last executing test programs: 13.211505143s ago: executing program 3 (id=765): syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x531082, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 11.929770052s ago: executing program 3 (id=780): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) 11.108078164s ago: executing program 3 (id=793): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x1000000000004}}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 10.891318637s ago: executing program 3 (id=797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 10.637783121s ago: executing program 3 (id=799): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 9.625241216s ago: executing program 3 (id=812): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4000}, 0xc) bind$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc) 3.151495583s ago: executing program 4 (id=912): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x214, &(0x7f0000000a00)="$eJzs3cFuElEUANBLS8tgXHRnYmIyxoWuGvULakxNjCQmNSx010RWsIINsGk/w1/wv/wA0xWbZgzOTEFKKRIBredsuMx9d3iPBwMbLlnkvj34EklSiZ2jOIpRJQ5iJ0rnAQDcJaMsi+9Z7verq+uYEgCwZkt8/l9ueEoAwJp9+Pjp3atG4/gkTZOIi/N+s9/Mb/P8m7eN4+fpTweTqot+v7l7lX+Rzn53GOf34l6Rf5nXp1fp/Yho7sezJ3l+nHv9vpH+Wl+Lz2teOwAAAAAAAAAAAAAAAAAAAAAAbMujSEtz+/scHs7m60U+vzfVH2imf081HpbtgSftgbKzTSwKAAAAAAAAAAAAAAAAAAAA/jG9wbB92um0upOgFhHTR6pzxtwcVIoTLzV4+8FOfbXyerHMqdRllrutvFI8RetdYH3+5i4TRPVv2Z1Vg/RPnbBWbvP1VD0qC8qzbBzMfxeUbTFuLN+PiMUTe3qy6rpG41fo18fd3iCyhYMn14jaxq5GAAAAAAAAAAAAAAAAAADwf5v61fc1ye42ZgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm9cbDMt/+R+2TzudVrc3GLZPk+LY5Mi84Cwi7t8yptXtlY+1F8l2FgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd9yMAAP//lJodvA==") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 2.838932297s ago: executing program 4 (id=914): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0xa00c40, &(0x7f0000000580)={[{@lazytime}, {@lazytime}, {@usrquota}, {@filestreams}, {@bsdgroups}, {}, {@largeio}]}, 0x4, 0x96d1, &(0x7f0000012d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fadvise64(r0, 0x3f015764000, 0x405f, 0x5) 1.874970402s ago: executing program 4 (id=926): unshare(0x2a020400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 1.456917258s ago: executing program 0 (id=933): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x8}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4bfa, 0x0) 1.34476835s ago: executing program 4 (id=936): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}}, 0x0) 1.31807681s ago: executing program 0 (id=937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getitimer(0x1, &(0x7f00000001c0)) 1.217427232s ago: executing program 4 (id=939): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d6163746976655f6c6f67733d342c6a71666d743d76667376312c6e6f696e6c696e655f646174612c6e6f5f686561702c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00ac19de274efe59cc5334a78992c33160f2bb29d00ec19e86b62e10e9d54427a6838f1aff0ce27327b707feafcce74234d4abe846a4a55fd26c5918e2ac7a6aa2fd027fd0b881927cefce65dd3d73b0b9185466a67b", @ANYRES32], 0x21, 0x552d, &(0x7f0000000a00)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') 1.188383302s ago: executing program 0 (id=940): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.118857394s ago: executing program 1 (id=941): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x3}) 1.117241123s ago: executing program 2 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c0000000c0003800400050004000180200001801400020076657468305f746f5f62617461647600080003"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) 1.071248984s ago: executing program 0 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) 963.328586ms ago: executing program 2 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 909.664716ms ago: executing program 1 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 909.285337ms ago: executing program 0 (id=946): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0}) 829.617577ms ago: executing program 1 (id=947): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000980)={[{@force}, {}, {@nls={'nls', 0x3d, 'macromanian'}}, {@uid={'uid', 0x3d, 0xee01}}, {@umask={'umask', 0x3d, 0x7fffffff}}, {@part={'part', 0x3d, 0x101}}]}, 0x20, 0x6f8, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000a40)=""/4111, 0x100f) 798.705638ms ago: executing program 2 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 735.542179ms ago: executing program 0 (id=949): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 581.654201ms ago: executing program 2 (id=950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000540)=0xeeee8000) 567.587651ms ago: executing program 1 (id=951): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 411.837164ms ago: executing program 1 (id=952): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000000)={r1, 0xfce0, 0x0, 0x0, 0x0}) 325.458555ms ago: executing program 2 (id=953): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@showexec}, {@nodots}, {@dots}, {@nodots}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') 282.438236ms ago: executing program 1 (id=954): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001c80)={[{@errors_remount}, {@discard}, {@sys_tz}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0xb}}]}, 0x1, 0x1534, &(0x7f0000002f00)="$eJzs3AucTlX3OPC19t5njEl6muQy7L3X4UlimyTJJUkuSZIkSW4JSZO8kpAYcksakpDrkFyGkFwmJo37/X5JSJImSUJyS/b/o/irt7ffe3+9n3fW9/N5PvaafdY+6znrzDznHMw3nQZXb1ijSn0ign8K/vJHMgDEAkB/ALgGAAIAKBNfJv7CfE6Jyf/cTti/1sNpV7oCdiVx/7M37n/2xv3P3rj/2Rv3P3vj/mdv3P/sjfvPWHa2aVqBa/mVfV/8/P9/X90/nOHP//8hWSXHfLGm5PWdAWL+1hTuf/bG/f+fFfwtG3H/szfuf3YVe6ULYP8F+Ps/O8jxhzPc/+yN+89Ydnalnz9f6RdEsvcxuNLnH2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OG0v0wBwKXxla6LMcYYY4wxxhhj/zo+x5WugDHGGGOMMcYYY/9+CAIkKAggBnJALOSEOBAAcDXkhmsgAtdCPFwHeeB6yAv5ID8UgAQoCIVAgwELBCEUhiIQhRugKNwIxeAmKA4lwEFJSISboRTcAqXhVigDt0FZuB3KQXmoABXhDqgEd0JluAuqwN1QFapBdagB90BNuBdqwX1QG+6HOvAA1IUHoR48BPXhYWgAj0BDeBQawWPQGJpAU2gGzf+h/BehG7wE3aEHJENP6AUvQ2/oA32hH/SHV2AAvAoD4TVIgUEwGF6HIfAGDIU3YRgMhxHwFoyEUTAaxsBYGAepMB4mwNswEd6BSTAZpsBUSINpMB3ehRkwE2bBezAb3oc5MBfmwXxIhw9gASyEDPgQFsFHkAmLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsDHsBM+gV2wG/bAp7AXPvs780/9WX5nBAQUKFChwhiMwViMxTiMw1yYC3NjboxgBOMxHvNgHsyLeTE/5scETMBCWAgNGiQkLIyFMYpRLIpFsRgWw+JYHB06TMRELIW3YGksjWWwDJbFslgOy2N5rIgVsRJWwspYGatgFayKVbE6Vsd78B7sibWwFtbG2lgH61x6PIX1sT42wAbYEBtiI2yEjbExNsWm2BybYwtsgS2xJbbG1tgG22BbbItJmITtsB22x/bYATtgR+yInbATdsYu2CXrxRyAL+FL2AOrip7YC3thb0zJ0Rf7YT98BQfgq/gqvoYpOAgH4+v4Or6BQ/EkDsPhOAJHYCUxCkfjGCQxDlMxFSfgBJyIE3ESTsbJOBXTcBpOx+k4A2fiTHwPZ+P7+D7Oxbk4H9MxHRfgQszADFyEpzATF+MSXIrLcDkuw5W4ClfiGlyLa3A9rseNuBE342bciltxO27Hj1EB4Ce4G3djCu7FvbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fD7hqwYf37Q6BcQFSigRI2JErIgVcSJO5BK5RG6RW0RERMSLeJFH5BF5RV6RX+QXCSJBFBKFhBFGkAhjAEBERVQUFUVFMVFMFBfFhRNOJIpEUUqUEqVFaVFG3CbKittFOVFetHIVRUVRSbR2lcVdooqoIqqKaqK6qCFqiJqipqglaonaoraoI+qIuuJBUU/0xL74sLjQmYZiEDYSg7GxaCLkxZ9gLcRQbClaidbiSTEch2Fb0cIliWdEOzEa24s/iTH4nOgoxmEn8YLoLLqIruJF0U20dN1FDzEJe4peYir2Fn1EX9FPzMBq4j2cnbO6eE2kiEFisHhdzMc3xFDxphgmhosR4i0xUowSo8UYMVaME6livJgg3hYTxTtikpgspoipIk1ME9PFu2KGmClmiffEbPG+mCPminlivkgXH4gFYqHIEB+KReIjkSkWiyViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHeJjsVN8InaJ3WKP+FTsFZ+JfeJzsV98IQ6IL0WW+EocFF+LQ+IbcVh8K46I78RRcUwcF9+LE+IHcVKcEqfFGXFW/CjOiZ/EeeEFSJRCSqlkIGNkDhkrc8o4eZXMJYOLR/daGS+vk3nk9TKvzCfzywIyQRaUhaSWRlpJMpSFZREZlTfIovJGWUzeJIvLEtLJkjJR3ixLyVtkaXmrLCNvk2Xl7bKcLC8ryIryDllJ3ikh8ss+qspqsrqsIe+RyXCvrCXvk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjWUT2VQ2k83l47KFfEK2lK1ka/mkbCOfkm3l0zJJPiPbSX/xFHlOdpTPy07yBdlZdpFd5U/yvPSyu+whoSfIXvJl2Vv2kX1lP9lfviIHyFflQPmaTJGD5GD5uhwi35BD5ZtymBwuR8i35Eg5So6WY+RYOU6myvFygnxbTpTvyElyspwip8o0OU32vbjSLCn/av7bfyF/4M973yg3yc1yi9wqt8ntcof8WO6UO+UuuUvukXvkXrlX7pP75H65Xx6QB2SWzJIH5UF5SB6Sh+VheUQekUflMXlGfi9PyB/kSXlKnpJn5Fl5Vp67eAxAoRJKKqUCFaNyqFiVU8Wpq1QudbXKra5REXWtilfXqTzqepVX5VP5VQGVoAqqQkoro6wiFarCqoiKqhvw4gmjiqsSyqmSKlHd/Pfkq6LqRlVM3fSb/Ev1Jf9Bfc1Vc9VCtVAtVUvVWrVWbVQb1Va1VUkqSbVT7VR71V51UB1UR9VRdVKdVGfVWXVVXVU31U11V91VskpWvdTLqrfqo/qqfqq/ekUNUAPUQDVQpagUNVgNVkPUEDVUDVXD1DA1Qo1QI9VINVqNVmPVWJWqUtUENUFNVBPVJDVJTVFTVJpKU9PVdDVDzVCz1Cw1W81Wc9QcNU/NU+kqXS1QC1SGylCL1CKVqRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpTbVKb1Ba1RW1T29QOtUPtVDvVLrVL7VF71F61V+1T+9R+tV8dUAdUlspSB9VBdUgdUofVYXVEHVFH1VF1XB1XJ9QJdVKdVKfVaXVWnVXn1Dl1Xp2/cNkXiEAEKlBBTBATxAaxQVwQF+QKcgW5g9xBJIgE8UF8kCe4Psgb5AvyBwWChKBgUCjQgQlsIC42PRrcEBQNbgyKBTcFxYMSgQtKBonBzUGp4JagdHBrUCa4LSgb3B6UC8oHFYKKwR1BpeDOoHJwV1AluDuoGlQLqgc1gnuCmsG9Qa3gvqB2cH9QJ3ggqBs8GNQLHgrqBw8HDYJHgobBo0Gj4LGgcdAkaBo0C5r/S9f3/mS+J1x33UMn6566l35Z99Z9dF/dT/fXr+gB+lU9UL+mU/QgPVi/rofoN/RQ/aYepofrEfotPVKP0qP1GD1Wj9OperyeoN/WE/U7epKerKfoqTpNT9PT9bt6hp6pZ+n39Gz9vp6j5+p5er5O1x/oBXqhztAf6kX6I52pF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36Y71Tf6J36d16j/5U79Wf6X36c71ff6EP6C91lv5KH9Rf60P6G31Yf6uP6O/0UX1MH9ff6xP6B31Sn9Kn9Rl9Vv+oz+mf9HntL1zcX/h4N8ooE2NiTKyJNXEmzuQyuUxuk9tETMTEm3iTx+QxeU1ek9/kNwkmwRQyhcwFZMgUNoVN1ERNUVPUFDPFTHFT3DjjTKJJNKVMKVPalDZlTBlT1pQ15Uw5U8FUMHeYO8yd5k5zl7nL3G3uNtVMNVPD1DA1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PUNDXNTXPTwrQwLU1L09q0Nm1MG9PWtDVJJsm0M+1Me9PedDAdTEfT0XQynUxn09l0NV1NN9PNdDfdTbJJNr1ML9Pb9DZ9TV/T3/Q3A8wAM9AMNCkmxQw2g80QM8QMNUPNMDPcjLhwoWpGmdFmjBlrxplUk2ommAlmoploJplJZoqZYtJMmpluppsZZoaZZWaZ2Wa2mWPmmHlmnkk36WaBWWAyTIZZZBaZTJNplpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk+/i56U3sTanjbNX2Vz2apvbXmP/PM5vC9gEW9AWstrmtfl+ExtrbTF7ky1uS1hnS9pEe/Pv4nK2vK1gK9o7bCV7p638u7imvdfWsvfZ2vZ+W8Pe85u4jn3A1rWP2nqIALaJbWCb2Yb2UdvIPmYb2ya2qW1m29inbFv7tE2yz9h29tnfxQvsQrvKrrZr7Fq7y+62p+0Ze8h+Y8/aH21328P2t6/YAfZVO9C+ZlPsoN/FI+xbdqQdZUfbMXasHfe7eIqdatPsNDvdvmtn2Jm/i9PtB3a2zbBz7Fw7z87/Ob5QU4b90C6yH9lMG8ASu9Qus8vtCrvy/9e61K63G+xGu9N+YrfYrXab3W53XLoQtrvtHvup3Ws/swft13a//cIesIdtlv3q5/jC+ztsv7VH7Hf2qD1mj9vv7Qn7g/o5d1RvAPuj/d7+ZM9bb4GQgCQpCiiGclAs5aQ4uopy0dWUm66hCF1L8XQd5aHrKS/lo/xUgBKoIBUiTYYsEYVUmIpQlG6gS+UVpxLkqCQl0s1Uim6h0nQrlaHbqCzdTuWoPFWginQHVaI7qTLdRVXobqpK1ag61aB7qCbdS7XoPqpN91MdeoDq0oNUjx6i+vQwNaBHqCE9So3oMWpMTagpNaPm9Di1oCeoJbWi1vQktaGnqC09TUn0DLWjZ6k9/Yk60HPUkZ6nTvQCdaYu1JVepG70EnWnHpRMPakXvUy9qQ/1pX7Un16hAfQqDaTXKIUG0WB6nYbQGzSU3qRhNJxG0Fs0kkbRaBpDY2kcpdJ4mkBv00R6hybRZJpCUymNptF0epdm0EyaRe/RbHqf5tBcmkfzKZ0+oAW0kDLoQ1pEH1EmLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBH9NO+oR20W7aQ5/SXvqM9tHntJ++oAP0JWXRV3SQvqZD9A0dpm99D/qOjtIxOk7f0wn6gU7SKTpNZ+gs/Ujn6Cc6T54gxFCEMlRhEMaEOcLYMGcYF14V5gqvDnOH14SR8NowPrwuzBNeH+YN84X5wwJhQlgwLBTq0IQ2pDAMC4dFwmh4Q1g0vDEsFmJYPCwRurBkmBjeHJYKbwlLh7eGZcLbwrLh7WG5sHz46P0VwzvCSuGdYeXwrrBKeHdYNawWVg9rhPeENcN7w1rhfWHt8P6wdPhAWDd8MKwXPhTWDx8OG4SPhA3DR8NG4WNh47BJ2DRsFjYPHw9bhE+ELcNWYevwybBN+FTYNnw6TAqfCduFz/48/8DCP55PDnuGvcKXw5dD7++T86Lzo+nRD6ILogujGdEPo4uiH0UzoxBdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b5GDnDohJNOucDFuBwu1uV0ce4ql8td7XK7a1zEXevi3XUuj7ve5XX5XH5XwCW4gq6Q0844i+dc6Aq7Ii7qbnBF3Y2umLvJFXclnHMlXaJr5pq75q6Fe8K1dK1ca/eke9I95Z5yT7un3TOunXvWtXd/ch3cc66je949715wnV0X19W96Lq58bl/+Z5Mdr1cL9fb9XZ9XV/X3/V3A9wAN9ANdCkuxQ12g90QN8QNdUPdMDfMjXAj3Eg30o12o91YN9alulQ3wU1wE91EN8lNclPcFJfm0tx0N93NcDNcpZm/7GWOm+PmuXku3aW7Be7CNWOGW+QWuUyX6Za4JW6ZW+ZWuBVulVvl1rg1bp1b5za4DW6T2+S2uC1um9vmdrgdbqfb6Xb5a35Z1O11+9w+t9/tdwfcly7LfeUOuq/dIfeNO+y+dUfcd+6oO+aOu+/dCfeDO+lOudPujDvrfnTn3E/uvPMuNTI+MiHydmRi5J3IpMjkyJTI1EhaZFpkeuTdyIzIzMisyHuR2ZH3I3MicyPzIvMj6ZEPIgsiCyMZkQ8jiyIfRTIjiyNLIksjyyLLI94X3BL6wr6Ij/obfFF/oy/mb/LFfQnvfEmf6G/2pfwtvrS/1Zfxt/my/nZfzpf3FfxjvrFv4pv6Zr65f9y38E/4lr6Vb+2f9G38U76tf9on+Wd8O/+sb+//5Dv453xH/7zv5F/wnX0X39W/6Lv5l3x338Mn+56+l3/Z9/Z9fF/fz/f3r/gB/lU/0L/mU/wgP9i/7of4N/xQ/6Yf5of7ETFv+ZGXbpFhnE/14/0E/7af6N/xk/xkP8VP9Wl+mp/u3/Uz/Ew/y7/nZ/v3/Rw/18/z8326/8Av8At9hv/QL/If+Uy/+NJDZb/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w3/sd/pP/C6/2+/xn/q9/jO/z3/u9/sv/AH/pc/yX/mD/mt/yH/jD/tv/RH/nT/qj/nj/nt/wv/gT/pT/rQ/48/6H/05/5M/z/9njTHGGGPsbzL+8lD8duaXx/k9/0KO+NXGvQDg6q0Fsn49f+GKcl3eX8Z9REKbCAA806PTw5deVasmJydf3DZTQlBkLsClvwm6IAYux4uhNTwFSdAKSv3F+vuILmfpr6wfvQ0g7lc5sXA5vrz+5wCY/Kut1MX1H39yxIKy4en4/2P9uQDFilzOzAmX48XQ+ueFWkHpP6g/X4tf1x/7+/VzfpEK0PJXObngcny5/kR4Ap6FpN9syRhjjDHGGGOM/aKPqNDh0v3npX/x+ZfuzxPU5ZwccDn+a/fnjDHGGGOMMcYYu/Ke69L16ceTklp1+PsHlf+hrL950Aj+XSv/I4OcF4/Xf0s9/4aB9wCXvqIA4J9cEODCQP4n38Xm/8i+Ui6eCn8+teyMD+C/o5X/isEV/KHEGGOMMcYY+7e4fNH/26+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0nfp3YlX6PjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2JX2/wIAAP//yFf/dA==") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 128.907678ms ago: executing program 2 (id=955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r1, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 0s ago: executing program 4 (id=956): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00fb8602bc827d678ff4d12dba8652b9d39b4b4ff5657dd6ec1c923fb62ce2b91d41de0069a0e4d9cc00c46db0687686104197b53eeedda4d051ba690ba658ce6beb"], 0x23, 0x61c3, &(0x7f000000c9c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) kernel console output (not intermixed with test programs): Interface activated: batadv_slave_0 [ 82.906100][ T4269] device veth0_macvtap entered promiscuous mode [ 82.920599][ T4268] device veth1_macvtap entered promiscuous mode [ 82.938720][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.948075][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.957298][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.972129][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.982912][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.983581][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.002401][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.008443][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.022639][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.037014][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.060162][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.068284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.077738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.089532][ T4269] device veth1_macvtap entered promiscuous mode [ 83.098712][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.108338][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.117418][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.127565][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.144837][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.153057][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.169315][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.176531][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.187244][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.198478][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.208612][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.219505][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.235910][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.262274][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.272278][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.282043][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.296304][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.311785][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.323012][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.336812][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.347632][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.357628][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.368183][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.379955][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.392050][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.401849][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.410887][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.420573][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.442323][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.456823][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.468884][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.479496][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.489576][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.502742][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.518268][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.529972][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.543894][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.551373][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.562981][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.576224][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.589961][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.638008][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.663386][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.676126][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.714355][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.732103][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.745461][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.760572][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.771224][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.788380][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.811880][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.836559][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.872238][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.890660][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.902303][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.917183][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024228][ T14] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.076868][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.098674][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.127585][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.132310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.144145][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 84.144328][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 84.165026][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.185123][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.214706][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 84.214725][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 84.220743][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 84.236581][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.255868][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.272081][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.280054][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.319234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.327071][ T14] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 84.360116][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.377010][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.377294][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.402267][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.411137][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.425582][ T14] usb 2-1: config 0 descriptor?? [ 84.431297][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.450960][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.451700][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 84.470291][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 84.488914][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.524547][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.536166][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 84.541256][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.576690][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 84.585187][ T14] usb 2-1: media controller created [ 84.592257][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.622848][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 84.630855][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 84.687643][ T4391] dvb-usb: bulk message failed: -22 (4/0) [ 84.711171][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 84.754859][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 84.761894][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 84.857372][ T14] usb 2-1: USB disconnect, device number 2 [ 84.949169][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 85.089059][ T4409] loop2: detected capacity change from 0 to 4096 [ 85.150207][ T4409] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 85.198579][ T4420] loop0: detected capacity change from 0 to 1024 [ 85.291246][ T4409] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 85.843559][ T4414] loop4: detected capacity change from 0 to 32768 [ 85.909788][ T4414] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4414) [ 86.038346][ T4414] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 86.059318][ T4414] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.108364][ T4414] BTRFS info (device loop4): using free space tree [ 86.423123][ T4419] loop3: detected capacity change from 0 to 40427 [ 86.434626][ T4414] BTRFS info (device loop4): enabling ssd optimizations [ 86.450764][ T4419] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 86.502153][ T4419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.628678][ T4278] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 86.641712][ T4419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.776846][ T129] cfg80211: failed to load regulatory.db [ 87.038832][ T4419] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.046810][ T4419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.073472][ T4470] loop2: detected capacity change from 0 to 32768 [ 88.102142][ T4470] ======================================================= [ 88.102142][ T4470] WARNING: The mand mount option has been deprecated and [ 88.102142][ T4470] and is ignored by this kernel. Remove the mand [ 88.102142][ T4470] option from the mount to silence this warning. [ 88.102142][ T4470] ======================================================= [ 88.230499][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 88.340742][ T4501] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.384085][ T4470] JBD2: Ignoring recovery information on journal [ 88.402976][ T4481] loop0: detected capacity change from 0 to 32768 [ 88.464381][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 88.504438][ T4503] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.538563][ T4470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.593961][ T4503] Zero length message leads to an empty skb [ 88.862088][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 88.942266][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 89.411483][ T4524] loop2: detected capacity change from 0 to 128 [ 89.472688][ T4524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.485878][ T4524] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.611319][ T4524] ./file0: Can't open blockdev [ 89.704923][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 90.133488][ T4548] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.292172][ T4550] loop3: detected capacity change from 0 to 256 [ 90.314899][ T4550] exfat: Deprecated parameter 'utf8' [ 90.362333][ T4550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 90.834129][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.901896][ T4545] loop2: detected capacity change from 0 to 32768 [ 90.992975][ T4545] XFS (loop2): Mounting V5 Filesystem [ 91.023960][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 91.036310][ T14] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.087540][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.093947][ T4469] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.116970][ T14] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 91.132038][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.160073][ T14] usb 1-1: config 0 descriptor?? [ 91.187580][ T4545] XFS (loop2): Ending clean mount [ 91.313983][ T4469] usb 4-1: Using ep0 maxpacket: 16 [ 91.322482][ T4469] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.342800][ T4469] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 91.348729][ T4582] loop4: detected capacity change from 0 to 256 [ 91.363838][ T4469] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 91.394207][ T4469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.401233][ T4582] exfat: Deprecated parameter 'utf8' [ 91.405151][ T4469] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 91.411514][ T4582] exfat: Deprecated parameter 'utf8' [ 91.426679][ T4582] exfat: Deprecated parameter 'utf8' [ 91.437377][ T4469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.446904][ T4469] usb 4-1: Product: syz [ 91.453299][ T4469] usb 4-1: Manufacturer: syz [ 91.463194][ T4582] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 91.465117][ T4469] usb 4-1: SerialNumber: syz [ 91.493302][ T4469] usb 4-1: config 0 descriptor?? [ 91.500095][ T4269] XFS (loop2): Unmounting Filesystem [ 91.602666][ T14] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 91.688323][ T14] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -38 [ 91.755650][ T4469] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 91.828875][ T4398] usb 1-1: USB disconnect, device number 2 [ 92.034780][ T14] usb 4-1: USB disconnect, device number 2 [ 92.055228][ T3622] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 92.104274][ T3622] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 92.158533][ T4580] loop1: detected capacity change from 0 to 32768 [ 92.169801][ T4583] fido_id[4583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 92.271384][ T4580] XFS (loop1): Mounting V5 Filesystem [ 92.589171][ T4580] XFS (loop1): Ending clean mount [ 92.596345][ T4580] XFS (loop1): Quotacheck needed: Please wait. [ 92.612696][ T4607] tipc: Started in network mode [ 92.612746][ T4607] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 92.617345][ T4607] tipc: Enabled bearer , priority 12 [ 92.679623][ T4580] XFS (loop1): Quotacheck: Done. [ 92.842627][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.855534][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.855713][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.859496][ T4611] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.937148][ T4280] XFS (loop1): Unmounting Filesystem [ 93.096280][ T4478] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.249473][ T4619] loop3: detected capacity change from 0 to 512 [ 93.255751][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 93.255923][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 93.257247][ T4279] Bluetooth: hci4: hardware error 0x00 [ 93.315135][ T4478] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 93.335713][ T4478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.364294][ T4619] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.368886][ T4478] usb 3-1: config 0 descriptor?? [ 93.384468][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.391964][ T4623] capability: warning: `syz.0.86' uses deprecated v2 capabilities in a way that may be insecure [ 93.498840][ T4478] usb 3-1: selecting invalid altsetting 3 [ 93.534228][ T4478] comedi comedi5: could not set alternate setting 3 in high speed [ 93.563181][ T4478] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 93.608821][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 93.610595][ T4478] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 93.656811][ T4627] netlink: 'syz.1.82': attribute type 4 has an invalid length. [ 93.682084][ T4478] usb 3-1: USB disconnect, device number 2 [ 93.739539][ T14] tipc: Node number set to 10136234 [ 93.783733][ T4630] loop0: detected capacity change from 0 to 64 [ 94.045648][ T4268] hfs: node 4:3 still has 1 user(s)! [ 94.396942][ T4641] process 'syz.2.94' launched '/dev/fd/3' with NULL argv: empty string added [ 94.722326][ T4655] loop2: detected capacity change from 0 to 64 [ 94.740204][ T4655] hfs: unable to parse mount options [ 94.807330][ T4415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.895894][ T4313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.933962][ T4394] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.975051][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.098453][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 95.109222][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.126445][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.141897][ T4394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.162424][ T4394] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.172709][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 95.186269][ T4313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.186488][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.211311][ T4313] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.231288][ T4394] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.240577][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.259787][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.269281][ T4313] usb 2-1: config 0 descriptor?? [ 95.279269][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.303957][ T4394] usb 1-1: config 0 descriptor?? [ 95.309176][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.325495][ T4394] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.332169][ T4394] dvb-usb: bulk message failed: -22 (3/0) [ 95.340046][ T14] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 95.350793][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.373271][ T4394] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.399966][ T14] usb 5-1: config 0 descriptor?? [ 95.406062][ T4394] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.413179][ T4394] usb 1-1: media controller created [ 95.419117][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 95.430233][ T4655] loop2: detected capacity change from 0 to 32768 [ 95.434448][ T4394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.464302][ T4394] dvb-usb: bulk message failed: -22 (6/0) [ 95.471172][ T4394] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.471701][ T4655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.99 (4655) [ 95.483159][ T4394] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 95.527422][ T4394] dvb-usb: schedule remote query interval to 150 msecs. [ 95.534735][ T4394] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.552296][ T4651] dvb-usb: bulk message failed: -22 (4/0) [ 95.578831][ T4655] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.590462][ T4394] usb 1-1: USB disconnect, device number 3 [ 95.603973][ T4655] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.647306][ T4394] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.660873][ T4655] BTRFS info (device loop2): using free space tree [ 95.710789][ T4313] microsoft 0003:045E:07DA.0002: unknown main item tag 0x1 [ 95.739499][ T4313] microsoft 0003:045E:07DA.0002: report is too long [ 95.754086][ T4313] microsoft 0003:045E:07DA.0002: item 0 4 0 11 parsing failed [ 95.762474][ T4313] microsoft 0003:045E:07DA.0002: parse failed [ 95.770027][ T4313] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 95.843346][ T14] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0003/input/input8 [ 95.933166][ T4469] usb 2-1: USB disconnect, device number 3 [ 95.939159][ T14] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0003/input/input9 [ 95.952980][ T4655] BTRFS info (device loop2): enabling ssd optimizations [ 95.983240][ T14] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0003/input/input10 [ 96.022286][ T4655] BTRFS info (device loop2): device stats zeroed by syz.2.99 (4655) [ 96.031987][ T14] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0003/input/input11 [ 96.060469][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 96.140409][ T4269] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.146337][ T14] hid-udraw 0003:20D6:CB17.0003: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 96.221942][ T14] usb 5-1: USB disconnect, device number 2 [ 96.570512][ T4693] fido_id[4693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 97.028128][ T4385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4385) [ 97.446247][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 97.514070][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 97.524177][ T4728] netlink: 'syz.3.123': attribute type 12 has an invalid length. [ 97.549557][ T4728] netlink: 'syz.3.123': attribute type 14 has an invalid length. [ 97.641607][ T4726] loop1: detected capacity change from 0 to 4096 [ 97.690546][ T4726] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 97.702762][ T14] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.753436][ T4726] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 97.812189][ T4726] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 97.863346][ T4726] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 97.892412][ T4726] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 97.918310][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.933923][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 97.953571][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.970458][ T4726] ntfs: volume version 3.1. [ 97.991333][ T4726] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 98.021591][ T14] usb 5-1: config 0 descriptor?? [ 98.046372][ T4726] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 98.130030][ T4726] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 98.199612][ T4726] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 98.231584][ T4726] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 98.277177][ T4748] loop2: detected capacity change from 0 to 512 [ 98.340710][ T4748] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.133: inline data xattr refers to an external xattr inode [ 98.400646][ T4748] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.133: couldn't read orphan inode 12 (err -117) [ 98.433569][ T4748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.478345][ T14] wacom 0003:056A:0336.0004: unknown main item tag 0x0 [ 98.509057][ T14] wacom 0003:056A:0336.0004: unknown main item tag 0x0 [ 98.523866][ T4473] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.532720][ T14] wacom 0003:056A:0336.0004: unknown main item tag 0x0 [ 98.553264][ T14] wacom 0003:056A:0336.0004: hidraw0: USB HID v0.03 Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0 [ 98.603082][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 98.707172][ T14] usb 5-1: USB disconnect, device number 3 [ 98.731082][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.759557][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.793681][ T4473] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 98.813451][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.834919][ T4473] usb 1-1: config 0 descriptor?? [ 98.900723][ T4740] loop3: detected capacity change from 0 to 32768 [ 98.940539][ T4740] (syz.3.129,4740,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.961355][ T4740] (syz.3.129,4740,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.989580][ T4740] JBD2: Ignoring recovery information on journal [ 99.066589][ T4740] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.091594][ T4740] (syz.3.129,4740,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 99.224619][ T4767] loop1: detected capacity change from 0 to 256 [ 99.266877][ T4473] wacom 0003:056A:00BC.0005: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 99.292422][ T4767] FAT-fs (loop1): Directory bread(block 64) failed [ 99.299760][ T4473] wacom 0003:056A:00BC.0005: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.0-1/input0 [ 99.303948][ T4767] FAT-fs (loop1): Directory bread(block 65) failed [ 99.337083][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 99.342379][ T4473] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BC.0005/input/input15 [ 99.365013][ T4767] FAT-fs (loop1): Directory bread(block 66) failed [ 99.371610][ T4767] FAT-fs (loop1): Directory bread(block 67) failed [ 99.399290][ T4767] FAT-fs (loop1): Directory bread(block 68) failed [ 99.415802][ T4769] loop2: detected capacity change from 0 to 4096 [ 99.422188][ T4767] FAT-fs (loop1): Directory bread(block 69) failed [ 99.422329][ T4767] FAT-fs (loop1): Directory bread(block 70) failed [ 99.450523][ T4769] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 99.459756][ T4767] FAT-fs (loop1): Directory bread(block 71) failed [ 99.477090][ T4767] FAT-fs (loop1): Directory bread(block 72) failed [ 99.483697][ T4767] FAT-fs (loop1): Directory bread(block 73) failed [ 99.523329][ T14] usb 1-1: USB disconnect, device number 4 [ 99.608687][ T4773] loop4: detected capacity change from 0 to 64 [ 100.028906][ T4789] loop3: detected capacity change from 0 to 2048 [ 100.101756][ T4789] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.188728][ T4795] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.233390][ T4796] loop0: detected capacity change from 0 to 1024 [ 100.331207][ T4796] hfsplus: bad catalog entry type [ 100.467445][ T4777] loop2: detected capacity change from 0 to 32768 [ 100.559698][ T4777] XFS (loop2): Mounting V5 Filesystem [ 100.646415][ T4777] XFS (loop2): Ending clean mount [ 100.861695][ T4269] XFS (loop2): Unmounting Filesystem [ 101.268969][ T4313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.477306][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.497451][ T4313] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 101.523007][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.540334][ T4313] usb 5-1: config 0 descriptor?? [ 101.632970][ T4848] netlink: 124 bytes leftover after parsing attributes in process `syz.1.175'. [ 101.661474][ T4848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.175'. [ 101.933699][ T4861] device vlan2 entered promiscuous mode [ 101.943994][ T4861] device macvlan1 entered promiscuous mode [ 101.973457][ T4313] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 101.993899][ T4394] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.001678][ T4313] dragonrise 0003:0079:0006.0006: no inputs found [ 102.014877][ T4864] loop3: detected capacity change from 0 to 4096 [ 102.022025][ T4313] dragonrise 0003:0079:0006.0006: force feedback init failed [ 102.035726][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 102.043978][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 102.054245][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 102.062141][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 102.070999][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 102.080272][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 102.088957][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 102.101401][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 102.116324][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 102.125779][ T4864] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 102.180215][ T127] usb 5-1: USB disconnect, device number 4 [ 102.188282][ T4394] usb 1-1: config 0 has no interfaces? [ 102.200458][ T4394] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 102.224938][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 102.233085][ T4394] usb 1-1: Product: syz [ 102.258892][ T4394] usb 1-1: Manufacturer: syz [ 102.263562][ T4394] usb 1-1: SerialNumber: syz [ 102.272436][ T4394] usb 1-1: config 0 descriptor?? [ 102.531128][ T4313] usb 1-1: USB disconnect, device number 5 [ 102.874952][ T4891] loop2: detected capacity change from 0 to 4096 [ 102.896458][ T4891] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 103.024836][ T4905] loop3: detected capacity change from 0 to 1024 [ 103.042523][ T4904] can0: slcan on ptm0. [ 103.091557][ T4907] loop1: detected capacity change from 0 to 64 [ 103.124506][ T4903] can0 (unregistered): slcan off ptm0. [ 103.161288][ T4907] hfs: unable to parse mount options [ 103.246967][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 103.246983][ T27] audit: type=1326 audit(1752493386.075:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.324017][ T27] audit: type=1326 audit(1752493386.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.361083][ T27] audit: type=1326 audit(1752493386.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.401764][ T27] audit: type=1326 audit(1752493386.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91079c11e5 code=0x7ffc0000 [ 103.446479][ T27] audit: type=1326 audit(1752493386.165:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.454155][ T4394] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.519803][ T27] audit: type=1326 audit(1752493386.205:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.590424][ T27] audit: type=1326 audit(1752493386.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.724091][ T27] audit: type=1326 audit(1752493386.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 103.874185][ T4920] loop4: detected capacity change from 0 to 32768 [ 103.888756][ T4920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.897450][ T4920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.922280][ T4920] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 103.941229][ T4313] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.949349][ T4313] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 103.987219][ T4313] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 103.987614][ T4313] gfs2: fsid=syz:syz.0: jid=0: Done [ 103.988645][ T4920] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.991127][ T4920] syz.4.210: attempt to access beyond end of device [ 103.991127][ T4920] loop4: rw=12288, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 103.991167][ T4920] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 104.017864][ T4394] usb 3-1: Using ep0 maxpacket: 32 [ 104.045084][ T4394] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 104.045114][ T4394] usb 3-1: config 0 has no interface number 0 [ 104.046924][ T4394] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 104.046953][ T4394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.046974][ T4394] usb 3-1: Product: syz [ 104.046989][ T4394] usb 3-1: Manufacturer: syz [ 104.047004][ T4394] usb 3-1: SerialNumber: syz [ 104.048870][ T4394] usb 3-1: config 0 descriptor?? [ 104.051158][ T4394] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.260896][ T4394] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.350645][ T4907] loop1: detected capacity change from 0 to 32768 [ 104.381098][ T4907] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 104.451376][ T4918] loop0: detected capacity change from 0 to 40427 [ 104.460873][ T4394] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.486804][ T4918] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 104.514387][ T4918] F2FS-fs (loop0): invalid crc value [ 104.554880][ T4918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.663770][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.664303][ T4473] usb 3-1: USB disconnect, device number 3 [ 104.672116][ T4918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.729057][ T4473] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.771935][ T4473] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.792682][ T4473] quatech2 3-1:0.51: device disconnected [ 104.810856][ T4939] loop4: detected capacity change from 0 to 2048 [ 104.867594][ T4939] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.886937][ T4939] NILFS (loop4): mounting unchecked fs [ 104.940502][ T4939] NILFS (loop4): recovery complete [ 104.943732][ T4944] loop1: detected capacity change from 0 to 256 [ 104.961606][ T4945] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.962129][ T4268] syz-executor: attempt to access beyond end of device [ 104.962129][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.008344][ T4944] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 105.453862][ T127] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 105.575713][ T4472] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.634021][ T4398] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.648315][ T127] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.665978][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.678678][ T127] usb 5-1: Product: syz [ 105.682898][ T127] usb 5-1: Manufacturer: syz [ 105.689613][ T127] usb 5-1: SerialNumber: syz [ 105.700260][ T127] usb 5-1: config 0 descriptor?? [ 105.772653][ T4964] loop3: detected capacity change from 0 to 512 [ 105.779510][ T4472] usb 3-1: Using ep0 maxpacket: 16 [ 105.789749][ T4472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.800220][ T4472] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 105.809515][ T4472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.819920][ T4472] usb 3-1: config 0 descriptor?? [ 105.827615][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.841328][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.851734][ T4964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.861250][ T4469] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.861758][ T4964] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.869646][ T4398] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 105.896659][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.925635][ T4398] usb 2-1: config 0 descriptor?? [ 105.943001][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 106.076411][ T4469] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 106.092507][ T4469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.105487][ T4469] usb 1-1: config 0 descriptor?? [ 106.116863][ T4469] gspca_main: spca508-2.14.0 probing 8086:0110 [ 106.121818][ T127] airspy 5-1:0.0: Board ID: 00 [ 106.133583][ T127] airspy 5-1:0.0: Firmware version: [ 106.204467][ T4973] loop3: detected capacity change from 0 to 64 [ 106.219816][ T4973] hfs: unable to locate alternate MDB [ 106.225574][ T4973] hfs: continuing without an alternate MDB [ 106.239954][ T4472] wacom 0003:056A:0028.0007: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 106.250781][ T4973] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 106.253018][ T4472] wacom 0003:056A:0028.0007: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 106.279332][ T4472] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.0007/input/input18 [ 106.289241][ T4973] hfs: bad catalog entry type 0 [ 106.319008][ T4469] gspca_spca508: reg_read err -32 [ 106.325136][ T127] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 106.340947][ T4469] gspca_spca508: reg_read err -32 [ 106.350480][ T4398] wacom 0003:056A:00BC.0008: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 106.360372][ T127] airspy 5-1:0.0: Registered as swradio24 [ 106.364859][ T4469] gspca_spca508: reg_read err -71 [ 106.371184][ T127] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 106.372587][ T127] usb 5-1: USB disconnect, device number 5 [ 106.392606][ T4398] wacom 0003:056A:00BC.0008: hidraw1: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.1-1/input0 [ 106.410319][ T4469] gspca_spca508: reg_read err -71 [ 106.416976][ T4398] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BC.0008/input/input21 [ 106.429801][ T4469] gspca_spca508: reg_read err -71 [ 106.436079][ T4469] gspca_spca508: reg write: error -71 [ 106.442625][ T4469] spca508: probe of 1-1:0.0 failed with error -71 [ 106.454830][ T4469] usb 1-1: USB disconnect, device number 6 [ 106.468964][ T4394] usb 3-1: USB disconnect, device number 4 [ 106.602893][ T4398] usb 2-1: USB disconnect, device number 4 [ 106.683862][ T14] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 106.865677][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 106.891448][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.919971][ T14] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 106.939434][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.959097][ T14] usb 4-1: config 0 descriptor?? [ 106.971438][ T4975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.320855][ T4993] device batadv0 entered promiscuous mode [ 107.338776][ T4992] device batadv0 left promiscuous mode [ 107.403681][ T14] wacom 0003:056A:032F.0009: hidraw0: USB HID v0.07 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 107.602048][ T4394] usb 4-1: USB disconnect, device number 3 [ 107.643874][ T4469] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.704981][ T5011] mmap: syz.0.260 (5011): VmData 29081600 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 107.716419][ T5013] capability: warning: `syz.1.251' uses 32-bit capabilities (legacy support in use) [ 107.824167][ T4469] usb 3-1: Using ep0 maxpacket: 32 [ 107.831492][ T4469] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.865331][ T4469] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.874053][ T4469] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 107.898430][ T4469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.912219][ T4469] usb 3-1: config 0 descriptor?? [ 108.004018][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.169798][ T4394] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 108.209678][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.216838][ T5023] loop1: detected capacity change from 0 to 32768 [ 108.231901][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.242795][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 108.249517][ T5023] XFS (loop1): Mounting V5 Filesystem [ 108.255667][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.268349][ T14] usb 5-1: config 0 descriptor?? [ 108.291782][ T5023] XFS (loop1): Ending clean mount [ 108.346891][ T4280] XFS (loop1): Unmounting Filesystem [ 108.359684][ T4469] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 108.366318][ T4394] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 108.381015][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.391650][ T4394] usb 1-1: config 0 descriptor?? [ 108.412862][ T4394] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 108.449317][ T4469] corsair-cpro: probe of 0003:1B1C:0C10.000A failed with error -38 [ 108.493851][ T3652] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.578619][ T4313] usb 3-1: USB disconnect, device number 5 [ 108.593545][ T5035] loop1: detected capacity change from 0 to 256 [ 108.620951][ T5035] FAT-fs (loop1): Directory bread(block 64) failed [ 108.628622][ T5035] FAT-fs (loop1): Directory bread(block 65) failed [ 108.635367][ T5035] FAT-fs (loop1): Directory bread(block 66) failed [ 108.642060][ T5035] FAT-fs (loop1): Directory bread(block 67) failed [ 108.648993][ T5035] FAT-fs (loop1): Directory bread(block 68) failed [ 108.655702][ T5035] FAT-fs (loop1): Directory bread(block 69) failed [ 108.662357][ T5035] FAT-fs (loop1): Directory bread(block 70) failed [ 108.669156][ T5035] FAT-fs (loop1): Directory bread(block 71) failed [ 108.676130][ T5035] FAT-fs (loop1): Directory bread(block 72) failed [ 108.682965][ T5035] FAT-fs (loop1): Directory bread(block 73) failed [ 108.693592][ T14] wacom 0003:056A:00BC.000B: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 108.704102][ T3652] usb 4-1: Using ep0 maxpacket: 16 [ 108.705849][ T14] wacom 0003:056A:00BC.000B: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.4-1/input0 [ 108.728774][ T14] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BC.000B/input/input27 [ 108.742951][ T3652] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.758772][ T3652] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.765848][ T3652] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 108.775133][ T3652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.786236][ T3652] usb 4-1: config 0 descriptor?? [ 108.908055][ T5037] loop1: detected capacity change from 0 to 256 [ 108.911807][ T14] usb 5-1: USB disconnect, device number 6 [ 108.920902][ T5037] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.920945][ T5037] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 108.927968][ T5037] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.007756][ T4394] gp8psk: usb out operation failed. [ 109.013032][ T4394] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 109.029885][ T4394] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 109.042602][ T4394] usb 1-1: USB disconnect, device number 7 [ 109.202548][ T3652] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 109.227016][ T3652] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 109.242156][ T3652] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 109.250867][ T3652] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 109.258767][ T3652] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 109.276949][ T5046] loop2: detected capacity change from 0 to 64 [ 109.280708][ T3652] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 109.359642][ T5048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 109.370729][ T5048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 109.424128][ T4469] usb 4-1: USB disconnect, device number 4 [ 109.698307][ T5063] loop4: detected capacity change from 0 to 512 [ 109.718899][ T5063] EXT4-fs: inline encryption not supported [ 109.728176][ T5064] usb usb9: usbfs: process 5064 (syz.2.272) did not claim interface 0 before use [ 109.743501][ T5066] loop1: detected capacity change from 0 to 512 [ 109.785361][ T5066] EXT4-fs: inline encryption not supported [ 109.806663][ T5066] EXT4-fs: Ignoring removed bh option [ 109.838539][ T5066] EXT4-fs: Mount option(s) incompatible with ext3 [ 109.847636][ T5069] loop0: detected capacity change from 0 to 256 [ 109.881127][ T5069] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 109.912971][ T5066] tmpfs: Unknown parameter 'usrjquota' [ 110.096326][ T5063] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.130221][ T5082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.279'. [ 110.187996][ T5063] EXT4-fs error (device loop4): __ext4_iget:5077: inode #11: block 1: comm syz.4.271: invalid block [ 110.189514][ T5063] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.271: couldn't read orphan inode 11 (err -117) [ 110.189900][ T5063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.348208][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 110.464826][ T5094] loop0: detected capacity change from 0 to 2048 [ 110.485704][ T5092] loop1: detected capacity change from 0 to 4096 [ 110.506483][ T5094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.528669][ T5094] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.613081][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 110.640843][ T5102] loop4: detected capacity change from 0 to 2048 [ 110.690146][ T5102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.734071][ T4398] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 110.811195][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 110.815184][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 110.834502][ T5111] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 110.936389][ T4398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.964123][ T4398] usb 4-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 110.993674][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.015812][ T4398] usb 4-1: config 0 descriptor?? [ 111.283204][ T5128] device batadv0 entered promiscuous mode [ 111.303646][ T5128] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.336417][ T5128] device batadv0 left promiscuous mode [ 111.432621][ T5130] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.440524][ T5130] team0: Device ipvlan2 is already an upper device of the team interface [ 111.468461][ T4398] wacom 0003:056A:0031.000D: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.3-1/input0 [ 111.502227][ T5139] loop0: detected capacity change from 0 to 1024 [ 111.682904][ T3652] usb 4-1: USB disconnect, device number 5 [ 111.731761][ T5142] loop1: detected capacity change from 0 to 1764 [ 111.793384][ T5142] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 111.980080][ T5155] loop4: detected capacity change from 0 to 1024 [ 112.017293][ T5155] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 112.067511][ T5159] loop0: detected capacity change from 0 to 256 [ 112.126922][ T5161] loop1: detected capacity change from 0 to 512 [ 112.148602][ T5161] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.314: iget: bad i_size value: 38620345925642 [ 112.171940][ T5164] device dummy0 entered promiscuous mode [ 112.174661][ T5161] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.314: couldn't read orphan inode 15 (err -117) [ 112.193145][ T5164] device dummy0 left promiscuous mode [ 112.198985][ T5161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.278254][ T5166] loop4: detected capacity change from 0 to 4096 [ 112.286029][ T5166] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 112.325372][ T5161] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 112.429540][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 112.983914][ T3652] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.184515][ T3652] usb 5-1: Using ep0 maxpacket: 16 [ 113.195528][ T3652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.212081][ T3652] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 113.235109][ T3652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.255135][ T3652] usb 5-1: config 0 descriptor?? [ 113.376441][ T27] audit: type=1326 audit(1752493396.205:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.424010][ T27] audit: type=1326 audit(1752493396.205:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.467661][ T5204] loop1: detected capacity change from 0 to 4096 [ 113.477253][ T27] audit: type=1326 audit(1752493396.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.500823][ T27] audit: type=1326 audit(1752493396.235:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.524587][ T27] audit: type=1326 audit(1752493396.235:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.547765][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 113.557254][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 113.567599][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 113.575733][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 113.584881][ T27] audit: type=1326 audit(1752493396.245:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.613957][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 113.621969][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 113.638837][ T5210] loop2: detected capacity change from 0 to 16 [ 113.646847][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 113.661952][ T27] audit: type=1326 audit(1752493396.245:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.691165][ T3652] wacom 0003:056A:0028.000E: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 113.700882][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 113.717192][ T5210] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.730844][ T3652] wacom 0003:056A:0028.000E: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.4-1/input0 [ 113.743574][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 113.751553][ T5204] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 113.765354][ T3652] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0028.000E/input/input33 [ 113.785293][ T5210] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 113.799772][ T27] audit: type=1326 audit(1752493396.245:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910798e929 code=0x7ffc0000 [ 113.804915][ T5210] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 113.848018][ T5216] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 113.856080][ T5216] netlink: 630 bytes leftover after parsing attributes in process `syz.3.339'. [ 113.876346][ T5210] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 113.912415][ T3652] usb 5-1: USB disconnect, device number 7 [ 113.943250][ T5210] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 113.957569][ T5210] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 113.969177][ T5217] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 114.026434][ T5217] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 114.041862][ T5217] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 114.059010][ T5217] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 114.073213][ T5217] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 114.311711][ T5234] loop3: detected capacity change from 0 to 64 [ 114.414409][ T5238] loop2: detected capacity change from 0 to 1024 [ 114.724486][ T5247] loop0: detected capacity change from 0 to 164 [ 114.792861][ T5247] Unable to read rock-ridge attributes [ 115.238343][ T5227] loop1: detected capacity change from 0 to 40427 [ 115.314435][ T5227] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 115.362923][ T5227] F2FS-fs (loop1): invalid crc value [ 115.442560][ T5227] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.563775][ C1] sched: RT throttling activated [ 115.646234][ T5240] loop3: detected capacity change from 0 to 131072 [ 115.655931][ T5240] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 115.665117][ T5240] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.675064][ T5240] F2FS-fs (loop3): invalid crc value [ 115.682076][ T5227] F2FS-fs (loop1): Start checkpoint disabled! [ 115.692794][ T5240] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 115.759709][ T5240] F2FS-fs (loop3): recover fsync data on readonly fs [ 115.766656][ T5227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 115.774873][ T5240] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 115.789399][ T5240] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 115.796460][ T5240] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 115.806814][ T5240] F2FS-fs (loop3): Cannot turn on quota_ino: -22 [ 115.814669][ T5240] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 115.822009][ T5240] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 116.009587][ T5258] loop0: detected capacity change from 0 to 4096 [ 116.099076][ T5243] loop4: detected capacity change from 0 to 32768 [ 116.388241][ T5262] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.028955][ T5280] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 117.071769][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 117.073824][ T5272] syz.2.362 (5272): drop_caches: 2 [ 117.569114][ T5298] loop0: detected capacity change from 0 to 128 [ 117.743083][ T5301] loop4: detected capacity change from 0 to 4096 [ 117.853172][ T5272] syz.2.362 (5272): drop_caches: 2 [ 118.096304][ T5306] loop0: detected capacity change from 0 to 1024 [ 118.160057][ T5308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.377'. [ 118.219402][ T51] hfsplus: b-tree write err: -5, ino 4 [ 118.608329][ T5322] tipc: Started in network mode [ 118.629259][ T5322] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.648959][ T5328] loop1: detected capacity change from 0 to 16 [ 118.656263][ T5322] tipc: Enabling of bearer rejected, failed to enable media [ 118.681593][ T5328] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.792909][ T5332] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 118.857194][ T5336] loop3: detected capacity change from 0 to 256 [ 119.135789][ T5342] loop4: detected capacity change from 0 to 4096 [ 119.181152][ T5342] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 119.212986][ T5350] loop0: detected capacity change from 0 to 1024 [ 119.255167][ T5342] ntfs3: loop4: Failed to load $Extend. [ 119.358488][ T4378] hfsplus: b-tree write err: -5, ino 4 [ 120.011864][ T5356] loop3: detected capacity change from 0 to 32768 [ 120.184935][ T5359] loop2: detected capacity change from 0 to 32768 [ 120.234732][ T5359] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.317028][ T5380] (syz.2.401,5380,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 120.422247][ T5373] loop0: detected capacity change from 0 to 32768 [ 120.424821][ T5380] (syz.2.401,5380,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 120.445936][ T5373] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.407 (5373) [ 120.475656][ T5373] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.484029][ T5380] (syz.2.401,5380,0):ocfs2_rename:1483 ERROR: status = -2 [ 120.486244][ T5373] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 120.492903][ T5380] (syz.2.401,5380,0):ocfs2_rename:1687 ERROR: status = -2 [ 120.533920][ T5373] BTRFS info (device loop0): use zlib compression, level 3 [ 120.544022][ T5373] BTRFS info (device loop0): using free space tree [ 120.652043][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 120.710435][ T5403] CUSE: DEVNAME unspecified [ 120.810158][ T5373] BTRFS info (device loop0): enabling ssd optimizations [ 120.916246][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 120.959595][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 121.034096][ T5373] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [ 121.162035][ T4268] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.293813][ T4398] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.473541][ T5427] random: crng reseeded on system resumption [ 121.494013][ T4398] usb 2-1: Using ep0 maxpacket: 32 [ 121.501241][ T4398] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 121.515947][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.566947][ T4398] usb 2-1: config 0 descriptor?? [ 121.588022][ T4398] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 122.118425][ T5452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 122.181859][ T4398] gspca_vc032x: reg_w err -71 [ 122.187103][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.192434][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.223828][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.243853][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.249240][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.281921][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.287585][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.292919][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.315979][ T5457] loop2: detected capacity change from 0 to 512 [ 122.329222][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.343860][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.351510][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.363929][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.374384][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.388830][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.401996][ T5454] loop4: detected capacity change from 0 to 8192 [ 122.414998][ T5457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.436232][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.441584][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.492569][ T5454] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.518395][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.549100][ T4398] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.550312][ T5454] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 122.562381][ T4398] gspca_vc032x: Unknown sensor... [ 122.565894][ T5454] REISERFS (device loop4): using ordered data mode [ 122.575622][ T5454] reiserfs: using flush barriers [ 122.582309][ T4398] vc032x: probe of 2-1:0.0 failed with error -22 [ 122.592051][ T5454] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.592954][ T5465] device veth0_virt_wifi entered promiscuous mode [ 122.622824][ T5454] REISERFS (device loop4): checking transaction log (loop4) [ 122.627161][ T4398] usb 2-1: USB disconnect, device number 5 [ 122.642390][ T5454] REISERFS (device loop4): Using r5 hash to sort names [ 122.659234][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 122.661100][ T5454] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.682034][ T5465] device veth0_virt_wifi left promiscuous mode [ 122.682182][ T5454] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 123.002187][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 123.011512][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 123.123687][ T5480] loop3: detected capacity change from 0 to 4096 [ 123.576956][ T5499] Illegal XDP return value 4294967282 on prog (id 42) dev N/A, expect packet loss! [ 123.603841][ T4398] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.759863][ T5506] loop4: detected capacity change from 0 to 512 [ 123.777024][ T5484] loop0: detected capacity change from 0 to 32768 [ 123.786324][ T5484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.447 (5484) [ 123.803516][ T5484] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.805842][ T5506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.816600][ T5484] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.831930][ T5484] BTRFS info (device loop0): turning off barriers [ 123.839117][ T5484] BTRFS info (device loop0): setting nodatasum [ 123.845554][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.845792][ T5484] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 123.866690][ T5484] BTRFS info (device loop0): use zstd compression, level 3 [ 123.874036][ T5484] BTRFS info (device loop0): using free space tree [ 123.881482][ T5506] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.882762][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.915205][ T27] audit: type=1800 audit(1752493406.745:18): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.457" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 123.915498][ T4398] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 123.960043][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 123.963882][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.978895][ T4398] usb 2-1: config 0 descriptor?? [ 124.020147][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 124.324407][ T4268] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.402170][ T4398] hid (null): usage index exceeded [ 124.403907][ T5430] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.419983][ T4398] magicmouse 0003:05AC:0269.000F: ignoring exceeding usage max [ 124.436041][ T4398] magicmouse 0003:05AC:0269.000F: ignoring exceeding usage max [ 124.445710][ T4398] magicmouse 0003:05AC:0269.000F: usage index exceeded [ 124.452723][ T4398] magicmouse 0003:05AC:0269.000F: item 0 1 2 2 parsing failed [ 124.467488][ T4398] magicmouse 0003:05AC:0269.000F: magicmouse hid parse failed [ 124.476275][ T4398] magicmouse: probe of 0003:05AC:0269.000F failed with error -22 [ 124.621323][ T5430] usb 5-1: Using ep0 maxpacket: 32 [ 124.641656][ T4478] usb 2-1: USB disconnect, device number 6 [ 124.653674][ T5430] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 124.696296][ T5430] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 124.729889][ T5430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.748934][ T5430] usb 5-1: Product: syz [ 124.753166][ T5430] usb 5-1: Manufacturer: syz [ 124.774797][ T5430] usb 5-1: SerialNumber: syz [ 124.799151][ T5430] usb 5-1: config 0 descriptor?? [ 124.829847][ T5535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.850720][ T5430] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 124.992728][ T5543] loop3: detected capacity change from 0 to 32768 [ 125.014744][ T5543] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 125.045063][ T5543] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.076353][ T5547] loop0: detected capacity change from 0 to 4096 [ 125.097846][ T4477] usb 5-1: USB disconnect, device number 8 [ 125.097901][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 125.166616][ T5547] ntfs: volume version 3.1. [ 125.172493][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 125.236264][ T5547] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857. You might want to try to use the mount option nls=utf8. [ 125.285952][ T5547] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 125.531490][ T5566] loop0: detected capacity change from 0 to 64 [ 125.647186][ T5568] loop3: detected capacity change from 0 to 256 [ 125.718273][ T5568] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 126.457137][ T5560] loop1: detected capacity change from 0 to 32768 [ 126.687921][ T5570] loop2: detected capacity change from 0 to 131072 [ 126.697218][ T5570] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 126.706323][ T5570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 126.716792][ T5570] F2FS-fs (loop2): invalid crc value [ 126.753539][ T5570] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 126.807258][ T5570] F2FS-fs (loop2): recover fsync data on readonly fs [ 126.815090][ T5570] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 126.839380][ T5570] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 126.845590][ T5570] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 126.856796][ T5570] F2FS-fs (loop2): Cannot turn on quota_ino: -22 [ 126.863712][ T5570] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 126.871051][ T5570] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 126.935557][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 126.964188][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 126.974451][ T5591] netlink: 'syz.4.484': attribute type 13 has an invalid length. [ 126.982820][ T5591] netlink: 'syz.4.484': attribute type 12 has an invalid length. [ 127.029622][ T5593] loop3: detected capacity change from 0 to 64 [ 127.171374][ T5576] loop0: detected capacity change from 0 to 32768 [ 127.240436][ T4270] Trying to free block not in datazone [ 127.260624][ T4270] Trying to free block not in datazone [ 127.280096][ T5576] XFS (loop0): Mounting V5 Filesystem [ 127.297150][ T4270] Trying to free block not in datazone [ 127.302685][ T4270] Trying to free block not in datazone [ 127.309174][ T4270] Trying to free block not in datazone [ 127.320187][ T4270] Trying to free block not in datazone [ 127.326399][ T4270] Trying to free block not in datazone [ 127.331980][ T4270] Trying to free block not in datazone [ 127.363025][ T5607] loop1: detected capacity change from 0 to 512 [ 127.371003][ T4270] Trying to free block not in datazone [ 127.379361][ T5607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.392889][ T4270] Trying to free block not in datazone [ 127.399040][ T4270] Trying to free block not in datazone [ 127.403012][ T5607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.404985][ T4270] Trying to free block not in datazone [ 127.420301][ T4270] Trying to free block not in datazone [ 127.427471][ T4270] Trying to free block not in datazone [ 127.433928][ T5576] XFS (loop0): Ending clean mount [ 127.513082][ T5607] EXT4-fs (loop1): 1 truncate cleaned up [ 127.543374][ T5607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.588350][ T5576] syz.0.477 (5576) used greatest stack depth: 20128 bytes left [ 127.739855][ T4268] XFS (loop0): Unmounting Filesystem [ 127.750317][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 127.922151][ T5609] loop4: detected capacity change from 0 to 40427 [ 128.007387][ T5609] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.135255][ T5609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.312447][ T4278] syz-executor: attempt to access beyond end of device [ 128.312447][ T4278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.661328][ T5635] loop2: detected capacity change from 0 to 8192 [ 128.683220][ T5635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.736862][ T5635] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 128.781531][ T5635] REISERFS (device loop2): using ordered data mode [ 128.811220][ T5635] reiserfs: using flush barriers [ 128.833219][ T5635] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.891800][ T5635] REISERFS (device loop2): checking transaction log (loop2) [ 128.914820][ T5635] REISERFS (device loop2): Using r5 hash to sort names [ 128.934991][ T5635] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 128.952952][ T5644] loop4: detected capacity change from 0 to 64 [ 129.030306][ T5635] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "noload" [ 129.319717][ T5656] program syz.2.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.474746][ T27] audit: type=1326 audit(1752493412.305:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600758e929 code=0x7ffc0000 [ 129.516161][ T5664] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 129.568094][ T27] audit: type=1326 audit(1752493412.305:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600758e929 code=0x7ffc0000 [ 129.615982][ T27] audit: type=1326 audit(1752493412.305:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f600758e929 code=0x7ffc0000 [ 129.653033][ T5664] CIFS: Unable to determine destination address [ 129.743839][ T27] audit: type=1326 audit(1752493412.305:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600758e929 code=0x7ffc0000 [ 129.803869][ T27] audit: type=1326 audit(1752493412.305:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600758e929 code=0x7ffc0000 [ 129.921258][ T5683] loop1: detected capacity change from 0 to 64 [ 129.956861][ T5684] loop0: detected capacity change from 0 to 2048 [ 129.999227][ T5684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.093844][ T5430] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.257211][ T5692] loop1: detected capacity change from 0 to 1024 [ 130.288700][ T5430] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 130.313637][ T5430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.322568][ T5430] usb 3-1: Product: syz [ 130.343845][ T5430] usb 3-1: Manufacturer: syz [ 130.348661][ T5430] usb 3-1: SerialNumber: syz [ 130.356606][ T5430] usb 3-1: config 0 descriptor?? [ 130.387379][ T75] hfsplus: b-tree write err: -5, ino 4 [ 130.435774][ T5680] loop3: detected capacity change from 0 to 32768 [ 130.443073][ T5680] XFS: noikeep mount option is deprecated. [ 130.462021][ T5680] XFS (loop3): Mounting V5 Filesystem [ 130.503901][ T4313] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 130.543136][ T5680] XFS (loop3): Ending clean mount [ 130.568568][ T5680] XFS (loop3): Quotacheck needed: Please wait. [ 130.580884][ T5430] usb 3-1: ignoring: probably an ADSL modem [ 130.658147][ T5680] XFS (loop3): Quotacheck: Done. [ 130.696000][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.717407][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.747806][ T4313] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 130.757483][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.773074][ T4313] usb 5-1: config 0 descriptor?? [ 130.792604][ T4270] XFS (loop3): Unmounting Filesystem [ 131.026939][ T5430] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 131.053622][ T5430] usb 3-1: USB disconnect, device number 6 [ 131.195148][ T4313] glorious 0003:258A:0036.0010: item fetching failed at offset 0/2 [ 131.214337][ T4313] glorious: probe of 0003:258A:0036.0010 failed with error -22 [ 131.394570][ T4478] usb 5-1: USB disconnect, device number 9 [ 131.937626][ T5753] loop3: detected capacity change from 0 to 512 [ 131.973136][ T5737] loop1: detected capacity change from 0 to 40427 [ 132.031051][ T5753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.050337][ T5737] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.062241][ T5753] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.123942][ T5737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.158454][ T27] audit: type=1800 audit(1752493414.985:24): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.549" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 132.271139][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 132.602606][ T5765] loop4: detected capacity change from 0 to 32768 [ 132.661799][ T5765] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 132.857571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864749][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937172][ T5781] loop3: detected capacity change from 0 to 4096 [ 132.986064][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 133.222636][ T5785] netlink: 80 bytes leftover after parsing attributes in process `syz.2.560'. [ 133.241995][ T5785] nbd: must specify at least one socket [ 133.324685][ T5789] loop3: detected capacity change from 0 to 128 [ 133.359848][ T5789] EXT4-fs: Ignoring removed nobh option [ 133.392352][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.396883][ T5779] loop1: detected capacity change from 0 to 32768 [ 133.411521][ T5794] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 133.419851][ T5789] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.481480][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 133.516850][ T5779] XFS (loop1): Mounting V5 Filesystem [ 133.620699][ T5779] XFS (loop1): Ending clean mount [ 133.722629][ T5815] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 133.770693][ T4280] XFS (loop1): Unmounting Filesystem [ 134.116039][ T5430] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.333969][ T5430] usb 1-1: Using ep0 maxpacket: 32 [ 134.341134][ T5430] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 134.357914][ T5810] loop2: detected capacity change from 0 to 40427 [ 134.365774][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.372431][ T5430] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 134.382993][ T5430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.391204][ T5810] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 134.399331][ T5810] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.410691][ T5810] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 134.419128][ T5430] usb 1-1: config 0 descriptor?? [ 134.469607][ T5810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.567003][ T5810] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.578300][ T5810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.853188][ T5430] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 134.874172][ T5430] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 134.902151][ T5430] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 134.910831][ T5854] device veth0_virt_wifi entered promiscuous mode [ 134.918014][ T5430] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 134.931214][ T5854] device veth0_virt_wifi left promiscuous mode [ 134.943940][ T5430] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 134.963308][ T5430] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 135.058946][ T5430] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-38) [ 135.077883][ T5430] corsair-psu: probe of 0003:1B1C:1C09.0011 failed with error -38 [ 135.101679][ T5430] usb 1-1: USB disconnect, device number 8 [ 135.220128][ T5864] mmap: syz.1.591 (5864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.438482][ T5875] loop4: detected capacity change from 0 to 512 [ 135.466864][ T5875] EXT4-fs: Ignoring removed i_version option [ 135.498808][ T5875] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 135.509226][ T5881] loop3: detected capacity change from 0 to 256 [ 135.530261][ T5881] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.546679][ T5875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 135.551596][ T5881] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 135.574695][ T5875] System zones: 1-12 [ 135.589166][ T5875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.608519][ T5875] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.596: invalid indirect mapped block 12 (level 1) [ 135.645825][ T5881] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.715551][ T5875] EXT4-fs (loop4): Remounting filesystem read-only [ 135.722128][ T5875] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.596: invalid indirect mapped block 2 (level 2) [ 135.753911][ T5875] EXT4-fs (loop4): Remounting filesystem read-only [ 135.762405][ T5875] EXT4-fs (loop4): 1 truncate cleaned up [ 135.781275][ T5890] loop0: detected capacity change from 0 to 256 [ 135.788415][ T5890] exfat: Deprecated parameter 'utf8' [ 135.799765][ T5875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.809963][ T5890] exfat: Deprecated parameter 'utf8' [ 135.873631][ T5890] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 135.972694][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 135.982737][ T5898] loop2: detected capacity change from 0 to 128 [ 136.066780][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.078784][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 136.089276][ T5898] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.260898][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 136.440858][ T5918] bridge0: port 3(batadv0) entered blocking state [ 136.461394][ T5920] loop4: detected capacity change from 0 to 512 [ 136.468337][ T5918] bridge0: port 3(batadv0) entered disabled state [ 136.488555][ T5918] device batadv0 entered promiscuous mode [ 136.506378][ T5918] bridge0: port 3(batadv0) entered blocking state [ 136.514814][ T5918] bridge0: port 3(batadv0) entered forwarding state [ 136.525053][ T5920] EXT4-fs: Ignoring removed bh option [ 136.530488][ T5920] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.568921][ T5920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.651620][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.701925][ T5920] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.916374][ T4378] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 136.926237][ T4378] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 137.028973][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 137.048284][ T5915] loop1: detected capacity change from 0 to 40427 [ 137.112251][ T5915] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 137.133702][ T5915] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.162838][ T5915] F2FS-fs (loop1): invalid crc value [ 137.205712][ T5915] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.311828][ T5940] loop0: detected capacity change from 0 to 512 [ 137.320974][ T5915] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.335699][ T5915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.344862][ T5940] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.392042][ T5922] loop2: detected capacity change from 0 to 32768 [ 137.408494][ T5938] loop3: detected capacity change from 0 to 8192 [ 137.438070][ T5940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.451079][ T5938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.464475][ T5938] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 137.473707][ T5938] REISERFS (device loop3): using ordered data mode [ 137.480515][ T5938] reiserfs: using flush barriers [ 137.481982][ T5940] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.513892][ T5938] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.534929][ T5922] XFS (loop2): Mounting V5 Filesystem [ 137.552633][ T5938] REISERFS (device loop3): checking transaction log (loop3) [ 137.625276][ T4478] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 137.650847][ T4478] XFS (loop2): Unmount and run xfs_repair [ 137.659273][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 137.678228][ T4478] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 137.691739][ T4478] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 137.728257][ T4478] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 137.750748][ T5938] REISERFS (device loop3): Using tea hash to sort names [ 137.751432][ T4478] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 137.764501][ T5938] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.797842][ T4478] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 137.823943][ T4478] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 137.832876][ T4478] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 137.854062][ T4478] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.862970][ T4478] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.898271][ T5922] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 137.920919][ T5922] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 137.947274][ T5922] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 138.002719][ T5922] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 138.011531][ T5922] XFS (loop2): Ending clean mount [ 138.018491][ T5922] XFS (loop2): Failed to initialize disk quotas. [ 138.203966][ T4269] XFS (loop2): Unmounting Filesystem [ 138.339176][ T5972] device vlan0 entered promiscuous mode [ 138.398071][ T5430] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.453329][ T5972] team0: Port device vlan0 added [ 138.589595][ T5976] loop3: detected capacity change from 0 to 1024 [ 138.600331][ T5430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.622706][ T5430] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 138.649621][ T5430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.675940][ T5964] loop1: detected capacity change from 0 to 32768 [ 138.689843][ T5976] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 1: comm syz.3.635: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.692825][ T5964] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.625 (5964) [ 138.720083][ T5430] usb 5-1: config 0 descriptor?? [ 138.732348][ T5964] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 138.743626][ T5964] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 138.753428][ T5964] BTRFS info (device loop1): use zlib compression, level 3 [ 138.760813][ T5964] BTRFS info (device loop1): using free space tree [ 138.770248][ T5976] Quota error (device loop3): write_blk: dquota write failed [ 138.778040][ T5976] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 138.789605][ T5976] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.635: Failed to acquire dquot type 0 [ 138.819271][ T5976] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.635: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.851595][ T5976] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.635: Invalid inode bitmap blk 0 in block_group 0 [ 138.891404][ T4378] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.913162][ T5976] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 138.922790][ T5976] EXT4-fs (loop3): 1 orphan inode deleted [ 138.923023][ T4378] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 138.937958][ T5976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.965105][ T4378] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 139.019032][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 139.019772][ T5964] BTRFS info (device loop1): enabling ssd optimizations [ 139.025612][ T4378] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.067852][ T4378] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 139.082656][ T4378] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 139.124171][ T4477] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.171447][ T5430] waltop 0003:172F:0032.0012: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 139.250912][ T4280] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 139.300193][ T27] audit: type=1326 audit(1752493422.125:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b78e929 code=0x7ffc0000 [ 139.322316][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.341911][ T4477] usb 3-1: Using ep0 maxpacket: 16 [ 139.382724][ T4477] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 139.391689][ T4477] usb 3-1: config 0 has no interface number 0 [ 139.398077][ T27] audit: type=1326 audit(1752493422.165:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f1e9b78e929 code=0x7ffc0000 [ 139.398118][ T27] audit: type=1326 audit(1752493422.165:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b78e929 code=0x7ffc0000 [ 139.444643][ T4477] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.456592][ T4477] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.467098][ T4477] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 139.476322][ T4477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.486545][ T4477] usb 3-1: config 0 descriptor?? [ 139.549046][ T3652] usb 5-1: USB disconnect, device number 10 [ 139.823947][ T5430] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.014501][ T6034] netlink: 96 bytes leftover after parsing attributes in process `syz.4.653'. [ 140.016355][ T5430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.044823][ T5430] usb 1-1: config 1 has an invalid interface number: 82 but max is 1 [ 140.064995][ T5430] usb 1-1: config 1 has no interface number 1 [ 140.071193][ T5430] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 140.103805][ T5430] usb 1-1: too many endpoints for config 1 interface 82 altsetting 79: 80, using maximum allowed: 30 [ 140.142639][ T3652] usb 3-1: USB disconnect, device number 7 [ 140.152845][ T5430] usb 1-1: config 1 interface 82 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 80 [ 140.174482][ T5430] usb 1-1: config 1 interface 0 has no altsetting 0 [ 140.191463][ T5430] usb 1-1: config 1 interface 82 has no altsetting 0 [ 140.210504][ T5430] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 140.240169][ T5430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.260403][ T5430] usb 1-1: Product: syz [ 140.280690][ T5430] usb 1-1: Manufacturer: syz [ 140.290798][ T5430] usb 1-1: SerialNumber: syz [ 140.318496][ T6038] loop4: detected capacity change from 0 to 4096 [ 140.330731][ T6038] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 140.356705][ T6038] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.363934][ T6040] binder: 6039:6040 ioctl 400c620e 200000001f40 returned -22 [ 140.444765][ T6028] loop1: detected capacity change from 0 to 32768 [ 140.460096][ T4278] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 140.468236][ T6028] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 140.509914][ T5430] smsusb:smsusb_probe: board id=8, interface number 0 [ 140.535727][ T5430] smsusb:smsusb_probe: board id=8, interface number 82 [ 140.555390][ T5430] usb 1-1: USB disconnect, device number 9 [ 140.747243][ T6050] device gretap0 entered promiscuous mode [ 140.761681][ T6050] device vlan3 entered promiscuous mode [ 141.280244][ T6074] loop2: detected capacity change from 0 to 512 [ 141.365635][ T6074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.374907][ T6074] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.440293][ T6074] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.672: Directory hole found for htree leaf block 0 [ 141.461305][ T6084] loop4: detected capacity change from 0 to 128 [ 141.472140][ T6074] EXT4-fs (loop2): Remounting filesystem read-only [ 141.537864][ T6084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.560150][ T6084] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.562843][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 141.741984][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 141.794748][ T6082] loop3: detected capacity change from 0 to 32768 [ 141.854308][ T6082] JBD2: Ignoring recovery information on journal [ 141.929856][ T6082] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.056178][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 142.081197][ T6101] loop1: detected capacity change from 0 to 2048 [ 142.130837][ T6105] loop0: detected capacity change from 0 to 512 [ 142.147315][ T6101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.154993][ T6105] EXT4-fs: Ignoring removed nobh option [ 142.201749][ T6105] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.686: iget: bad i_size value: 38620345925642 [ 142.314729][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 142.352339][ T6105] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.686: couldn't read orphan inode 15 (err -117) [ 142.429770][ T6105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.519898][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 142.598640][ T6126] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.864221][ T6139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'. [ 143.022235][ T6150] rdma_op ffff88814d8ae1f0 conn xmit_rdma 0000000000000000 [ 143.035363][ T6148] loop2: detected capacity change from 0 to 512 [ 143.086777][ T6148] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.130148][ T6148] EXT4-fs (loop2): invalid journal inode [ 143.159015][ T6148] EXT4-fs (loop2): can't get journal size [ 143.202869][ T6148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 143.229694][ T6148] System zones: 1-12, 13-13 [ 143.253600][ T6148] EXT4-fs (loop2): 1 truncate cleaned up [ 143.265743][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.340519][ T27] audit: type=1800 audit(1752493426.165:28): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.703" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 143.420975][ T6163] loop1: detected capacity change from 0 to 128 [ 143.455775][ T6163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.481035][ T6163] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.504777][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 143.533244][ T6163] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.710: No space for directory leaf checksum. Please run e2fsck -D. [ 143.631235][ T6163] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.710: Directory block failed checksum [ 143.661720][ T6174] loop3: detected capacity change from 0 to 256 [ 143.669531][ T6174] exfat: Deprecated parameter 'utf8' [ 143.683930][ T6174] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 143.760609][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 143.802188][ T6178] loop3: detected capacity change from 0 to 1024 [ 143.842911][ T6178] hfsplus: bad catalog entry type [ 143.926085][ T51] hfsplus: b-tree write err: -5, ino 4 [ 144.211552][ T6168] loop0: detected capacity change from 0 to 32768 [ 144.226859][ T6192] netlink: 'syz.2.723': attribute type 5 has an invalid length. [ 144.285394][ T6168] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.306422][ T6194] loop3: detected capacity change from 0 to 4096 [ 144.319121][ T6194] ntfs3: loop3: ino=3, Correct links count -> 2. [ 144.361737][ T6168] (syz.0.711,6168,1):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 144.372553][ T6194] ntfs3: loop3: failed to convert "0080" to macgreek [ 144.392229][ T6194] ntfs3: loop3: failed to convert name for inode 1e. [ 144.411722][ T6168] (syz.0.711,6168,1):ocfs2_group_add:503 ERROR: status = -22 [ 144.512308][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 144.523926][ T6203] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 144.867931][ T6219] loop2: detected capacity change from 0 to 8 [ 144.887698][ T6219] SQUASHFS error: lzo decompression failed, data probably corrupt [ 144.897459][ T6219] SQUASHFS error: Failed to read block 0x91: -5 [ 144.904075][ T6219] SQUASHFS error: Unable to read metadata cache entry [8f] [ 144.912286][ T6219] SQUASHFS error: Unable to read inode 0x11f [ 145.152697][ T6232] loop0: detected capacity change from 0 to 2048 [ 145.216918][ T6237] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.420953][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 145.449224][ T6245] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 145.466398][ T6245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.748'. [ 145.755305][ T6253] loop3: detected capacity change from 0 to 4096 [ 145.774331][ T6253] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 145.843137][ T6236] loop1: detected capacity change from 0 to 32768 [ 145.862678][ T6253] overlayfs: upper fs does not support tmpfile. [ 145.867143][ T6236] XFS (loop1): Mounting V5 Filesystem [ 145.884638][ T6253] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.902905][ T6253] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 145.953875][ T6236] XFS (loop1): Ending clean mount [ 145.959531][ T5430] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.971190][ T4270] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 145.982734][ T6236] XFS (loop1): Quotacheck needed: Please wait. [ 145.988368][ T4270] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 146.004411][ T4270] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 146.044274][ T6236] XFS (loop1): Quotacheck: Done. [ 146.160890][ T5430] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 146.185369][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.216906][ T4280] XFS (loop1): Unmounting Filesystem [ 146.219276][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.262302][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.291157][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.342741][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.382669][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.422426][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.446771][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.482016][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.511726][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.533997][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.564300][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.582036][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.598509][ T6285] loop4: detected capacity change from 0 to 24 [ 146.604937][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.617498][ T6285] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 146.624390][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.664287][ T6285] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 146.675335][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.703878][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.739244][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.748859][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.761953][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.773073][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.788238][ T6274] loop2: detected capacity change from 0 to 32768 [ 146.804881][ T5430] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.819265][ T5430] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.836738][ T6274] XFS: noikeep mount option is deprecated. [ 146.867455][ T5430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.897380][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 146.919214][ T6274] XFS (loop2): Mounting V5 Filesystem [ 146.928243][ T5430] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.954621][ T5430] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.963459][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 146.978357][ T5430] usb 1-1: Product: syz [ 146.984194][ T5430] usb 1-1: Manufacturer: syz [ 146.988843][ T5430] usb 1-1: SerialNumber: syz [ 147.009618][ T6292] netlink: 'syz.4.766': attribute type 14 has an invalid length. [ 147.019094][ T5430] usb 1-1: config 0 descriptor?? [ 147.030178][ T6292] netlink: 'syz.4.766': attribute type 13 has an invalid length. [ 147.044956][ T5430] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 147.140464][ T6274] XFS (loop2): Ending clean mount [ 147.165008][ T6274] XFS (loop2): Quotacheck needed: Please wait. [ 147.225730][ T6274] XFS (loop2): Quotacheck: Done. [ 147.280007][ T5430] usb 1-1: USB disconnect, device number 10 [ 147.300312][ T5430] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 147.348630][ T4269] XFS (loop2): Unmounting Filesystem [ 147.401572][ T6287] loop3: detected capacity change from 0 to 32768 [ 147.419573][ T6287] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.765 (6287) [ 147.472265][ T6287] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 147.495583][ T6287] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 147.516979][ T6309] netlink: 'syz.1.772': attribute type 2 has an invalid length. [ 147.542337][ T6287] BTRFS info (device loop3): use zlib compression, level 3 [ 147.561786][ T6287] BTRFS info (device loop3): using free space tree [ 147.741933][ T6287] BTRFS info (device loop3): enabling ssd optimizations [ 147.765253][ T6334] loop4: detected capacity change from 0 to 1024 [ 147.948091][ T4270] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.022823][ T6342] loop1: detected capacity change from 0 to 128 [ 148.121072][ T6342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.140219][ T6342] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.371454][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 148.519069][ T6362] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 148.633919][ T4698] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.855875][ T4698] usb 3-1: Using ep0 maxpacket: 16 [ 148.872148][ T4698] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.876113][ T6369] loop4: detected capacity change from 0 to 4096 [ 148.908842][ T4698] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.935028][ T6369] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 148.942157][ T4698] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.971270][ T4698] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 148.996721][ T4698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.011983][ T6369] ntfs3: loop4: Failed to load $Extend. [ 149.035548][ T4698] usb 3-1: config 0 descriptor?? [ 149.062033][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 149.066420][ T6369] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.342157][ T6390] loop3: detected capacity change from 0 to 8 [ 149.462156][ T4698] ortek 0003:1223:3F07.0014: unknown main item tag 0x0 [ 149.479735][ T4698] ortek 0003:1223:3F07.0014: unknown main item tag 0x0 [ 149.489668][ T4698] ortek 0003:1223:3F07.0014: unknown main item tag 0x0 [ 149.521555][ T4698] ortek 0003:1223:3F07.0014: unknown main item tag 0x0 [ 149.543150][ T4698] ortek 0003:1223:3F07.0014: unknown main item tag 0x0 [ 149.552172][ T4698] ortek 0003:1223:3F07.0014: hidraw0: USB HID v0.05 Device [HID 1223:3f07] on usb-dummy_hcd.2-1/input0 [ 149.584208][ T4397] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.683934][ T5429] usb 3-1: USB disconnect, device number 8 [ 149.776979][ T4397] usb 1-1: Using ep0 maxpacket: 8 [ 149.790113][ T4397] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 149.820043][ T4397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.840275][ T4397] usb 1-1: Product: syz [ 149.844669][ T4397] usb 1-1: Manufacturer: syz [ 149.849306][ T4397] usb 1-1: SerialNumber: syz [ 149.866961][ T4397] usb 1-1: config 0 descriptor?? [ 149.884288][ T4397] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 150.029104][ T6396] loop1: detected capacity change from 0 to 32768 [ 150.041366][ T6396] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 150.080741][ T5429] usb 1-1: USB disconnect, device number 11 [ 150.653884][ T4698] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.688533][ T6424] netlink: 104 bytes leftover after parsing attributes in process `syz.0.819'. [ 150.747060][ T6422] loop1: detected capacity change from 0 to 40427 [ 150.757242][ T6422] F2FS-fs (loop1): invalid crc value [ 150.770817][ T6422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.820206][ T6422] F2FS-fs (loop1): recover fsync data on readonly fs [ 150.831520][ T6422] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 150.838901][ T6422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.848690][ T4698] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 150.870357][ T4698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.882350][ T4698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.892720][ T4698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 150.907966][ T4698] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 150.918403][ T4698] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 150.926833][ T4698] usb 3-1: Manufacturer: syz [ 150.933398][ T4698] usb 3-1: config 0 descriptor?? [ 151.113920][ T5429] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.310914][ T5429] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 151.319878][ T5429] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 151.342050][ T5429] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 151.349352][ T4698] appleir 0003:05AC:8243.0015: item fetching failed at offset 0/1 [ 151.353087][ T5429] usb 1-1: config 220 has no interface number 2 [ 151.362952][ T4698] appleir 0003:05AC:8243.0015: parse failed [ 151.372632][ T4698] appleir: probe of 0003:05AC:8243.0015 failed with error -22 [ 151.380433][ T5429] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 151.380469][ T5429] usb 1-1: config 220 interface 0 has no altsetting 0 [ 151.380488][ T5429] usb 1-1: config 220 interface 76 has no altsetting 0 [ 151.380507][ T5429] usb 1-1: config 220 interface 1 has no altsetting 0 [ 151.409302][ T5429] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 151.443871][ T5429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.451928][ T5429] usb 1-1: Product: syz [ 151.474429][ T5429] usb 1-1: Manufacturer: syz [ 151.479103][ T5429] usb 1-1: SerialNumber: syz [ 151.558679][ T4698] usb 3-1: USB disconnect, device number 9 [ 151.592515][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 151.718653][ T5429] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 151.734918][ T5429] usb 1-1: No valid video chain found. [ 151.740931][ T5429] usb 1-1: selecting invalid altsetting 0 [ 151.774383][ T5429] usb 1-1: selecting invalid altsetting 0 [ 151.780186][ T5429] usbtest: probe of 1-1:220.1 failed with error -22 [ 151.806316][ T5429] usb 1-1: USB disconnect, device number 12 [ 151.852304][ T6457] CIFS: VFS: Malformed UNC in devname [ 152.388312][ T6479] loop0: detected capacity change from 0 to 1024 [ 152.445686][ T6479] hfsplus: bad catalog entry type [ 152.525096][ T33] hfsplus: b-tree write err: -5, ino 4 [ 152.754122][ T6487] loop1: detected capacity change from 0 to 8192 [ 152.795532][ T6498] loop2: detected capacity change from 0 to 1024 [ 152.802164][ T6487] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.822309][ T6487] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 152.831767][ T6487] REISERFS (device loop1): using ordered data mode [ 152.838537][ T6487] reiserfs: using flush barriers [ 152.839466][ T6498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.845043][ T6487] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.862295][ T6498] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.886600][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'. [ 152.906153][ T6487] REISERFS (device loop1): checking transaction log (loop1) [ 152.914418][ T27] audit: type=1800 audit(1752493435.745:29): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.854" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 152.936190][ T6487] REISERFS (device loop1): Using r5 hash to sort names [ 152.943114][ T6487] REISERFS (device loop1): using 3.5.x disk format [ 152.944032][ T5430] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.959239][ T6487] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 152.990928][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 153.071380][ T6505] loop2: detected capacity change from 0 to 16 [ 153.079882][ T6505] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 153.095290][ T6505] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xadc1cb9c, 0x7bbbea8c expected [ 153.179279][ T5430] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 153.204910][ T5430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.212977][ T5430] usb 5-1: Product: syz [ 153.237958][ T5430] usb 5-1: Manufacturer: syz [ 153.242721][ T5430] usb 5-1: SerialNumber: syz [ 153.259958][ T5430] usb 5-1: config 0 descriptor?? [ 153.276792][ T5430] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 011 [ 153.526609][ T6507] loop0: detected capacity change from 0 to 32768 [ 153.698478][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 153.710206][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 153.853574][ T6524] netlink: 'syz.1.865': attribute type 5 has an invalid length. [ 153.895049][ T5430] i2c i2c-1: failure reading functionality [ 153.908912][ T5430] i2c i2c-1: connected i2c-tiny-usb device [ 153.928870][ T5430] usb 5-1: USB disconnect, device number 11 [ 154.064013][ T6531] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 154.161916][ T6533] loop1: detected capacity change from 0 to 512 [ 154.230004][ T6533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.240442][ T6533] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.243375][ T6527] loop0: detected capacity change from 0 to 32768 [ 154.299438][ T6527] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 154.299438][ T6527] [ 154.310787][ T6527] ERROR: (device loop0): remounting filesystem as read-only [ 154.356145][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 155.057657][ T6540] loop2: detected capacity change from 0 to 32768 [ 155.978610][ T6596] Bluetooth: MGMT ver 1.22 [ 156.088209][ T6600] loop0: detected capacity change from 0 to 256 [ 156.102190][ T6600] exfat: Deprecated parameter 'utf8' [ 156.126523][ T6600] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 156.281082][ T6588] loop2: detected capacity change from 0 to 32768 [ 156.339587][ T6588] XFS (loop2): Mounting V5 Filesystem [ 156.434650][ T6588] XFS (loop2): Ending clean mount [ 156.510614][ T4269] XFS (loop2): Unmounting Filesystem [ 156.783301][ T6630] loop4: detected capacity change from 0 to 256 [ 156.839511][ T27] audit: type=1800 audit(1752493439.665:30): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.912" name="file1" dev="loop4" ino=1048666 res=0 errno=0 [ 157.001578][ T6627] loop1: detected capacity change from 0 to 32768 [ 157.025769][ T6627] (syz.1.910,6627,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.047854][ T6627] (syz.1.910,6627,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.117245][ T6627] JBD2: Ignoring recovery information on journal [ 157.212092][ T6627] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.299204][ T4280] ocfs2: Unmounting device (7,1) on (node local) [ 157.610873][ T6637] loop4: detected capacity change from 0 to 32768 [ 157.628538][ T6637] XFS (loop4): Mounting V5 Filesystem [ 157.771567][ T6637] XFS (loop4): Ending clean mount [ 157.797272][ T6637] XFS (loop4): Quotacheck needed: Please wait. [ 157.824076][ T6665] loop1: detected capacity change from 0 to 2048 [ 157.837656][ T6665] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.876618][ T6665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.886815][ T6637] XFS (loop4): Quotacheck: Done. [ 157.979498][ T4278] XFS (loop4): Unmounting Filesystem [ 158.172306][ T6675] loop1: detected capacity change from 0 to 16 [ 158.257435][ T6675] erofs: (device loop1): mounted with root inode @ nid 36. [ 158.283481][ T27] audit: type=1800 audit(1752493441.105:31): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 158.580266][ T6691] loop2: detected capacity change from 0 to 2048 [ 159.116109][ T6715] loop1: detected capacity change from 0 to 1024 [ 159.192796][ T6715] hfsplus: bad catalog entry type [ 159.286099][ T75] hfsplus: b-tree write err: -5, ino 4 [ 159.343237][ T6699] loop4: detected capacity change from 0 to 40427 [ 159.361427][ T6699] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 159.373134][ T6699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.395800][ T6699] F2FS-fs (loop4): invalid crc value [ 159.430106][ T6699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.520937][ T6699] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 159.541258][ T6699] F2FS-fs (loop4): Start checkpoint disabled! [ 159.551797][ T6730] loop2: detected capacity change from 0 to 256 [ 159.580830][ T6699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.595336][ T6699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 159.617033][ T6733] loop1: detected capacity change from 0 to 256 [ 159.653062][ T6733] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfb920961, utbl_chksum : 0xe619d30d) [ 159.680584][ T6719] loop0: detected capacity change from 0 to 32768 [ 159.697335][ T27] audit: type=1800 audit(1752493442.525:32): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.939" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 159.731882][ T6719] (syz.0.949,6719,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.763857][ T6719] (syz.0.949,6719,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.813587][ T6719] JBD2: Ignoring recovery information on journal [ 159.860005][ T6719] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 159.935019][ T6719] [ 159.937418][ T6719] ====================================================== [ 159.944460][ T6719] WARNING: possible circular locking dependency detected [ 159.951519][ T6719] 6.1.144-syzkaller #0 Not tainted [ 159.956664][ T6719] ------------------------------------------------------ [ 159.963711][ T6719] syz.0.949/6719 is trying to acquire lock: [ 159.969633][ T6719] ffff888054b43488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 159.983190][ T6719] [ 159.983190][ T6719] but task is already holding lock: [ 159.990422][ T75] kworker/u4:4: attempt to access beyond end of device [ 159.990422][ T75] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 159.990562][ T6719] ffff888054b46a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 160.015490][ T6719] [ 160.015490][ T6719] which lock already depends on the new lock. [ 160.015490][ T6719] [ 160.025903][ T6719] [ 160.025903][ T6719] the existing dependency chain (in reverse order) is: [ 160.034939][ T6719] [ 160.034939][ T6719] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 160.043831][ T6719] down_write+0x36/0x60 [ 160.048578][ T6719] ocfs2_lock_global_qf+0x1e5/0x270 [ 160.054339][ T6719] ocfs2_acquire_dquot+0x2a0/0xb10 [ 160.059989][ T6719] dqget+0x778/0xeb0 [ 160.064415][ T6719] ocfs2_setattr+0x1132/0x1cf0 [ 160.069725][ T6719] notify_change+0xc74/0xf40 [ 160.074854][ T6719] chown_common+0x486/0x620 [ 160.079899][ T6719] ksys_fchown+0xe2/0x150 [ 160.084770][ T6719] __x64_sys_fchown+0x76/0x80 [ 160.089982][ T6719] do_syscall_64+0x4c/0xa0 [ 160.094933][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.101362][ T6719] [ 160.101362][ T6719] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 160.111895][ T6719] down_write+0x36/0x60 [ 160.116595][ T6719] ocfs2_lock_global_qf+0x1c7/0x270 [ 160.122329][ T6719] ocfs2_acquire_dquot+0x2a0/0xb10 [ 160.127979][ T6719] dqget+0x778/0xeb0 [ 160.132411][ T6719] ocfs2_setattr+0x1132/0x1cf0 [ 160.137719][ T6719] notify_change+0xc74/0xf40 [ 160.142850][ T6719] chown_common+0x486/0x620 [ 160.147904][ T6719] ksys_fchown+0xe2/0x150 [ 160.152768][ T6719] __x64_sys_fchown+0x76/0x80 [ 160.157987][ T6719] do_syscall_64+0x4c/0xa0 [ 160.162941][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.169369][ T6719] [ 160.169369][ T6719] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 160.177022][ T6719] __mutex_lock+0x120/0xaf0 [ 160.182071][ T6719] dquot_commit+0x5a/0x410 [ 160.187023][ T6719] ext4_write_dquot+0x1f0/0x360 [ 160.192414][ T6719] mark_all_dquot_dirty+0xf9/0x400 [ 160.198064][ T6719] __dquot_free_space+0x7ec/0xbc0 [ 160.203628][ T6719] ext4_free_blocks+0x1bab/0x2640 [ 160.209194][ T6719] ext4_ext_remove_space+0x1f0d/0x4490 [ 160.215190][ T6719] ext4_ext_truncate+0x211/0x370 [ 160.220675][ T6719] ext4_truncate+0xa0b/0x1230 [ 160.225878][ T6719] ext4_evict_inode+0xb35/0x1100 [ 160.231345][ T6719] evict+0x485/0x870 [ 160.235775][ T6719] __dentry_kill+0x431/0x650 [ 160.240895][ T6719] dentry_kill+0xb8/0x290 [ 160.245752][ T6719] dput+0xfa/0x1d0 [ 160.249996][ T6719] do_renameat2+0x8ad/0xc70 [ 160.255030][ T6719] __x64_sys_rename+0x82/0x90 [ 160.260243][ T6719] do_syscall_64+0x4c/0xa0 [ 160.265195][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.271631][ T6719] [ 160.271631][ T6719] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 160.279291][ T6719] down_write+0x36/0x60 [ 160.283988][ T6719] ext4_truncate+0x987/0x1230 [ 160.289198][ T6719] ext4_setattr+0x10cb/0x19f0 [ 160.294405][ T6719] notify_change+0xc74/0xf40 [ 160.299533][ T6719] do_truncate+0x197/0x220 [ 160.304483][ T6719] do_sys_ftruncate+0x312/0x3c0 [ 160.309873][ T6719] do_syscall_64+0x4c/0xa0 [ 160.314830][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.321435][ T6719] [ 160.321435][ T6719] -> #3 (jbd2_handle){++++}-{0:0}: [ 160.328746][ T6719] start_this_handle+0x1f49/0x2150 [ 160.334388][ T6719] jbd2__journal_start+0x2b7/0x5a0 [ 160.340030][ T6719] jbd2_journal_start+0x26/0x30 [ 160.345413][ T6719] ocfs2_start_trans+0x372/0x6c0 [ 160.350886][ T6719] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 160.357227][ T6719] ocfs2_dismount_volume+0x1fc/0x930 [ 160.363042][ T6719] generic_shutdown_super+0x130/0x340 [ 160.368951][ T6719] kill_block_super+0x7c/0xe0 [ 160.374169][ T6719] deactivate_locked_super+0x93/0xf0 [ 160.379987][ T6719] cleanup_mnt+0x463/0x4f0 [ 160.384936][ T6719] task_work_run+0x1ca/0x250 [ 160.390065][ T6719] exit_to_user_mode_loop+0xe6/0x110 [ 160.395893][ T6719] exit_to_user_mode_prepare+0xb1/0x140 [ 160.402003][ T6719] syscall_exit_to_user_mode+0x16/0x40 [ 160.408006][ T6719] do_syscall_64+0x58/0xa0 [ 160.412961][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.419389][ T6719] [ 160.419389][ T6719] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 160.427919][ T6719] down_read+0x42/0x2d0 [ 160.432618][ T6719] ocfs2_start_trans+0x366/0x6c0 [ 160.438087][ T6719] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 160.444342][ T6719] ocfs2_dismount_volume+0x1fc/0x930 [ 160.450159][ T6719] generic_shutdown_super+0x130/0x340 [ 160.456066][ T6719] kill_block_super+0x7c/0xe0 [ 160.461279][ T6719] deactivate_locked_super+0x93/0xf0 [ 160.467097][ T6719] cleanup_mnt+0x463/0x4f0 [ 160.472048][ T6719] task_work_run+0x1ca/0x250 [ 160.477170][ T6719] exit_to_user_mode_loop+0xe6/0x110 [ 160.483007][ T6719] exit_to_user_mode_prepare+0xb1/0x140 [ 160.489089][ T6719] syscall_exit_to_user_mode+0x16/0x40 [ 160.495099][ T6719] do_syscall_64+0x58/0xa0 [ 160.500054][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.506487][ T6719] [ 160.506487][ T6719] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 160.514006][ T6719] ocfs2_start_trans+0x267/0x6c0 [ 160.519476][ T6719] ocfs2_mknod+0xe6a/0x2350 [ 160.524514][ T6719] ocfs2_mkdir+0x1b6/0x4a0 [ 160.529487][ T6719] vfs_mkdir+0x387/0x570 [ 160.534262][ T6719] do_mkdirat+0x1d0/0x430 [ 160.539123][ T6719] __x64_sys_mkdirat+0x85/0x90 [ 160.544420][ T6719] do_syscall_64+0x4c/0xa0 [ 160.549369][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.555809][ T6719] [ 160.555809][ T6719] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 160.566343][ T6719] __lock_acquire+0x2cf8/0x7c50 [ 160.571737][ T6719] lock_acquire+0x1b4/0x490 [ 160.576781][ T6719] down_write+0x36/0x60 [ 160.581483][ T6719] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 160.588175][ T6719] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 160.595064][ T6719] ocfs2_lock_allocators+0x2f7/0x5b0 [ 160.600909][ T6719] ocfs2_extend_allocation+0x394/0x1840 [ 160.606998][ T6719] ocfs2_extend_no_holes+0x20b/0x490 [ 160.612829][ T6719] ocfs2_acquire_dquot+0x5e8/0xb10 [ 160.618474][ T6719] dqget+0x778/0xeb0 [ 160.622900][ T6719] ocfs2_setattr+0x1132/0x1cf0 [ 160.628213][ T6719] notify_change+0xc74/0xf40 [ 160.633340][ T6719] chown_common+0x486/0x620 [ 160.638382][ T6719] ksys_fchown+0xe2/0x150 [ 160.643247][ T6719] __x64_sys_fchown+0x76/0x80 [ 160.648462][ T6719] do_syscall_64+0x4c/0xa0 [ 160.653423][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.659851][ T6719] [ 160.659851][ T6719] other info that might help us debug this: [ 160.659851][ T6719] [ 160.670087][ T6719] Chain exists of: [ 160.670087][ T6719] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 160.670087][ T6719] [ 160.690113][ T6719] Possible unsafe locking scenario: [ 160.690113][ T6719] [ 160.697599][ T6719] CPU0 CPU1 [ 160.702985][ T6719] ---- ---- [ 160.708363][ T6719] lock(&ocfs2_quota_ip_alloc_sem_key); [ 160.714009][ T6719] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 160.723850][ T6719] lock(&ocfs2_quota_ip_alloc_sem_key); [ 160.732018][ T6719] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 160.739324][ T6719] [ 160.739324][ T6719] *** DEADLOCK *** [ 160.739324][ T6719] [ 160.747471][ T6719] 5 locks held by syz.0.949/6719: [ 160.752499][ T6719] #0: ffff888079334460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 160.762270][ T6719] #1: ffff88807a5ac2c8 (&type->i_mutex_dir_key#23){+.+.}-{3:3}, at: chown_common+0x320/0x620 [ 160.772564][ T6719] #2: ffff88804fc1e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 160.782591][ T6719] #3: ffff888054b46d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 160.795665][ T6719] #4: ffff888054b46a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 160.806992][ T6719] [ 160.806992][ T6719] stack backtrace: [ 160.812902][ T6719] CPU: 1 PID: 6719 Comm: syz.0.949 Not tainted 6.1.144-syzkaller #0 [ 160.820906][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.831004][ T6719] Call Trace: [ 160.834293][ T6719] [ 160.837230][ T6719] dump_stack_lvl+0x168/0x22e [ 160.841935][ T6719] ? load_image+0x3b0/0x3b0 [ 160.846449][ T6719] ? show_regs_print_info+0x12/0x12 [ 160.851759][ T6719] ? print_circular_bug+0x12b/0x1a0 [ 160.856976][ T6719] check_noncircular+0x274/0x310 [ 160.861929][ T6719] ? add_chain_block+0x940/0x940 [ 160.866880][ T6719] ? lockdep_lock+0xdc/0x1e0 [ 160.871481][ T6719] ? verify_lock_unused+0x140/0x140 [ 160.876701][ T6719] ? _find_first_zero_bit+0xcf/0x100 [ 160.882111][ T6719] __lock_acquire+0x2cf8/0x7c50 [ 160.887110][ T6719] ? verify_lock_unused+0x140/0x140 [ 160.892342][ T6719] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 160.898013][ T6719] ? do_raw_spin_lock+0x11d/0x280 [ 160.903087][ T6719] ? mutex_unlock+0x10/0x10 [ 160.907630][ T6719] ? __rwlock_init+0x140/0x140 [ 160.912430][ T6719] ? __rwlock_init+0x140/0x140 [ 160.917252][ T6719] ? do_raw_spin_unlock+0x11d/0x230 [ 160.922486][ T6719] lock_acquire+0x1b4/0x490 [ 160.927014][ T6719] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 160.933359][ T6719] ? __might_sleep+0xd0/0xd0 [ 160.937965][ T6719] ? read_lock_is_recursive+0x10/0x10 [ 160.943364][ T6719] ? mark_lock+0x94/0x320 [ 160.947711][ T6719] ? __lock_acquire+0x13c0/0x7c50 [ 160.952777][ T6719] down_write+0x36/0x60 [ 160.956952][ T6719] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 160.963299][ T6719] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 160.969476][ T6719] ? verify_lock_unused+0x140/0x140 [ 160.974687][ T6719] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 160.981370][ T6719] ? kasan_set_track+0x60/0x70 [ 160.986146][ T6719] ? kasan_set_track+0x4b/0x70 [ 160.990928][ T6719] ? __kasan_kmalloc+0x8e/0xa0 [ 160.995721][ T6719] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 161.002147][ T6719] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 161.007622][ T6719] ? ocfs2_extend_allocation+0x394/0x1840 [ 161.013362][ T6719] ? ocfs2_extend_no_holes+0x20b/0x490 [ 161.018838][ T6719] ? ocfs2_acquire_dquot+0x5e8/0xb10 [ 161.024138][ T6719] ? dqget+0x778/0xeb0 [ 161.028218][ T6719] ? ocfs2_setattr+0x1132/0x1cf0 [ 161.033176][ T6719] ? notify_change+0xc74/0xf40 [ 161.037961][ T6719] ? chown_common+0x486/0x620 [ 161.042659][ T6719] ? ksys_fchown+0xe2/0x150 [ 161.047215][ T6719] ? do_syscall_64+0x4c/0xa0 [ 161.051818][ T6719] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.057903][ T6719] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 161.063996][ T6719] ? __lock_acquire+0x7c50/0x7c50 [ 161.069033][ T6719] ? do_raw_spin_lock+0x11d/0x280 [ 161.074084][ T6719] ? __rwlock_init+0x140/0x140 [ 161.078869][ T6719] ? do_raw_spin_unlock+0x11d/0x230 [ 161.084091][ T6719] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 161.090178][ T6719] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 161.096524][ T6719] ? ocfs2_reserve_clusters+0x30/0x30 [ 161.101906][ T6719] ? lock_chain_count+0x20/0x20 [ 161.106773][ T6719] ? rcu_is_watching+0x11/0xa0 [ 161.111552][ T6719] ? ocfs2_num_free_extents+0x2fa/0x620 [ 161.117117][ T6719] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 161.123115][ T6719] ? ocfs2_read_blocks_sync+0xc50/0xc50 [ 161.128683][ T6719] ? stack_trace_save+0x98/0xe0 [ 161.133552][ T6719] ocfs2_lock_allocators+0x2f7/0x5b0 [ 161.138914][ T6719] ? _ocfs2_clear_bit+0x30/0x30 [ 161.143780][ T6719] ? ocfs2_read_inode_block+0x11a/0x180 [ 161.149338][ T6719] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 161.155327][ T6719] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 161.160631][ T6719] ? ocfs2_setattr+0x1132/0x1cf0 [ 161.165591][ T6719] ? notify_change+0xc74/0xf40 [ 161.170394][ T6719] ? chown_common+0x486/0x620 [ 161.175101][ T6719] ? __x64_sys_fchown+0x76/0x80 [ 161.179969][ T6719] ? do_syscall_64+0x4c/0xa0 [ 161.184575][ T6719] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.190655][ T6719] ocfs2_extend_allocation+0x394/0x1840 [ 161.196228][ T6719] ? __lock_acquire+0x13c0/0x7c50 [ 161.201276][ T6719] ? ocfs2_extend_no_holes+0x490/0x490 [ 161.206784][ T6719] ? kasan_quarantine_put+0xd4/0x220 [ 161.212090][ T6719] ? lockdep_hardirqs_on+0x94/0x140 [ 161.217311][ T6719] ? slab_free_freelist_hook+0x131/0x1a0 [ 161.222974][ T6719] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 161.228987][ T6719] ? find_tree_dqentry+0xbb1/0xf30 [ 161.234121][ T6719] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 161.239272][ T6719] ocfs2_extend_no_holes+0x20b/0x490 [ 161.244587][ T6719] ? ocfs2_zero_extend+0x2950/0x2950 [ 161.249888][ T6719] ? do_raw_spin_unlock+0x11d/0x230 [ 161.255107][ T6719] ? _raw_spin_unlock+0x24/0x40 [ 161.259971][ T6719] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 161.265195][ T6719] ocfs2_acquire_dquot+0x5e8/0xb10 [ 161.270332][ T6719] ? ocfs2_destroy_dquot+0x40/0x40 [ 161.275457][ T6719] ? percpu_counter_add_batch+0x13b/0x160 [ 161.281184][ T6719] dqget+0x778/0xeb0 [ 161.285110][ T6719] ocfs2_setattr+0x1132/0x1cf0 [ 161.289908][ T6719] ? ocfs2_extend_allocation+0x1840/0x1840 [ 161.295744][ T6719] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 161.301572][ T6719] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 161.307835][ T6719] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 161.313752][ T6719] ? current_time+0x197/0x2b0 [ 161.318444][ T6719] ? atime_needs_update+0x780/0x780 [ 161.323658][ T6719] ? common_perm_cond+0x2ad/0x340 [ 161.328699][ T6719] ? evm_inode_setattr+0x91/0x790 [ 161.333745][ T6719] ? bpf_lsm_inode_setattr+0x5/0x10 [ 161.338966][ T6719] ? security_inode_setattr+0xd8/0x140 [ 161.344438][ T6719] ? try_break_deleg+0x79/0x120 [ 161.349300][ T6719] ? ocfs2_extend_allocation+0x1840/0x1840 [ 161.355124][ T6719] notify_change+0xc74/0xf40 [ 161.359734][ T6719] chown_common+0x486/0x620 [ 161.364252][ T6719] ? __ia32_sys_chmod+0x70/0x70 [ 161.369115][ T6719] ? rcu_read_lock_any_held+0xb0/0x120 [ 161.374588][ T6719] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 161.379890][ T6719] ? __mnt_want_write+0x21f/0x2a0 [ 161.384930][ T6719] ? mnt_want_write_file+0x16e/0x200 [ 161.390234][ T6719] ksys_fchown+0xe2/0x150 [ 161.394581][ T6719] __x64_sys_fchown+0x76/0x80 [ 161.399273][ T6719] do_syscall_64+0x4c/0xa0 [ 161.403702][ T6719] ? clear_bhb_loop+0x60/0xb0 [ 161.408488][ T6719] ? clear_bhb_loop+0x60/0xb0 [ 161.413180][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.419087][ T6719] RIP: 0033:0x7f1e9b78e929 [ 161.423522][ T6719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.443138][ T6719] RSP: 002b:00007f1e9c648038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 161.451565][ T6719] RAX: ffffffffffffffda RBX: 00007f1e9b9b5fa0 RCX: 00007f1e9b78e929 [ 161.459547][ T6719] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000004 [ 161.467528][ T6719] RBP: 00007f1e9b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 161.475509][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.483492][ T6719] R13: 0000000000000000 R14: 00007f1e9b9b5fa0 R15: 00007ffc0e185828 [ 161.491485][ T6719] [ 161.494606][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.563432][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 161.833373][ T6746] loop4: detected capacity change from 0 to 32768