 108.147012][ T5841] gs_usb: probe of 2-1:0.0 failed with error -22 [ 108.298969][ T6145] BTRFS info (device loop0): enabling ssd optimizations [ 108.333213][ T6145] BTRFS info (device loop0): auto enabling async discard [ 108.377838][ T6145] BTRFS info (device loop0): rebuilding free space tree [ 108.440919][ T5841] usb 2-1: USB disconnect, device number 2 [ 108.575642][ T6145] BTRFS info (device loop0): disabling free space tree [ 108.617735][ T6145] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.645085][ T6145] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.140654][ T28] audit: type=1326 audit(1763469500.854:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff992b8f6c9 code=0x7ffc0000 [ 109.223554][ T28] audit: type=1326 audit(1763469500.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff992b8f6c9 code=0x7ffc0000 [ 109.308051][ T5789] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.324562][ T28] audit: type=1326 audit(1763469500.904:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff992b8f6c9 code=0x7ffc0000 [ 109.373776][ T28] audit: type=1326 audit(1763469500.904:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff992b8f703 code=0x7ffc0000 [ 109.399583][ T28] audit: type=1326 audit(1763469500.944:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff992b8e17f code=0x7ffc0000 [ 109.429144][ T28] audit: type=1326 audit(1763469501.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff992b8f757 code=0x7ffc0000 [ 109.452366][ T6198] loop1: detected capacity change from 0 to 8192 [ 109.520987][ T28] audit: type=1326 audit(1763469501.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff992b8df10 code=0x7ffc0000 [ 109.578299][ T28] audit: type=1326 audit(1763469501.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff992b8f2cb code=0x7ffc0000 [ 109.692316][ T28] audit: type=1326 audit(1763469501.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff992b8e32a code=0x7ffc0000 [ 109.778739][ T28] audit: type=1326 audit(1763469501.184:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff992b8e32a code=0x7ffc0000 [ 109.824677][ T6191] loop3: detected capacity change from 0 to 32768 [ 110.488737][ T5879] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 110.575337][ T6201] loop2: detected capacity change from 0 to 32768 [ 110.621958][ T6201] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (6201) [ 110.685606][ T6201] BTRFS info (device loop2): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 110.695799][ T5879] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.721222][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.740874][ T5879] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 110.744924][ T6201] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 110.769116][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.788789][ T6201] BTRFS info (device loop2): using free space tree [ 110.808541][ T5879] usb 1-1: config 0 descriptor?? [ 110.989867][ T6201] BTRFS info (device loop2): enabling ssd optimizations [ 110.996965][ T6201] BTRFS info (device loop2): auto enabling async discard [ 111.099020][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.119'. [ 111.295171][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.295306][ T5788] BTRFS info (device loop2): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 111.311362][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.320733][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.327980][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.335124][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.343077][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.352789][ T5879] elecom 0003:056E:00FD.0001: unknown main item tag 0x0 [ 111.379379][ T5855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.400980][ T5879] elecom 0003:056E:00FD.0001: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.0-1/input0 [ 111.598970][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 111.603065][ T5841] usb 1-1: USB disconnect, device number 2 [ 111.618104][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.643290][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.676707][ T5855] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 111.699247][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.712441][ T5855] usb 2-1: config 0 descriptor?? [ 112.033030][ T6250] loop2: detected capacity change from 0 to 2048 [ 112.060418][ T6250] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 112.085897][ T6250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.189861][ T5855] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 112.488879][ T5855] usb 2-1: USB disconnect, device number 3 [ 112.819104][ T6262] loop0: detected capacity change from 0 to 4096 [ 112.957796][ T6272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.111895][ T6274] mkiss: ax0: crc mode is auto. [ 113.420055][ T6283] [U]  [ 113.423268][ T6283] [U] K{ [ 113.426363][ T6283] [U] t 1ŠFfˊ`GJgo/mC [ 113.463221][ T6283] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 113.508287][ T6283] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 113.547398][ T6283] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 113.591422][ T6283] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 113.639724][ T6283] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 113.658821][ T6283] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 113.680458][ T6283] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 113.829079][ T6283] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 113.837847][ T6283] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 113.857214][ T6283] [U] 22Ʃx?0;3u [ 113.862511][ T6283] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 113.929681][ T6283] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 113.952835][ T6283] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 113.982717][ T6283] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 113.998885][ T6283] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 114.012577][ T6283] [U] ec [ 114.015761][ T6283] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 114.032434][ T6299] loop1: detected capacity change from 0 to 512 [ 114.054165][ T6299] EXT4-fs: Ignoring removed nobh option [ 114.062241][ T6299] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.089577][ T6299] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.148: iget: bad i_size value: 38620345925642 [ 114.112608][ T6299] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.148: couldn't read orphan inode 15 (err -117) [ 114.116169][ T6282] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 114.153152][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.187208][ T6303] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.373219][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.525146][ T6310] loop1: detected capacity change from 0 to 16 [ 114.586925][ T6310] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.857139][ T6318] loop1: detected capacity change from 0 to 256 [ 114.886856][ T6318] exfat: Deprecated parameter 'utf8' [ 114.978421][ T6298] loop3: detected capacity change from 0 to 32768 [ 115.005706][ T6298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.149 (6298) [ 115.029050][ T6318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 115.093066][ T6298] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.159085][ T6298] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 115.193519][ T6298] BTRFS info (device loop3): setting nodatacow, compression disabled [ 115.202021][ T6298] BTRFS info (device loop3): force clearing of disk cache [ 115.221437][ T6298] BTRFS info (device loop3): enabling ssd optimizations [ 115.251897][ T6298] BTRFS info (device loop3): using spread ssd allocation scheme [ 115.277153][ T6298] BTRFS info (device loop3): turning off barriers [ 115.310140][ T6298] BTRFS info (device loop3): disabling free space tree [ 115.317361][ T6298] BTRFS info (device loop3): metadata ratio 14 [ 115.338789][ T6298] BTRFS info (device loop3): disabling tree log [ 115.517087][ T6298] BTRFS info (device loop3): rebuilding free space tree [ 115.632231][ T6298] BTRFS info (device loop3): disabling free space tree [ 115.680632][ T6298] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.705907][ T6298] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.040340][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.095995][ T6359] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 117.132917][ T6383] loop0: detected capacity change from 0 to 512 [ 117.178367][ T6383] EXT4-fs: inline encryption not supported [ 117.313316][ T6383] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.178: inode has both inline data and extents flags [ 117.353659][ T6383] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 117.411311][ T6383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.463251][ T6395] loop2: detected capacity change from 0 to 256 [ 117.552232][ T6383] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.178: invalid size [ 117.558497][ T6398] loop1: detected capacity change from 0 to 64 [ 117.573964][ T6395] FAT-fs (loop2): Directory bread(block 64) failed [ 117.581470][ T6395] FAT-fs (loop2): Directory bread(block 65) failed [ 117.588225][ T6395] FAT-fs (loop2): Directory bread(block 66) failed [ 117.602790][ T6395] FAT-fs (loop2): Directory bread(block 67) failed [ 117.653039][ T6395] FAT-fs (loop2): Directory bread(block 68) failed [ 117.670098][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 117.670115][ T28] audit: type=1800 audit(1763469509.394:27): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 117.680185][ T6395] FAT-fs (loop2): Directory bread(block 69) failed [ 117.760418][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.780413][ T6395] FAT-fs (loop2): Directory bread(block 70) failed [ 117.787033][ T6395] FAT-fs (loop2): Directory bread(block 71) failed [ 117.828900][ T6395] FAT-fs (loop2): Directory bread(block 72) failed [ 117.849326][ T6395] FAT-fs (loop2): Directory bread(block 73) failed [ 117.968351][ T28] audit: type=1326 audit(1763469509.684:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.028098][ T28] audit: type=1326 audit(1763469509.684:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.115464][ T28] audit: type=1326 audit(1763469509.684:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe603b8df10 code=0x7ffc0000 [ 118.137598][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.207013][ T6408] loop3: detected capacity change from 0 to 256 [ 118.207080][ T28] audit: type=1326 audit(1763469509.684:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.236523][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.282990][ T28] audit: type=1326 audit(1763469509.684:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.305022][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.348121][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.368859][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.417354][ T6411] loop1: detected capacity change from 0 to 4096 [ 118.425629][ T28] audit: type=1326 audit(1763469509.684:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.454693][ T28] audit: type=1326 audit(1763469509.684:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe603b8f6c9 code=0x7ffc0000 [ 118.543851][ T6415] syz_tun: entered promiscuous mode [ 118.550118][ T6415] macvtap1: entered promiscuous mode [ 118.560965][ T6415] syz_tun: left promiscuous mode [ 118.582138][ T6416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.859112][ T6420] loop3: detected capacity change from 0 to 512 [ 118.874286][ T6420] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.917099][ T6420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.956848][ T6420] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 119.015072][ T6420] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 119.024247][ T6420] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.045677][ T6420] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.194: Invalid block bitmap block 0 in block_group 0 [ 119.077294][ T6420] EXT4-fs (loop3): Remounting filesystem read-only [ 119.085620][ T6420] Quota error (device loop3): write_blk: dquota write failed [ 119.095240][ T6420] Quota error (device loop3): write_blk: dquota write failed [ 119.103818][ T6420] EXT4-fs (loop3): 1 orphan inode deleted [ 119.119013][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.158765][ T6420] syz.3.194 (6420) used greatest stack depth: 20880 bytes left [ 119.167584][ T6426] netlink: 188 bytes leftover after parsing attributes in process `syz.2.196'. [ 119.204796][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.220800][ T6425] netlink: 188 bytes leftover after parsing attributes in process `syz.2.196'. [ 119.526856][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'. [ 119.959994][ T6444] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 120.007152][ T6432] loop1: detected capacity change from 0 to 32768 [ 120.071809][ T6432] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 120.071809][ T6432] [ 120.102691][ T6432] ERROR: (device loop1): remounting filesystem as read-only [ 120.114538][ T6432] ERROR: (device loop1): dbDiscardAG: -EIO [ 120.114538][ T6432] [ 120.348904][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.409906][ T6442] loop2: detected capacity change from 0 to 32768 [ 120.436749][ T6442] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.204 (6442) [ 120.534832][ T6442] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.581453][ T6442] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.629990][ T6442] BTRFS info (device loop2): enabling disk space caching [ 120.637315][ T6442] BTRFS info (device loop2): force clearing of disk cache [ 120.678669][ T6442] BTRFS info (device loop2): turning off barriers [ 120.685313][ T6442] BTRFS info (device loop2): setting nodatasum [ 120.713170][ T6442] BTRFS info (device loop2): enabling ssd optimizations [ 120.733983][ T6442] BTRFS info (device loop2): using spread ssd allocation scheme [ 120.756318][ T6442] BTRFS info (device loop2): disk space caching is enabled [ 121.182085][ T5788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.267018][ T6446] loop3: detected capacity change from 0 to 40427 [ 121.334054][ T6446] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 121.391464][ T6446] F2FS-fs (loop3): invalid crc value [ 121.427013][ T6446] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.592628][ T5790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (5790) [ 121.697426][ T6446] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.830098][ T6478] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 121.954066][ T6448] loop0: detected capacity change from 0 to 32768 [ 122.080809][ T6448] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.146573][ T6448] XFS (loop0): Ending clean mount [ 122.183013][ T6448] XFS (loop0): Quotacheck needed: Please wait. [ 122.293829][ T6448] XFS (loop0): Quotacheck: Done. [ 122.388840][ T5841] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.504781][ T6472] loop1: detected capacity change from 0 to 32768 [ 122.528307][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.569835][ T6472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.212 (6472) [ 122.601984][ T5841] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.629336][ T5841] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.678752][ T5841] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.698707][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 122.709990][ T6472] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.761694][ T6472] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.771143][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 122.793619][ T6472] BTRFS info (device loop1): using free space tree [ 122.821374][ T5841] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.849298][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.886496][ T5841] usb 3-1: Product: syz [ 122.891224][ T5841] usb 3-1: Manufacturer: syz [ 122.958930][ T5841] cdc_wdm 3-1:1.0: skipping garbage [ 122.964315][ T5841] cdc_wdm 3-1:1.0: skipping garbage [ 123.086053][ T5841] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 123.122146][ T5841] cdc_wdm 3-1:1.0: Unknown control protocol [ 123.134931][ T6472] BTRFS info (device loop1): enabling ssd optimizations [ 123.152356][ T6472] BTRFS info (device loop1): auto enabling async discard [ 123.215157][ T5841] usb 3-1: USB disconnect, device number 2 [ 123.332229][ T5801] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.348752][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.549019][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 123.567928][ T5855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.601604][ T5855] usb 1-1: config 4 interface 0 has no altsetting 0 [ 123.625144][ T5855] usb 1-1: string descriptor 0 read error: -22 [ 123.639386][ T5855] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 123.666080][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.716545][ T5855] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 123.805938][ T5855] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.858415][ T5855] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 123.889861][ T5855] usb 1-1: media controller created [ 124.013383][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.053791][ T6525] loop2: detected capacity change from 0 to 256 [ 124.083597][ T6525] exfat: Deprecated parameter 'namecase' [ 124.120060][ T6525] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 124.192122][ T6525] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 124.991248][ T6539] loop2: detected capacity change from 0 to 2048 [ 125.006346][ T5855] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.039627][ T6527] loop1: detected capacity change from 0 to 32768 [ 125.062527][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.129051][ T5855] usb 1-1: USB disconnect, device number 3 [ 125.203089][ T6527] jfs_mkdir: dtInsert returned -EIO [ 125.230780][ T6544] loop3: detected capacity change from 0 to 64 [ 125.238996][ T6527] ERROR: (device loop1): jfs_mkdir: [ 125.238996][ T6527] [ 125.267044][ T6527] ERROR: (device loop1): remounting filesystem as read-only [ 125.337704][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.347473][ T6527] jfs_lookup: iget failed on inum 4 [ 125.383098][ T6527] jfs_lookup: iget failed on inum 4 [ 125.391237][ T6527] jfs_lookup: iget failed on inum 4 [ 125.409034][ T6527] jfs_lookup: iget failed on inum 4 [ 126.100079][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.216973][ T6567] loop1: detected capacity change from 0 to 1024 [ 126.326733][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 126.351571][ T5855] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 126.380861][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.425711][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 126.453594][ T5855] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 126.467920][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.495262][ T5855] usb 4-1: config 0 descriptor?? [ 126.941376][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.959859][ T5855] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 126.967528][ T5855] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 126.980083][ T5855] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 126.987613][ T5855] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 127.009299][ T5855] samsung 0003:0419:0001.0003: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 127.142678][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 127.175958][ T5835] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 127.207721][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.233366][ T5855] usb 4-1: USB disconnect, device number 2 [ 127.243396][ T5835] usb 2-1: Product: syz [ 127.248105][ T5835] usb 2-1: Manufacturer: syz [ 127.264140][ T5835] usb 2-1: SerialNumber: syz [ 127.291882][ T5835] usb 2-1: config 0 descriptor?? [ 127.315684][ T5835] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 127.432905][ T6578] loop0: detected capacity change from 0 to 32768 [ 127.485193][ T6578] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.567517][ T6601] netlink: 'syz.2.253': attribute type 9 has an invalid length. [ 127.569279][ T6578] XFS (loop0): Ending clean mount [ 127.581362][ T6601] netlink: 399 bytes leftover after parsing attributes in process `syz.2.253'. [ 127.613585][ T6578] XFS (loop0): Quotacheck needed: Please wait. [ 127.723008][ T6578] XFS (loop0): Quotacheck: Done. [ 127.738368][ T5835] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 127.747765][ T5835] visor: probe of 2-1:0.0 failed with error -5 [ 127.795317][ T6603] loop2: detected capacity change from 0 to 8192 [ 127.832559][ T6603] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.881270][ T6603] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 127.897035][ T6603] REISERFS (device loop2): using ordered data mode [ 127.906834][ T6603] reiserfs: using flush barriers [ 127.917137][ T6603] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.967811][ T5841] usb 2-1: USB disconnect, device number 4 [ 127.976635][ T6603] REISERFS (device loop2): checking transaction log (loop2) [ 128.020401][ T6603] REISERFS (device loop2): Using r5 hash to sort names [ 128.043479][ T6603] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 128.056072][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 128.201672][ T5789] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.257225][ T6610] loop3: detected capacity change from 0 to 128 [ 129.008423][ T6622] loop3: detected capacity change from 0 to 256 [ 129.106181][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 129.514127][ T6612] loop2: detected capacity change from 0 to 32768 [ 129.528326][ T6612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.258 (6612) [ 129.586803][ T6612] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.616159][ T6612] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.628391][ T6612] BTRFS info (device loop2): using free space tree [ 129.762859][ T6612] BTRFS info (device loop2): enabling ssd optimizations [ 129.811711][ T6612] BTRFS info (device loop2): auto enabling async discard [ 129.933048][ T6612] BTRFS warning (device loop2): can't set the default_subvol,compress_zstd feature bits while mounted [ 130.032011][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.129412][ T6677] loop2: detected capacity change from 0 to 128 [ 131.214700][ T6677] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 131.405028][ T5788] sysv_free_block: trying to free block not in datazone [ 131.434761][ T5788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 131.478807][ T5855] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.682285][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.718783][ T5855] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 131.748098][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.766723][ T6674] loop3: detected capacity change from 0 to 32768 [ 131.784008][ T5855] usb 2-1: config 0 descriptor?? [ 131.918899][ T6674] MetaData crosses page boundary!! [ 131.925727][ T6674] lblock = 621d00, size = 28672 [ 131.945072][ T6674] CPU: 0 PID: 6674 Comm: syz.3.279 Not tainted syzkaller #0 [ 131.954154][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.965783][ T6674] Call Trace: [ 131.969658][ T6674] [ 131.972744][ T6674] dump_stack_lvl+0x16c/0x230 [ 131.977852][ T6674] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.984710][ T6674] ? show_regs_print_info+0x20/0x20 [ 131.991098][ T6674] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.999177][ T6674] __get_metapage+0xaac/0xfa0 [ 132.005252][ T6674] dtSearch+0x591/0x21b0 [ 132.009823][ T6674] jfs_lookup+0x156/0x380 [ 132.014909][ T6674] ? jfs_get_parent+0xb0/0xb0 [ 132.020263][ T6674] ? __rwlock_init+0x150/0x150 [ 132.025095][ T6674] ? _raw_spin_unlock+0x28/0x40 [ 132.030258][ T6674] ? d_alloc+0x1eb/0x250 [ 132.034584][ T6674] lookup_one_qstr_excl+0x112/0x250 [ 132.040559][ T6674] filename_create+0x222/0x460 [ 132.045586][ T6674] ? kern_path_create+0x50/0x50 [ 132.050672][ T6674] ? __virt_addr_valid+0x18c/0x540 [ 132.056040][ T6674] ? __virt_addr_valid+0x18c/0x540 [ 132.061295][ T6674] do_mknodat+0x183/0x4f0 [ 132.065815][ T6674] ? do_o_path+0x1f0/0x1f0 [ 132.070726][ T6674] __x64_sys_mknod+0x8e/0xa0 [ 132.075659][ T6674] do_syscall_64+0x55/0xb0 [ 132.080102][ T6674] ? clear_bhb_loop+0x40/0x90 [ 132.084959][ T6674] ? clear_bhb_loop+0x40/0x90 [ 132.089757][ T6674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.095762][ T6674] RIP: 0033:0x7f3b5078f6c9 [ 132.100412][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.121624][ T6674] RSP: 002b:00007f3b516bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 132.130841][ T6674] RAX: ffffffffffffffda RBX: 00007f3b509e5fa0 RCX: 00007f3b5078f6c9 [ 132.138860][ T6674] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080 [ 132.147343][ T6674] RBP: 00007f3b50811f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.155682][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.164165][ T6674] R13: 00007f3b509e6038 R14: 00007f3b509e5fa0 R15: 00007ffe789d7ee8 [ 132.172288][ T6674] [ 132.213850][ T6689] loop2: detected capacity change from 0 to 256 [ 132.221708][ T6689] exfat: Deprecated parameter 'namecase' [ 132.279067][ T6674] bread failed! [ 132.282840][ T6674] jfs_lookup: dtSearch returned -5 [ 132.305698][ T6689] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 132.481906][ T5855] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x1 [ 132.525151][ T5855] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 132.780678][ T5855] usb 2-1: USB disconnect, device number 5 [ 132.818366][ T6690] fido_id[6690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 133.200183][ T6698] loop3: detected capacity change from 0 to 4096 [ 133.234986][ T6698] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 133.238081][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260241][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418040][ T6698] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 133.442485][ T6698] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 133.458340][ T6704] netlink: 72 bytes leftover after parsing attributes in process `syz.2.294'. [ 133.485997][ T6698] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 133.542663][ T5790] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.548112][ T6707] loop0: detected capacity change from 0 to 256 [ 133.563634][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.296'. [ 134.105602][ T6724] loop3: detected capacity change from 0 to 256 [ 134.127812][ T6724] exfat: Deprecated parameter 'utf8' [ 134.152205][ T5855] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 134.198909][ T6724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3aa54e9, utbl_chksum : 0xe619d30d) [ 134.318706][ T5841] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.397284][ T5855] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.415596][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.438766][ T5855] usb 2-1: config 0 has no interface number 0 [ 134.445561][ T5855] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 134.466274][ T5855] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 134.477307][ T5855] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.495107][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.533853][ T5855] usb 2-1: config 0 descriptor?? [ 134.544784][ T5855] ldusb 2-1:0.55: Interrupt in endpoint not found [ 134.548770][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 134.569762][ T5841] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.601258][ T5841] usb 3-1: config index 0 descriptor too short (expected 51, got 18) [ 134.618970][ T5841] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 134.647784][ T5841] usb 3-1: config 4 has no interface number 0 [ 134.658253][ T5841] usb 3-1: config 4 interface 30 has no altsetting 0 [ 134.695330][ T5841] usb 3-1: string descriptor 0 read error: -22 [ 134.709300][ T5841] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 134.720679][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.754471][ T5841] dw2102: su3000_identify_state [ 134.764460][ T5841] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 134.788795][ T5841] dw2102: su3000_power_ctrl: 1, initialized 0 [ 134.805618][ T5855] usb 2-1: USB disconnect, device number 6 [ 134.816376][ T5841] dvb-usb: bulk message failed: -22 (2/0) [ 134.860918][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.900356][ T5841] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 134.922958][ T5841] usb 3-1: media controller created [ 134.939842][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 134.957672][ T5841] dw2102: i2c transfer failed. [ 134.976019][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 134.983652][ T5841] dw2102: i2c transfer failed. [ 135.000055][ T6722] dvb-usb: bulk message failed: -22 (1/0) [ 135.013617][ T6722] dw2102: i2c transfer failed. [ 135.021644][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 135.038009][ T5841] dw2102: i2c transfer failed. [ 135.042974][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 135.058881][ T5841] dw2102: i2c transfer failed. [ 135.063756][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 135.078775][ T5841] dw2102: i2c transfer failed. [ 135.083624][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 135.098833][ T5841] dw2102: i2c transfer failed. [ 135.103725][ T5841] dvb-usb: MAC address: 02:02:02:02:02:02 [ 135.146406][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.190470][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 135.196500][ T5841] dw2102: command 0x0e transfer failed. [ 135.209373][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 135.215249][ T5841] dw2102: command 0x0e transfer failed. [ 135.218935][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.409072][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 135.425898][ T5855] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.436937][ T5855] usb 2-1: config 0 has no interface number 0 [ 135.448319][ T5855] usb 2-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 135.462853][ T5855] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 135.475154][ T5855] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 135.485184][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.493846][ T5855] usb 2-1: SerialNumber: syz [ 135.506788][ T5855] usb 2-1: config 0 descriptor?? [ 135.527098][ T5855] hso 2-1:0.1: Failed to find BULK IN ep [ 135.569081][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 135.575094][ T5841] dw2102: command 0x0e transfer failed. [ 135.592164][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 135.612071][ T5841] dw2102: command 0x0e transfer failed. [ 135.643676][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 135.657437][ T5841] dw2102: command 0x51 transfer failed. [ 135.673586][ T5841] dvb-usb: bulk message failed: -22 (5/0) [ 135.688769][ T5841] dw2102: i2c probe for address 0x68 failed. [ 135.694836][ T5841] dvb-usb: bulk message failed: -22 (5/0) [ 135.708659][ T5841] dw2102: i2c probe for address 0x69 failed. [ 135.715272][ T5841] dvb-usb: bulk message failed: -22 (5/0) [ 135.741709][ T5841] dw2102: i2c probe for address 0x6a failed. [ 135.758517][ T5841] dw2102: probing for demodulator failed. Is the external power switched on? [ 135.793291][ T5841] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 135.796551][ T1187] usb 2-1: USB disconnect, device number 7 [ 135.988729][ T5841] rc_core: IR keymap rc-tt-1500 not found [ 135.995992][ T5841] Registered IR keymap rc-empty [ 136.016996][ T5841] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 136.055473][ T5841] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 136.099803][ T5841] dvb-usb: schedule remote query interval to 250 msecs. [ 136.106937][ T5841] dw2102: su3000_power_ctrl: 0, initialized 1 [ 136.143005][ T5841] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 136.199335][ T5841] usb 3-1: USB disconnect, device number 3 [ 136.286642][ T6759] capability: warning: `syz.3.319' uses deprecated v2 capabilities in a way that may be insecure [ 136.346701][ T5841] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 136.502567][ T6763] loop0: detected capacity change from 0 to 256 [ 137.072303][ T6774] loop0: detected capacity change from 0 to 4096 [ 137.087573][ T6778] netlink: 104 bytes leftover after parsing attributes in process `syz.2.328'. [ 137.160581][ T6779] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.690584][ T6789] No buffer was provided with the request [ 137.740446][ T6766] loop3: detected capacity change from 0 to 40427 [ 137.789262][ T6766] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 137.797797][ T6766] F2FS-fs (loop3): Image doesn't support compression [ 137.843763][ T6766] F2FS-fs (loop3): Image doesn't support compression [ 137.878315][ T6766] F2FS-fs (loop3): invalid crc value [ 137.886496][ T6792] netlink: 296 bytes leftover after parsing attributes in process `syz.0.334'. [ 137.904214][ T6766] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.997101][ T6773] loop1: detected capacity change from 0 to 32768 [ 138.053611][ T6773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.325 (6773) [ 138.072301][ T6766] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.084669][ T6773] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.113323][ T6773] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.152949][ T6773] BTRFS info (device loop1): setting nodatacow, compression disabled [ 138.187001][ T6773] BTRFS info (device loop1): turning on sync discard [ 138.211189][ T6773] BTRFS info (device loop1): turning on flush-on-commit [ 138.234449][ T6773] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 138.261627][ T6773] BTRFS info (device loop1): trying to use backup root at mount time [ 138.286486][ T6773] BTRFS info (device loop1): using free space tree [ 138.387379][ T5795] syz-executor: attempt to access beyond end of device [ 138.387379][ T5795] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.445733][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.494228][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 138.548482][ T6773] BTRFS error (device loop1): failed to load root extent [ 138.558858][ T6773] BTRFS warning (device loop1): try to load backup roots slot 1 [ 138.873405][ T5801] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.209951][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5790) [ 139.349675][ T6835] use of bytesused == 0 is deprecated and will be removed in the future, [ 139.371860][ T6835] use the actual size instead. [ 140.223129][ T6854] loop3: detected capacity change from 0 to 8192 [ 140.290704][ T6854] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.331912][ T6854] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 140.384508][ T6854] REISERFS (device loop3): using ordered data mode [ 140.409235][ T6854] reiserfs: using flush barriers [ 140.456122][ T6854] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.509340][ T6854] REISERFS (device loop3): checking transaction log (loop3) [ 140.553180][ T6854] REISERFS (device loop3): Using r5 hash to sort names [ 140.571473][ T6854] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 140.694229][ T6856] loop1: detected capacity change from 0 to 32768 [ 140.736329][ T6856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.355 (6856) [ 140.834487][ T6856] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.851722][ T6856] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.861414][ T6856] BTRFS info (device loop1): using free space tree [ 141.038890][ T6856] BTRFS info (device loop1): enabling ssd optimizations [ 141.057463][ T6856] BTRFS info (device loop1): auto enabling async discard [ 141.164759][ T6861] loop0: detected capacity change from 0 to 32768 [ 141.192296][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 141.285208][ T6861] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.313436][ T5801] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.494977][ T6858] loop2: detected capacity change from 0 to 32768 [ 141.517827][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 141.629044][ T6861] XFS (loop0): Ending clean mount [ 141.636294][ T6858] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 141.682948][ T6861] XFS (loop0): Quotacheck needed: Please wait. [ 141.960096][ T6858] XFS (loop2): Ending clean mount [ 141.960946][ T6861] XFS (loop0): Quotacheck: Done. [ 142.248394][ T5788] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 142.268403][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.983538][ T6914] loop3: detected capacity change from 0 to 512 [ 143.018268][ T6914] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.084606][ T6914] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.175934][ T6914] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 143.244775][ T6914] __quota_error: 1 callbacks suppressed [ 143.244792][ T6914] Quota error (device loop3): write_blk: dquota write failed [ 143.260268][ T6914] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 143.270524][ T6914] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.366: Failed to acquire dquot type 0 [ 143.283766][ T6914] EXT4-fs (loop3): 1 truncate cleaned up [ 143.324954][ T6914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.462607][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.501752][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.678919][ T5841] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 143.706293][ T6927] loop1: detected capacity change from 0 to 4096 [ 143.719151][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 143.730813][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 143.744673][ T6927] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 143.763170][ T6927] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 143.768804][ T5835] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 143.799574][ T5835] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 143.812387][ T6927] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 143.814269][ T5835] usb 3-1: Product: syz [ 143.831018][ T5835] usb 3-1: Manufacturer: syz [ 143.835677][ T5835] usb 3-1: SerialNumber: syz [ 143.858772][ T6927] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 143.884477][ T5841] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 143.885892][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 143.899038][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.922618][ T5841] usb 1-1: Product: syz [ 143.926942][ T5841] usb 1-1: Manufacturer: syz [ 143.934067][ T5841] usb 1-1: SerialNumber: syz [ 143.939551][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 143.958693][ T6932] netlink: 'syz.3.374': attribute type 7 has an invalid length. [ 143.959972][ T5841] usb 1-1: config 0 descriptor?? [ 143.978256][ T6927] ntfs: volume version 3.1. [ 143.992741][ T5841] gspca_main: sq930x-2.14.0 probing 2770:930c [ 144.078147][ T5835] usb 3-1: Handspring Visor / Palm OS: port 0, is for Console use [ 144.103217][ T5835] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 144.123451][ T5835] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 144.290827][ T5835] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 144.312613][ T5835] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 144.341715][ T5835] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 144.359658][ T5835] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 144.399452][ T5835] usb 3-1: USB disconnect, device number 4 [ 144.449440][ T5835] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 144.477129][ T5835] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 144.504075][ T5835] visor 3-1:1.0: device disconnected [ 144.669458][ T5841] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 144.885420][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.384'. [ 144.938894][ T5841] gspca_sq930x: Sensor ov9630 not yet treated [ 144.945171][ T5841] sq930x: probe of 1-1:0.0 failed with error -22 [ 145.008983][ T5841] usb 1-1: USB disconnect, device number 4 [ 145.095698][ T6954] loop1: detected capacity change from 0 to 1024 [ 145.105069][ T6954] EXT4-fs: Ignoring removed bh option [ 145.150272][ T6954] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 145.190074][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.345584][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.430538][ T3062] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.629045][ T3062] usb 3-1: Using ep0 maxpacket: 8 [ 145.640737][ T3062] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.683242][ T3062] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.703649][ T3062] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.724657][ T3062] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 145.748814][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.774412][ T3062] usb 3-1: config 0 descriptor?? [ 145.797349][ T6980] loop1: detected capacity change from 0 to 1024 [ 145.918174][ T2924] hfsplus: b-tree write err: -5, ino 4 [ 146.228513][ T3062] a4tech 0003:09DA:000A.0005: unbalanced collection at end of report description [ 146.240371][ T3062] a4tech 0003:09DA:000A.0005: parse failed [ 146.246850][ T3062] a4tech: probe of 0003:09DA:000A.0005 failed with error -22 [ 146.455473][ T5855] usb 3-1: USB disconnect, device number 5 [ 146.847377][ T6990] loop0: detected capacity change from 0 to 32768 [ 146.899205][ T6990] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.005403][ T6990] XFS (loop0): Ending clean mount [ 147.079000][ T6990] XFS (loop0): Quotacheck needed: Please wait. [ 147.129463][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 147.241373][ T7021] loop3: detected capacity change from 0 to 64 [ 147.290859][ T6990] XFS (loop0): Quotacheck: Done. [ 147.580937][ T5789] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.006379][ T7036] loop2: detected capacity change from 0 to 1024 [ 148.037175][ T7036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.076589][ T7036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.374228][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.332692][ T7050] loop3: detected capacity change from 0 to 40427 [ 149.372916][ T7050] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 149.394026][ T7050] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 149.433202][ T7050] F2FS-fs (loop3): invalid crc value [ 149.463855][ T7050] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 149.482901][ T7047] loop0: detected capacity change from 0 to 40427 [ 149.511035][ T7050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.592189][ T7047] F2FS-fs (loop0): invalid crc value [ 149.654810][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'. [ 149.675205][ T7047] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.725525][ T7050] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 149.909175][ T7050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.916902][ T7047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.128276][ T7050] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x4ef/0x1020 [ 150.179917][ T5789] syz-executor: attempt to access beyond end of device [ 150.179917][ T5789] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.228746][ T5789] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 150.273291][ T7079] loop2: detected capacity change from 0 to 1024 [ 150.313375][ C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 150.324933][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 150.331929][ T5795] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 150.491154][ T2924] hfsplus: b-tree write err: -5, ino 4 [ 150.673592][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 150.970355][ T7091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 150.977610][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.044858][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 151.309262][ T1187] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.324255][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 151.383412][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 151.498854][ T3062] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 151.508694][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 151.516345][ T1187] usb 3-1: config 0 has no interfaces? [ 151.524223][ T1187] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 151.560692][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.603496][ T1187] usb 3-1: config 0 descriptor?? [ 151.703385][ T3062] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.724261][ T3062] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.737097][ T3062] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 151.760901][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.775985][ T3062] usb 4-1: config 0 descriptor?? [ 151.860686][ T7123] loop0: detected capacity change from 0 to 16 [ 151.893721][ T7092] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 151.906098][ T7123] erofs: (device loop0): mounted with root inode @ nid 36. [ 151.913702][ T5841] usb 3-1: USB disconnect, device number 6 [ 151.955624][ T28] audit: type=1800 audit(1763469543.664:35): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.456" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 151.979401][ T2973] vhci_hcd: stop threads [ 152.003942][ T2973] vhci_hcd: release socket [ 152.018408][ T2973] vhci_hcd: disconnect device [ 152.222676][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.238651][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.248660][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.255766][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.278822][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.288655][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.295705][ T3062] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 152.324644][ T3062] elecom 0003:056E:00FD.0006: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 152.476576][ T5855] usb 4-1: USB disconnect, device number 3 [ 152.616199][ T7130] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 152.872776][ T7136] loop1: detected capacity change from 0 to 256 [ 152.879398][ T7127] loop0: detected capacity change from 0 to 40427 [ 152.908199][ T7127] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 152.928822][ T7127] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 152.966235][ T7127] F2FS-fs (loop0): invalid crc value [ 152.971931][ T7136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 152.991117][ T7127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.136853][ T7127] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 153.147770][ T7127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.329034][ T5855] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.340650][ T7146] loop1: detected capacity change from 0 to 512 [ 153.367739][ T7144] loop3: detected capacity change from 0 to 1024 [ 153.401870][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.451588][ T7146] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.528864][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 153.568003][ T5855] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 153.610122][ T5855] usb 3-1: config 1 has no interface number 0 [ 153.628719][ T5855] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 153.678342][ T5855] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.711519][ T5855] usb 3-1: config 1 interface 105 has no altsetting 0 [ 153.721758][ T5855] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 153.731574][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.736162][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.746557][ T5855] usb 3-1: Product: syz [ 153.753929][ T5855] usb 3-1: Manufacturer: syz [ 153.778795][ T5855] usb 3-1: SerialNumber: syz [ 153.812234][ T7139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.822604][ T7139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.848738][ T7153] comedi comedi2: dt2815: I/O port conflict (0x4f27,2) [ 154.034749][ T7158] netlink: 56 bytes leftover after parsing attributes in process `syz.3.471'. [ 154.079273][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 154.289799][ T7139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.299049][ T7139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.403905][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 154.414948][ T7169] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 154.547731][ T5855] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 154.585689][ T5855] aqc111: probe of 3-1:1.105 failed with error -71 [ 154.628268][ T5855] usb 3-1: USB disconnect, device number 7 [ 154.644257][ T7173] loop0: detected capacity change from 0 to 4096 [ 154.837742][ T7173] ntfs3: loop0: failed to convert name for inode 1e. [ 154.938886][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.079044][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.148854][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 155.174050][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 155.216449][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.227569][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.237991][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 155.255732][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 155.283076][ T5858] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.291583][ T5841] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 155.311184][ T5858] usb 4-1: config 0 has no interface number 0 [ 155.317459][ T5858] usb 4-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 155.328373][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.361378][ T5841] usb 2-1: config 0 descriptor?? [ 155.366654][ T5858] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 155.380639][ T7177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.399880][ T5858] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 155.431651][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.447174][ T5858] usb 4-1: config 0 descriptor?? [ 155.673544][ T5803] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 155.673873][ T5858] usb 4-1: string descriptor 0 read error: -71 [ 155.765714][ T5858] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 155.873358][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 155.873462][ T5855] usb 2-1: USB disconnect, device number 8 [ 156.013938][ T5858] snd-usb-audio: probe of 4-1:0.1 failed with error -2 [ 156.043893][ T5858] usb 4-1: USB disconnect, device number 4 [ 156.438764][ T8] vhci_hcd: vhci_device speed not set [ 156.474434][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 156.500205][ T7215] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 156.787626][ T7226] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.797123][ T7226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.806263][ T7226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.816217][ T7226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.842920][ T7226] Zero length message leads to an empty skb [ 156.900381][ T7228] loop0: detected capacity change from 0 to 4096 [ 157.002338][ T7228] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 157.042356][ T7228] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 157.331369][ T3062] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 157.532413][ T3062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.558860][ T3062] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 157.583743][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.609406][ T3062] usb 3-1: config 0 descriptor?? [ 157.649180][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.888805][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 157.904038][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 157.919912][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.932041][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.943196][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 157.955100][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 157.965937][ T5858] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 157.975882][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.989432][ T5858] usb 1-1: config 0 descriptor?? [ 158.000146][ T7241] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 158.051647][ T3062] hid (null): usage index exceeded [ 158.081155][ T3062] hid-led 0003:1294:1320.0007: ignoring exceeding usage max [ 158.100641][ T3062] hid-led 0003:1294:1320.0007: usage index exceeded [ 158.107530][ T3062] hid-led 0003:1294:1320.0007: item 0 1 2 0 parsing failed [ 158.127509][ T7245] loop3: detected capacity change from 0 to 32768 [ 158.135449][ T3062] hid-led: probe of 0003:1294:1320.0007 failed with error -22 [ 158.161264][ T7245] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.512 (7245) [ 158.209185][ T7245] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.249390][ T7245] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.306838][ T5803] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 158.308756][ T7245] BTRFS info (device loop3): enabling disk space caching [ 158.348702][ T7245] BTRFS info (device loop3): enabling auto defrag [ 158.382253][ T3062] usb 3-1: USB disconnect, device number 8 [ 158.392600][ T7245] BTRFS info (device loop3): doing ref verification [ 158.404108][ T7245] BTRFS info (device loop3): use no compression [ 158.421333][ T7245] BTRFS info (device loop3): force clearing of disk cache [ 158.428547][ T7245] BTRFS info (device loop3): disabling disk space caching [ 158.512269][ T8] usb 1-1: USB disconnect, device number 5 [ 158.516284][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 158.617898][ T7245] BTRFS info (device loop3): enabling ssd optimizations [ 158.638385][ T7245] BTRFS info (device loop3): auto enabling async discard [ 158.655401][ T7245] BTRFS info (device loop3): rebuilding free space tree [ 158.686392][ T7245] BTRFS info (device loop3): disabling free space tree [ 158.696176][ T7245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.708374][ T7245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.815532][ T28] audit: type=1800 audit(1763469550.534:36): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.512" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 158.893177][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.183577][ T7257] loop1: detected capacity change from 0 to 32768 [ 159.225067][ T7257] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.516 (7257) [ 159.277869][ T7257] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.327124][ T7257] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 159.398991][ T7257] BTRFS info (device loop1): enabling disk space caching [ 159.406191][ T7257] BTRFS info (device loop1): force clearing of disk cache [ 159.434530][ T7257] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.475423][ T7257] BTRFS info (device loop1): use zstd compression, level 3 [ 159.491856][ T7257] BTRFS info (device loop1): disk space caching is enabled [ 159.759381][ T7257] BTRFS info (device loop1): enabling ssd optimizations [ 159.769600][ T7257] BTRFS info (device loop1): auto enabling async discard [ 159.834863][ T7257] BTRFS info (device loop1): rebuilding free space tree [ 159.853344][ T7257] BTRFS info (device loop1): disabling free space tree [ 159.862047][ T7257] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.874367][ T7305] netlink: 184 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.883675][ T7257] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.959907][ T7307] netlink: set zone limit has 8 unknown bytes [ 160.185432][ T7312] loop2: detected capacity change from 0 to 256 [ 160.222921][ T7257] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 160.224387][ T7312] exfat: Deprecated parameter 'namecase' [ 160.300701][ T5801] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 160.315167][ T7312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 160.408918][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.599208][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 160.638956][ T5841] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.647033][ T5841] usb 4-1: config 0 has no interface number 0 [ 160.679402][ T5841] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.728757][ T5841] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.773439][ T5841] usb 4-1: config 0 interface 8 has no altsetting 0 [ 160.809800][ T5841] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 160.853148][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.897580][ T5841] usb 4-1: config 0 descriptor?? [ 161.276160][ T7334] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 161.346993][ T5841] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 161.368726][ T5841] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 161.376790][ T5841] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 161.388224][ T5841] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 161.399319][ T5841] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 161.407462][ T5841] uclogic 0003:5543:0522.0008: No inputs registered, leaving [ 161.429680][ T5841] uclogic 0003:5543:0522.0008: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input8 [ 161.596489][ T5855] usb 4-1: USB disconnect, device number 5 [ 161.727276][ T7332] loop1: detected capacity change from 0 to 40427 [ 161.738432][ T7332] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 161.777975][ T7332] F2FS-fs (loop1): invalid crc value [ 161.806050][ T7332] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.943304][ T7332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.545054][ T7338] loop0: detected capacity change from 0 to 32768 [ 162.582596][ T7338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.540 (7338) [ 162.676538][ T7338] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.694101][ T7338] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 162.703386][ T7338] BTRFS info (device loop0): enabling disk space caching [ 162.724758][ T7338] BTRFS info (device loop0): enabling auto defrag [ 162.737178][ T7338] BTRFS info (device loop0): doing ref verification [ 162.759939][ T7338] BTRFS info (device loop0): use no compression [ 162.766280][ T7338] BTRFS info (device loop0): force clearing of disk cache [ 162.818802][ T7338] BTRFS info (device loop0): disabling disk space caching [ 162.963580][ T7338] BTRFS info (device loop0): enabling ssd optimizations [ 162.990776][ T7338] BTRFS info (device loop0): auto enabling async discard [ 163.015361][ T7338] BTRFS info (device loop0): rebuilding free space tree [ 163.056274][ T7338] BTRFS info (device loop0): disabling free space tree [ 163.065109][ T7338] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.075347][ T7338] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.174838][ T28] audit: type=1800 audit(1763469554.894:37): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.540" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 163.208918][ T3062] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.244739][ T5789] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.409238][ T3062] usb 3-1: Using ep0 maxpacket: 8 [ 163.423407][ T3062] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.446372][ T3062] usb 3-1: config 4 interface 0 has no altsetting 0 [ 163.475849][ T3062] usb 3-1: string descriptor 0 read error: -22 [ 163.488879][ T3062] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 163.518468][ T3062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.579755][ T3062] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 163.621960][ T3062] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.667018][ T3062] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 163.698052][ T3062] usb 3-1: media controller created [ 163.815288][ T3062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.875397][ T7376] loop1: detected capacity change from 0 to 32768 [ 163.921067][ T7376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.550 (7376) [ 164.024111][ T7376] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.048817][ T7376] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.067955][ T7376] BTRFS info (device loop1): setting nodatacow, compression disabled [ 164.079729][ T7376] BTRFS info (device loop1): force clearing of disk cache [ 164.106540][ T7376] BTRFS info (device loop1): enabling ssd optimizations [ 164.123213][ T7376] BTRFS info (device loop1): using spread ssd allocation scheme [ 164.134316][ T7376] BTRFS info (device loop1): turning off barriers [ 164.141902][ T7376] BTRFS info (device loop1): disabling free space tree [ 164.149529][ T7376] BTRFS info (device loop1): metadata ratio 14 [ 164.161488][ T7376] BTRFS info (device loop1): disabling tree log [ 164.288266][ T7376] BTRFS info (device loop1): rebuilding free space tree [ 164.341348][ T7376] BTRFS info (device loop1): disabling free space tree [ 164.361871][ T7376] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.392190][ T7376] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.467451][ T7380] loop0: detected capacity change from 0 to 32768 [ 164.519044][ T7380] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.559 (7380) [ 164.695442][ T5801] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.764860][ T5975] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5975) [ 164.927141][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 164.934701][ T3062] zl10353_read_register: readreg error (reg=127, ret==0) [ 165.050827][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.128391][ T3062] usb 3-1: USB disconnect, device number 9 [ 165.279176][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 165.316678][ T5841] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.358919][ T5841] usb 1-1: config 0 has no interface number 0 [ 165.367015][ T5841] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.415263][ T5841] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.455548][ T5841] usb 1-1: config 0 interface 8 has no altsetting 0 [ 165.478700][ T5841] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 165.508691][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.537384][ T5841] usb 1-1: config 0 descriptor?? [ 165.676814][ T7416] loop1: detected capacity change from 0 to 8 [ 165.712538][ T7416] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 165.896739][ T7418] loop3: detected capacity change from 0 to 512 [ 165.909062][ T7418] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.916019][ T7418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.942315][ T7418] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.560: corrupted in-inode xattr: e_name out of bounds [ 165.963907][ T7418] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 166.014751][ T7418] EXT4-fs (loop3): 1 orphan inode deleted [ 166.041196][ T5841] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 166.064408][ T7418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.097537][ T5841] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 166.111797][ T5841] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 166.128910][ T5841] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 166.144511][ T5841] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 166.157470][ T5841] uclogic 0003:5543:0522.0009: No inputs registered, leaving [ 166.194214][ T5841] uclogic 0003:5543:0522.0009: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input8 [ 166.262319][ T5841] usb 1-1: USB disconnect, device number 6 [ 166.289849][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.442796][ T7428] fido_id[7428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 166.490595][ T7434] loop3: detected capacity change from 0 to 1024 [ 166.503778][ T7434] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 166.577170][ T7434] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.566: lblock 2 mapped to illegal pblock 2 (length 1) [ 166.675915][ T7434] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 166.693365][ T7434] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.566: lblock 0 mapped to illegal pblock 48 (length 1) [ 166.738751][ T7434] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 166.755623][ T7434] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.566: Failed to acquire dquot type 0 [ 166.795489][ T7434] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 166.821188][ T7434] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.566: mark_inode_dirty error [ 166.853729][ T7434] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 166.876734][ T7434] EXT4-fs (loop3): 1 orphan inode deleted [ 166.894635][ T7434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.899064][ T2936] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 166.990273][ T2936] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 167.019999][ T2936] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:9: Failed to release dquot type 0 [ 167.086670][ T7447] loop1: detected capacity change from 0 to 64 [ 167.109795][ T7447] syz.1.574: attempt to access beyond end of device [ 167.109795][ T7447] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 167.147166][ T7447] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 167.206637][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.238638][ T28] audit: type=1326 audit(1763469558.934:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970d18f6c9 code=0x7ffc0000 [ 167.282483][ T2924] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.334382][ T28] audit: type=1326 audit(1763469558.934:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970d18f6c9 code=0x7ffc0000 [ 167.339975][ T2924] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 167.380479][ T7447] Trying to free block not in datazone [ 167.396690][ T7452] loop0: detected capacity change from 0 to 512 [ 167.398121][ T28] audit: type=1326 audit(1763469558.934:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f970d18df10 code=0x7ffc0000 [ 167.432289][ T7452] EXT4-fs (loop0): Test dummy encryption mode enabled [ 167.439288][ T2924] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:8: Failed to release dquot type 0 [ 167.453393][ T28] audit: type=1326 audit(1763469558.934:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970d18f6c9 code=0x7ffc0000 [ 167.466352][ T7452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.480554][ T28] audit: type=1326 audit(1763469558.934:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970d18f6c9 code=0x7ffc0000 [ 167.512316][ T5795] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 167.537844][ T7452] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.576: corrupted in-inode xattr: e_name out of bounds [ 167.580287][ T28] audit: type=1326 audit(1763469558.934:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f970d18f6c9 code=0x7ffc0000 [ 167.587789][ T5795] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 167.622167][ T7452] EXT4-fs (loop0): 1 orphan inode deleted [ 167.633996][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.661248][ T5795] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 167.678416][ T7454] loop2: detected capacity change from 0 to 8192 [ 167.735934][ T7454] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.773306][ T7454] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 167.814119][ T7454] REISERFS (device loop2): using ordered data mode [ 167.831111][ T7454] reiserfs: using flush barriers [ 167.850251][ T7454] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.871200][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.879536][ T7454] REISERFS (device loop2): checking transaction log (loop2) [ 168.097119][ T7454] REISERFS (device loop2): Using tea hash to sort names [ 168.107345][ T7454] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 168.138842][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.329556][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 168.364213][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.374102][ T5841] usb 4-1: config 4 interface 0 has no altsetting 0 [ 168.392613][ T5841] usb 4-1: string descriptor 0 read error: -22 [ 168.407678][ T5841] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 168.427359][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.482674][ T5841] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 168.518547][ T5841] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.557798][ T7458] loop1: detected capacity change from 0 to 32768 [ 168.561603][ T5841] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 168.581783][ T7458] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.578 (7458) [ 168.601019][ T5841] usb 4-1: media controller created [ 168.636649][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.653416][ T7458] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.671102][ T7458] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 168.682801][ T7458] BTRFS info (device loop1): using free space tree [ 168.783869][ T7458] BTRFS info (device loop1): enabling ssd optimizations [ 168.808864][ T7458] BTRFS info (device loop1): auto enabling async discard [ 169.032491][ T5801] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.090266][ T3062] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 169.287226][ T5790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (5790) [ 169.309006][ T3062] usb 3-1: Using ep0 maxpacket: 16 [ 169.331006][ T3062] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.344935][ T3062] usb 3-1: config 0 has no interface number 0 [ 169.351741][ T3062] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.369593][ T3062] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.390542][ T3062] usb 3-1: config 0 interface 8 has no altsetting 0 [ 169.406809][ T3062] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 169.435244][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.460438][ T3062] usb 3-1: config 0 descriptor?? [ 169.579350][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.789082][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 169.802306][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.813933][ T5841] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.838820][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.867362][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.908936][ T5835] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 169.918108][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.933138][ T3062] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 169.954397][ T3062] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 169.980624][ T5841] usb 4-1: USB disconnect, device number 6 [ 169.987785][ T5835] usb 1-1: config 0 descriptor?? [ 169.995221][ T3062] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 170.023947][ T3062] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 170.036561][ T3062] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 170.046214][ T3062] uclogic 0003:5543:0522.000A: No inputs registered, leaving [ 170.065281][ T3062] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input8 [ 170.210740][ T3062] usb 3-1: USB disconnect, device number 10 [ 170.450799][ T7504] loop1: detected capacity change from 0 to 1024 [ 170.464189][ T5835] nzxt-kraken2 0003:1E71:170E.000B: item fetching failed at offset 1/5 [ 170.481217][ T5835] nzxt-kraken2 0003:1E71:170E.000B: hid parse failed with -22 [ 170.496902][ T5835] nzxt-kraken2: probe of 0003:1E71:170E.000B failed with error -22 [ 170.603438][ T2936] hfsplus: b-tree write err: -5, ino 4 [ 170.670693][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 170.709983][ T5835] usb 1-1: USB disconnect, device number 7 [ 170.874675][ T7511] loop2: detected capacity change from 0 to 512 [ 170.887107][ T7511] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.896301][ T7511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.910559][ T7511] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 170.953244][ T7511] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 170.973157][ T7511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.005996][ T7511] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.594: Invalid block bitmap block 0 in block_group 0 [ 171.021128][ T7511] EXT4-fs (loop2): Remounting filesystem read-only [ 171.030745][ T7511] EXT4-fs (loop2): 1 orphan inode deleted [ 171.091414][ T7511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.233469][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.680553][ T7538] loop3: detected capacity change from 0 to 512 [ 171.702763][ T7538] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.729813][ T7538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.782063][ T7538] EXT4-fs error (device loop3): __ext4_iget:5067: inode #15: block 1803188595: comm syz.3.606: invalid block [ 171.818362][ T7538] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.606: couldn't read orphan inode 15 (err -117) [ 171.832198][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.871671][ T7538] EXT4-fs error (device loop3): ext4_get_parent:1910: comm syz.3.606: inode #2: comm syz.3.606: iget: illegal inode # [ 171.970002][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.164946][ T7546] loop3: detected capacity change from 0 to 1024 [ 172.179721][ T7548] autofs4:pid:7548:autofs_fill_super: called with bogus options [ 172.245537][ T7546] hfsplus: bad catalog entry type [ 172.370079][ T2924] hfsplus: b-tree write err: -5, ino 4 [ 172.436222][ T7534] loop1: detected capacity change from 0 to 40427 [ 172.472052][ T7534] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 172.530175][ T7534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.574587][ T7554] bridge0: entered promiscuous mode [ 172.594658][ T7534] F2FS-fs (loop1): invalid crc value [ 172.606671][ T7554] macsec1: entered promiscuous mode [ 172.638791][ T7534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.639502][ T7554] bridge0: port 3(macsec1) entered blocking state [ 172.686758][ T7561] loop0: detected capacity change from 0 to 512 [ 172.705232][ T7554] bridge0: port 3(macsec1) entered disabled state [ 172.718808][ T7561] EXT4-fs (loop0): Test dummy encryption mode enabled [ 172.734574][ T7554] macsec1: entered allmulticast mode [ 172.753934][ T7561] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 172.760051][ T7554] bridge0: entered allmulticast mode [ 172.803362][ T7561] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 172.820810][ T7554] macsec1: left allmulticast mode [ 172.821451][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.826063][ T7534] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.867575][ T7554] bridge0: left allmulticast mode [ 172.900776][ T7554] bridge0: left promiscuous mode [ 172.905903][ T7534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.026234][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.098708][ T8] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 173.106445][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 173.106461][ T28] audit: type=1800 audit(1763469564.824:65): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.613" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 173.336282][ T7571] capability: warning: `syz.0.621' uses 32-bit capabilities (legacy support in use) [ 173.350774][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.368928][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.377683][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.398266][ T8] usb 3-1: config 1 has no interface number 0 [ 173.405523][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 173.416708][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.431212][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.443923][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.519435][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 173.981486][ T7569] loop3: detected capacity change from 0 to 32768 [ 174.012841][ T7569] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 174.084122][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 174.165790][ T7579] loop1: detected capacity change from 0 to 512 [ 174.214022][ T7579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.269247][ T7579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.324315][ T7579] EXT4-fs error (device loop1): __ext4_iget:5067: inode #15: block 1803188595: comm syz.1.619: invalid block [ 174.352037][ T5790] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 174.368934][ T7579] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.619: couldn't read orphan inode 15 (err -117) [ 174.431902][ T5780] usb 3-1: USB disconnect, device number 11 [ 174.439665][ T5780] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 174.475074][ T7579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.565054][ T7579] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.619: inode #2: comm syz.1.619: iget: illegal inode # [ 174.691006][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.844181][ T7576] loop0: detected capacity change from 0 to 40427 [ 174.877597][ T7576] F2FS-fs (loop0): invalid crc value [ 174.897100][ T7576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.986787][ T7576] F2FS-fs (loop0): Start checkpoint disabled! [ 175.071612][ T7576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 175.149766][ T7597] loop1: detected capacity change from 0 to 512 [ 175.188829][ T7597] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.211233][ T7597] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 175.320939][ T7597] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 175.380100][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.563740][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.850375][ T7609] bridge0: entered promiscuous mode [ 175.855905][ T7609] macsec1: entered promiscuous mode [ 175.886284][ T7609] bridge0: port 3(macsec1) entered blocking state [ 175.911432][ T7609] bridge0: port 3(macsec1) entered disabled state [ 175.924833][ T7609] macsec1: entered allmulticast mode [ 175.934096][ T7611] loop1: detected capacity change from 0 to 64 [ 175.934890][ T7609] bridge0: entered allmulticast mode [ 175.985957][ T7609] macsec1: left allmulticast mode [ 176.001146][ T7609] bridge0: left allmulticast mode [ 176.020793][ T7609] bridge0: left promiscuous mode [ 176.152477][ T7615] loop1: detected capacity change from 0 to 256 [ 176.194001][ T7615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 176.516405][ T7621] sp0: Synchronizing with TNC [ 176.921677][ T3062] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.011699][ T7639] sp0: Synchronizing with TNC [ 177.131110][ T3062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.153892][ T3062] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 177.172302][ T3062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.184692][ T3062] usb 1-1: config 0 descriptor?? [ 177.256584][ T7645] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.265597][ T7645] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 177.274612][ T7645] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.283311][ T7645] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 177.651189][ T3062] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 177.692583][ T3062] hid_mf 0003:0079:1846.000C: Invalid report, this should never happen! [ 177.738708][ T3062] hid_mf 0003:0079:1846.000C: Force feedback init failed. [ 177.827721][ T5855] usb 1-1: USB disconnect, device number 8 [ 177.890028][ T7658] fido_id[7658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 178.526543][ T7653] loop3: detected capacity change from 0 to 40427 [ 178.558835][ T7653] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 178.565880][ T7653] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.610400][ T7653] F2FS-fs (loop3): invalid crc value [ 178.645005][ T7653] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.767624][ T7653] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.775157][ T7653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.856568][ T7679] f2fs_ckpt-7:3: attempt to access beyond end of device [ 178.856568][ T7679] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.901830][ T7679] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 179.008839][ T7688] loop1: detected capacity change from 0 to 2048 [ 179.097177][ T7692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.319098][ T3062] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 179.365996][ T7695] loop1: detected capacity change from 0 to 4096 [ 179.378696][ T5855] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.510957][ T3062] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.529036][ T3062] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.549579][ T3062] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.578649][ T3062] usb 1-1: config 1 has no interface number 0 [ 179.593525][ T5855] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 179.595210][ T3062] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.628997][ T5855] usb 3-1: config 0 has no interface number 1 [ 179.635228][ T5855] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 179.644584][ T3062] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.674286][ T5855] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 179.687459][ T3062] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.707246][ T5855] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 179.716685][ T3062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.747409][ T3062] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 179.748768][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.781607][ T5855] usb 3-1: SerialNumber: syz [ 179.831173][ T5855] usb 3-1: config 0 descriptor?? [ 180.053676][ T5855] usb 3-1: Found UVC 0.00 device (0002:0000) [ 180.075210][ T5855] usb 3-1: No valid video chain found. [ 180.095181][ T5855] usb 3-1: USB disconnect, device number 12 [ 180.335950][ T3062] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 180.620333][ T5855] usb 1-1: USB disconnect, device number 9 [ 180.627931][ T5855] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 180.704265][ T28] audit: type=1326 audit(1763469572.424:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.2.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f970d18f6c9 code=0x0 [ 180.918711][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.098673][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 181.106901][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.119870][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.139054][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 181.171143][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.197615][ T5879] usb 2-1: config 0 descriptor?? [ 181.633764][ T5879] logitech 0003:046D:C29C.000D: unknown main item tag 0xe [ 181.649272][ T5879] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 181.665620][ T5879] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 181.680993][ T5879] logitech 0003:046D:C29C.000D: unexpected long global item [ 181.702201][ T5879] logitech 0003:046D:C29C.000D: parse failed [ 181.715911][ T5879] logitech: probe of 0003:046D:C29C.000D failed with error -22 [ 181.783067][ T7747] loop2: detected capacity change from 0 to 8192 [ 181.805280][ T7747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 181.819170][ T7747] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 181.844320][ T7747] REISERFS (device loop2): using ordered data mode [ 181.853517][ T5879] usb 2-1: USB disconnect, device number 9 [ 181.874654][ T7747] reiserfs: using flush barriers [ 181.884703][ T7747] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.914542][ T7747] REISERFS (device loop2): checking transaction log (loop2) [ 181.961448][ T7747] REISERFS (device loop2): Using r5 hash to sort names [ 182.008124][ T7752] loop0: detected capacity change from 0 to 2048 [ 182.061207][ T7752] NILFS (loop0): couldn't find nilfs on the device [ 182.143046][ T5975] udevd[5975]: incorrect nilfs2 checksum on /dev/loop0 [ 182.196704][ T7747] reiserfs: enabling write barrier flush mode [ 182.232242][ T7747] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 182.258698][ T7747] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 182.278319][ T7747] REISERFS (device loop2): Remounting filesystem read-only [ 182.308777][ T7747] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 182.364019][ T7756] loop0: detected capacity change from 0 to 1024 [ 182.367785][ T7747] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 182.408463][ T7747] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 182.419966][ T7747] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 182.428629][ T7747] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 182.444482][ T7747] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 182.455542][ T7747] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 182.470804][ T7747] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 182.513509][ T7747] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 182.532891][ T7756] hfsplus: bad catalog entry type [ 182.610957][ T2936] hfsplus: b-tree write err: -5, ino 4 [ 182.676112][ T5788] ------------[ cut here ]------------ [ 182.682230][ T5788] kernel BUG at fs/reiserfs/journal.c:1916! [ 182.695350][ T5788] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 182.701507][ T5788] CPU: 0 PID: 5788 Comm: syz-executor Not tainted syzkaller #0 [ 182.709111][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.719220][ T5788] RIP: 0010:do_journal_release+0x53a/0x550 [ 182.725089][ T5788] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 80 d0 b6 ff e9 ac fc ff ff e8 46 75 5f ff <0f> 0b e8 3f 75 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 182.744831][ T5788] RSP: 0000:ffffc9000461fb00 EFLAGS: 00010293 [ 182.750950][ T5788] RAX: ffffffff82261a4a RBX: ffff8880776e4000 RCX: ffff8880284e3c00 [ 182.758966][ T5788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.767025][ T5788] RBP: ffffc9000461fbf8 R08: ffffc9000461fb77 R09: 0000000000000000 [ 182.775049][ T5788] R10: ffffc9000461fb40 R11: fffff520008c3f6f R12: ffffc90004ba1000 [ 182.783060][ T5788] R13: 1ffff920008c3f64 R14: ffff8880776e4630 R15: 0000000000000000 [ 182.791047][ T5788] FS: 00005555649bb500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 182.800081][ T5788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.806678][ T5788] CR2: 00007ff9939156c0 CR3: 000000006338e000 CR4: 00000000003506f0 [ 182.814767][ T5788] Call Trace: [ 182.818056][ T5788] [ 182.821008][ T5788] ? journal_release+0x30/0x30 [ 182.825810][ T5788] journal_release+0x1f/0x30 [ 182.830546][ T5788] reiserfs_put_super+0x222/0x480 [ 182.835595][ T5788] ? hook_inode_free_security+0xb0/0xb0 [ 182.841240][ T5788] ? reiserfs_dirty_inode+0x240/0x240 [ 182.846827][ T5788] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 182.852490][ T5788] ? reiserfs_dirty_inode+0x240/0x240 [ 182.857877][ T5788] generic_shutdown_super+0x134/0x2b0 [ 182.863481][ T5788] kill_block_super+0x44/0x90 [ 182.868185][ T5788] deactivate_locked_super+0x97/0x100 [ 182.873594][ T5788] cleanup_mnt+0x429/0x4c0 [ 182.878045][ T5788] task_work_run+0x1ce/0x250 [ 182.882678][ T5788] ? task_work_cancel+0x240/0x240 [ 182.887739][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 182.893217][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 182.898525][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 182.904116][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 182.909612][ T5788] do_syscall_64+0x61/0xb0 [ 182.914151][ T5788] ? clear_bhb_loop+0x40/0x90 [ 182.918847][ T5788] ? clear_bhb_loop+0x40/0x90 [ 182.923542][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.929453][ T5788] RIP: 0033:0x7f970d1909f7 [ 182.933889][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 182.953513][ T5788] RSP: 002b:00007ffd86296908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.961947][ T5788] RAX: 0000000000000000 RBX: 00007f970d211d7d RCX: 00007f970d1909f7 [ 182.969931][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd862969c0 [ 182.977923][ T5788] RBP: 00007ffd862969c0 R08: 0000000000000000 R09: 0000000000000000 [ 182.985905][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd86297a50 [ 182.993897][ T5788] R13: 00007f970d211d7d R14: 000000000002c8f7 R15: 00007ffd86297a90 [ 183.001890][ T5788] [ 183.004930][ T5788] Modules linked in: [ 183.038746][ T5788] ---[ end trace 0000000000000000 ]--- [ 183.045102][ T5788] RIP: 0010:do_journal_release+0x53a/0x550 [ 183.060959][ T5788] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 80 d0 b6 ff e9 ac fc ff ff e8 46 75 5f ff <0f> 0b e8 3f 75 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 183.108134][ T5788] RSP: 0000:ffffc9000461fb00 EFLAGS: 00010293 [ 183.120250][ T5788] RAX: ffffffff82261a4a RBX: ffff8880776e4000 RCX: ffff8880284e3c00 [ 183.133318][ T5788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.141584][ T5788] RBP: ffffc9000461fbf8 R08: ffffc9000461fb77 R09: 0000000000000000 [ 183.149874][ T5788] R10: ffffc9000461fb40 R11: fffff520008c3f6f R12: ffffc90004ba1000 [ 183.157966][ T5788] R13: 1ffff920008c3f64 R14: ffff8880776e4630 R15: 0000000000000000 [ 183.166097][ T5788] FS: 00005555649bb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 183.175543][ T5788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.182440][ T5788] CR2: 000000110c252b11 CR3: 000000006338e000 CR4: 00000000003506e0 [ 183.191747][ T5788] Kernel panic - not syncing: Fatal exception [ 183.198122][ T5788] Kernel Offset: disabled [ 183.202465][ T5788] Rebooting in 86400 seconds..