last executing test programs: 2m45.33466249s ago: executing program 2 (id=76): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250c0000005400038008000200ff01000044000400d700981b00eb2e0466b3b726c12bffd2da6226299a994f49a227f189a859257dea5b53a46afb0f8effa4689e815bf8cce16e4a1e1c000000ffffffffffffffff04000100180001801400020076657468305f746f5f626174616476"], 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 2m45.166109745s ago: executing program 2 (id=78): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_int(r0, 0x11, 0x8, 0x0, &(0x7f00007d0000)) 2m45.022334095s ago: executing program 2 (id=80): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @broadcast}], 0x10) 2m44.933145887s ago: executing program 2 (id=82): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001cc0)={[{@discard}, {@gid}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@errors_continue}, {@gid}, {@discard}, {@utf8}, {@errors_remount}, {@errors_remount}]}, 0x1, 0x152d, &(0x7f0000000780)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x320c85c, &(0x7f00000004c0)=ANY=[]) 2m44.283781792s ago: executing program 2 (id=83): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x0, 0x22, 0xc, {0xc, 0x30, "618229b4d585cc429d97"}}, 0x0, 0x0, 0x0}, 0x0) 2m43.630886756s ago: executing program 2 (id=88): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f207", 0x34}) 2m43.341670726s ago: executing program 32 (id=88): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f207", 0x34}) 2m27.839584135s ago: executing program 4 (id=205): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 2m27.735685943s ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38) 2m27.102186182s ago: executing program 4 (id=217): r0 = socket$inet6(0xa, 0x802, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffe5, @mcast2, 0x800100}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00'}, 0x1c) 2m27.008286253s ago: executing program 4 (id=220): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m25.467487492s ago: executing program 4 (id=240): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m24.407626062s ago: executing program 4 (id=253): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) 2m9.256730585s ago: executing program 33 (id=253): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) 4.15814863s ago: executing program 0 (id=1933): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2a0405e, &(0x7f0000000000), 0x1, 0x464, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) getdents(r0, 0x0, 0x58) 3.908787344s ago: executing program 0 (id=1935): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 3.810778506s ago: executing program 0 (id=1936): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.009610918s ago: executing program 6 (id=1943): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x7, 0x605, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 2.941307865s ago: executing program 0 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x882}, 0x0) 2.709263032s ago: executing program 0 (id=1949): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file0\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x556e, &(0x7f000000b000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x13) fstat(r0, &(0x7f0000000080)) 2.108944971s ago: executing program 1 (id=1957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r0, 0x89f3, 0x200000000000004) 1.924898297s ago: executing program 1 (id=1958): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.818383248s ago: executing program 1 (id=1961): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x14, 0x1, 0x3d, 0x1000000000003}}], 0x14}}], 0x1, 0x8840) 1.586474534s ago: executing program 6 (id=1963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x0) 1.586374594s ago: executing program 1 (id=1964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 1.389189977s ago: executing program 1 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 1.090777812s ago: executing program 6 (id=1967): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x8, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)="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"/1352, 0x548}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="099b2f64c9238c419474966fef07454e2b26f29a30dc30cb197d8b7775ab7c76a7d51ec77285c1fabc881a23d00b8015ce8543892cf550c3e2f1e1159f5f2aaa4c2d5d286a0bd27ba119e345bf8c69f95300ba048ca216f95851017617fe2758a05c3d9022", 0x65}], 0x1}}], 0x3, 0x400c000) 1.07493642s ago: executing program 3 (id=1969): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0x6, 0x0, 0x3}]}) 946.748936ms ago: executing program 1 (id=1970): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 946.492876ms ago: executing program 0 (id=1971): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[], 0xfd, 0x553e, &(0x7f000000b080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fsetxattr(r0, &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)='f2fs\x00', 0x5, 0x1) 946.335706ms ago: executing program 6 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000500)={r0, 0x51, &(0x7f0000000480)}, 0x10) 778.765025ms ago: executing program 5 (id=1973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) 746.444369ms ago: executing program 6 (id=1974): unshare(0x20400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x5, @any, 0x800, 0x2}, 0xe) 646.69146ms ago: executing program 5 (id=1975): mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@dyn}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000044c0)={0x2020}, 0x2020) 646.40849ms ago: executing program 3 (id=1976): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0xffffff67}], 0x1, 0x0, 0x7}}], 0x48, 0x20000004}, 0x0) 579.567738ms ago: executing program 6 (id=1977): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a05e50000000000000109022400010000100009040003050300020009216b085f0122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\to\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 446.788923ms ago: executing program 5 (id=1978): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'gretap0\x00', @random="0efc6c10d6c2"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 407.332216ms ago: executing program 3 (id=1979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000100)) 278.816532ms ago: executing program 5 (id=1980): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 278.680442ms ago: executing program 3 (id=1981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 189.504796ms ago: executing program 5 (id=1982): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x131b, 0x21}}], 0x48}, 0x0) 167.413581ms ago: executing program 3 (id=1983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 23.695655ms ago: executing program 5 (id=1984): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x19) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1) 0s ago: executing program 3 (id=1985): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x21e143, 0x0) fchown(r0, 0x0, 0xee01) kernel console output (not intermixed with test programs): evice loop0): using ordered data mode [ 148.969154][ T6579] reiserfs: using flush barriers [ 148.978651][ T6579] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.055682][ T6589] loop5: detected capacity change from 0 to 512 [ 149.063088][ T6579] REISERFS (device loop0): checking transaction log (loop0) [ 149.102894][ T6593] loop3: detected capacity change from 0 to 4096 [ 149.115513][ T6589] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.123212][ T6589] EXT4-fs error (device loop5): ext4_quota_enable:6438: comm syz.5.779: Bad quota inum: 2, type: 2 [ 149.137035][ T6589] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 149.171143][ T6589] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 149.179412][ T6589] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,journal_ioprio=0x0000000000000001,grpid,,errors=continue. Quota mode: writeback. [ 149.224615][ T6579] REISERFS (device loop0): Using r5 hash to sort names [ 149.231919][ T6579] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 149.252428][ T6598] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.317480][ T6593] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 149.369658][ T6593] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 149.520990][ T6593] Remounting filesystem read-only [ 149.552418][ T6593] NILFS (loop3): error -5 truncating bmap (ino=12) [ 149.698421][ T6607] loop6: detected capacity change from 0 to 4096 [ 149.811057][ T4188] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 149.905592][ T6615] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.907135][ T6607] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 150.053834][ T6607] NILFS (loop6): mounting fs with errors [ 150.192825][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 150.342871][ T6625] loop3: detected capacity change from 0 to 8192 [ 150.506457][ T6625] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 150.529476][ T6625] REISERFS (device loop3): using ordered data mode [ 150.542852][ T6625] reiserfs: using flush barriers [ 150.590995][ T6625] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 150.603175][ T7] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 150.608959][ T6625] REISERFS (device loop3): checking transaction log (loop3) [ 150.626692][ T6625] REISERFS (device loop3): Using r5 hash to sort names [ 150.634059][ T6625] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 150.648504][ T6625] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 150.661455][ T7] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.733712][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.912989][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.942724][ T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.965844][ T7] usb 6-1: Product: syz [ 150.970080][ T7] usb 6-1: Manufacturer: syz [ 151.016229][ T7] usb 6-1: SerialNumber: syz [ 151.046918][ T7] usb 6-1: config 0 descriptor?? [ 151.114718][ T7] hub 6-1:0.0: bad descriptor, ignoring hub [ 151.124046][ T7] hub: probe of 6-1:0.0 failed with error -5 [ 151.183614][ T7] usb 6-1: selecting invalid altsetting 0 [ 151.384133][ T7] usb 6-1: USB disconnect, device number 6 [ 151.421827][ T6638] loop6: detected capacity change from 0 to 32768 [ 151.569652][ T6638] read_mapping_page failed! [ 151.599697][ T6638] ERROR: (device loop6): txCommit: [ 151.599697][ T6638] [ 151.699734][ T6669] jfs_mkdir: dtSearch returned -17 [ 152.782216][ T6720] loop5: detected capacity change from 0 to 512 [ 152.867300][ T6720] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 152.888730][ T6722] loop1: detected capacity change from 0 to 512 [ 152.922125][ T6720] EXT4-fs (loop5): Test dummy encryption mode enabled [ 153.021214][ T6720] EXT4-fs (loop5): Test dummy encryption mode enabled [ 153.035753][ T6718] loop6: detected capacity change from 0 to 4096 [ 153.043337][ T6720] EXT4-fs (loop5): Mount option "journal_async_commit" incompatible with ext3 [ 153.067689][ T6722] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,errors=remount-ro,. Quota mode: writeback. [ 153.136844][ T6718] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 153.148613][ T6722] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.219364][ T6718] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 153.268085][ T6718] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 153.313135][ T6718] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 153.386874][ T6718] ntfs: volume version 3.1. [ 153.461738][ T6718] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 153.505358][ T6718] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 153.527345][ T6718] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 153.606961][ T6733] loop5: detected capacity change from 0 to 4096 [ 153.669256][ T6715] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.836 (6715) [ 153.773548][ T6715] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.805825][ T6733] ntfs: volume version 3.1. [ 153.813662][ T6715] BTRFS info (device loop0): force zlib compression, level 3 [ 153.821204][ T6715] BTRFS info (device loop0): turning on flush-on-commit [ 153.829596][ T6715] BTRFS info (device loop0): max_inline at 4096 [ 153.860901][ T6737] hfsplus: bad catalog entry type [ 153.882458][ T6715] BTRFS info (device loop0): using free space tree [ 153.898260][ T6733] ntfs: (device loop5): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 153.903503][ T6715] BTRFS info (device loop0): has skinny extents [ 154.086991][ T6748] set_capacity_and_notify: 2 callbacks suppressed [ 154.087007][ T6748] loop6: detected capacity change from 0 to 128 [ 154.215130][ T6731] loop3: detected capacity change from 0 to 32768 [ 154.327096][ T6731] JBD2: Ignoring recovery information on journal [ 154.386756][ T6715] BTRFS info (device loop0): enabling ssd optimizations [ 154.396295][ T6750] loop5: detected capacity change from 0 to 32768 [ 154.470403][ T6750] XFS (loop5): Mounting V5 Filesystem [ 154.508918][ T6731] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.711773][ T6750] XFS (loop5): Ending clean mount [ 154.794747][ T6750] XFS (loop5): Quotacheck needed: Please wait. [ 154.827875][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 154.949360][ T6750] XFS (loop5): Quotacheck: Done. [ 155.069720][ T6790] netlink: 'syz.1.858': attribute type 8 has an invalid length. [ 155.087835][ T6790] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.858'. [ 155.324473][ T4585] XFS (loop5): Unmounting Filesystem [ 155.801054][ T6785] loop6: detected capacity change from 0 to 32768 [ 155.872820][ T6792] loop3: detected capacity change from 0 to 32768 [ 155.909978][ T6794] loop0: detected capacity change from 0 to 32768 [ 155.988588][ T6796] loop5: detected capacity change from 0 to 8192 [ 156.021249][ T6794] JBD2: Ignoring recovery information on journal [ 156.070132][ T6796] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 156.112468][ T6796] REISERFS (device loop5): using ordered data mode [ 156.149348][ T6796] reiserfs: using flush barriers [ 156.165614][ T6794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 156.183063][ T6785] XFS (loop6): Mounting V5 Filesystem [ 156.205540][ T6796] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.236411][ T6796] REISERFS (device loop5): checking transaction log (loop5) [ 156.338087][ T6814] netlink: 'syz.1.862': attribute type 2 has an invalid length. [ 156.350101][ T6814] netlink: 244 bytes leftover after parsing attributes in process `syz.1.862'. [ 156.412593][ T6785] XFS (loop6): Ending clean mount [ 156.477316][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 156.628042][ T5720] XFS (loop6): Unmounting Filesystem [ 156.653490][ T6796] REISERFS (device loop5): Using tea hash to sort names [ 156.689845][ T6796] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 156.751745][ T6796] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 156.901255][ T6821] device veth1_macvtap left promiscuous mode [ 156.978878][ T6822] device veth1_macvtap entered promiscuous mode [ 157.022044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.220886][ T6824] loop1: detected capacity change from 0 to 4096 [ 157.387714][ T6824] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 157.531078][ T6841] loop6: detected capacity change from 0 to 64 [ 157.584995][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.5.871'. [ 157.610002][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 157.878001][ T6854] IPVS: Error joining to the multicast group [ 158.115320][ T6867] loop6: detected capacity change from 0 to 64 [ 158.163067][ T6865] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 158.241979][ T6859] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 158.427836][ T6879] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 158.462835][ T6879] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 158.481765][ T6883] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.684954][ T6886] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.705831][ T6886] NILFS (loop6): mounting unchecked fs [ 158.811625][ T6886] NILFS (loop6): recovery complete [ 158.903537][ T6894] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.946566][ T6891] FAT-fs (loop3): Directory bread(block 64) failed [ 158.994278][ T6891] FAT-fs (loop3): Directory bread(block 65) failed [ 159.000952][ T6891] FAT-fs (loop3): Directory bread(block 66) failed [ 159.035152][ T6891] FAT-fs (loop3): Directory bread(block 67) failed [ 159.087109][ T6891] FAT-fs (loop3): Directory bread(block 68) failed [ 159.110820][ T6891] FAT-fs (loop3): Directory bread(block 69) failed [ 159.172559][ T6891] FAT-fs (loop3): Directory bread(block 70) failed [ 159.196186][ T6891] FAT-fs (loop3): Directory bread(block 71) failed [ 159.230082][ T6891] FAT-fs (loop3): Directory bread(block 72) failed [ 159.247164][ T6891] FAT-fs (loop3): Directory bread(block 73) failed [ 159.400868][ T6908] set_capacity_and_notify: 5 callbacks suppressed [ 159.400886][ T6908] loop1: detected capacity change from 0 to 1024 [ 159.538865][ T6908] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.577600][ T6887] loop5: detected capacity change from 0 to 32768 [ 159.792922][ T6922] netlink: 6 bytes leftover after parsing attributes in process `syz.6.912'. [ 159.901364][ T6927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.612531][ T4785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.846942][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.854814][ T4785] usb 2-1: Using ep0 maxpacket: 16 [ 160.985910][ T4785] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 161.002091][ T4785] usb 2-1: config 0 has no interface number 0 [ 161.026406][ T4785] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.058581][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 161.075467][ T4785] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 161.113187][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 161.233319][ T4232] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.249082][ T4785] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 161.270129][ T4785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.282457][ T4232] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.310342][ T4785] usb 2-1: Product: syz [ 161.319973][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.331978][ T4785] usb 2-1: Manufacturer: syz [ 161.342786][ T4785] usb 2-1: SerialNumber: syz [ 161.350426][ T4232] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 161.373142][ T4785] usb 2-1: config 0 descriptor?? [ 161.383312][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.393033][ T6948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.400169][ T6948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.430187][ T4232] usb 1-1: config 0 descriptor?? [ 161.571432][ T6984] loop5: detected capacity change from 0 to 8 [ 161.598215][ T4179] udevd[4179]: incorrect cramfs checksum on /dev/loop5 [ 161.611145][ T6984] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 161.611178][ T6976] loop3: detected capacity change from 0 to 32768 [ 161.640307][ T6948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.657000][ T6948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.833895][ T6990] loop5: detected capacity change from 0 to 512 [ 161.874869][ T6990] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.895222][ T6990] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 161.912207][ T6990] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 161.924033][ T6990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 161.935727][ T4232] smartjoyplus 0003:6666:8804.0007: item fetching failed at offset 2/5 [ 161.956522][ T6990] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 161.969976][ T4232] smartjoyplus 0003:6666:8804.0007: parse failed [ 161.986679][ T6990] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.955: bg 0: block 353: padding at end of block bitmap is not set [ 162.003990][ T6990] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 162.039558][ T4232] smartjoyplus: probe of 0003:6666:8804.0007 failed with error -22 [ 162.092790][ T4785] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.129958][ T4785] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 162.164378][ T4785] asix: probe of 2-1:0.251 failed with error -71 [ 162.216572][ T4785] usb 2-1: USB disconnect, device number 5 [ 162.262281][ T6418] usb 1-1: USB disconnect, device number 9 [ 162.552507][ T4411] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 162.877246][ T7025] loop3: detected capacity change from 0 to 512 [ 162.960478][ T4411] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.969217][ T4411] usb 6-1: config 0 has no interface number 0 [ 162.976106][ T4411] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.991157][ T7025] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.991190][ T4411] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.018251][ T4411] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 163.024244][ T7025] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 163.033281][ T4411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.071243][ T4411] usb 6-1: config 0 descriptor?? [ 163.136451][ T7025] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 163.153985][ T7025] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 163.169950][ T7025] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 163.220040][ T7025] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.961: bg 0: block 353: padding at end of block bitmap is not set [ 163.249107][ T7025] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 163.295300][ T7019] loop0: detected capacity change from 0 to 32768 [ 163.530165][ T7038] loop3: detected capacity change from 0 to 1024 [ 163.553599][ T4411] prodikeys 0003:041E:2801.0008: item fetching failed at offset 5/7 [ 163.562117][ T4411] prodikeys 0003:041E:2801.0008: hid parse failed [ 163.595582][ T4411] prodikeys: probe of 0003:041E:2801.0008 failed with error -22 [ 163.750292][ T4785] usb 6-1: USB disconnect, device number 7 [ 164.008734][ T7047] loop0: detected capacity change from 0 to 4096 [ 164.024949][ T7049] loop1: detected capacity change from 0 to 4096 [ 164.046131][ T7047] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 164.102839][ T4775] hfsplus: b-tree write err: -5, ino 4 [ 164.139153][ T7049] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.186719][ T7047] ntfs3: loop0: failed to convert "c46c" to cp1251 [ 164.195083][ T7049] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.247061][ T7049] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.302529][ T7049] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.412430][ T7049] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.472978][ T7049] ntfs: volume version 3.1. [ 164.479750][ T7063] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 164.515266][ T7049] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.518294][ T7063] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 164.557870][ T7063] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 164.566202][ T7063] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.582833][ T7049] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.606584][ T7063] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 164.635680][ T7063] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 164.668662][ T7049] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.675806][ T7063] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 164.703733][ T7049] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.768292][ T7063] comedi comedi3: 8255: I/O port conflict (0xfffffffffffff000,4) [ 164.769067][ T7049] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 164.813110][ T7063] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 164.844660][ T7063] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.859978][ T7063] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 164.867470][ T7063] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.942489][ T7063] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 164.961687][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 164.973339][ T7063] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 165.010448][ T7063] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 165.026530][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 165.439908][ T7057] loop3: detected capacity change from 0 to 32768 [ 165.582413][ T7105] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 165.603194][ T7105] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 165.610019][ T7057] JBD2: Ignoring recovery information on journal [ 165.614965][ T7105] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 165.663348][ T7105] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 165.670892][ T7105] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 165.679214][ T7105] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 165.687781][ T7105] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 165.694909][ T7105] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 165.759062][ T7057] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.071535][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 166.263321][ T7127] loop5: detected capacity change from 0 to 1024 [ 166.352546][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.380573][ T7095] loop1: detected capacity change from 0 to 32768 [ 166.417967][ T7132] loop3: detected capacity change from 0 to 512 [ 166.495120][ T7095] XFS (loop1): Mounting V5 Filesystem [ 166.519479][ T4785] kernel write not supported for file /adsp1 (pid: 4785 comm: kworker/0:18) [ 166.535035][ T7132] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 166.583536][ T7132] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.639893][ T7095] XFS (loop1): Ending clean mount [ 166.712767][ T1108] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.752531][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.787384][ T1108] usb 7-1: config 0 descriptor?? [ 166.835366][ T4192] XFS (loop1): Unmounting Filesystem [ 166.854200][ T1108] cp210x 7-1:0.0: cp210x converter detected [ 166.968307][ T7153] netlink: 'syz.5.1015': attribute type 4 has an invalid length. [ 166.988228][ T7153] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1015'. [ 167.297266][ T7162] loop3: detected capacity change from 0 to 4096 [ 167.341186][ T7168] loop0: detected capacity change from 0 to 512 [ 167.396748][ T7162] ntfs: volume version 3.1. [ 167.440674][ T7166] loop5: detected capacity change from 0 to 4096 [ 167.513111][ T1108] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 167.545813][ T7166] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 167.564012][ T7168] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 167.616623][ T7168] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.624356][ T1108] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 167.718906][ T7172] loop1: detected capacity change from 0 to 1024 [ 167.727009][ T1108] usb 7-1: cp210x converter now attached to ttyUSB0 [ 167.750514][ T1108] usb 7-1: USB disconnect, device number 4 [ 167.766132][ T7166] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 167.773504][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.795490][ T1108] cp210x 7-1:0.0: device disconnected [ 167.866763][ T7172] hfsplus: bad catalog entry type [ 167.939636][ T155] hfsplus: b-tree write err: -5, ino 4 [ 168.127619][ T7181] loop1: detected capacity change from 0 to 2048 [ 168.211400][ T7181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.438565][ T7200] loop6: detected capacity change from 0 to 512 [ 168.520453][ T7200] EXT4-fs (loop6): Test dummy encryption mode enabled [ 168.557516][ T7200] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 168.608156][ T7200] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1033: bad orphan inode 131083 [ 168.647434][ T7200] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nobarrier,noload,,errors=continue. Quota mode: none. [ 168.887593][ T7177] XFS (loop0): Mounting V5 Filesystem [ 169.000147][ T7198] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 169.016391][ T7177] XFS (loop0): Ending clean mount [ 169.099788][ T7198] F2FS-fs (loop3): invalid crc value [ 169.177601][ T7198] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.289856][ T4187] XFS (loop0): Unmounting Filesystem [ 169.465899][ T7198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.705768][ T4188] attempt to access beyond end of device [ 169.705768][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 169.890592][ T7238] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 169.913282][ T7238] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.947450][ T7238] __quota_error: 6 callbacks suppressed [ 169.947467][ T7238] Quota error (device loop6): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 169.964406][ T7238] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 169.974846][ T7238] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.1046: Failed to acquire dquot type 0 [ 169.992476][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.118432][ T7203] XFS (loop5): Mounting V5 Filesystem [ 170.232653][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 170.299409][ T7203] XFS (loop5): Ending clean mount [ 170.352722][ T1108] usb 2-1: config index 0 descriptor too short (expected 6701, got 45) [ 170.361144][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.396317][ T1108] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.410159][ T1108] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.441770][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.483185][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 170.521069][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.573943][ T1108] usb 2-1: config 0 descriptor?? [ 170.625612][ T7269] set_capacity_and_notify: 4 callbacks suppressed [ 170.625629][ T7269] loop6: detected capacity change from 0 to 512 [ 170.682651][ T4585] XFS (loop5): Unmounting Filesystem [ 170.751631][ T7275] loop3: detected capacity change from 0 to 2048 [ 170.834404][ T7269] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1055: Directory hole found for htree index block 0 [ 170.942652][ T7269] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 170.950894][ T7269] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue. Quota mode: writeback. [ 170.968815][ T7275] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.054676][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.061888][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.080954][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.113426][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.120636][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.159238][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.189695][ T1108] logitech 0003:046D:CA03.0009: unknown main item tag 0x0 [ 171.260258][ T1108] logitech 0003:046D:CA03.0009: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 171.322637][ T1108] logitech 0003:046D:CA03.0009: no inputs found [ 171.370035][ T1108] usb 2-1: USB disconnect, device number 6 [ 171.630712][ T7292] fido_id[7292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 171.775759][ T7273] loop0: detected capacity change from 0 to 32768 [ 171.900865][ T7309] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 171.955904][ T7309] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 171.962925][ T7309] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 171.969656][ T7309] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 171.977286][ T7309] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 171.984100][ T7273] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 171.986838][ T7309] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 172.002154][ T7309] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.021005][ T7309] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 172.059298][ T7315] netlink: 536 bytes leftover after parsing attributes in process `syz.6.1075'. [ 172.075881][ T7273] (syz.0.1056,7273,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 172.164567][ T7273] (syz.0.1056,7273,0):ocfs2_group_add:503 ERROR: status = -22 [ 172.272129][ T7320] loop5: detected capacity change from 0 to 512 [ 172.293210][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 172.535973][ T7320] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.5.1077: corrupted xattr block 95 [ 172.692618][ T7320] EXT4-fs (loop5): Remounting filesystem read-only [ 172.699308][ T7320] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1077: bg 0: block 7: invalid block bitmap [ 172.806543][ T7320] EXT4-fs (loop5): Remounting filesystem read-only [ 172.833858][ T7320] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 172.863277][ T7320] EXT4-fs (loop5): Remounting filesystem read-only [ 172.869883][ T7320] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2923: inode #11: comm syz.5.1077: corrupted xattr block 95 [ 172.950722][ T7320] EXT4-fs (loop5): Remounting filesystem read-only [ 172.974330][ T7320] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 173.008473][ T7320] EXT4-fs (loop5): 1 orphan inode deleted [ 173.029051][ T7314] loop1: detected capacity change from 0 to 40427 [ 173.032924][ T7320] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,. Quota mode: none. [ 173.065121][ T7314] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 173.117384][ T7314] F2FS-fs (loop1): invalid crc value [ 173.153125][ T7314] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.288547][ T7314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.495686][ T4192] attempt to access beyond end of device [ 173.495686][ T4192] loop1: rw=2049, want=45104, limit=40427 [ 173.527994][ T7325] loop0: detected capacity change from 0 to 40427 [ 173.673381][ T7325] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.770328][ T7325] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 173.809554][ T7325] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.852828][ T4532] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 174.063514][ T7357] tipc: Started in network mode [ 174.069844][ T7357] tipc: Node identity ac141427, cluster identity 4711 [ 174.081542][ T7357] vxcan0: MTU too low for tipc bearer [ 174.101776][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 174.122606][ T4532] usb 7-1: Using ep0 maxpacket: 32 [ 174.253940][ T4532] usb 7-1: config index 0 descriptor too short (expected 6701, got 45) [ 174.279433][ T7367] loop3: detected capacity change from 0 to 256 [ 174.286760][ T7368] loop1: detected capacity change from 0 to 64 [ 174.299620][ T4532] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.311054][ T4532] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.329216][ T4532] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.341417][ T4532] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.355098][ T4532] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 174.367964][ T4532] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.420726][ T7368] hfs: request for non-existent node 24 in B*Tree [ 174.429636][ T4532] usb 7-1: config 0 descriptor?? [ 174.449719][ T7368] hfs: request for non-existent node 24 in B*Tree [ 174.550200][ T7367] FAT-fs (loop3): IO charset cpush not found [ 174.572007][ T7367] smb3: Unexpected value for 'acl' [ 174.920126][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 174.937848][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 174.974408][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 174.989928][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 175.023486][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 175.051261][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 175.068134][ T4532] logitech 0003:046D:CA03.000A: unknown main item tag 0x0 [ 175.103046][ T4532] logitech 0003:046D:CA03.000A: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.6-1/input0 [ 175.126954][ T4532] logitech 0003:046D:CA03.000A: no inputs found [ 175.146830][ T4532] usb 7-1: USB disconnect, device number 5 [ 175.214455][ T7369] loop5: detected capacity change from 0 to 32768 [ 175.267889][ T7390] fido_id[7390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 175.321194][ T7369] JBD2: Ignoring recovery information on journal [ 175.452738][ T1327] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 175.466752][ T7369] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 175.507815][ T7403] loop1: detected capacity change from 0 to 256 [ 175.630482][ T7403] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.680164][ T7405] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 175.697636][ T7405] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 175.715875][ T7405] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.752872][ T4585] ocfs2: Unmounting device (7,5) on (node local) [ 175.781207][ T7405] ntfs: volume version 3.1. [ 175.844371][ T7407] netlink: 'syz.5.1111': attribute type 16 has an invalid length. [ 175.860439][ T7407] netlink: 'syz.5.1111': attribute type 2 has an invalid length. [ 175.868281][ T7407] netlink: 64110 bytes leftover after parsing attributes in process `syz.5.1111'. [ 175.904193][ T4187] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 175.972893][ T1327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.023013][ T1327] usb 4-1: not running at top speed; connect to a high speed hub [ 176.102892][ T1327] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 176.162429][ T1327] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.202030][ T1327] usb 4-1: config 1 interface 0 has no altsetting 0 [ 176.329978][ T7418] set_capacity_and_notify: 1 callbacks suppressed [ 176.329995][ T7418] loop0: detected capacity change from 0 to 1024 [ 176.369224][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 176.388997][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 176.407950][ T1327] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 176.415768][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 176.430245][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.453615][ T1327] usb 4-1: Product: syz [ 176.457932][ T1327] usb 4-1: Manufacturer: syz [ 176.512605][ T1327] usb 4-1: SerialNumber: syz [ 176.572683][ T7389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.664746][ T7424] loop1: detected capacity change from 0 to 8 [ 177.060659][ T7433] loop1: detected capacity change from 0 to 256 [ 177.098505][ T1327] usbhid 4-1:1.0: can't add hid device: -71 [ 177.106319][ T1327] usbhid: probe of 4-1:1.0 failed with error -71 [ 177.134142][ T7433] exfat: Deprecated parameter 'utf8' [ 177.140552][ T1327] usb 4-1: USB disconnect, device number 6 [ 177.200134][ T7433] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 177.408470][ T7443] loop6: detected capacity change from 0 to 4096 [ 177.451640][ T7443] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 177.479244][ T7443] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 177.538774][ T7443] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 177.569805][ T7443] ntfs: volume version 3.1. [ 177.583823][ T7453] loop5: detected capacity change from 0 to 256 [ 177.761224][ T5720] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 177.792487][ T4532] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 177.843090][ T7453] FAT-fs (loop5): IO charset cpush not found [ 177.876530][ T7453] smb3: Unexpected value for 'acl' [ 178.252758][ T4532] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.322772][ T4532] usb 1-1: not running at top speed; connect to a high speed hub [ 178.402865][ T4532] usb 1-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 178.434008][ T7469] loop5: detected capacity change from 0 to 32768 [ 178.451684][ T4532] usb 1-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.509394][ T4532] usb 1-1: config 1 interface 0 has no altsetting 0 [ 178.572155][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1148'. [ 178.608414][ T7469] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: fs_generation is 3919078593 [ 178.624163][ T7469] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 178.634821][ T7469] OCFS2: File system is now read-only. [ 178.635716][ T7481] netlink: del zone limit has 8 unknown bytes [ 178.640337][ T7469] (syz.5.1141,7469,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 178.655048][ T7469] (syz.5.1141,7469,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 178.663475][ T7483] loop1: detected capacity change from 0 to 2048 [ 178.666111][ T7469] (syz.5.1141,7469,0):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 178.679612][ T7469] (syz.5.1141,7469,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 178.679650][ T7469] (syz.5.1141,7469,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 178.701490][ T7469] (syz.5.1141,7469,0):ocfs2_initialize_super:2281 ERROR: status = -30 [ 178.709787][ T7469] (syz.5.1141,7469,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 178.723532][ T4532] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 178.769375][ T4532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.809641][ T4532] usb 1-1: Product: syz [ 178.814091][ T4532] usb 1-1: Manufacturer: syz [ 178.818762][ T4532] usb 1-1: SerialNumber: syz [ 178.874340][ T7483] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.922937][ T7448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.981156][ T7488] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.194259][ T7493] loop5: detected capacity change from 0 to 256 [ 179.278767][ T7493] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.382837][ T4532] usbhid 1-1:1.0: can't add hid device: -71 [ 179.393032][ T4532] usbhid: probe of 1-1:1.0 failed with error -71 [ 179.411993][ T7485] loop6: detected capacity change from 0 to 32768 [ 179.447633][ T4532] usb 1-1: USB disconnect, device number 10 [ 179.495640][ T7485] XFS (loop6): Mounting V5 Filesystem [ 179.590223][ T7485] XFS (loop6): Ending clean mount [ 179.599545][ T7485] XFS (loop6): Quotacheck needed: Please wait. [ 179.655430][ T7485] XFS (loop6): Quotacheck: Done. [ 179.718884][ T7504] loop3: detected capacity change from 0 to 256 [ 179.730906][ T5720] XFS (loop6): Unmounting Filesystem [ 179.832676][ T7504] FAT-fs (loop3): Directory bread(block 64) failed [ 179.883715][ T7504] FAT-fs (loop3): Directory bread(block 65) failed [ 179.897720][ T7504] FAT-fs (loop3): Directory bread(block 66) failed [ 179.919779][ T7504] FAT-fs (loop3): Directory bread(block 67) failed [ 179.941258][ T7504] FAT-fs (loop3): Directory bread(block 68) failed [ 179.972089][ T7504] FAT-fs (loop3): Directory bread(block 69) failed [ 180.032585][ T7504] FAT-fs (loop3): Directory bread(block 70) failed [ 180.039221][ T7504] FAT-fs (loop3): Directory bread(block 71) failed [ 180.082291][ T7504] FAT-fs (loop3): Directory bread(block 72) failed [ 180.118466][ T7504] FAT-fs (loop3): Directory bread(block 73) failed [ 180.439988][ T7520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.451363][ T7520] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.554368][ T7527] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.748908][ T7531] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.988416][ T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.239767][ T7541] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 181.310562][ T7541] REISERFS (device loop1): using ordered data mode [ 181.382825][ T7541] reiserfs: using flush barriers [ 181.442409][ T7541] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.502676][ T7551] set_capacity_and_notify: 5 callbacks suppressed [ 181.502692][ T7551] loop5: detected capacity change from 0 to 128 [ 181.531981][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 181.552068][ T7541] REISERFS (device loop1): checking transaction log (loop1) [ 181.595020][ T7556] loop0: detected capacity change from 0 to 256 [ 181.605410][ T7551] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.616123][ T7541] REISERFS (device loop1): Using r5 hash to sort names [ 181.623638][ T7541] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 181.645248][ T7556] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.709324][ T7558] loop6: detected capacity change from 0 to 64 [ 181.719749][ T7541] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 181.743918][ T4775] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.785609][ T7560] loop3: detected capacity change from 0 to 512 [ 181.967668][ T7560] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 182.035721][ T7560] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.098030][ T7568] loop6: detected capacity change from 0 to 1024 [ 182.200536][ T7568] hfsplus: bad catalog entry type [ 182.351841][ T155] hfsplus: b-tree write err: -5, ino 4 [ 182.374816][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'. [ 182.572684][ T1108] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 182.583794][ T7586] loop1: detected capacity change from 0 to 1024 [ 182.613112][ T7591] netlink: 'syz.3.1193': attribute type 4 has an invalid length. [ 182.930354][ T7601] loop3: detected capacity change from 0 to 64 [ 182.937406][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.957860][ T7599] loop0: detected capacity change from 0 to 1024 [ 182.969353][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.999453][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.020686][ T1108] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.030401][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.068010][ T7599] EXT4-fs (loop0): Ignoring removed orlov option [ 183.116089][ T1108] usb 6-1: config 0 descriptor?? [ 183.128961][ T7599] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 183.229328][ T7584] loop6: detected capacity change from 0 to 32768 [ 183.285245][ T7607] loop3: detected capacity change from 0 to 256 [ 183.335195][ T7607] exfat: Deprecated parameter 'utf8' [ 183.361644][ T7584] XFS (loop6): Mounting V5 Filesystem [ 183.410575][ T7607] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 183.508617][ T7617] hfsplus: bad catalog entry type [ 183.594181][ T9] hfsplus: b-tree write err: -5, ino 4 [ 183.601914][ T7584] XFS (loop6): Ending clean mount [ 183.660458][ T7584] XFS (loop6): Quotacheck needed: Please wait. [ 183.668393][ T1108] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 183.743444][ T7623] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 183.766768][ T1108] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 183.856070][ T7584] XFS (loop6): Quotacheck: Done. [ 183.904830][ T4411] usb 6-1: USB disconnect, device number 8 [ 183.952597][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.999253][ T5720] XFS (loop6): Unmounting Filesystem [ 184.069354][ T7624] fido_id[7624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 184.288528][ T7634] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.320591][ T7634] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.327937][ T7634] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1208: bad orphan inode 15 [ 184.343057][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.372102][ T7634] ext4_test_bit(bit=14, block=18) = 1 [ 184.378581][ T7634] is_bad_inode(inode)=0 [ 184.382893][ T7634] NEXT_ORPHAN(inode)=1023 [ 184.387267][ T7634] max_ino=32 [ 184.390494][ T7634] i_nlink=0 [ 184.396145][ T7634] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1208: bg 0: block 440: padding at end of block bitmap is not set [ 184.404572][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.426492][ T7634] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 184.437021][ T7634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.713710][ T7649] exfat: Deprecated parameter 'utf8' [ 184.737053][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.750089][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.767481][ T1108] usb 1-1: Product: syz [ 184.778406][ T1108] usb 1-1: Manufacturer: syz [ 184.799267][ T1108] usb 1-1: SerialNumber: syz [ 184.806910][ T7649] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 184.829532][ T7653] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 184.893302][ T1108] hub 1-1:1.0: bad descriptor, ignoring hub [ 184.899280][ T1108] hub: probe of 1-1:1.0 failed with error -5 [ 185.231397][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'. [ 185.241034][ T7669] netlink: del zone limit has 8 unknown bytes [ 185.255103][ T7668] erofs: (device loop5): mounted with root inode @ nid 36. [ 185.273115][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.304058][ T7668] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 185.345934][ T7668] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 185.422619][ T4411] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 185.636995][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.659357][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.671990][ T1108] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 185.681673][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.692144][ T1108] usb 2-1: config 0 descriptor?? [ 185.836653][ T7686] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 185.951494][ T5720] sysv_free_block: trying to free block not in datazone [ 185.959433][ T5720] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 186.163051][ T1108] hid (null): report_id 0 is invalid [ 186.176524][ T1108] hid-steam 0003:28DE:1142.000C: report_id 0 is invalid [ 186.192747][ T4532] usb 1-1: USB disconnect, device number 11 [ 186.220212][ T1108] hid-steam 0003:28DE:1142.000C: item 0 1 1 8 parsing failed [ 186.238585][ T1108] hid-steam 0003:28DE:1142.000C: steam_probe:parse of hid interface failed [ 186.261456][ T7700] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 186.268274][ T1108] hid-steam: probe of 0003:28DE:1142.000C failed with error -22 [ 186.322387][ T7700] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 186.396659][ T1108] usb 2-1: USB disconnect, device number 7 [ 186.419634][ T7700] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 186.656815][ T7694] set_capacity_and_notify: 7 callbacks suppressed [ 186.656841][ T7694] loop5: detected capacity change from 0 to 32768 [ 186.815506][ T7694] XFS (loop5): Mounting V5 Filesystem [ 186.996263][ T7731] loop0: detected capacity change from 0 to 128 [ 186.996292][ T7694] XFS (loop5): Ending clean mount [ 187.039782][ T7694] XFS (loop5): Quotacheck needed: Please wait. [ 187.158267][ T7731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.266589][ T7731] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.305111][ T7694] XFS (loop5): Quotacheck: Done. [ 187.440123][ T4585] XFS (loop5): Unmounting Filesystem [ 187.656140][ T7734] loop1: detected capacity change from 0 to 32768 [ 187.664508][ T7742] loop0: detected capacity change from 0 to 256 [ 187.778625][ T7715] loop6: detected capacity change from 0 to 40427 [ 187.817068][ T7742] FAT-fs (loop0): Directory bread(block 64) failed [ 187.830258][ T7715] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff [ 187.859463][ T7742] FAT-fs (loop0): Directory bread(block 65) failed [ 187.909564][ T7734] XFS (loop1): Mounting V5 Filesystem [ 187.916345][ T7715] F2FS-fs (loop6): invalid crc value [ 187.943414][ T7742] FAT-fs (loop0): Directory bread(block 66) failed [ 187.950025][ T7742] FAT-fs (loop0): Directory bread(block 67) failed [ 187.961489][ T7715] F2FS-fs (loop6): Found nat_bits in checkpoint [ 187.963128][ T4532] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.998350][ T7742] FAT-fs (loop0): Directory bread(block 68) failed [ 188.030007][ T7742] FAT-fs (loop0): Directory bread(block 69) failed [ 188.037942][ T7742] FAT-fs (loop0): Directory bread(block 70) failed [ 188.045325][ T7742] FAT-fs (loop0): Directory bread(block 71) failed [ 188.055638][ T7742] FAT-fs (loop0): Directory bread(block 72) failed [ 188.065153][ T7742] FAT-fs (loop0): Directory bread(block 73) failed [ 188.160128][ T7734] XFS (loop1): Ending clean mount [ 188.174996][ T7734] XFS (loop1): Quotacheck needed: Please wait. [ 188.230033][ T7758] loop5: detected capacity change from 0 to 256 [ 188.253246][ T7715] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 188.332263][ T7734] XFS (loop1): Quotacheck: Done. [ 188.412723][ T4532] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.452914][ T4532] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.481561][ T4192] XFS (loop1): Unmounting Filesystem [ 188.500601][ T5720] attempt to access beyond end of device [ 188.500601][ T5720] loop6: rw=2049, want=45104, limit=40427 [ 188.662764][ T4532] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.673715][ T4532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.681953][ T4532] usb 4-1: Product: syz [ 188.704340][ T4532] usb 4-1: Manufacturer: syz [ 188.721857][ T4532] usb 4-1: SerialNumber: syz [ 188.793178][ T4532] hub 4-1:1.0: bad descriptor, ignoring hub [ 188.799145][ T4532] hub: probe of 4-1:1.0 failed with error -5 [ 188.834256][ T7763] loop0: detected capacity change from 0 to 1024 [ 188.946649][ T7763] hfsplus: bad catalog entry type [ 189.006189][ T144] hfsplus: b-tree write err: -5, ino 4 [ 189.324089][ T1108] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 189.641357][ T7761] loop5: detected capacity change from 0 to 40427 [ 189.672467][ T7] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 189.733519][ T7761] F2FS-fs (loop5): invalid crc value [ 189.779577][ T7761] F2FS-fs (loop5): Found nat_bits in checkpoint [ 189.815861][ T7771] loop1: detected capacity change from 0 to 32768 [ 189.890343][ T7771] XFS (loop1): Mounting V5 Filesystem [ 189.966356][ T7771] XFS (loop1): Ending clean mount [ 189.968154][ T7761] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 189.982140][ T7771] XFS (loop1): Quotacheck needed: Please wait. [ 190.043207][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.044530][ T4532] usb 4-1: USB disconnect, device number 7 [ 190.062577][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.078552][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.113141][ T7] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.122256][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.148982][ T7771] XFS (loop1): Quotacheck: Done. [ 190.226391][ T4585] attempt to access beyond end of device [ 190.226391][ T4585] loop5: rw=2049, want=45104, limit=40427 [ 190.242760][ T7] usb 7-1: config 0 descriptor?? [ 190.315472][ T4192] XFS (loop1): Unmounting Filesystem [ 190.339297][ T7777] loop0: detected capacity change from 0 to 32768 [ 190.638088][ T7777] XFS (loop0): Mounting V5 Filesystem [ 190.725862][ T7] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 190.820421][ T7] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 190.898291][ T7777] XFS (loop0): Ending clean mount [ 190.915112][ T7777] XFS (loop0): Quotacheck needed: Please wait. [ 190.949878][ T7] usb 7-1: USB disconnect, device number 6 [ 191.037153][ T7777] XFS (loop0): Quotacheck: Done. [ 191.155179][ T4187] XFS (loop0): Unmounting Filesystem [ 191.207664][ T7815] fido_id[7815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 191.214012][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 191.232539][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.249355][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.259575][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.598813][ T7809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 191.617486][ T7809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 191.654167][ T7809] F2FS-fs (loop3): invalid crc value [ 191.734770][ T7809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.867800][ T7832] set_capacity_and_notify: 1 callbacks suppressed [ 191.867818][ T7832] loop1: detected capacity change from 0 to 4096 [ 191.953182][ T7809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 191.970682][ T7809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.101929][ T7840] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.119463][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'. [ 192.157925][ T7839] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1285'. [ 192.178217][ T7832] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 192.208267][ T7832] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 192.226181][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'. [ 192.263330][ T7832] Remounting filesystem read-only [ 192.330250][ T7832] NILFS (loop1): error -5 truncating bmap (ino=12) [ 192.462570][ T4192] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 192.751409][ T7834] loop5: detected capacity change from 0 to 32768 [ 192.783585][ T7845] loop1: detected capacity change from 0 to 8192 [ 192.807328][ T7825] loop6: detected capacity change from 0 to 40427 [ 192.827934][ T7834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1284 (7834) [ 192.866432][ T7834] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 192.902785][ T7845] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 192.913695][ T7834] BTRFS info (device loop5): force clearing of disk cache [ 192.920997][ T7834] BTRFS info (device loop5): force zlib compression, level 3 [ 192.928577][ T7834] BTRFS info (device loop5): enabling auto defrag [ 192.939138][ T7834] BTRFS info (device loop5): max_inline at 0 [ 192.946472][ T7834] BTRFS info (device loop5): turning on async discard [ 192.951236][ T7825] F2FS-fs (loop6): invalid crc value [ 192.953397][ T7834] BTRFS info (device loop5): using free space tree [ 192.953416][ T7834] BTRFS info (device loop5): has skinny extents [ 192.953920][ T7845] REISERFS (device loop1): using ordered data mode [ 192.980498][ T7845] reiserfs: using flush barriers [ 193.002925][ T7845] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.033246][ T7825] F2FS-fs (loop6): Found nat_bits in checkpoint [ 193.059467][ T7845] REISERFS (device loop1): checking transaction log (loop1) [ 193.182942][ T7825] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 193.203358][ T7834] BTRFS info (device loop5): enabling ssd optimizations [ 193.210742][ T7845] REISERFS (device loop1): Using r5 hash to sort names [ 193.226913][ T7834] BTRFS info (device loop5): clearing free space tree [ 193.242501][ T7834] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.252397][ T7834] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.282695][ T7834] BTRFS info (device loop5): creating free space tree [ 193.290781][ T7834] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.301294][ T7834] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.316396][ T7845] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 193.371848][ T7881] loop0: detected capacity change from 0 to 512 [ 193.420030][ T5720] attempt to access beyond end of device [ 193.420030][ T5720] loop6: rw=2049, want=45104, limit=40427 [ 193.592922][ T7881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.682880][ T7881] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.794274][ T1261] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 193.841525][ T26] audit: type=1800 audit(1772499960.315:11): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1304" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 193.918217][ T7893] device sit0 entered promiscuous mode [ 193.983726][ T7893] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 193.991527][ T7893] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1301'. [ 194.254962][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261312][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.334574][ T7901] loop1: detected capacity change from 0 to 128 [ 194.439835][ T7901] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 194.615004][ T4192] sysv_free_block: trying to free block not in datazone [ 194.647733][ T4192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 194.915696][ T7911] loop5: detected capacity change from 0 to 4096 [ 195.012066][ T7922] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.084434][ T7911] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 195.116544][ T7911] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 195.147422][ T7911] Remounting filesystem read-only [ 195.157318][ T7911] NILFS (loop5): error -5 truncating bmap (ino=12) [ 195.240248][ T4585] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 195.305897][ T7908] loop3: detected capacity change from 0 to 32768 [ 195.355505][ T7908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1309 (7908) [ 195.404732][ T7908] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 195.427620][ T7908] BTRFS info (device loop3): force clearing of disk cache [ 195.445302][ T7908] BTRFS info (device loop3): force zlib compression, level 3 [ 195.453291][ T7908] BTRFS info (device loop3): enabling auto defrag [ 195.459825][ T7908] BTRFS info (device loop3): max_inline at 0 [ 195.482657][ T7908] BTRFS info (device loop3): turning on async discard [ 195.489497][ T7908] BTRFS info (device loop3): using free space tree [ 195.505798][ T7908] BTRFS info (device loop3): has skinny extents [ 195.546680][ T7921] loop6: detected capacity change from 0 to 32768 [ 195.605218][ T7921] XFS (loop6): Mounting V5 Filesystem [ 195.690270][ T7921] XFS (loop6): Ending clean mount [ 195.699058][ T7921] XFS (loop6): Quotacheck needed: Please wait. [ 195.715563][ T7908] BTRFS info (device loop3): enabling ssd optimizations [ 195.728981][ T7908] BTRFS info (device loop3): clearing free space tree [ 195.736590][ T7908] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.747450][ T7908] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.761981][ T7908] BTRFS info (device loop3): creating free space tree [ 195.770648][ T7908] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.781849][ T7908] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.847602][ T7921] XFS (loop6): Quotacheck: Done. [ 196.051379][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 196.130460][ T5720] XFS (loop6): Unmounting Filesystem [ 196.195740][ T7962] loop1: detected capacity change from 0 to 512 [ 196.536811][ T7962] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 196.553410][ T7962] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.573331][ T7962] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.580259][ T7962] EXT4-fs (loop1): Mount option "journal_async_commit" incompatible with ext3 [ 197.113901][ T7987] loop6: detected capacity change from 0 to 256 [ 197.226695][ T7989] loop1: detected capacity change from 0 to 512 [ 197.249031][ T7991] loop0: detected capacity change from 0 to 512 [ 197.351367][ T7989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.404794][ T7991] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,errors=remount-ro,. Quota mode: writeback. [ 197.436724][ T7989] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.462981][ T7991] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.539136][ T26] audit: type=1800 audit(1772499964.015:12): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1330" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 197.584922][ T7998] loop6: detected capacity change from 0 to 136 [ 197.759721][ T7998] Attempt to read inode for relocated directory [ 198.121667][ T8010] loop1: detected capacity change from 0 to 4096 [ 198.127890][ T8016] loop0: detected capacity change from 0 to 128 [ 198.170949][ T8020] loop3: detected capacity change from 0 to 256 [ 198.191064][ T8010] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 198.424234][ T9] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22. [ 198.430986][ T4192] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 198.478792][ T4192] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 198.496249][ T4192] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 198.669147][ T8025] loop6: detected capacity change from 0 to 8192 [ 198.717748][ T8025] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 198.825325][ T8025] REISERFS (device loop6): using ordered data mode [ 198.831904][ T8025] reiserfs: using flush barriers [ 198.959495][ T8025] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 199.025080][ T8025] REISERFS (device loop6): checking transaction log (loop6) [ 199.045142][ T8025] REISERFS (device loop6): Using r5 hash to sort names [ 199.055553][ T8025] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 199.082475][ T8025] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 199.299798][ T8023] loop5: detected capacity change from 0 to 32768 [ 199.407131][ T8023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1340 (8023) [ 199.503715][ T8023] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 199.565974][ T8023] BTRFS info (device loop5): setting nodatacow, compression disabled [ 199.610310][ T8023] BTRFS info (device loop5): disabling tree log [ 199.622116][ T8067] loop1: detected capacity change from 0 to 1024 [ 199.629256][ T8023] BTRFS info (device loop5): turning on sync discard [ 199.629409][ T8023] BTRFS error (device loop5): unrecognized compression value zs [ 199.705226][ T8023] BTRFS error (device loop5): open_ctree failed: -22 [ 199.817239][ T8057] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 199.921999][ T4775] hfsplus: b-tree write err: -5, ino 4 [ 199.933643][ T8057] REISERFS (device loop0): using ordered data mode [ 199.940224][ T8057] reiserfs: using flush barriers [ 200.091808][ T8057] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 200.092193][ T8057] REISERFS (device loop0): checking transaction log (loop0) [ 200.133031][ T8057] REISERFS (device loop0): Using r5 hash to sort names [ 200.133379][ T8057] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 200.133440][ T8057] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 200.440758][ T8081] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 200.440861][ T8081] REISERFS (device loop5): using ordered data mode [ 200.440874][ T8081] reiserfs: using flush barriers [ 200.442057][ T8081] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.443284][ T8081] REISERFS (device loop5): checking transaction log (loop5) [ 200.446439][ T8081] REISERFS (device loop5): Using r5 hash to sort names [ 200.446740][ T8081] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 200.869983][ T8079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1380 (8079) [ 200.882583][ T8079] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 200.882629][ T8079] BTRFS info (device loop3): setting nodatacow, compression disabled [ 200.882653][ T8079] BTRFS info (device loop3): disabling tree log [ 200.882703][ T8079] BTRFS info (device loop3): turning on sync discard [ 200.882722][ T8079] BTRFS error (device loop3): unrecognized compression value zs [ 200.883098][ T8079] BTRFS error (device loop3): open_ctree failed: -22 [ 201.091381][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4179) [ 201.436601][ T8120] IPVS: Error joining to the multicast group [ 201.492827][ T8123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.501169][ T8109] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 201.573387][ T8109] NILFS (loop1): mounting fs with errors [ 201.709316][ T8119] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 201.743019][ T8119] REISERFS (device loop3): using ordered data mode [ 201.759817][ T8119] reiserfs: using flush barriers [ 201.784430][ T8119] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.813166][ T8119] REISERFS (device loop3): checking transaction log (loop3) [ 201.892750][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 201.902433][ T8119] REISERFS (device loop3): Using r5 hash to sort names [ 201.909658][ T8119] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 201.962482][ T8128] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 201.970155][ T8128] EXT4-fs (loop0): Test dummy encryption mode enabled [ 202.021776][ T8128] EXT4-fs (loop0): Test dummy encryption mode enabled [ 202.045811][ T8128] EXT4-fs (loop0): Mount option "journal_async_commit" incompatible with ext3 [ 202.316540][ T8116] set_capacity_and_notify: 6 callbacks suppressed [ 202.316555][ T8116] loop5: detected capacity change from 0 to 32768 [ 202.391110][ T8134] loop6: detected capacity change from 0 to 4096 [ 202.426754][ T8138] loop3: detected capacity change from 0 to 4096 [ 202.458391][ T8116] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1383 (8116) [ 202.534741][ T8134] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 202.565321][ T8138] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 202.602939][ T8142] loop1: detected capacity change from 0 to 8192 [ 202.619270][ T8116] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 202.647972][ T8116] BTRFS info (device loop5): force zlib compression, level 3 [ 202.656427][ T8116] BTRFS info (device loop5): turning on flush-on-commit [ 202.663918][ T8116] BTRFS info (device loop5): max_inline at 4096 [ 202.670483][ T8116] BTRFS info (device loop5): using free space tree [ 202.677825][ T8116] BTRFS info (device loop5): has skinny extents [ 202.685760][ T8142] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 202.720476][ T8142] REISERFS (device loop1): using ordered data mode [ 202.782990][ T8142] reiserfs: using flush barriers [ 202.821197][ T8142] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.853153][ T8142] REISERFS (device loop1): checking transaction log (loop1) [ 203.043017][ T8116] BTRFS info (device loop5): enabling ssd optimizations [ 203.328324][ T8180] loop3: detected capacity change from 0 to 64 [ 203.417944][ T8142] REISERFS (device loop1): Using tea hash to sort names [ 203.482810][ T8142] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 203.519159][ T8142] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 203.762709][ T21] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 204.213003][ T21] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 204.231456][ T21] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.269531][ T21] usb 7-1: config 0 interface 0 has no altsetting 0 [ 204.387063][ T8210] loop5: detected capacity change from 0 to 256 [ 204.476878][ T21] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.524440][ T21] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.566145][ T21] usb 7-1: Product: syz [ 204.570391][ T21] usb 7-1: Manufacturer: syz [ 204.601672][ T8210] FAT-fs (loop5): Directory bread(block 64) failed [ 204.608933][ T21] usb 7-1: SerialNumber: syz [ 204.622446][ T8210] FAT-fs (loop5): Directory bread(block 65) failed [ 204.648093][ T21] usb 7-1: config 0 descriptor?? [ 204.666304][ T8210] FAT-fs (loop5): Directory bread(block 66) failed [ 204.694468][ T8210] FAT-fs (loop5): Directory bread(block 67) failed [ 204.701245][ T8210] FAT-fs (loop5): Directory bread(block 68) failed [ 204.750509][ T8210] FAT-fs (loop5): Directory bread(block 69) failed [ 204.767461][ T21] hub 7-1:0.0: bad descriptor, ignoring hub [ 204.776617][ T21] hub: probe of 7-1:0.0 failed with error -5 [ 204.804762][ T8210] FAT-fs (loop5): Directory bread(block 70) failed [ 204.811452][ T8210] FAT-fs (loop5): Directory bread(block 71) failed [ 204.820640][ T21] usb 7-1: selecting invalid altsetting 0 [ 204.869845][ T8210] FAT-fs (loop5): Directory bread(block 72) failed [ 204.892818][ T8210] FAT-fs (loop5): Directory bread(block 73) failed [ 205.293283][ T4783] usb 7-1: USB disconnect, device number 7 [ 205.742003][ T8252] loop3: detected capacity change from 0 to 4096 [ 205.893979][ T8252] ntfs: volume version 3.1. [ 205.970984][ T8260] netlink: 'syz.6.1443': attribute type 8 has an invalid length. [ 206.001600][ T8260] netlink: 197344 bytes leftover after parsing attributes in process `syz.6.1443'. [ 206.304014][ T8253] loop5: detected capacity change from 0 to 32768 [ 206.414729][ T8276] loop3: detected capacity change from 0 to 128 [ 206.443128][ T8253] JBD2: Ignoring recovery information on journal [ 206.541297][ T8253] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 206.596795][ T8264] loop0: detected capacity change from 0 to 8192 [ 206.775479][ T8264] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 206.834024][ T8264] REISERFS (device loop0): using ordered data mode [ 206.840626][ T8264] reiserfs: using flush barriers [ 206.877073][ T4585] ocfs2: Unmounting device (7,5) on (node local) [ 206.885732][ T8264] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.010476][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 207.039099][ T8264] REISERFS (device loop0): checking transaction log (loop0) [ 207.348624][ T8264] REISERFS (device loop0): Using tea hash to sort names [ 207.372743][ T8264] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 207.417786][ T8264] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 207.526467][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 207.656378][ T8292] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 207.726218][ T8313] set_capacity_and_notify: 1 callbacks suppressed [ 207.726235][ T8313] loop1: detected capacity change from 0 to 64 [ 208.099750][ T8321] loop6: detected capacity change from 0 to 4096 [ 208.198420][ T8330] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.371627][ T8332] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 208.668540][ T8334] loop6: detected capacity change from 0 to 4096 [ 208.768097][ T8334] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 208.929034][ T8315] loop3: detected capacity change from 0 to 32768 [ 208.998348][ T8329] loop5: detected capacity change from 0 to 32768 [ 209.126037][ T8315] XFS (loop3): Mounting V5 Filesystem [ 209.201178][ T8325] loop0: detected capacity change from 0 to 32768 [ 209.304781][ T8315] XFS (loop3): Ending clean mount [ 209.320756][ T8354] loop6: detected capacity change from 0 to 256 [ 209.425826][ T8325] JBD2: Ignoring recovery information on journal [ 209.535047][ T8354] FAT-fs (loop6): Directory bread(block 64) failed [ 209.541653][ T8354] FAT-fs (loop6): Directory bread(block 65) failed [ 209.566238][ T8325] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 209.582489][ T8354] FAT-fs (loop6): Directory bread(block 66) failed [ 209.595081][ T4188] XFS (loop3): Unmounting Filesystem [ 209.607494][ T8354] FAT-fs (loop6): Directory bread(block 67) failed [ 209.652998][ T8354] FAT-fs (loop6): Directory bread(block 68) failed [ 209.680280][ T8354] FAT-fs (loop6): Directory bread(block 69) failed [ 209.707193][ T8354] FAT-fs (loop6): Directory bread(block 70) failed [ 209.728864][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 209.785691][ T8354] FAT-fs (loop6): Directory bread(block 71) failed [ 209.847425][ T8354] FAT-fs (loop6): Directory bread(block 72) failed [ 209.867612][ T8354] FAT-fs (loop6): Directory bread(block 73) failed [ 210.236990][ T8353] loop1: detected capacity change from 0 to 32768 [ 210.622455][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 210.670022][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1494'. [ 210.735544][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1494'. [ 211.122542][ T1108] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.192585][ T8405] loop6: detected capacity change from 0 to 4096 [ 211.221399][ T8405] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 211.340373][ T8405] ntfs3: loop6: failed to convert "c46c" to cp1251 [ 211.362405][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 211.482614][ T1108] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 211.490893][ T1108] usb 6-1: config 0 has no interface number 0 [ 211.522544][ T1108] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 211.553694][ T1108] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.589866][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 211.600199][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 211.698664][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 211.732913][ T1108] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 211.742103][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.790301][ T1108] usb 6-1: Product: syz [ 211.794956][ T1108] usb 6-1: Manufacturer: syz [ 211.799596][ T1108] usb 6-1: SerialNumber: syz [ 211.820866][ T1108] usb 6-1: config 0 descriptor?? [ 211.862702][ T8394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.870377][ T8394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.129884][ T8394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.137854][ T8394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.308897][ T8445] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1535'. [ 212.360296][ T8427] loop6: detected capacity change from 0 to 32768 [ 212.484683][ T8447] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 212.535553][ T8427] XFS (loop6): Mounting V5 Filesystem [ 212.623140][ T1108] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 212.634871][ T8447] ntfs3: loop1: failed to convert "c46c" to cp1251 [ 212.658392][ T1108] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 212.699091][ T1108] asix: probe of 6-1:0.251 failed with error -71 [ 212.726521][ T1108] usb 6-1: USB disconnect, device number 9 [ 212.773593][ T8441] set_capacity_and_notify: 1 callbacks suppressed [ 212.773610][ T8441] loop3: detected capacity change from 0 to 32768 [ 212.816199][ T8427] XFS (loop6): Ending clean mount [ 212.929783][ T5720] XFS (loop6): Unmounting Filesystem [ 213.013620][ T8457] loop1: detected capacity change from 0 to 1024 [ 213.085410][ T1108] kernel write not supported for file /adsp1 (pid: 1108 comm: kworker/0:2) [ 213.503573][ T8474] loop1: detected capacity change from 0 to 256 [ 213.510730][ T8474] exfat: Deprecated parameter 'utf8' [ 213.530223][ T8474] exfat: Deprecated parameter 'namecase' [ 213.567150][ T8477] loop0: detected capacity change from 0 to 1024 [ 213.628826][ T8474] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 213.932988][ T154] hfsplus: b-tree write err: -5, ino 4 [ 213.966717][ T8485] loop1: detected capacity change from 0 to 512 [ 214.123451][ T8485] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 214.207344][ T8485] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.259597][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 214.302020][ T8485] Quota error (device loop1): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 214.343814][ T8485] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 214.397274][ T8485] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1541: Failed to acquire dquot type 0 [ 214.480891][ T8506] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1549'. [ 214.523126][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 214.642636][ T1108] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 214.668525][ T1108] usb 4-1: config 0 has no interface number 0 [ 214.682111][ T8515] loop0: detected capacity change from 0 to 256 [ 214.707299][ T1108] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 214.728504][ T1108] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.753207][ T8515] exfat: Deprecated parameter 'utf8' [ 214.758569][ T8515] exfat: Deprecated parameter 'namecase' [ 214.792578][ T8500] loop6: detected capacity change from 0 to 40427 [ 214.817114][ T8515] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 214.848830][ T8500] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 214.848855][ T8500] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 214.850851][ T8500] F2FS-fs (loop6): invalid crc value [ 214.865761][ T8500] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 214.942736][ T1108] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 214.942772][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.942795][ T1108] usb 4-1: Product: syz [ 214.942811][ T1108] usb 4-1: Manufacturer: syz [ 214.942839][ T1108] usb 4-1: SerialNumber: syz [ 214.961874][ T1108] usb 4-1: config 0 descriptor?? [ 214.972687][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.972785][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.033256][ T8500] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 215.033303][ T8500] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.132836][ T5720] attempt to access beyond end of device [ 215.132836][ T5720] loop6: rw=2049, want=45104, limit=40427 [ 215.201960][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.202064][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.344091][ T8531] program syz.0.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.662626][ T1108] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 215.693355][ T1108] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 215.722097][ T8541] loop1: detected capacity change from 0 to 1024 [ 215.752134][ T1108] asix: probe of 4-1:0.251 failed with error -71 [ 215.794251][ T1108] usb 4-1: USB disconnect, device number 8 [ 215.846640][ T8541] hfsplus: bad catalog entry type [ 216.005352][ T8553] loop0: detected capacity change from 0 to 512 [ 216.063491][ T154] hfsplus: b-tree write err: -5, ino 4 [ 216.080303][ T8556] program syz.5.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.145719][ T8553] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 216.290591][ T8553] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.326524][ T8570] tipc: Enabling of bearer rejected, media not registered [ 216.361428][ T8553] Quota error (device loop0): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 216.429431][ T8553] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 216.456736][ T8577] loop3: detected capacity change from 0 to 1024 [ 216.481580][ T8553] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1571: Failed to acquire dquot type 0 [ 216.553109][ T8577] hfsplus: bad catalog entry type [ 216.616864][ T8585] program syz.6.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.763311][ T155] hfsplus: b-tree write err: -5, ino 4 [ 216.928451][ T8599] tipc: Enabling of bearer rejected, media not registered [ 217.261445][ T8613] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 217.301903][ T8613] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.328371][ T8613] Quota error (device loop5): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 217.340497][ T8613] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 217.350751][ T8613] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1597: Failed to acquire dquot type 0 [ 217.521934][ T8617] hfsplus: bad catalog entry type [ 217.594329][ T154] hfsplus: b-tree write err: -5, ino 4 [ 217.661949][ T8634] tipc: Enabling of bearer rejected, media not registered [ 217.812787][ T8629] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 217.851712][ T8635] hfsplus: bad catalog entry type [ 217.914930][ T8629] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 217.981125][ T1261] hfsplus: b-tree write err: -5, ino 4 [ 218.080474][ T8650] set_capacity_and_notify: 4 callbacks suppressed [ 218.080492][ T8650] loop6: detected capacity change from 0 to 8 [ 218.912804][ T8650] SQUASHFS error: xz decompression failed, data probably corrupt [ 218.967828][ T8650] SQUASHFS error: Failed to read block 0x108: -5 [ 218.990134][ T8650] SQUASHFS error: Unable to read metadata cache entry [106] [ 219.025500][ T8650] SQUASHFS error: Unable to read inode 0x11f [ 219.631958][ T8677] loop3: detected capacity change from 0 to 4096 [ 219.712218][ T8677] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 220.570926][ T8686] loop1: detected capacity change from 0 to 131072 [ 220.600766][ T8677] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 220.621653][ T8686] F2FS-fs (loop1): Test dummy encryption mode enabled [ 220.640936][ T8686] F2FS-fs (loop1): invalid crc value [ 220.663471][ T8657] loop5: detected capacity change from 0 to 40427 [ 220.671823][ T8686] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4 [ 220.679292][ T8686] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 220.723969][ T8657] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 220.733275][ T8657] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 220.788968][ T8657] F2FS-fs (loop5): invalid crc value [ 220.914419][ T8657] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 221.009062][ T8707] loop6: detected capacity change from 0 to 8192 [ 221.126852][ T8707] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 221.139283][ T8707] REISERFS (device loop6): using ordered data mode [ 221.147159][ T8707] reiserfs: using flush barriers [ 221.153797][ T8707] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.193181][ T8707] REISERFS (device loop6): checking transaction log (loop6) [ 221.215372][ T8657] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 221.268263][ T8657] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 221.581864][ T4585] attempt to access beyond end of device [ 221.581864][ T4585] loop5: rw=2049, want=45104, limit=40427 [ 221.678571][ T8735] loop3: detected capacity change from 0 to 2048 [ 221.703751][ T8707] REISERFS (device loop6): Using tea hash to sort names [ 221.731565][ T8707] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 221.773017][ T8707] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 221.813674][ T8735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.993455][ T8739] loop0: detected capacity change from 0 to 4096 [ 222.045243][ T8739] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 222.225941][ T8739] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 222.426790][ T8749] loop3: detected capacity change from 0 to 512 [ 222.483780][ T8749] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.769810][ T8763] loop5: detected capacity change from 0 to 16 [ 222.902580][ T8763] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 222.972970][ T8771] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.072262][ T8769] loop1: detected capacity change from 0 to 2048 [ 223.130417][ T8776] netlink: 'syz.6.1671': attribute type 10 has an invalid length. [ 223.158754][ T8769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.165433][ T8804] loop1: detected capacity change from 0 to 16 [ 224.194476][ T8784] loop3: detected capacity change from 0 to 131072 [ 224.269627][ T8808] loop6: detected capacity change from 0 to 2048 [ 224.283819][ T8804] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 224.298966][ T8784] F2FS-fs (loop3): Test dummy encryption mode enabled [ 224.308882][ T8784] F2FS-fs (loop3): invalid crc value [ 224.331162][ T8784] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 4 [ 224.337679][ T8784] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 224.425540][ T8808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.659582][ T8827] loop1: detected capacity change from 0 to 1024 [ 224.897063][ T8829] loop5: detected capacity change from 0 to 8192 [ 224.909371][ T8827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.963111][ T8842] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 225.027859][ T8829] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 225.039574][ T8829] REISERFS (device loop5): using ordered data mode [ 225.047053][ T8829] reiserfs: using flush barriers [ 225.053846][ T8829] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.072810][ T8829] REISERFS (device loop5): checking transaction log (loop5) [ 225.424930][ T8859] loop1: detected capacity change from 0 to 1024 [ 225.543833][ T8829] REISERFS (device loop5): Using tea hash to sort names [ 225.551254][ T8829] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 225.612366][ T8829] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 226.554070][ T8867] loop1: detected capacity change from 0 to 32768 [ 226.586373][ T8863] loop0: detected capacity change from 0 to 40427 [ 226.624300][ T8863] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 226.630697][ T8863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 226.653364][ T8863] F2FS-fs (loop0): invalid crc value [ 226.689465][ T8863] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 226.705093][ T8883] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 226.990799][ T8863] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 227.006854][ T8863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.102143][ T8903] loop6: detected capacity change from 0 to 1024 [ 227.220231][ T8903] attempt to access beyond end of device [ 227.220231][ T8903] loop6: rw=0, want=393348, limit=1024 [ 227.291376][ T8903] attempt to access beyond end of device [ 227.291376][ T8903] loop6: rw=2049, want=393222, limit=1024 [ 227.340625][ T4187] attempt to access beyond end of device [ 227.340625][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 227.374176][ T8903] Buffer I/O error on dev loop6, logical block 196610, lost async page write [ 227.481122][ T8903] attempt to access beyond end of device [ 227.481122][ T8903] loop6: rw=2049, want=393342, limit=1024 [ 227.914753][ T8924] loop6: detected capacity change from 0 to 1024 [ 227.953463][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 227.971741][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 227.979962][ T8925] exfat: Deprecated parameter 'namecase' [ 228.009263][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 228.089098][ T8925] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 228.277393][ T8942] EXT4-fs (loop0): Ignoring removed orlov option [ 228.312913][ T8942] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 228.426220][ T8957] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 228.454655][ T8942] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.1742: corrupted in-inode xattr [ 228.506753][ T8942] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1742: couldn't read orphan inode 15 (err -117) [ 228.572975][ T8942] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 228.983283][ T8973] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.112914][ T8983] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.132582][ T1108] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.151340][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop6 [ 229.240532][ T8938] set_capacity_and_notify: 3 callbacks suppressed [ 229.240548][ T8938] loop1: detected capacity change from 0 to 40427 [ 229.347614][ T8938] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 229.385268][ T8938] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 229.408429][ T8938] F2FS-fs (loop1): invalid crc value [ 229.436286][ T8989] loop6: detected capacity change from 0 to 8192 [ 229.458080][ T8938] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 229.515369][ T1108] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.555599][ T1108] usb 1-1: config 0 has no interface number 0 [ 229.576675][ T1108] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.591565][ T8938] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 229.609828][ T8938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.631211][ T1108] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.673282][ T1108] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 229.710469][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.773202][ T1108] usb 1-1: config 0 descriptor?? [ 229.779979][ T4192] attempt to access beyond end of device [ 229.779979][ T4192] loop1: rw=2049, want=45104, limit=40427 [ 229.850172][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 229.861065][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 229.917060][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 230.254473][ T9017] loop5: detected capacity change from 0 to 1024 [ 230.261782][ T1108] prodikeys 0003:041E:2801.000E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 230.280396][ T9015] loop3: detected capacity change from 0 to 8192 [ 230.315123][ T1108] hid_prodikeys: hid-prodikeys: failed to find output report [ 230.315123][ T1108] [ 230.355906][ T9015] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 230.373801][ T9015] REISERFS (device loop3): using ordered data mode [ 230.381251][ T9015] reiserfs: using flush barriers [ 230.388699][ T9015] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 230.406285][ T9015] REISERFS (device loop3): checking transaction log (loop3) [ 230.457159][ T1108] usb 1-1: USB disconnect, device number 12 [ 230.688432][ T9023] fido_id[9023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 230.706161][ T9015] REISERFS (device loop3): Using tea hash to sort names [ 230.723009][ T9015] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 230.743934][ T9015] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 230.876407][ T9033] loop6: detected capacity change from 0 to 512 [ 230.950818][ T9033] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.039143][ T9033] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1778: invalid indirect mapped block 4294967295 (level 1) [ 231.074122][ T9031] loop5: detected capacity change from 0 to 8192 [ 231.109431][ T9038] loop0: detected capacity change from 0 to 256 [ 231.125323][ T9033] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1778: invalid indirect mapped block 4294967295 (level 1) [ 231.223340][ T9033] EXT4-fs (loop6): 2 truncates cleaned up [ 231.229499][ T9033] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000009e81,init_itable=0x0000000000000025,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 231.246499][ T9038] exfat: Deprecated parameter 'namecase' [ 231.310628][ T9033] EXT4-fs warning (device loop6): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 231.350879][ T9038] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 231.423373][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1781'. [ 231.455987][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1781'. [ 231.497291][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1781'. [ 231.912415][ T1327] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 231.946213][ T9071] kernel profiling enabled (shift: 0) [ 232.008153][ T9076] loop6: detected capacity change from 0 to 2048 [ 232.099671][ T9076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.167935][ T9074] loop1: detected capacity change from 0 to 8192 [ 232.302853][ T1327] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.346993][ T1327] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.358075][ T9080] loop6: detected capacity change from 0 to 256 [ 232.385552][ T9080] exfat: Deprecated parameter 'namecase' [ 232.453742][ T9080] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 232.472889][ T1327] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.493569][ T1327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.501685][ T1327] usb 6-1: SerialNumber: syz [ 232.596777][ T9082] hfsplus: bad catalog entry type [ 232.651496][ T144] hfsplus: b-tree write err: -5, ino 4 [ 232.857533][ T1327] usb 6-1: 0:2 : does not exist [ 232.917610][ T1327] usb 6-1: USB disconnect, device number 10 [ 233.026590][ T4478] udevd[4478]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.260366][ T9097] attempt to access beyond end of device [ 233.260366][ T9097] loop1: rw=0, want=393348, limit=1024 [ 233.301344][ T9097] attempt to access beyond end of device [ 233.301344][ T9097] loop1: rw=2049, want=393222, limit=1024 [ 233.314335][ T9097] Buffer I/O error on dev loop1, logical block 196610, lost async page write [ 233.343662][ T9097] attempt to access beyond end of device [ 233.343662][ T9097] loop1: rw=2049, want=393342, limit=1024 [ 233.503382][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.772538][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 233.867575][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.902624][ T21] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.920527][ T21] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.940264][ T9125] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.966007][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.974942][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 233.984559][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.009264][ T9125] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1822: invalid indirect mapped block 4294967295 (level 1) [ 234.036458][ T21] usb 4-1: config 0 descriptor?? [ 234.076531][ T9125] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1822: invalid indirect mapped block 4294967295 (level 1) [ 234.100067][ T9125] EXT4-fs (loop5): 2 truncates cleaned up [ 234.109871][ T9125] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000009e81,init_itable=0x0000000000000025,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 234.132393][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 234.214206][ T9125] EXT4-fs warning (device loop5): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 234.252721][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.272696][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.292435][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.322408][ T1108] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 234.331575][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.383014][ T1108] usb 2-1: config 0 descriptor?? [ 234.518807][ T21] logitech-hidpp-device 0003:046D:C086.000F: hidraw0: USB HID v0.86 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 234.720775][ T21] usb 4-1: USB disconnect, device number 9 [ 234.874380][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 234.881521][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 234.909154][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 234.927566][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 234.950705][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 234.963217][ T9146] set_capacity_and_notify: 4 callbacks suppressed [ 234.963234][ T9146] loop6: detected capacity change from 0 to 1024 [ 234.976958][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.000954][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.030904][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.059074][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.085995][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.094400][ T9146] hfsplus: bad catalog entry type [ 235.112247][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.119742][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.151604][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.174873][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.182111][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.189907][ T155] hfsplus: b-tree write err: -5, ino 4 [ 235.213737][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.220872][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.256487][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.287242][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.312765][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.319926][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.371669][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.392441][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.399498][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.447589][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.458457][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.482787][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.512422][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.519463][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.562656][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.590085][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.602434][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.610315][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.668726][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.699228][ T9162] loop6: detected capacity change from 0 to 4096 [ 235.717444][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.735391][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.762487][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.779851][ T1108] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 235.854879][ T1108] a4tech 0003:09DA:000A.0010: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0 [ 235.947683][ T1108] usb 2-1: USB disconnect, device number 8 [ 236.191501][ T9173] fido_id[9173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.219052][ T9177] loop1: detected capacity change from 0 to 1024 [ 236.354473][ T9177] hfsplus: bad catalog entry type [ 236.468732][ T9] hfsplus: b-tree write err: -5, ino 4 [ 236.496505][ T9157] loop5: detected capacity change from 0 to 32768 [ 236.685166][ T9157] XFS (loop5): Mounting V5 Filesystem [ 236.780452][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1854'. [ 236.794268][ T9201] loop3: detected capacity change from 0 to 512 [ 236.850190][ T9201] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 236.867086][ T9201] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.932622][ T9157] XFS (loop5): Ending clean mount [ 237.197838][ T4585] XFS (loop5): Unmounting Filesystem [ 237.632379][ T4232] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 237.992713][ T4232] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.000825][ T4232] usb 7-1: config 0 has no interface number 0 [ 238.032673][ T4232] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.063605][ T9239] loop5: detected capacity change from 0 to 4096 [ 238.070982][ T4232] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.092712][ T4232] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 238.101837][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.118016][ T9239] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 238.156335][ T4232] usb 7-1: config 0 descriptor?? [ 238.283966][ T9245] tipc: Started in network mode [ 238.288919][ T9245] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 238.325793][ T9245] tipc: Enabled bearer , priority 10 [ 238.484155][ T9249] loop1: detected capacity change from 0 to 128 [ 238.549696][ T9249] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 238.637327][ T4232] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 238.681055][ T4232] hid_prodikeys: hid-prodikeys: failed to find output report [ 238.681055][ T4232] [ 238.708689][ T4192] sysv_free_block: trying to free block not in datazone [ 238.720594][ T4192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 238.862076][ T4232] usb 7-1: USB disconnect, device number 8 [ 238.903937][ T9243] loop3: detected capacity change from 0 to 32768 [ 238.928192][ T9254] fido_id[9254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 239.102273][ T9243] XFS (loop3): Mounting V5 Filesystem [ 239.179083][ T9243] XFS (loop3): Ending clean mount [ 239.289509][ T4188] XFS (loop3): Unmounting Filesystem [ 239.447566][ T4232] tipc: Node number set to 4269801488 [ 239.535796][ T9276] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1883'. [ 239.628817][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 239.683344][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 239.692279][ T9278] netlink: 'syz.0.1885': attribute type 15 has an invalid length. [ 239.740117][ T9258] loop1: detected capacity change from 0 to 32768 [ 239.808734][ T9258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1889 (9258) [ 239.927215][ T9258] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 239.947269][ T9258] BTRFS info (device loop1): enabling disk space caching [ 239.954831][ T9282] loop6: detected capacity change from 0 to 4096 [ 239.966817][ T9258] BTRFS info (device loop1): force clearing of disk cache [ 239.984517][ T9258] BTRFS info (device loop1): turning off barriers [ 239.991110][ T9258] BTRFS info (device loop1): setting nodatasum [ 240.013314][ T9258] BTRFS info (device loop1): enabling ssd optimizations [ 240.030580][ T9258] BTRFS info (device loop1): using spread ssd allocation scheme [ 240.041905][ T9282] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 240.073806][ T9258] BTRFS info (device loop1): disk space caching is enabled [ 240.081088][ T9258] BTRFS info (device loop1): has skinny extents [ 240.162456][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.311504][ T9298] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1900'. [ 240.385638][ T9258] BTRFS info (device loop1): clearing free space tree [ 240.394695][ T9258] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.404673][ T9258] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.415810][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 240.512251][ T26] audit: type=1800 audit(1772500006.985:13): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1889" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 240.552465][ T1108] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.572384][ T1108] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.602612][ T6418] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.615623][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.625782][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 240.635854][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.677166][ T1108] usb 1-1: config 0 descriptor?? [ 240.983327][ T6418] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.012773][ T6418] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.142618][ T6418] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.168495][ T6418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.195075][ T1108] logitech-hidpp-device 0003:046D:C086.0012: hidraw0: USB HID v0.86 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 241.208122][ T6418] usb 4-1: SerialNumber: syz [ 241.411403][ T1108] usb 1-1: USB disconnect, device number 13 [ 241.455467][ T9318] loop5: detected capacity change from 0 to 32768 [ 241.462175][ T9319] loop6: detected capacity change from 0 to 32768 [ 241.505190][ T6418] usb 4-1: 0:2 : does not exist [ 241.541461][ T6418] usb 4-1: USB disconnect, device number 10 [ 241.593640][ T9318] XFS (loop5): Mounting V5 Filesystem [ 241.600007][ T9319] XFS (loop6): Mounting V5 Filesystem [ 241.698192][ T9319] XFS (loop6): Ending clean mount [ 241.731563][ T9318] XFS (loop5): Ending clean mount [ 241.792872][ T5720] XFS (loop6): Unmounting Filesystem [ 241.840461][ T4585] XFS (loop5): Unmounting Filesystem [ 242.268946][ T9352] loop3: detected capacity change from 0 to 64 [ 242.387727][ T9357] loop1: detected capacity change from 0 to 256 [ 242.412583][ T1327] Bluetooth: hci5: command 0x0406 tx timeout [ 242.470941][ T9360] loop0: detected capacity change from 0 to 1024 [ 242.558304][ T9360] EXT4-fs (loop0): inline encryption not supported [ 242.638271][ T9360] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none. [ 242.722827][ T9360] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.948531][ T9376] loop1: detected capacity change from 0 to 4096 [ 243.003657][ T9376] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.059764][ T9388] loop5: detected capacity change from 0 to 164 [ 243.130869][ T9376] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 243.199825][ T9376] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 243.260180][ T9376] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 243.316759][ T9376] ntfs: volume version 3.1. [ 243.423945][ T9396] loop0: detected capacity change from 0 to 4096 [ 243.608155][ T9] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 243.660795][ T4192] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 243.674496][ T9412] loop6: detected capacity change from 0 to 64 [ 243.786174][ T9415] loop3: detected capacity change from 0 to 1024 [ 243.883255][ T9415] EXT4-fs (loop3): Ignoring removed orlov option [ 244.083897][ T9415] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,bsddf,norecovery,,errors=continue. Quota mode: none. [ 244.287018][ T9432] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.288590][ T9420] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 244.340747][ T9420] Remounting filesystem read-only [ 244.605921][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 244.918832][ T9442] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.226961][ T9448] EXT4-fs (loop6): Ignoring removed bh option [ 245.265787][ T9448] EXT4-fs (loop6): inline encryption not supported [ 245.309415][ T9457] overlayfs: maximum fs stacking depth exceeded [ 245.322372][ T9456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.380375][ T9448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 245.440346][ T9456] EXT4-fs (loop5): 1 orphan inode deleted [ 245.479952][ T9456] EXT4-fs (loop5): 1 truncate cleaned up [ 245.490585][ T9448] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.1943: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.564721][ T9456] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 245.645315][ T9448] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 245.704170][ T9448] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.1943: Invalid inode table block 1 in block_group 0 [ 245.722227][ T9456] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.5.1947: path /353/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 245.762511][ T9448] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 245.793044][ T9448] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.1943: mark_inode_dirty error [ 245.804556][ T9456] EXT4-fs (loop5): Remounting filesystem read-only [ 245.831421][ T9448] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 245.864751][ T9448] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.1943: Failed to acquire dquot type 0 [ 245.896486][ T9448] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 245.953278][ T9448] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.1943: mark_inode_dirty error [ 245.996897][ T9448] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 246.049662][ T9448] EXT4-fs (loop6): 1 orphan inode deleted [ 246.083278][ T9448] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 246.114007][ T144] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 246.183148][ T154] hfsplus: b-tree write err: -5, ino 4 [ 246.196391][ T9448] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 16: comm syz.6.1943: lblock 0 mapped to illegal pblock 16 (length 1) [ 246.203288][ T144] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 246.250563][ T9448] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.1943: Invalid inode table block 1 in block_group 0 [ 246.267977][ T144] EXT4-fs error (device loop6): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 246.283975][ T9448] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 246.334504][ T9448] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.1943: mark_inode_dirty error [ 246.387299][ T9463] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 246.409240][ T9463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.429106][ T4775] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm kworker/u4:8: Invalid inode table block 1 in block_group 0 [ 246.429246][ T9484] SQUASHFS error: zstd decompression error: 2 [ 246.457730][ T9463] F2FS-fs (loop0): invalid crc value [ 246.469428][ T5720] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.502034][ T5720] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 246.520430][ T9484] SQUASHFS error: zstd decompression failed, data probably corrupt [ 246.543740][ T9484] SQUASHFS error: Failed to read block 0x60: -5 [ 246.550756][ T9463] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 246.576963][ T5720] EXT4-fs error (device loop6): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 246.590057][ T9497] xt_hashlimit: max too large, truncated to 1048576 [ 246.651188][ T9484] SQUASHFS error: zstd decompression error: 2 [ 246.743814][ T9484] SQUASHFS error: zstd decompression failed, data probably corrupt [ 246.751859][ T9484] SQUASHFS error: Failed to read block 0x60: -5 [ 246.898900][ T9463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.922524][ T9463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.048149][ T9508] set_capacity_and_notify: 7 callbacks suppressed [ 247.048167][ T9508] loop3: detected capacity change from 0 to 512 [ 247.109643][ T9508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.173186][ T9512] netlink: 'syz.5.1968': attribute type 3 has an invalid length. [ 247.196528][ T9508] EXT4-fs (loop3): 1 truncate cleaned up [ 247.249672][ T9508] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 247.822500][ T4535] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 248.011585][ T9511] loop1: detected capacity change from 0 to 32768 [ 248.018826][ T27] INFO: task syz-executor:4201 blocked for more than 143 seconds. [ 248.027109][ T27] Not tainted syzkaller #0 [ 248.062499][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.089717][ T9511] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.103289][ T4535] usb 7-1: Using ep0 maxpacket: 16 [ 248.109715][ T27] task:syz-executor state:D stack:20848 pid: 4201 ppid: 1 flags:0x00004004 [ 248.164143][ T27] Call Trace: [ 248.178904][ T9511] lbmIODone: I/O error in JFS log [ 248.186304][ T27] [ 248.192503][ T9511] *** Log Format Error ! *** [ 248.208564][ T27] __schedule+0x11ef/0x43c0 [ 248.213709][ T9511] lmLogInit: exit(-22) [ 248.224666][ T9511] lmLogOpen: exit(-22) [ 248.228682][ T27] ? verify_lock_unused+0x140/0x140 [ 248.242636][ T27] ? mark_lock+0x94/0x320 [ 248.252740][ T4535] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.263508][ T27] ? release_firmware_map_entry+0x190/0x190 [ 248.269576][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 248.281916][ T27] ? lock_chain_count+0x20/0x20 [ 248.282414][ T4535] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.291485][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 248.302462][ T27] schedule+0x11b/0x1e0 [ 248.327045][ T4535] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.338187][ T27] io_schedule+0x7c/0xd0 [ 248.356451][ T4535] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.362669][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 248.368618][ T27] ? wait_on_page_bit+0x50/0x50 [ 248.372258][ T4535] usb 7-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 248.388713][ T27] ? rcu_lock_release+0x20/0x20 [ 248.393537][ T4535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.393867][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 248.425337][ T4535] usb 7-1: config 0 descriptor?? [ 248.454587][ T27] ? invalidate_inode_page+0x360/0x360 [ 248.460144][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 248.473866][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 248.479752][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.490590][ T27] evict+0x4dc/0x8d0 [ 248.495803][ T27] ? proc_nr_inodes+0x320/0x320 [ 248.500775][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 248.514960][ T27] evict_inodes+0x60c/0x6a0 [ 248.519544][ T27] ? __dentry_kill+0x530/0x650 [ 248.527815][ T27] ? clear_inode+0x150/0x150 [ 248.536439][ T27] generic_shutdown_super+0x93/0x300 [ 248.541800][ T27] kill_block_super+0x7c/0xe0 [ 248.550083][ T27] deactivate_locked_super+0x93/0xf0 [ 248.560762][ T27] cleanup_mnt+0x42d/0x4e0 [ 248.571030][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.579887][ T27] task_work_run+0x125/0x1a0 [ 248.588075][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 248.597183][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 248.606332][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 248.617177][ T27] do_syscall_64+0x58/0xa0 [ 248.621678][ T27] ? clear_bhb_loop+0x30/0x80 [ 248.630071][ T27] ? clear_bhb_loop+0x30/0x80 [ 248.638160][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.648121][ T27] RIP: 0033:0x7f7e1d3db9d7 [ 248.657101][ T27] RSP: 002b:00007ffed7af9cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 248.671616][ T27] RAX: 0000000000000000 RBX: 00007f7e1d46ff90 RCX: 00007f7e1d3db9d7 [ 248.688711][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed7af9d90 [ 248.698947][ T27] RBP: 00007ffed7af9d90 R08: 00007ffed7afad90 R09: 00000000ffffffff [ 248.711466][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed7afae20 [ 248.721437][ T9536] loop0: detected capacity change from 0 to 40427 [ 248.728405][ T27] R13: 00007f7e1d46ff90 R14: 00000000000194b7 R15: 00007ffed7afae60 [ 248.737720][ T27] [ 248.743964][ T27] [ 248.743964][ T27] Showing all locks held in the system: [ 248.751729][ T27] 2 locks held by kworker/u4:0/9: [ 248.756977][ T27] 1 lock held by khungtaskd/27: [ 248.767213][ T9536] F2FS-fs (loop0): invalid crc value [ 248.777627][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 248.789872][ T27] 2 locks held by getty/3952: [ 248.798766][ T27] #0: ffff88814d220098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 248.809136][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 248.815074][ T9536] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 248.838527][ T27] 2 locks held by syz-executor/4192: [ 248.843998][ T27] #0: ffff88802014a118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 248.853826][ T27] #1: ffff8881478cb468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 248.863467][ T27] 1 lock held by syz-executor/4201: [ 248.869335][ T27] #0: ffff888058f380e0 (&type->s_umount_key#82){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 248.882103][ T27] 4 locks held by udevd/4478: [ 248.895469][ T27] #0: ffff88805578cc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 248.910617][ T27] #1: ffff888062ea5888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 248.927745][ T4535] wacom 0003:056A:00E5.0013: unknown main item tag 0x0 [ 248.933869][ T27] #2: ffff8880588a20f0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 248.949963][ T27] #3: ffff888061e871a8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 248.951854][ T4535] wacom 0003:056A:00E5.0013: unknown main item tag 0x0 [ 248.970361][ T27] 6 locks held by kworker/1:19/4535: [ 248.977963][ T27] 1 lock held by udevd/4559: [ 248.989940][ T27] 3 locks held by syz.0.1971/9536: [ 248.997395][ T27] [ 248.998976][ T4535] wacom 0003:056A:00E5.0013: unknown main item tag 0x0 [ 248.999771][ T27] ============================================= [ 248.999771][ T27] [ 248.999783][ T27] NMI backtrace for cpu 0 [ 249.019450][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 249.026685][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.036867][ T27] Call Trace: [ 249.037498][ T4535] wacom 0003:056A:00E5.0013: unknown main item tag 0x0 [ 249.040184][ T27] [ 249.040194][ T27] dump_stack_lvl+0x188/0x250 [ 249.040227][ T27] ? show_regs_print_info+0x20/0x20 [ 249.059961][ T27] ? load_image+0x400/0x400 [ 249.064633][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 249.069789][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 249.072986][ T4535] wacom 0003:056A:00E5.0013: unknown main item tag 0x0 [ 249.074780][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 249.074810][ T27] ? _printk+0xda/0x130 [ 249.092387][ T27] ? load_image+0x400/0x400 [ 249.096953][ T27] ? load_image+0x400/0x400 [ 249.101509][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 249.107893][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 249.114059][ T27] watchdog+0xe0f/0xe50 [ 249.118272][ T27] kthread+0x436/0x520 [ 249.122384][ T27] ? hungtask_pm_notify+0x40/0x40 [ 249.127443][ T27] ? kthread_blkcg+0xd0/0xd0 [ 249.132070][ T27] ret_from_fork+0x1f/0x30 [ 249.136549][ T27] [ 249.141140][ T27] Sending NMI from CPU 0 to CPUs 1: [ 249.146786][ C1] NMI backtrace for cpu 1 [ 249.146797][ C1] CPU: 1 PID: 4535 Comm: kworker/1:19 Not tainted syzkaller #0 [ 249.146814][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.146824][ C1] Workqueue: usb_hub_wq hub_event [ 249.146858][ C1] RIP: 0010:debug_check_no_obj_freed+0x1e2/0x530 [ 249.146877][ C1] Code: 0f 84 3a 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 74 12 48 89 ef e8 7c f3 d5 fd 48 ba 00 00 00 00 00 fc ff df 48 8b 45 00 <48> 89 04 24 4c 8d 7d 18 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 12 4c [ 249.146891][ C1] RSP: 0018:ffffc9000314dc28 EFLAGS: 00000046 [ 249.146904][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 249.146913][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000314db00 [ 249.146924][ C1] RBP: ffff888060f7df18 R08: 0000000000000003 R09: 0000000000000004 [ 249.146934][ C1] R10: dffffc0000000000 R11: fffff52000629b60 R12: ffff888082aa0000 [ 249.146946][ C1] R13: ffff888082a9c000 R14: 1ffff1100c1efbe3 R15: 0000000000000002 [ 249.146958][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 249.146972][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.146982][ C1] CR2: 00007f3a16baa000 CR3: 00000000642ce000 CR4: 00000000003506e0 [ 249.146997][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.147006][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.147017][ C1] Call Trace: [ 249.147021][ C1] [ 249.147033][ C1] free_unref_page_prepare+0x237/0x6c0 [ 249.147055][ C1] free_unref_page+0x8f/0x2a0 [ 249.147071][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 249.147090][ C1] ? mark_free_pages+0x5c0/0x5c0 [ 249.147106][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 249.147126][ C1] ? __free_pages+0x95/0x1a0 [ 249.147144][ C1] stack_depot_save+0x418/0x440 [ 249.147164][ C1] __kasan_slab_alloc+0xb3/0xd0 [ 249.147182][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 249.147198][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 249.147212][ C1] ? kmem_cache_alloc+0x100/0x290 [ 249.147226][ C1] ? __kernfs_new_node+0xe3/0x6c0 [ 249.147243][ C1] ? kernfs_new_node+0x148/0x250 [ 249.147262][ C1] ? kernfs_create_link+0xa3/0x200 [ 249.147284][ C1] ? sysfs_do_create_link_sd+0x83/0x110 [ 249.147299][ C1] ? device_add+0x6c8/0xfb0 [ 249.147314][ C1] ? device_create+0x266/0x300 [ 249.147347][ C1] ? hidraw_connect+0x217/0x410 [ 249.147378][ C1] ? hid_connect+0x575/0xe10 [ 249.147393][ C1] ? hid_hw_start+0x99/0x100 [ 249.147408][ C1] ? wacom_parse_and_register+0x5784/0x66e0 [ 249.147428][ C1] ? wacom_probe+0x81d/0xa40 [ 249.147445][ C1] ? hid_device_probe+0x271/0x360 [ 249.147460][ C1] ? really_probe+0x284/0xc80 [ 249.147474][ C1] ? __driver_probe_device+0x18c/0x330 [ 249.147489][ C1] ? driver_probe_device+0x4f/0x420 [ 249.147503][ C1] ? __device_attach_driver+0x2b0/0x500 [ 249.147518][ C1] ? bus_for_each_drv+0x184/0x210 [ 249.147535][ C1] ? __device_attach+0x2a8/0x480 [ 249.147548][ C1] ? bus_probe_device+0xbc/0x1e0 [ 249.147565][ C1] ? device_add+0xa00/0xfb0 [ 249.147579][ C1] ? hid_add_device+0x389/0x530 [ 249.147595][ C1] ? usbhid_probe+0xb92/0xf40 [ 249.147610][ C1] ? usb_probe_interface+0x5c5/0xb20 [ 249.147626][ C1] ? really_probe+0x284/0xc80 [ 249.147640][ C1] ? __driver_probe_device+0x18c/0x330 [ 249.147654][ C1] ? driver_probe_device+0x4f/0x420 [ 249.147668][ C1] ? __device_attach_driver+0x2b0/0x500 [ 249.147683][ C1] ? bus_for_each_drv+0x184/0x210 [ 249.147700][ C1] ? __device_attach+0x2a8/0x480 [ 249.147713][ C1] ? bus_probe_device+0xbc/0x1e0 [ 249.147730][ C1] ? device_add+0xa00/0xfb0 [ 249.147744][ C1] ? usb_set_configuration+0x1991/0x1fd0 [ 249.147760][ C1] ? usb_generic_driver_probe+0x89/0x150 [ 249.147775][ C1] ? usb_probe_device+0x139/0x270 [ 249.147790][ C1] ? really_probe+0x284/0xc80 [ 249.147803][ C1] ? __driver_probe_device+0x18c/0x330 [ 249.147817][ C1] ? driver_probe_device+0x4f/0x420 [ 249.147832][ C1] ? __device_attach_driver+0x2b0/0x500 [ 249.147846][ C1] ? bus_for_each_drv+0x184/0x210 [ 249.147863][ C1] ? __device_attach+0x2a8/0x480 [ 249.147876][ C1] ? bus_probe_device+0xbc/0x1e0 [ 249.147892][ C1] ? device_add+0xa00/0xfb0 [ 249.147907][ C1] ? usb_new_device+0xd65/0x1660 [ 249.147922][ C1] ? hub_event+0x2e4a/0x55e0 [ 249.147938][ C1] ? process_one_work+0x85f/0x1010 [ 249.147955][ C1] ? worker_thread+0xaa6/0x1290 [ 249.147970][ C1] ? kthread+0x436/0x520 [ 249.147984][ C1] ? ret_from_fork+0x1f/0x30 [ 249.148007][ C1] slab_post_alloc_hook+0x4c/0x380 [ 249.148022][ C1] ? __kernfs_new_node+0xe3/0x6c0 [ 249.148040][ C1] ? __kernfs_new_node+0xe3/0x6c0 [ 249.148058][ C1] kmem_cache_alloc+0x100/0x290 [ 249.148075][ C1] __kernfs_new_node+0xe3/0x6c0 [ 249.148095][ C1] ? kernfs_new_node+0x250/0x250 [ 249.148117][ C1] ? sysfs_do_create_link_sd+0x75/0x110 [ 249.148134][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 249.148152][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 249.148170][ C1] kernfs_new_node+0x148/0x250 [ 249.148189][ C1] kernfs_create_link+0xa3/0x200 [ 249.148209][ C1] sysfs_do_create_link_sd+0x83/0x110 [ 249.148226][ C1] device_add+0x6c8/0xfb0 [ 249.148247][ C1] device_create+0x266/0x300 [ 249.148263][ C1] ? __device_attach+0x2a8/0x480 [ 249.148276][ C1] ? bus_probe_device+0xbc/0x1e0 [ 249.148295][ C1] ? worker_thread+0xaa6/0x1290 [ 249.148310][ C1] ? kthread+0x436/0x520 [ 249.148324][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 249.148343][ C1] ? root_device_unregister+0xf0/0xf0 [ 249.148372][ C1] hidraw_connect+0x217/0x410 [ 249.148393][ C1] hid_connect+0x575/0xe10 [ 249.148413][ C1] ? hid_match_id+0x340/0x340 [ 249.148438][ C1] hid_hw_start+0x99/0x100 [ 249.148454][ C1] wacom_parse_and_register+0x5784/0x66e0 [ 249.148473][ C1] ? device_add+0xa00/0xfb0 [ 249.148487][ C1] ? usb_set_configuration+0x1991/0x1fd0 [ 249.148503][ C1] ? usb_generic_driver_probe+0x89/0x150 [ 249.148521][ C1] ? mark_lock+0x94/0x320 [ 249.148536][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 249.148566][ C1] ? wacom_mode_change_work+0x470/0x470 [ 249.148587][ C1] ? hid_open_report+0xa58/0xed0 [ 249.148608][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 249.148634][ C1] ? init_timer_key+0x15d/0x2a0 [ 249.148654][ C1] wacom_probe+0x81d/0xa40 [ 249.148671][ C1] ? wacom_battery_get_property+0x4c0/0x4c0 [ 249.148691][ C1] hid_device_probe+0x271/0x360 [ 249.148710][ C1] ? hid_uevent+0x340/0x340 [ 249.148725][ C1] really_probe+0x284/0xc80 [ 249.148743][ C1] __driver_probe_device+0x18c/0x330 [ 249.148760][ C1] driver_probe_device+0x4f/0x420 [ 249.148776][ C1] __device_attach_driver+0x2b0/0x500 [ 249.148792][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.148809][ C1] bus_for_each_drv+0x184/0x210 [ 249.148827][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.148842][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 249.148860][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 249.148881][ C1] __device_attach+0x2a8/0x480 [ 249.148897][ C1] ? device_attach+0x20/0x20 [ 249.148914][ C1] ? kobject_uevent_env+0x371/0x890 [ 249.148933][ C1] bus_probe_device+0xbc/0x1e0 [ 249.148949][ C1] ? device_add+0x97c/0xfb0 [ 249.148966][ C1] device_add+0xa00/0xfb0 [ 249.148987][ C1] hid_add_device+0x389/0x530 [ 249.149005][ C1] usbhid_probe+0xb92/0xf40 [ 249.149027][ C1] usb_probe_interface+0x5c5/0xb20 [ 249.149049][ C1] ? usb_register_driver+0x3d0/0x3d0 [ 249.149063][ C1] really_probe+0x284/0xc80 [ 249.149081][ C1] __driver_probe_device+0x18c/0x330 [ 249.149098][ C1] driver_probe_device+0x4f/0x420 [ 249.149115][ C1] __device_attach_driver+0x2b0/0x500 [ 249.149131][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.149148][ C1] bus_for_each_drv+0x184/0x210 [ 249.149166][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.149182][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 249.149206][ C1] __device_attach+0x2a8/0x480 [ 249.149220][ C1] ? kobject_uevent_env+0x371/0x890 [ 249.149237][ C1] ? device_attach+0x20/0x20 [ 249.149253][ C1] ? kobject_uevent_env+0x371/0x890 [ 249.149271][ C1] bus_probe_device+0xbc/0x1e0 [ 249.149288][ C1] ? device_add+0x97c/0xfb0 [ 249.149305][ C1] device_add+0xa00/0xfb0 [ 249.149327][ C1] usb_set_configuration+0x1991/0x1fd0 [ 249.149356][ C1] usb_generic_driver_probe+0x89/0x150 [ 249.149382][ C1] usb_probe_device+0x139/0x270 [ 249.149399][ C1] ? usb_register_device_driver+0x230/0x230 [ 249.149415][ C1] really_probe+0x284/0xc80 [ 249.149433][ C1] __driver_probe_device+0x18c/0x330 [ 249.149450][ C1] driver_probe_device+0x4f/0x420 [ 249.149466][ C1] __device_attach_driver+0x2b0/0x500 [ 249.149482][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.149499][ C1] bus_for_each_drv+0x184/0x210 [ 249.149517][ C1] ? deferred_probe_work_func+0x230/0x230 [ 249.149533][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 249.149551][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 249.149572][ C1] __device_attach+0x2a8/0x480 [ 249.149588][ C1] ? device_attach+0x20/0x20 [ 249.149605][ C1] ? kobject_uevent_env+0x371/0x890 [ 249.149623][ C1] bus_probe_device+0xbc/0x1e0 [ 249.149640][ C1] ? device_add+0x97c/0xfb0 [ 249.149657][ C1] device_add+0xa00/0xfb0 [ 249.149678][ C1] usb_new_device+0xd65/0x1660 [ 249.149701][ C1] ? lock_chain_count+0x20/0x20 [ 249.149719][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 249.149737][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 249.149752][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 249.149770][ C1] hub_event+0x2e4a/0x55e0 [ 249.149810][ C1] ? hub_post_resume+0x120/0x120 [ 249.149828][ C1] ? read_lock_is_recursive+0x10/0x10 [ 249.149845][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 249.149861][ C1] ? _raw_spin_unlock+0x40/0x40 [ 249.149877][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 249.149894][ C1] process_one_work+0x85f/0x1010 [ 249.149918][ C1] ? worker_detach_from_pool+0x240/0x240 [ 249.149935][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 249.149954][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 249.149968][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 249.149985][ C1] ? wq_worker_running+0x97/0x170 [ 249.150002][ C1] worker_thread+0xaa6/0x1290 [ 249.150032][ C1] kthread+0x436/0x520 [ 249.150046][ C1] ? rcu_lock_release+0x20/0x20 [ 249.150061][ C1] ? kthread_blkcg+0xd0/0xd0 [ 249.150077][ C1] ret_from_fork+0x1f/0x30 [ 249.150100][ C1] [ 249.151436][ T4535] wacom 0003:056A:00E5.0013: hidraw0: USB HID v8.6b Device [HID 056a:00e5] on usb-dummy_hcd.6-1/input0 [ 249.678510][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 249.743229][ T4535] usb 7-1: USB disconnect, device number 9 [ 249.748871][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 250.203427][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.213514][ T27] Call Trace: [ 250.216826][ T27] [ 250.219782][ T27] dump_stack_lvl+0x188/0x250 [ 250.224522][ T27] ? show_regs_print_info+0x20/0x20 [ 250.229864][ T27] ? load_image+0x400/0x400 [ 250.234426][ T27] panic+0x2e5/0x810 [ 250.238361][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 250.244033][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 250.248596][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 250.254818][ T27] watchdog+0xe4e/0xe50 [ 250.261234][ T27] kthread+0x436/0x520 [ 250.265343][ T27] ? hungtask_pm_notify+0x40/0x40 [ 250.270409][ T27] ? kthread_blkcg+0xd0/0xd0 [ 250.275082][ T27] ret_from_fork+0x1f/0x30 [ 250.279553][ T27] [ 250.282924][ T27] Kernel Offset: disabled [ 250.287281][ T27] Rebooting in 86400 seconds..