last executing test programs: 4.50391546s ago: executing program 3 (id=1058): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) 3.558794335s ago: executing program 1 (id=1071): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40406f06, &(0x7f00000004c0)={0x200000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2401}) 3.443069891s ago: executing program 3 (id=1072): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x2000, &(0x7f0000006600)={0x77359400}) 2.888857023s ago: executing program 3 (id=1080): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r0) 2.424773s ago: executing program 3 (id=1087): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 2.241175261s ago: executing program 3 (id=1090): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.origin\x00') 2.149952796s ago: executing program 1 (id=1091): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4b, 0x0) 1.997519555s ago: executing program 4 (id=1092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x2c}}, 0x40000) 1.840414474s ago: executing program 3 (id=1093): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1.766293448s ago: executing program 1 (id=1094): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0xf) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) 1.7298367s ago: executing program 0 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 1.72958491s ago: executing program 2 (id=1096): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x7, 0x3}, 0x10) 1.621257376s ago: executing program 4 (id=1097): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.488889344s ago: executing program 1 (id=1098): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 1.485179774s ago: executing program 2 (id=1099): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r0], 0x14) 1.460764986s ago: executing program 0 (id=1100): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 1.273399177s ago: executing program 4 (id=1101): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@hyper}) 1.273129787s ago: executing program 1 (id=1102): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a6a479, &(0x7f0000000040)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.223247629s ago: executing program 2 (id=1103): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x70bd28, 0xffffffff, {0xa}, [@typed={0x4, 0x2b, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 1.203505301s ago: executing program 0 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001080)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040041}, 0x40814) 1.057457929s ago: executing program 4 (id=1105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x21, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 993.448493ms ago: executing program 0 (id=1106): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x154, 0x24, 0xbad689febb22c699, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x9, 0x7, 0x19, 0x15}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 966.785174ms ago: executing program 2 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000844) 605.755316ms ago: executing program 0 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) 559.122578ms ago: executing program 2 (id=1109): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000003980)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='time_offset=0x000000000000000e,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933322c646973636172642c756d61736b3d30303000000000000000003030303030303030373737372c616c6c6f775f7574696d653d303030303030303030006d61736b3d30303030303030930000003030303030303034373653312c6b6565aa38c2cc5f713f2422d3705f6c6173745f646f74732c646d61736b3d30303030303030303030303030303030303030303030332c6570726f72733d72656d6f756e643d000000000000001cfdb7aa06006bf1912179a8de8be4e35fbfc5c084a4015a33bd08bba185d5f98a35347593d699e0cc1d10f3c5b6ec3eb4399edb03b98196ec63d1a3956adcea4ecf467ff242380819df15f21657f7aeb56444cad258d005695d99d71746ec626b70f029896729791473f7b8", @ANYRES32=0x0, @ANYBLOB=',fmask=00000000000000000000005,appraise,\x00'], 0x1, 0x152d, &(0x7f00000039c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000340)=""/128) 304.561093ms ago: executing program 4 (id=1110): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'vcan0\x00'}}, 0x1e) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 257.528505ms ago: executing program 0 (id=1111): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x13a, &(0x7f0000000280)="$eJzs2r9Kw1AUBvCjFoQ+glOhAauQ/1oHd0Fw8gkMbZIGb7wlEaSdiquD4nAdHV3dRDcfIbNPoC9xJW1q7b2zGvD7Lfej53J6s5zpmBlP3Sg3ibYmt8fvqxlPW11/rxe5UUAzh0TUKkMh5Z1FmpOveiEnlnah/VKdnVgcPUcJCz29BwAAAAAAAAAAAAAAAAAAAADAP9H+qEJzIPhDlLDQ/VbNR+PTgLEwy+e/GFTt6ND2Pd8v7/tL/ToNImO6v5OIg8uy7izVjXmnzYHgK+r/2efp0M5HYzNJgziMwzPP87vOjuPseva0l612NG6qN1Ehn4b6PpHxuNgnenP0fSJqzo7GRiKuL9Tui+9H+KlwRbV4hhrkWi2egVDPoM4P6q/77ddyflg9zvq/OD+0iQbwRz4DAAD//05cOC0=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 173.95201ms ago: executing program 2 (id=1112): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x55f2, 0x0, 0x0, 0x1000}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000100", 0x41d) 62.900936ms ago: executing program 4 (id=1113): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x340100, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) 0s ago: executing program 1 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): v6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.202208][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.215740][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.232188][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.240208][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.290939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.298880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.343328][ T4272] XFS (loop2): Unmounting Filesystem [ 78.423017][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.474419][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.496932][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.525797][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.527634][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.570027][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.617733][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.634773][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.671889][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.599660][ T4426] capability: warning: `syz.4.18' uses deprecated v2 capabilities in a way that may be insecure [ 79.952762][ T4434] loop1: detected capacity change from 0 to 2048 [ 80.033082][ T4434] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 80.118649][ T4434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.293694][ T4436] loop3: detected capacity change from 0 to 8192 [ 80.349728][ T4436] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.375042][ T4414] loop2: detected capacity change from 0 to 32768 [ 80.392873][ T4436] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 80.403892][ T4436] REISERFS (device loop3): using ordered data mode [ 80.412384][ T4442] tipc: Enabling of bearer rejected, failed to enable media [ 80.412457][ T4436] reiserfs: using flush barriers [ 80.428177][ T4436] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.445157][ T4436] REISERFS (device loop3): checking transaction log (loop3) [ 80.459808][ T4436] REISERFS (device loop3): Using rupasov hash to sort names [ 80.483735][ T4436] REISERFS (device loop3): using 3.5.x disk format [ 80.521388][ T4436] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 80.550835][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 80.564668][ T4414] XFS (loop2): Mounting V5 Filesystem [ 80.603728][ T4436] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 80.616684][ T4436] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 80.628049][ T4436] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 80.643856][ T4436] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 80.792654][ T4414] XFS (loop2): Ending clean mount [ 80.832980][ T4414] XFS (loop2): Quotacheck needed: Please wait. [ 80.889621][ T4414] XFS (loop2): Quotacheck: Done. [ 81.241597][ T4467] Bluetooth: MGMT ver 1.22 [ 81.250130][ T4272] XFS (loop2): Unmounting Filesystem [ 81.483645][ T4475] Cannot find add_set index 46338 as target [ 81.530536][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.673086][ T126] cfg80211: failed to load regulatory.db [ 81.720505][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 81.731886][ T4316] usb 2-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 81.780558][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.830120][ T4316] usb 2-1: config 0 descriptor?? [ 81.918316][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 82.156530][ T27] audit: type=1326 audit(1769601212.527:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 82.197212][ T27] audit: type=1326 audit(1769601212.527:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 82.248599][ T27] audit: type=1326 audit(1769601212.557:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 82.271690][ T27] audit: type=1326 audit(1769601212.557:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 82.325737][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 82.336126][ T4316] wacom 0003:056A:033E.0001: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 82.354169][ T4316] wacom 0003:056A:033E.0001: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.1-1/input0 [ 82.365644][ T27] audit: type=1326 audit(1769601212.557:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 82.385009][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 82.416088][ T4316] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033E.0001/input/input5 [ 82.570958][ T4316] usb 2-1: USB disconnect, device number 2 [ 82.831425][ T4508] loop0: detected capacity change from 0 to 128 [ 82.907229][ T4502] fido_id[4502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 83.113355][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.138749][ T4491] loop3: detected capacity change from 0 to 32768 [ 83.183338][ T4491] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.45 (4491) [ 83.296062][ T4491] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 83.328006][ T4491] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 83.368482][ T4491] BTRFS info (device loop3): using free space tree [ 83.717587][ T4491] BTRFS info (device loop3): enabling ssd optimizations [ 84.064390][ T4280] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 84.459657][ T4510] loop2: detected capacity change from 0 to 40427 [ 84.581001][ T4510] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 84.630156][ T4510] F2FS-fs (loop2): invalid crc value [ 84.695421][ T4510] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.904364][ T4510] F2FS-fs (loop2): recover fsync data on readonly fs [ 84.957566][ T4510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.990075][ T4571] sch_fq: defrate 0 ignored. [ 85.792340][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.419767][ T4615] loop1: detected capacity change from 0 to 256 [ 86.422052][ T4617] capability: warning: `syz.3.95' uses 32-bit capabilities (legacy support in use) [ 86.461282][ T4615] ======================================================= [ 86.461282][ T4615] WARNING: The mand mount option has been deprecated and [ 86.461282][ T4615] and is ignored by this kernel. Remove the mand [ 86.461282][ T4615] option from the mount to silence this warning. [ 86.461282][ T4615] ======================================================= [ 86.528665][ T4619] loop0: detected capacity change from 0 to 736 [ 86.626149][ T4615] FAT-fs (loop1): Directory bread(block 64) failed [ 86.653801][ T4615] FAT-fs (loop1): Directory bread(block 65) failed [ 86.671973][ T4615] FAT-fs (loop1): Directory bread(block 66) failed [ 86.695771][ T4615] FAT-fs (loop1): Directory bread(block 67) failed [ 86.733989][ T4615] FAT-fs (loop1): Directory bread(block 68) failed [ 86.775114][ T4615] FAT-fs (loop1): Directory bread(block 69) failed [ 86.801623][ T4615] FAT-fs (loop1): Directory bread(block 70) failed [ 86.825809][ T4615] FAT-fs (loop1): Directory bread(block 71) failed [ 86.840883][ T4615] FAT-fs (loop1): Directory bread(block 72) failed [ 86.856448][ T4615] FAT-fs (loop1): Directory bread(block 73) failed [ 87.507746][ T4644] device lo entered promiscuous mode [ 87.547148][ T4643] device lo left promiscuous mode [ 87.579011][ T4648] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 87.585779][ T4648] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.624885][ T4648] vhci_hcd vhci_hcd.0: Device attached [ 87.930801][ T4560] usb 34-1: SetAddress Request (2) to port 0 [ 87.937154][ T4560] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 87.944790][ T4393] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.033407][ T4661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 88.160489][ T4629] loop3: detected capacity change from 0 to 40427 [ 88.164240][ T4649] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 88.179151][ T4629] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.192163][ T4360] vhci_hcd: stop threads [ 88.193762][ T4663] loop1: detected capacity change from 0 to 1024 [ 88.196868][ T4360] vhci_hcd: release socket [ 88.203095][ T4629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.210716][ T4393] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.241630][ T4360] vhci_hcd: disconnect device [ 88.251861][ T4393] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 88.263273][ T4629] F2FS-fs (loop3): invalid crc value [ 88.269420][ T4666] netlink: 364 bytes leftover after parsing attributes in process `syz.2.118'. [ 88.282017][ T4393] usb 1-1: can't read configurations, error -71 [ 88.288320][ T4666] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 88.317437][ T4663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.337103][ T4629] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.518539][ T4629] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.532870][ T4629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.555176][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 88.865176][ T4389] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.083858][ T4389] usb 5-1: Using ep0 maxpacket: 16 [ 89.099939][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.149799][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.186677][ T4389] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.220300][ T4389] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.221967][ T4687] loop1: detected capacity change from 0 to 4096 [ 89.246549][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.296544][ T4389] usb 5-1: config 0 descriptor?? [ 89.300193][ T4687] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 89.352656][ T4687] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 89.376058][ T4687] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 89.387807][ T4693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 89.408620][ T4693] device vlan2 entered promiscuous mode [ 89.419043][ T4693] device macvtap0 entered promiscuous mode [ 89.465714][ T4687] ntfs: volume version 3.1. [ 89.724155][ T4276] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 89.754145][ T4389] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 89.772885][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.780159][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.840553][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.860539][ T27] audit: type=1326 audit(1769601220.227:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 89.882552][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.889084][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.910541][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.928031][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 89.937401][ T27] audit: type=1326 audit(1769601220.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 89.976994][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.000179][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.018040][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.030590][ T27] audit: type=1326 audit(1769601220.227:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 90.060578][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.078137][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.088271][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.098381][ T27] audit: type=1326 audit(1769601220.227:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 90.130486][ T4389] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 90.147087][ T4389] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input8 [ 90.158843][ T27] audit: type=1326 audit(1769601220.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 90.209120][ T27] audit: type=1326 audit(1769601220.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 90.263848][ T4389] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 90.281619][ T4389] usb 5-1: USB disconnect, device number 2 [ 90.373963][ T4714] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 90.391355][ T4714] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 90.397861][ T4714] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 90.411997][ T4714] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 90.434820][ T4714] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 90.447131][ T4714] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 90.455140][ T4714] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 90.467289][ T4714] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 90.475552][ T4393] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.487988][ T4714] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 90.488778][ T4710] fido_id[4710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 90.495908][ T4714] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 90.523751][ T4714] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 90.538881][ T4714] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 90.559687][ T4714] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 90.566369][ T4714] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 90.573358][ T4714] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 90.586384][ T4714] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 90.593570][ T4714] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 90.602045][ T4714] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 90.700637][ T126] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.703567][ T4393] usb 2-1: Using ep0 maxpacket: 16 [ 90.734756][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.756122][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.770091][ T4393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.789970][ T4393] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.799412][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.804036][ T4718] loop0: detected capacity change from 0 to 4096 [ 90.821146][ T4718] NILFS: invalid option "cp=0x00": invalid checkpoint number 0 [ 90.833574][ T4718] overlayfs: unrecognized mount option "\strict" or missing value [ 90.836030][ T4393] usb 2-1: config 0 descriptor?? [ 90.893065][ T126] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.905299][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.940112][ T126] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 90.972699][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.004330][ T126] usb 4-1: config 0 descriptor?? [ 91.269920][ T4393] microsoft 0003:045E:07DA.0003: item 0 4 0 8 parsing failed [ 91.287518][ T4393] microsoft 0003:045E:07DA.0003: parse failed [ 91.307509][ T4728] netlink: 'syz.4.144': attribute type 16 has an invalid length. [ 91.331387][ T4393] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 91.366192][ T4728] netlink: 'syz.4.144': attribute type 3 has an invalid length. [ 91.374485][ T4728] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.144'. [ 91.434096][ T126] kye 0003:0458:5019.0004: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 91.475517][ T126] kye 0003:0458:5019.0004: tablet-enabling feature report not found [ 91.495756][ T126] kye 0003:0458:5019.0004: tablet enabling failed [ 91.566380][ T4389] usb 2-1: USB disconnect, device number 3 [ 91.655090][ T126] usb 4-1: USB disconnect, device number 2 [ 91.730311][ T4739] loop2: detected capacity change from 0 to 64 [ 91.787075][ T4733] fido_id[4733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 92.349988][ T4758] loop4: detected capacity change from 0 to 2048 [ 92.457220][ T4758] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.580763][ T4766] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.030834][ T4560] usb 34-1: device descriptor read/8, error -110 [ 93.451977][ T4560] usb usb34-port1: attempt power cycle [ 93.486697][ T4795] loop1: detected capacity change from 0 to 2048 [ 93.577135][ T4795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.634510][ T4805] loop2: detected capacity change from 0 to 2048 [ 93.701122][ T4805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.741075][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 93.747733][ T4805] EXT4-fs error (device loop2): ext4_ext_precache:645: inode #2: comm syz.2.180: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 93.991271][ T4819] loop3: detected capacity change from 0 to 256 [ 94.037612][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 94.045040][ T4821] netlink: 'syz.4.186': attribute type 5 has an invalid length. [ 94.101334][ T4560] usb usb34-port1: unable to enumerate USB device [ 94.179569][ T4823] loop0: detected capacity change from 0 to 1024 [ 94.227731][ T4823] EXT4-fs: Ignoring removed bh option [ 94.331282][ T4823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.532732][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 94.877281][ T4847] loop4: detected capacity change from 0 to 256 [ 94.956569][ T4847] FAT-fs (loop4): Directory bread(block 64) failed [ 94.984649][ T4847] FAT-fs (loop4): Directory bread(block 65) failed [ 95.020048][ T4847] FAT-fs (loop4): Directory bread(block 66) failed [ 95.065036][ T4847] FAT-fs (loop4): Directory bread(block 67) failed [ 95.080642][ T4847] FAT-fs (loop4): Directory bread(block 68) failed [ 95.107627][ T4847] FAT-fs (loop4): Directory bread(block 69) failed [ 95.160521][ T4847] FAT-fs (loop4): Directory bread(block 70) failed [ 95.231352][ T4847] FAT-fs (loop4): Directory bread(block 71) failed [ 95.238209][ T4847] FAT-fs (loop4): Directory bread(block 72) failed [ 95.267674][ T4847] FAT-fs (loop4): Directory bread(block 73) failed [ 95.370468][ T4389] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.534251][ T4835] loop3: detected capacity change from 0 to 32768 [ 95.568777][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.627835][ T4389] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 95.680532][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.694588][ T4389] usb 2-1: config 0 descriptor?? [ 95.706195][ T4858] loop0: detected capacity change from 0 to 4096 [ 95.722521][ T4835] XFS (loop3): Mounting V5 Filesystem [ 95.894487][ T4835] XFS (loop3): Ending clean mount [ 95.939122][ T4835] XFS (loop3): Quotacheck needed: Please wait. [ 96.046808][ T4835] XFS (loop3): Quotacheck: Done. [ 96.133125][ T4389] wacom 0003:056A:00E3.0005: unknown main item tag 0x0 [ 96.151809][ T4389] wacom 0003:056A:00E3.0005: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.1-1/input0 [ 96.291416][ T4280] XFS (loop3): Unmounting Filesystem [ 96.372055][ T4875] Zero length message leads to an empty skb [ 96.387544][ T4268] usb 2-1: USB disconnect, device number 4 [ 96.443753][ T4870] loop4: detected capacity change from 0 to 32768 [ 96.483816][ T4870] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.204 (4870) [ 96.536087][ T4870] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 96.585431][ T4870] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.616112][ T4870] BTRFS info (device loop4): using free space tree [ 96.888616][ T4868] loop2: detected capacity change from 0 to 40427 [ 96.912103][ T4868] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.929739][ T4868] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.997005][ T4870] BTRFS info (device loop4): enabling ssd optimizations [ 97.017310][ T4868] F2FS-fs (loop2): invalid crc value [ 97.082930][ T4868] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.127623][ T4904] netlink: 44 bytes leftover after parsing attributes in process `syz.1.209'. [ 97.216593][ T4277] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 97.240998][ T4868] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.248181][ T4868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.021256][ T4908] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.087061][ T4877] loop0: detected capacity change from 0 to 32768 [ 98.174142][ T4877] XFS (loop0): Mounting V5 Filesystem [ 98.202147][ T4932] netlink: 256 bytes leftover after parsing attributes in process `syz.3.217'. [ 98.211904][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 98.228170][ T4908] usb 5-1: Using ep0 maxpacket: 16 [ 98.235512][ T4908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 98.246838][ T4908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.256814][ T4908] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 98.266079][ T4908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.266830][ T4877] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 98.316666][ T4877] XFS (loop0): Ending clean mount [ 98.319966][ T4908] usb 5-1: config 0 descriptor?? [ 98.495647][ T4943] set_capacity_and_notify: 1 callbacks suppressed [ 98.495663][ T4943] loop2: detected capacity change from 0 to 16 [ 98.574807][ T4944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.590562][ T4267] XFS (loop0): Unmounting Filesystem [ 98.599629][ T4943] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.780906][ T4908] a4tech 0003:09DA:000A.0006: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.4-1/input0 [ 98.987598][ T4393] usb 5-1: USB disconnect, device number 3 [ 99.158272][ T4947] fido_id[4947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 99.306593][ T4951] loop1: detected capacity change from 0 to 8192 [ 99.347058][ T4951] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.385219][ T4951] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 99.407305][ T4951] REISERFS (device loop1): using ordered data mode [ 99.414129][ T4951] reiserfs: using flush barriers [ 99.426964][ T4951] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.480933][ T4951] REISERFS (device loop1): checking transaction log (loop1) [ 99.591603][ T4951] REISERFS (device loop1): Using r5 hash to sort names [ 99.598803][ T4951] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 99.705289][ T4964] loop2: detected capacity change from 0 to 64 [ 99.710497][ T4951] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.920689][ T4998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.243'. [ 100.930055][ T4998] netlink: 'syz.4.243': attribute type 6 has an invalid length. [ 100.956344][ T4998] netlink: 'syz.4.243': attribute type 5 has an invalid length. [ 100.984230][ T4998] netlink: 'syz.4.243': attribute type 4 has an invalid length. [ 101.081595][ T4976] loop0: detected capacity change from 0 to 32768 [ 101.111632][ T4976] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.232 (4976) [ 101.177103][ T4976] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.210760][ T4976] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 101.248179][ T4984] loop3: detected capacity change from 0 to 32768 [ 101.249970][ T4976] BTRFS info (device loop0): using free space tree [ 101.274513][ T4984] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.237 (4984) [ 101.318227][ T4984] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.384599][ T4984] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 101.429545][ T4984] BTRFS info (device loop3): using free space tree [ 101.573168][ T4976] BTRFS info (device loop0): enabling ssd optimizations [ 101.607888][ T4984] BTRFS info (device loop3): enabling ssd optimizations [ 101.845105][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.225105][ T4280] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.975686][ T5072] loop0: detected capacity change from 0 to 128 [ 103.045725][ T5072] hpfs: bad mount options. [ 103.075624][ T5074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 103.879424][ T5102] loop0: detected capacity change from 0 to 256 [ 103.958832][ T5102] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 104.043879][ T5104] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 104.432957][ T5078] loop1: detected capacity change from 0 to 40427 [ 104.471937][ T5078] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 104.478689][ T5078] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.592978][ T5078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.725838][ T5126] loop2: detected capacity change from 0 to 128 [ 104.730885][ T5078] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.740663][ T5078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.797583][ T5126] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.924282][ T5126] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.241155][ T66] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.688813][ T5152] loop1: detected capacity change from 0 to 256 [ 105.784204][ T5152] FAT-fs (loop1): Directory bread(block 64) failed [ 105.820567][ T5152] FAT-fs (loop1): Directory bread(block 65) failed [ 105.837439][ T5152] FAT-fs (loop1): Directory bread(block 66) failed [ 105.856797][ T5152] FAT-fs (loop1): Directory bread(block 67) failed [ 105.866580][ T5152] FAT-fs (loop1): Directory bread(block 68) failed [ 105.917855][ T5152] FAT-fs (loop1): Directory bread(block 69) failed [ 105.961117][ T5152] FAT-fs (loop1): Directory bread(block 70) failed [ 105.967746][ T5152] FAT-fs (loop1): Directory bread(block 71) failed [ 106.000118][ T5152] FAT-fs (loop1): Directory bread(block 72) failed [ 106.007920][ T5152] FAT-fs (loop1): Directory bread(block 73) failed [ 106.100950][ T4914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.272635][ T5173] loop3: detected capacity change from 0 to 512 [ 106.292522][ T4914] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 106.310959][ T4914] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 106.319959][ T4914] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 106.348434][ T4914] usb 5-1: config 220 has no interface number 2 [ 106.375343][ T4914] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.425060][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.460499][ T4914] usb 5-1: config 220 interface 0 has no altsetting 0 [ 106.467388][ T4914] usb 5-1: config 220 interface 76 has no altsetting 0 [ 106.505304][ T4914] usb 5-1: config 220 interface 1 has no altsetting 0 [ 106.521601][ T5183] loop0: detected capacity change from 0 to 64 [ 106.581063][ T4914] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.590195][ T4914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.671447][ T4914] usb 5-1: Product: syz [ 106.675715][ T4914] usb 5-1: Manufacturer: syz [ 106.690647][ T4914] usb 5-1: SerialNumber: syz [ 106.766833][ T5188] loop1: detected capacity change from 0 to 512 [ 106.932478][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 106.972744][ T4914] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 106.979341][ T4914] usb 5-1: No valid video chain found. [ 107.034761][ T4914] usb 5-1: selecting invalid altsetting 0 [ 107.096787][ T4914] usb 5-1: selecting invalid altsetting 0 [ 107.117189][ T4914] usbtest: probe of 5-1:220.1 failed with error -22 [ 107.166491][ T4914] usb 5-1: USB disconnect, device number 4 [ 107.504417][ T5206] program syz.3.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.468871][ T5203] loop1: detected capacity change from 0 to 32768 [ 108.563192][ T5236] loop0: detected capacity change from 0 to 2048 [ 108.616854][ T5239] netlink: 536 bytes leftover after parsing attributes in process `syz.3.337'. [ 108.658523][ T5236] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 108.700069][ T5236] UDF-fs: Scanning with blocksize 512 failed [ 108.766861][ T5236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.298317][ T5255] loop3: detected capacity change from 0 to 736 [ 109.419663][ T5260] loop2: detected capacity change from 0 to 256 [ 109.498422][ T5260] FAT-fs (loop2): Directory bread(block 64) failed [ 109.526403][ T5260] FAT-fs (loop2): Directory bread(block 65) failed [ 109.575117][ T5260] FAT-fs (loop2): Directory bread(block 66) failed [ 109.616461][ T5264] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 109.641782][ T5260] FAT-fs (loop2): Directory bread(block 67) failed [ 109.675438][ T5260] FAT-fs (loop2): Directory bread(block 68) failed [ 109.700742][ T5260] FAT-fs (loop2): Directory bread(block 69) failed [ 109.707422][ T5260] FAT-fs (loop2): Directory bread(block 70) failed [ 109.773463][ T5260] FAT-fs (loop2): Directory bread(block 71) failed [ 109.780148][ T5260] FAT-fs (loop2): Directory bread(block 72) failed [ 109.806361][ T5260] FAT-fs (loop2): Directory bread(block 73) failed [ 109.930048][ T5268] loop1: detected capacity change from 0 to 8192 [ 110.034311][ T5268] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.127504][ T5268] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 110.181600][ T5268] REISERFS (device loop1): using ordered data mode [ 110.199769][ T5268] reiserfs: using flush barriers [ 110.291219][ T5268] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.346205][ T5268] REISERFS (device loop1): checking transaction log (loop1) [ 110.383452][ T5268] REISERFS (device loop1): Using rupasov hash to sort names [ 110.403679][ T5284] loop3: detected capacity change from 0 to 512 [ 110.420280][ T5268] REISERFS (device loop1): using 3.5.x disk format [ 110.462374][ T5268] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.505423][ T5268] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.555297][ T5268] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 110.599453][ T5268] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 110.645395][ T5268] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 110.826333][ T5277] loop0: detected capacity change from 0 to 32768 [ 110.881001][ T5277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.355 (5277) [ 110.957424][ T5292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.360'. [ 110.970453][ T5277] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.006591][ T5277] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 111.048871][ T5277] BTRFS info (device loop0): using free space tree [ 111.165678][ T5294] loop3: detected capacity change from 0 to 2048 [ 111.166545][ T5301] process 'syz.1.361' launched '/dev/fd/3' with NULL argv: empty string added [ 111.202392][ T5294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.345242][ T5277] BTRFS info (device loop0): enabling ssd optimizations [ 111.487461][ T5328] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 111.562236][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 111.753993][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.111738][ T5340] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 112.155623][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 112.155640][ T27] audit: type=1400 audit(1769601242.527:14): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=5341 comm="syz.3.374" [ 112.222166][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 112.262608][ T5338] device bond_slave_0 entered promiscuous mode [ 112.269288][ T5338] device bond_slave_1 entered promiscuous mode [ 112.332073][ T5338] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 112.418227][ T5338] device bond_slave_0 left promiscuous mode [ 112.424320][ T5338] device bond_slave_1 left promiscuous mode [ 112.486969][ T5347] loop1: detected capacity change from 0 to 2048 [ 112.545044][ T5347] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 112.589501][ T5347] UDF-fs: Scanning with blocksize 512 failed [ 112.643732][ T5347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.841759][ T5353] loop3: detected capacity change from 0 to 64 [ 112.929244][ T5353] Trying to free block not in datazone [ 112.936080][ T5353] Trying to free block not in datazone [ 112.994099][ T5353] Trying to free block not in datazone [ 113.403255][ T5363] loop4: detected capacity change from 0 to 4096 [ 113.451255][ T5363] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 113.654267][ T5371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 113.801427][ T4277] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 113.835654][ T4277] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 113.883242][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 114.174916][ T5385] loop1: detected capacity change from 0 to 128 [ 114.311906][ T5383] syz.0.403 (5383) used greatest stack depth: 20664 bytes left [ 114.418266][ T5389] loop4: detected capacity change from 0 to 2048 [ 114.488018][ T5389] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 114.538811][ T5360] loop2: detected capacity change from 0 to 32768 [ 114.560298][ T5389] UDF-fs: Scanning with blocksize 512 failed [ 114.609521][ T5389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.655438][ T5360] XFS (loop2): Mounting V5 Filesystem [ 114.729215][ T5360] XFS (loop2): Ending clean mount [ 114.782158][ T5360] XFS (loop2): Quotacheck needed: Please wait. [ 114.878509][ T5360] XFS (loop2): Quotacheck: Done. [ 115.035358][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 115.049915][ T5405] loop4: detected capacity change from 0 to 64 [ 115.075785][ T4272] XFS (loop2): Unmounting Filesystem [ 115.206236][ T5391] loop3: detected capacity change from 0 to 32768 [ 115.233888][ T5391] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.397 (5391) [ 115.313420][ T5391] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 115.354162][ T5391] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 115.417216][ T5391] BTRFS info (device loop3): using free space tree [ 115.497173][ T5414] loop0: detected capacity change from 0 to 1024 [ 115.536168][ T5414] EXT4-fs: inline encryption not supported [ 115.550901][ T5414] EXT4-fs: Ignoring removed i_version option [ 115.589747][ T5414] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.684480][ T5414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.765699][ T5391] BTRFS info (device loop3): enabling ssd optimizations [ 115.868370][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 115.969584][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 116.197994][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 116.218883][ T4280] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 116.421460][ T27] audit: type=1326 audit(1769601246.787:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 116.551045][ T27] audit: type=1326 audit(1769601246.847:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 116.646329][ T5464] netlink: 364 bytes leftover after parsing attributes in process `syz.3.412'. [ 116.675947][ T27] audit: type=1326 audit(1769601246.847:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 116.680535][ T5464] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 116.777237][ T27] audit: type=1326 audit(1769601246.847:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 116.856916][ T27] audit: type=1326 audit(1769601246.847:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 116.967781][ T27] audit: type=1326 audit(1769601246.847:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 117.029034][ T27] audit: type=1326 audit(1769601246.847:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 117.040554][ T5456] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.151494][ T5441] loop4: detected capacity change from 0 to 32768 [ 117.178359][ T5441] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.406 (5441) [ 117.227254][ T5441] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 117.257791][ T5441] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 117.300476][ T5456] usb 3-1: Using ep0 maxpacket: 32 [ 117.319725][ T5456] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.350859][ T5441] BTRFS info (device loop4): using free space tree [ 117.354641][ T5474] loop1: detected capacity change from 0 to 4096 [ 117.370462][ T5456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.376473][ T5476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 117.377110][ T5456] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 117.383604][ T5476] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.412333][ T5476] vhci_hcd vhci_hcd.0: Device attached [ 117.449547][ T5485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.492758][ T5456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.574421][ T5456] usb 3-1: config 0 descriptor?? [ 117.588226][ T5462] loop0: detected capacity change from 0 to 32768 [ 117.610158][ T5441] BTRFS info (device loop4): enabling ssd optimizations [ 117.679478][ T5462] XFS (loop0): Mounting V5 Filesystem [ 117.740696][ T4908] usb 40-1: SetAddress Request (2) to port 0 [ 117.746815][ T4908] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 117.800854][ T4277] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 117.806099][ T27] audit: type=1326 audit(1769601248.177:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 117.817770][ T5462] XFS (loop0): Ending clean mount [ 117.838619][ T4560] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.933246][ T5462] XFS (loop0): Quotacheck needed: Please wait. [ 117.979729][ T27] audit: type=1326 audit(1769601248.177:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.008759][ T5456] wacom 0003:056A:00F8.0007: unknown main item tag 0x0 [ 118.018005][ T5456] wacom 0003:056A:00F8.0007: unknown main item tag 0x0 [ 118.037080][ T5456] wacom 0003:056A:00F8.0007: unknown main item tag 0x0 [ 118.068962][ T5477] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 118.078854][ T4560] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.100667][ T4360] vhci_hcd: stop threads [ 118.104967][ T4360] vhci_hcd: release socket [ 118.111663][ T5456] wacom 0003:056A:00F8.0007: unknown main item tag 0x0 [ 118.119674][ T4560] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 118.129768][ T4360] vhci_hcd: disconnect device [ 118.140147][ T27] audit: type=1326 audit(1769601248.217:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.173678][ T5456] wacom 0003:056A:00F8.0007: unknown main item tag 0x0 [ 118.180947][ T4560] usb 4-1: can't read configurations, error -71 [ 118.241499][ T5456] wacom 0003:056A:00F8.0007: hidraw0: USB HID v4.06 Device [HID 056a:00f8] on usb-dummy_hcd.2-1/input0 [ 118.252796][ T5462] XFS (loop0): Quotacheck: Done. [ 118.306608][ T27] audit: type=1326 audit(1769601248.227:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.351322][ T5456] usb 3-1: USB disconnect, device number 2 [ 118.461716][ T27] audit: type=1326 audit(1769601248.227:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.520099][ T4257] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop4 scanned by udevd (4257) [ 118.548468][ T27] audit: type=1326 audit(1769601248.227:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.579751][ T4267] XFS (loop0): Unmounting Filesystem [ 118.628793][ T27] audit: type=1326 audit(1769601248.227:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.707955][ T5515] fido_id[5515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.756539][ T27] audit: type=1326 audit(1769601248.227:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3540d9aeb9 code=0x7ffc0000 [ 118.864153][ T27] audit: type=1326 audit(1769601249.227:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5523 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 118.948863][ T27] audit: type=1326 audit(1769601249.227:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5523 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249ff9aeb9 code=0x7ffc0000 [ 119.410591][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.610591][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 119.619490][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.650483][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.682804][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.718945][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.746555][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.789208][ T14] usb 3-1: config 0 descriptor?? [ 120.089669][ T5556] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 120.157254][ T5556] CIFS: Unable to determine destination address [ 120.165962][ T5526] loop4: detected capacity change from 0 to 40427 [ 120.192922][ T5526] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 120.213213][ T5526] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 120.247269][ T14] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 120.261596][ T5526] F2FS-fs (loop4): invalid crc value [ 120.268750][ T14] microsoft 0003:045E:07DA.0008: parse failed [ 120.299186][ T14] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 120.313706][ T5552] loop1: detected capacity change from 0 to 8192 [ 120.339698][ T5526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.385688][ T5558] loop3: detected capacity change from 0 to 2048 [ 120.476793][ T14] usb 3-1: USB disconnect, device number 3 [ 120.490225][ T5558] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.579857][ T5526] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.587684][ T5564] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.640253][ T5526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.535660][ T5581] loop0: detected capacity change from 0 to 4096 [ 121.884478][ T5581] syz.0.454 (5581) used greatest stack depth: 20624 bytes left [ 122.870798][ T4908] usb 40-1: device descriptor read/8, error -110 [ 123.187376][ T5603] loop3: detected capacity change from 0 to 32768 [ 123.291390][ T4908] usb usb40-port1: attempt power cycle [ 123.301838][ T5603] XFS (loop3): Mounting V5 Filesystem [ 123.404324][ T5650] loop0: detected capacity change from 0 to 64 [ 123.410942][ T5646] loop2: detected capacity change from 0 to 4096 [ 123.495325][ T5603] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 123.603664][ T5603] XFS (loop3): Starting recovery (logdev: internal) [ 123.666382][ T5629] loop1: detected capacity change from 0 to 32768 [ 123.680022][ T5603] XFS (loop3): Ending recovery (logdev: internal) [ 123.716741][ T5603] XFS (loop3): Quotacheck needed: Please wait. [ 123.748213][ T5629] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 123.847819][ T5603] XFS (loop3): Quotacheck: Done. [ 123.877192][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 123.877208][ T27] audit: type=1800 audit(1769601254.247:44): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 123.961597][ T4908] usb usb40-port1: unable to enumerate USB device [ 124.054543][ T4280] XFS (loop3): Unmounting Filesystem [ 124.117259][ T5661] loop0: detected capacity change from 0 to 256 [ 124.260629][ T5661] FAT-fs (loop0): Directory bread(block 64) failed [ 124.271114][ T4261] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 124.296887][ T5661] FAT-fs (loop0): Directory bread(block 65) failed [ 124.321195][ T5661] FAT-fs (loop0): Directory bread(block 66) failed [ 124.366766][ T5661] FAT-fs (loop0): Directory bread(block 67) failed [ 124.391497][ T5661] FAT-fs (loop0): Directory bread(block 68) failed [ 124.420759][ T5661] FAT-fs (loop0): Directory bread(block 69) failed [ 124.451382][ T5661] FAT-fs (loop0): Directory bread(block 70) failed [ 124.457977][ T5661] FAT-fs (loop0): Directory bread(block 71) failed [ 124.494084][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 124.500593][ T5661] FAT-fs (loop0): Directory bread(block 72) failed [ 124.521690][ T5661] FAT-fs (loop0): Directory bread(block 73) failed [ 125.609068][ T5671] loop4: detected capacity change from 0 to 40427 [ 125.731240][ T5671] F2FS-fs (loop4): invalid crc value [ 125.768882][ T5671] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.893746][ T5671] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.142672][ T4277] syz-executor: attempt to access beyond end of device [ 126.142672][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.646833][ T5756] loop4: detected capacity change from 0 to 256 [ 127.696270][ T5757] loop1: detected capacity change from 0 to 2048 [ 127.741278][ T5758] loop2: detected capacity change from 0 to 512 [ 127.759514][ T5757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.826413][ T5756] FAT-fs (loop4): Directory bread(block 64) failed [ 127.871998][ T5756] FAT-fs (loop4): Directory bread(block 65) failed [ 127.906609][ T5756] FAT-fs (loop4): Directory bread(block 66) failed [ 127.935826][ T5758] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.944826][ T5756] FAT-fs (loop4): Directory bread(block 67) failed [ 128.010792][ T5756] FAT-fs (loop4): Directory bread(block 68) failed [ 128.042163][ T5758] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.054809][ T5756] FAT-fs (loop4): Directory bread(block 69) failed [ 128.070714][ T5756] FAT-fs (loop4): Directory bread(block 70) failed [ 128.081211][ T5758] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.529: Bad quota inum: 11, type: 1 [ 128.102403][ T5756] FAT-fs (loop4): Directory bread(block 71) failed [ 128.138780][ T5756] FAT-fs (loop4): Directory bread(block 72) failed [ 128.177420][ T5756] FAT-fs (loop4): Directory bread(block 73) failed [ 128.184454][ T5758] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 128.211717][ T5767] loop0: detected capacity change from 0 to 8192 [ 128.248750][ T5758] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 128.266840][ T5758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.270935][ T5767] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.370577][ T5457] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.411974][ T5767] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 128.461015][ T5767] REISERFS (device loop0): using ordered data mode [ 128.467751][ T5767] reiserfs: using flush barriers [ 128.561312][ T5767] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.562778][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 128.583525][ T5457] usb 2-1: Using ep0 maxpacket: 32 [ 128.608831][ T5457] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 128.621057][ T5767] REISERFS (device loop0): checking transaction log (loop0) [ 128.651795][ T5457] usb 2-1: config 0 has no interface number 0 [ 128.657948][ T5457] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 128.671340][ T5767] REISERFS (device loop0): Using r5 hash to sort names [ 128.678530][ T5767] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 128.696443][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 128.724298][ T5457] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 128.740546][ T5767] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 128.792560][ T5457] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 128.823575][ T5776] loop2: detected capacity change from 0 to 128 [ 128.850448][ T5457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.850476][ T5457] usb 2-1: Product: syz [ 128.850492][ T5457] usb 2-1: Manufacturer: syz [ 128.850506][ T5457] usb 2-1: SerialNumber: syz [ 128.861514][ T5457] usb 2-1: config 0 descriptor?? [ 129.189471][ T5770] loop3: detected capacity change from 0 to 32768 [ 129.236490][ T5781] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 129.258785][ T5770] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.536 (5770) [ 129.283074][ T5457] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 129.289995][ T5457] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 129.311152][ T5783] loop4: detected capacity change from 0 to 256 [ 129.351365][ T5770] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 129.390845][ T5770] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.424086][ T5783] FAT-fs (loop4): Directory bread(block 64) failed [ 129.460496][ T5783] FAT-fs (loop4): Directory bread(block 65) failed [ 129.467259][ T5770] BTRFS info (device loop3): using free space tree [ 129.484524][ T5457] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 129.486855][ T5783] FAT-fs (loop4): Directory bread(block 66) failed [ 129.517614][ T5457] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 129.546545][ T5783] FAT-fs (loop4): Directory bread(block 67) failed [ 129.554428][ T5783] FAT-fs (loop4): Directory bread(block 68) failed [ 129.562279][ T5783] FAT-fs (loop4): Directory bread(block 69) failed [ 129.569110][ T5783] FAT-fs (loop4): Directory bread(block 70) failed [ 129.575811][ T5783] FAT-fs (loop4): Directory bread(block 71) failed [ 129.582604][ T5783] FAT-fs (loop4): Directory bread(block 72) failed [ 129.589714][ T5783] FAT-fs (loop4): Directory bread(block 73) failed [ 129.606942][ T5457] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 129.720784][ T5457] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 129.781306][ T5457] usb 2-1: USB disconnect, device number 5 [ 130.030651][ T5770] BTRFS info (device loop3): enabling ssd optimizations [ 130.163120][ T5807] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 130.180733][ T5818] loop2: detected capacity change from 0 to 256 [ 130.187919][ T5818] exfat: Deprecated parameter 'namecase' [ 130.239891][ T5818] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 130.280763][ T4280] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 130.901231][ T5825] loop4: detected capacity change from 0 to 8192 [ 130.948226][ T5825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.046870][ T5825] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 131.066621][ T5825] REISERFS (device loop4): using ordered data mode [ 131.095526][ T5825] reiserfs: using flush barriers [ 131.124396][ T5812] loop0: detected capacity change from 0 to 40427 [ 131.137683][ T5825] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.157874][ T5812] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 131.208205][ T5812] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.246198][ T5825] REISERFS (device loop4): checking transaction log (loop4) [ 131.253219][ T5812] F2FS-fs (loop0): invalid crc value [ 131.303022][ T5825] REISERFS (device loop4): Using r5 hash to sort names [ 131.324269][ T5812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.334499][ T5825] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.401655][ T5825] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 131.497479][ T5812] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.520903][ T5812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 131.717537][ T5812] syz.0.546: attempt to access beyond end of device [ 131.717537][ T5812] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 131.788536][ T5812] syz.0.546: attempt to access beyond end of device [ 131.788536][ T5812] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 131.839773][ T5812] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 131.839819][ T5812] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 132.071350][ T4281] Bluetooth: hci0: command 0x0c20 tx timeout [ 132.192089][ T5858] loop3: detected capacity change from 0 to 256 [ 132.244336][ T5860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'. [ 132.266227][ T5858] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 132.286007][ T5858] FAT-fs (loop3): Filesystem has been set read-only [ 132.299058][ T5846] loop1: detected capacity change from 0 to 32768 [ 132.604805][ T5846] XFS (loop1): Mounting V5 Filesystem [ 132.851101][ T5846] XFS (loop1): Ending clean mount [ 132.867911][ T5846] XFS (loop1): Quotacheck needed: Please wait. [ 132.877734][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877850][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.045538][ T5846] XFS (loop1): Quotacheck: Done. [ 133.146717][ T5856] loop2: detected capacity change from 0 to 32768 [ 133.186769][ T5856] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.563 (5856) [ 133.235380][ T5856] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.275636][ T5856] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 133.276504][ T4276] XFS (loop1): Unmounting Filesystem [ 133.297653][ T5856] BTRFS info (device loop2): setting nodatacow, compression disabled [ 133.340501][ T5856] BTRFS info (device loop2): force clearing of disk cache [ 133.361519][ T5856] BTRFS info (device loop2): enabling ssd optimizations [ 133.368528][ T5856] BTRFS info (device loop2): using spread ssd allocation scheme [ 133.471504][ T5856] BTRFS info (device loop2): turning off barriers [ 133.513762][ T5856] BTRFS info (device loop2): disabling free space tree [ 133.528537][ T5856] BTRFS info (device loop2): not using ssd optimizations [ 133.536378][ T5856] BTRFS info (device loop2): not using spread ssd allocation scheme [ 133.899553][ T5856] BTRFS info (device loop2): rebuilding free space tree [ 134.009426][ T5856] BTRFS info (device loop2): disabling free space tree [ 134.046032][ T5856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.088713][ T5856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.333757][ T5929] loop4: detected capacity change from 0 to 1024 [ 134.435634][ T4272] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.447187][ T5892] loop3: detected capacity change from 0 to 32768 [ 134.599283][ T5927] loop0: detected capacity change from 0 to 8192 [ 134.754573][ T5892] JBD2: Ignoring recovery information on journal [ 135.023382][ T5892] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 135.506127][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 135.593853][ T5925] loop1: detected capacity change from 0 to 40427 [ 135.631446][ T5925] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 135.670753][ T5925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.680908][ T5925] F2FS-fs (loop1): invalid crc value [ 135.733649][ T5925] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.930792][ T5925] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 135.937990][ T5925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.122216][ T5925] syz.1.576: attempt to access beyond end of device [ 136.122216][ T5925] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 136.183288][ T5932] loop4: detected capacity change from 0 to 32768 [ 136.189060][ T5925] syz.1.576: attempt to access beyond end of device [ 136.189060][ T5925] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 136.238124][ T5925] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 136.238170][ T5925] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 136.294483][ T5932] XFS (loop4): Mounting V5 Filesystem [ 136.464692][ T5932] XFS (loop4): Ending clean mount [ 136.506161][ T5932] XFS (loop4): Quotacheck needed: Please wait. [ 136.597595][ T5932] XFS (loop4): Quotacheck: Done. [ 136.804444][ T4277] XFS (loop4): Unmounting Filesystem [ 137.317355][ T5983] loop2: detected capacity change from 0 to 1024 [ 137.979369][ T6008] loop4: detected capacity change from 0 to 8 [ 138.070013][ T5998] loop3: detected capacity change from 0 to 8192 [ 138.096215][ T6010] netlink: 'syz.0.615': attribute type 6 has an invalid length. [ 138.170190][ T6008] SQUASHFS error: zstd decompression error: 10 [ 138.214780][ T6008] SQUASHFS error: zstd decompression failed, data probably corrupt [ 138.274195][ T6008] SQUASHFS error: Failed to read block 0x62b: -5 [ 138.320467][ T6008] SQUASHFS error: Unable to read metadata cache entry [629] [ 138.368612][ T6008] SQUASHFS error: Unable to read directory block [629:ff26] [ 138.780780][ T5826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.980532][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 138.991824][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.021157][ T5826] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 139.049603][ T5826] usb 3-1: config 4 has no interface number 0 [ 139.066106][ T5826] usb 3-1: config 4 interface 30 has no altsetting 0 [ 139.092816][ T5826] usb 3-1: string descriptor 0 read error: -22 [ 139.145088][ T5826] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 139.199942][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.257779][ T5826] dw2102: su3000_identify_state [ 139.301340][ T5826] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 139.328851][ T5826] dw2102: su3000_power_ctrl: 1, initialized 0 [ 139.336995][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 139.407546][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.461191][ T5826] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 139.461844][ T6035] loop3: detected capacity change from 0 to 4096 [ 139.484421][ T6017] dvb-usb: bulk message failed: -22 (4/0) [ 139.497465][ T5826] usb 3-1: media controller created [ 139.503430][ T6017] dw2102: i2c transfer failed. [ 139.510551][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 139.516329][ T6017] dw2102: i2c transfer failed. [ 139.552065][ T6035] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 139.580590][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 139.587030][ T6017] dw2102: i2c transfer failed. [ 139.611730][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.630469][ T5826] dw2102: i2c transfer failed. [ 139.681838][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.700736][ T6035] ntfs: volume version 3.1. [ 139.704583][ T5826] dw2102: i2c transfer failed. [ 139.721943][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.738989][ T5826] dw2102: i2c transfer failed. [ 139.748116][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.785794][ T6035] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 139.800507][ T5826] dw2102: i2c transfer failed. [ 139.820782][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.826570][ T5826] dw2102: i2c transfer failed. [ 139.845125][ T6035] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 139.857778][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 139.897360][ T5826] dw2102: i2c transfer failed. [ 139.924886][ T5826] dvb-usb: MAC address: 02:02:02:02:02:02 [ 140.067816][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.119708][ T6044] loop4: detected capacity change from 0 to 32768 [ 140.154055][ T6025] loop1: detected capacity change from 0 to 32768 [ 140.214202][ T6044] JBD2: Ignoring recovery information on journal [ 140.222278][ T6044] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 140.231310][ T6044] JBD2: bad block at offset 32 [ 140.277445][ T6044] (syz.4.630,6044,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 140.287085][ T6044] (syz.4.630,6044,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 140.289602][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 140.295176][ T6044] (syz.4.630,6044,1):ocfs2_check_volume:2461 ERROR: status = -22 [ 140.309470][ T6044] (syz.4.630,6044,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 140.317286][ T6044] (syz.4.630,6044,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 140.335627][ T6044] (syz.4.630,6044,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 140.374390][ T6025] JBD2: Ignoring recovery information on journal [ 140.439559][ T5826] dw2102: command 0x0e transfer failed. [ 140.447936][ T6025] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 140.491686][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 140.497485][ T5826] dw2102: command 0x0e transfer failed. [ 140.534348][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 140.628445][ T6052] loop3: detected capacity change from 0 to 1764 [ 140.870678][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 140.876480][ T5826] dw2102: command 0x0e transfer failed. [ 140.892336][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 140.898118][ T5826] dw2102: command 0x0e transfer failed. [ 140.969516][ T5826] dvb-usb: bulk message failed: -22 (1/0) [ 141.030671][ T5826] dw2102: command 0x51 transfer failed. [ 141.036301][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 141.082981][ T5826] dw2102: i2c probe for address 0x68 failed. [ 141.088289][ T6064] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 141.089024][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 141.168867][ T5826] dw2102: i2c probe for address 0x69 failed. [ 141.210480][ T5826] dvb-usb: bulk message failed: -22 (5/0) [ 141.216272][ T5826] dw2102: i2c probe for address 0x6a failed. [ 141.276973][ T5826] dw2102: probing for demodulator failed. Is the external power switched on? [ 141.300855][ T5826] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 141.630909][ T5826] rc_core: IR keymap rc-tt-1500 not found [ 141.643828][ T5826] Registered IR keymap rc-empty [ 141.667284][ T5826] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 141.706587][ T5826] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 141.763273][ T5826] dvb-usb: schedule remote query interval to 250 msecs. [ 141.788954][ T5826] dw2102: su3000_power_ctrl: 0, initialized 1 [ 141.810913][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 141.860778][ T5826] usb 3-1: USB disconnect, device number 4 [ 141.990733][ T5826] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 142.150149][ T6054] loop4: detected capacity change from 0 to 40427 [ 142.152187][ T6063] loop3: detected capacity change from 0 to 32768 [ 142.188394][ T6054] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(3199) blocks(1024) [ 142.226304][ T6054] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.277196][ T6088] loop2: detected capacity change from 0 to 256 [ 142.291408][ T6054] F2FS-fs (loop4): invalid crc value [ 142.298026][ T6063] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.329991][ T6088] exfat: Deprecated parameter 'utf8' [ 142.335504][ T6088] exfat: Deprecated parameter 'namecase' [ 142.347987][ T6088] exfat: Deprecated parameter 'namecase' [ 142.354831][ T6088] exfat: Deprecated parameter 'utf8' [ 142.410538][ T6088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 142.454906][ T6054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.669268][ T6054] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.678628][ T6054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.686576][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 143.179828][ T6110] loop0: detected capacity change from 0 to 128 [ 143.208804][ T6109] binder_alloc: binder_alloc_mmap_handler: 6108 200000ffc000-200001000000 already mapped failed -16 [ 143.244418][ T6110] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.299309][ T6112] loop4: detected capacity change from 0 to 256 [ 143.398384][ T6110] hpfs: filesystem error: improperly stopped [ 143.405037][ T6114] usb usb8: usbfs: process 6114 (syz.1.658) did not claim interface 0 before use [ 143.406201][ T6112] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 143.428769][ T6110] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.442601][ T6106] loop2: detected capacity change from 0 to 8192 [ 143.470524][ T6110] hpfs: You really don't want any checks? You are crazy... [ 143.489476][ T6110] hpfs: hpfs_map_sector(): read error [ 143.498760][ T6106] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.539820][ T6110] hpfs: code page support is disabled [ 143.557620][ T6106] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 143.568302][ T6106] REISERFS (device loop2): using ordered data mode [ 143.575491][ T6106] reiserfs: using flush barriers [ 143.612376][ T6110] hpfs: hpfs_map_4sectors(): unaligned read [ 143.618575][ T6110] hpfs: hpfs_map_4sectors(): unaligned read [ 143.624956][ T6110] hpfs: filesystem error: unable to find root dir [ 143.680635][ T6106] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.742638][ T6106] REISERFS (device loop2): checking transaction log (loop2) [ 143.803268][ T6106] REISERFS (device loop2): Using r5 hash to sort names [ 143.827014][ T6106] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 144.036000][ T6123] program syz.0.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.361914][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 144.809208][ T6149] loop4: detected capacity change from 0 to 2048 [ 144.917370][ T6151] loop0: detected capacity change from 0 to 1764 [ 145.001260][ T6149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.009837][ T6149] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.154182][ T6140] loop1: detected capacity change from 0 to 32768 [ 145.214844][ T6140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.670 (6140) [ 145.298755][ T6140] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.314402][ T6149] fscrypt (loop4, inode 14): Error -61 getting encryption context [ 145.364797][ T6140] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 145.372944][ T6165] loop2: detected capacity change from 0 to 256 [ 145.395881][ T6165] exfat: Deprecated parameter 'namecase' [ 145.422902][ T6140] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.449815][ T6165] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 145.460516][ T6140] BTRFS info (device loop1): force zstd compression, level 3 [ 145.510817][ T6140] BTRFS info (device loop1): turning on sync discard [ 145.530211][ T6140] BTRFS info (device loop1): force clearing of disk cache [ 145.540207][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 145.586870][ T6140] BTRFS info (device loop1): enabling disk space caching [ 145.632470][ T6140] BTRFS info (device loop1): turning off discard [ 145.639086][ T6140] BTRFS info (device loop1): disk space caching is enabled [ 145.911253][ T6184] devtmpfs: Too few inodes for current use [ 146.150021][ T6140] BTRFS info (device loop1): enabling ssd optimizations [ 146.176427][ T6140] BTRFS info (device loop1): rebuilding free space tree [ 146.205730][ T6140] BTRFS info (device loop1): disabling free space tree [ 146.236050][ T6140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.269575][ T6140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.429160][ T4323] kernel write not supported for file /snd/midiC2D0 (pid: 4323 comm: kworker/1:5) [ 146.447590][ T4344] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.597284][ T4276] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.660489][ T4344] usb 3-1: Using ep0 maxpacket: 8 [ 146.668849][ T4344] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 146.731621][ T4344] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 146.746681][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.758382][ T4344] usb 3-1: Product: syz [ 146.763084][ T4344] usb 3-1: Manufacturer: syz [ 146.767785][ T4344] usb 3-1: SerialNumber: syz [ 146.798510][ T4344] usb 3-1: config 0 descriptor?? [ 146.839896][ T4344] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 146.878958][ T4344] usb 3-1: setting power ON [ 146.892786][ T4344] dvb-usb: bulk message failed: -22 (2/0) [ 146.931750][ T4344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.973897][ T4344] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 147.005481][ T4344] usb 3-1: media controller created [ 147.031130][ T6203] dvb-usb: bulk message failed: -22 (3/0) [ 147.051443][ T6203] cxusb: i2c wr: len=80 is too big! [ 147.051443][ T6203] [ 147.096416][ T4344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.164077][ T4344] usb 3-1: selecting invalid altsetting 6 [ 147.185046][ T4344] usb 3-1: digital interface selection failed (-22) [ 147.206541][ T4344] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 147.248526][ T4344] usb 3-1: setting power OFF [ 147.259250][ T4344] dvb-usb: bulk message failed: -22 (2/0) [ 147.268991][ T4344] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 147.278987][ T4344] (NULL device *): no alternate interface [ 147.369213][ T4344] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 147.447398][ T4344] usb 3-1: USB disconnect, device number 5 [ 147.578333][ T6230] set_capacity_and_notify: 1 callbacks suppressed [ 147.578348][ T6230] loop3: detected capacity change from 0 to 512 [ 147.657990][ T6230] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 147.694692][ T6230] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 147.714004][ T6230] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 147.782310][ T6230] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.833863][ T6230] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 147.870218][ T6230] EXT4-fs (loop3): failed to initialize system zone (-117) [ 147.934864][ T6230] EXT4-fs (loop3): mount failed [ 148.349379][ T6224] loop0: detected capacity change from 0 to 32768 [ 148.437330][ T6224] XFS (loop0): Mounting V5 Filesystem [ 148.536718][ T6224] XFS (loop0): Ending clean mount [ 148.620518][ T5460] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.627404][ T6242] loop2: detected capacity change from 0 to 32768 [ 148.670828][ T6242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.708 (6242) [ 148.689812][ T6242] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.719628][ T6242] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 148.729284][ T6242] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.739243][ T6242] BTRFS info (device loop2): force zstd compression, level 3 [ 148.747399][ T6242] BTRFS info (device loop2): turning on sync discard [ 148.754511][ T6242] BTRFS info (device loop2): force clearing of disk cache [ 148.766920][ T4267] XFS (loop0): Unmounting Filesystem [ 148.767734][ T6242] BTRFS info (device loop2): enabling disk space caching [ 148.812774][ T6242] BTRFS info (device loop2): turning off discard [ 148.819320][ T6242] BTRFS info (device loop2): disk space caching is enabled [ 148.836960][ T5460] usb 4-1: Using ep0 maxpacket: 16 [ 148.855977][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.897615][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.918731][ T5460] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 148.949192][ T5460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.960080][ T6254] loop4: detected capacity change from 0 to 2048 [ 148.970293][ T6254] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 149.009343][ T5460] usb 4-1: config 0 descriptor?? [ 149.040000][ T6254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.110090][ T6242] BTRFS info (device loop2): enabling ssd optimizations [ 149.168755][ T6242] BTRFS info (device loop2): rebuilding free space tree [ 149.251589][ T6242] BTRFS info (device loop2): disabling free space tree [ 149.258550][ T6242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.310447][ T6242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.446258][ T5460] logitech-hidpp-device 0003:046D:C091.0009: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.3-1/input0 [ 149.541487][ T6276] loop4: detected capacity change from 0 to 256 [ 149.571605][ T6276] exfat: Deprecated parameter 'namecase' [ 149.635391][ T6276] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 149.663255][ T5460] usb 4-1: USB disconnect, device number 5 [ 149.761662][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.843578][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.136642][ T6265] loop1: detected capacity change from 0 to 32768 [ 151.389448][ T6289] loop3: detected capacity change from 0 to 32768 [ 151.489862][ T6289] ea_get: invalid extended attribute [ 151.592519][ T6288] loop4: detected capacity change from 0 to 40427 [ 151.652130][ T6288] F2FS-fs (loop4): invalid crc value [ 151.665253][ T6288] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 151.751153][ T6288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.780637][ T4389] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.841791][ T6320] loop2: detected capacity change from 0 to 256 [ 151.907299][ T6288] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 151.936787][ T6320] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 151.947318][ T6288] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 151.970450][ T4389] usb 2-1: Using ep0 maxpacket: 16 [ 151.978433][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.979596][ T6288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.033958][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.052240][ T6320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 152.111334][ T4389] usb 2-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 152.146976][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.201120][ T4389] usb 2-1: config 0 descriptor?? [ 152.388268][ T6305] loop0: detected capacity change from 0 to 32768 [ 152.437293][ T6305] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.726 (6305) [ 152.505119][ T6305] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 152.534796][ T6305] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 152.560795][ T4281] Bluetooth: hci3: command 0x0401 tx timeout [ 152.580311][ T6305] BTRFS info (device loop0): using free space tree [ 152.663487][ T4389] logitech-hidpp-device 0003:046D:C091.000A: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.1-1/input0 [ 152.747103][ T6340] netlink: 'syz.2.737': attribute type 9 has an invalid length. [ 152.846560][ T6305] BTRFS info (device loop0): enabling ssd optimizations [ 152.918726][ T4560] usb 2-1: USB disconnect, device number 6 [ 153.117312][ T6348] fido_id[6348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 153.174373][ T4267] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 153.478518][ T6370] loop4: detected capacity change from 0 to 8 [ 153.631646][ T6372] support for cryptoloop has been removed. Use dm-crypt instead. [ 153.815875][ T6367] loop2: detected capacity change from 0 to 4096 [ 153.848128][ T6367] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 153.943092][ T6380] netlink: 'syz.0.749': attribute type 4 has an invalid length. [ 153.963928][ T6376] loop1: detected capacity change from 0 to 4096 [ 153.979978][ T6380] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 154.047495][ T6376] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 154.112012][ T6376] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.156865][ T4272] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 154.178450][ T6376] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 154.194472][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 154.222078][ T4272] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 154.241264][ T6376] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.297918][ T6376] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.377134][ T6376] ntfs: volume version 3.1. [ 154.400028][ T6384] loop3: detected capacity change from 0 to 1024 [ 154.419217][ T6376] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 154.449302][ T6376] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 154.500916][ T6376] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 154.539631][ T6376] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 154.597375][ T6376] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 154.913006][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 155.051388][ T6399] loop1: detected capacity change from 0 to 1024 [ 155.060589][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.101281][ T6399] EXT4-fs: Ignoring removed nobh option [ 155.129649][ T6399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.221795][ T6399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.260569][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 155.282103][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.320596][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.370443][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 155.390472][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.410662][ T7] usb 3-1: config 0 descriptor?? [ 155.433646][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 155.482756][ T6414] loop0: detected capacity change from 0 to 1024 [ 155.656908][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 155.846372][ T7] wacom 0003:056A:0063.000B: unbalanced collection at end of report description [ 155.881015][ T7] wacom 0003:056A:0063.000B: parse failed [ 155.887159][ T7] wacom: probe of 0003:056A:0063.000B failed with error -22 [ 156.076386][ T4353] usb 3-1: USB disconnect, device number 6 [ 156.198537][ T6429] loop4: detected capacity change from 0 to 4096 [ 156.229475][ T6429] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 156.473622][ T6439] loop3: detected capacity change from 0 to 128 [ 156.717981][ T6439] syz.3.774: attempt to access beyond end of device [ 156.717981][ T6439] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 156.903148][ T6447] loop4: detected capacity change from 0 to 256 [ 156.984307][ T6447] FAT-fs (loop4): Directory bread(block 64) failed [ 157.010455][ T6447] FAT-fs (loop4): Directory bread(block 65) failed [ 157.030665][ T6447] FAT-fs (loop4): Directory bread(block 66) failed [ 157.062536][ T6447] FAT-fs (loop4): Directory bread(block 67) failed [ 157.090197][ T6447] FAT-fs (loop4): Directory bread(block 68) failed [ 157.120467][ T6447] FAT-fs (loop4): Directory bread(block 69) failed [ 157.156909][ T6431] loop0: detected capacity change from 0 to 32768 [ 157.160537][ T6447] FAT-fs (loop4): Directory bread(block 70) failed [ 157.210676][ T6447] FAT-fs (loop4): Directory bread(block 71) failed [ 157.217376][ T6447] FAT-fs (loop4): Directory bread(block 72) failed [ 157.256647][ T6447] FAT-fs (loop4): Directory bread(block 73) failed [ 157.257332][ T6431] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.469095][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 158.360123][ T6449] ERROR: (device loop1): dbAllocAG: allocation request is larger than the allocation group size [ 158.360123][ T6449] [ 158.446113][ T6449] ERROR: (device loop1): dbDiscardAG: -EIO [ 158.446113][ T6449] [ 158.552242][ T6479] FAT-fs (loop3): Directory bread(block 64) failed [ 158.558849][ T6479] FAT-fs (loop3): Directory bread(block 65) failed [ 158.699018][ T6484] set_capacity_and_notify: 2 callbacks suppressed [ 158.699036][ T6484] loop0: detected capacity change from 0 to 4096 [ 158.710568][ T6479] FAT-fs (loop3): Directory bread(block 66) failed [ 158.775200][ T6479] FAT-fs (loop3): Directory bread(block 67) failed [ 158.837525][ T6479] FAT-fs (loop3): Directory bread(block 68) failed [ 158.850634][ T6492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.899133][ T6479] FAT-fs (loop3): Directory bread(block 69) failed [ 158.950005][ T6479] FAT-fs (loop3): Directory bread(block 70) failed [ 159.000497][ T6479] FAT-fs (loop3): Directory bread(block 71) failed [ 159.037879][ T6479] FAT-fs (loop3): Directory bread(block 72) failed [ 159.067826][ T6484] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 159.080550][ T6479] FAT-fs (loop3): Directory bread(block 73) failed [ 159.158759][ T6484] Remounting filesystem read-only [ 159.329757][ T6498] IPVS: stopping backup sync thread 5328 ... [ 159.394879][ T4267] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 159.986040][ T6491] loop2: detected capacity change from 0 to 32768 [ 160.073883][ T6491] ea_get: invalid extended attribute [ 160.100612][ T4353] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.300419][ T4353] usb 4-1: Using ep0 maxpacket: 16 [ 160.312112][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.344803][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.375427][ T4353] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.409934][ T6496] loop1: detected capacity change from 0 to 40427 [ 160.465127][ T6496] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 160.500126][ T4353] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 160.510144][ T6496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 160.542772][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.567087][ T6496] F2FS-fs (loop1): invalid crc value [ 160.577874][ T6496] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 160.595255][ T4353] usb 4-1: config 0 descriptor?? [ 160.672132][ T6496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.853150][ T6496] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 160.882032][ T6496] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 160.939431][ T6496] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 160.960428][ T6496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.094703][ T4353] apple 0003:05AC:027B.000C: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.3-1/input0 [ 161.390151][ T4911] usb 4-1: USB disconnect, device number 6 [ 161.430754][ T4353] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.458624][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 161.458641][ T27] audit: type=1326 audit(1769601291.827:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.464588][ T6530] fido_id[6530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 161.505255][ T27] audit: type=1326 audit(1769601291.877:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.620835][ T27] audit: type=1326 audit(1769601291.877:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.650517][ T4353] usb 5-1: Using ep0 maxpacket: 8 [ 161.657804][ T4353] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 161.674337][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 161.683352][ T27] audit: type=1326 audit(1769601291.877:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.704443][ T4353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.711331][ T6542] loop0: detected capacity change from 0 to 256 [ 161.720828][ T6540] netlink: 'syz.2.818': attribute type 30 has an invalid length. [ 161.760786][ T4353] usb 5-1: config 0 descriptor?? [ 161.769051][ T6540] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.778363][ T6540] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.787531][ T6540] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.796308][ T6540] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.817195][ T27] audit: type=1326 audit(1769601291.877:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.847787][ T6542] FAT-fs (loop0): Directory bread(block 64) failed [ 161.871642][ T6542] FAT-fs (loop0): Directory bread(block 65) failed [ 161.891843][ T6542] FAT-fs (loop0): Directory bread(block 66) failed [ 161.898416][ T6542] FAT-fs (loop0): Directory bread(block 67) failed [ 161.920512][ T27] audit: type=1326 audit(1769601291.877:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 161.947259][ T6542] FAT-fs (loop0): Directory bread(block 68) failed [ 161.965506][ T6542] FAT-fs (loop0): Directory bread(block 69) failed [ 161.991632][ T27] audit: type=1326 audit(1769601291.877:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d59aeb9 code=0x7ffc0000 [ 162.021646][ T6542] FAT-fs (loop0): Directory bread(block 70) failed [ 162.038417][ T6542] FAT-fs (loop0): Directory bread(block 71) failed [ 162.068856][ T6542] FAT-fs (loop0): Directory bread(block 72) failed [ 162.089157][ T6542] FAT-fs (loop0): Directory bread(block 73) failed [ 162.183590][ T4353] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x5 [ 162.220918][ T4353] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.05 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 162.279438][ T27] audit: type=1800 audit(1769601292.647:53): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.819" name="file2" dev="loop0" ino=1048720 res=0 errno=0 [ 162.403725][ T4353] usb 5-1: USB disconnect, device number 5 [ 162.574821][ T6535] loop1: detected capacity change from 0 to 32768 [ 162.602172][ T6535] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.816 (6535) [ 162.603522][ T6546] fido_id[6546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.662195][ T6535] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 162.700854][ T6535] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 162.752282][ T6535] BTRFS info (device loop1): using free space tree [ 163.102389][ T6574] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 163.190572][ T6574] netlink: 120 bytes leftover after parsing attributes in process `syz.2.827'. [ 163.200198][ T6535] BTRFS info (device loop1): enabling ssd optimizations [ 163.442360][ T4276] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.615445][ T6594] loop4: detected capacity change from 0 to 512 [ 163.695015][ T6594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.780184][ T6594] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 163.802434][ T6594] EXT4-fs (loop4): 1 truncate cleaned up [ 163.808141][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.894890][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 164.062651][ T6603] loop2: detected capacity change from 0 to 64 [ 164.415866][ T6613] loop4: detected capacity change from 0 to 16 [ 164.490722][ T6613] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.145135][ T6635] netlink: 'syz.2.854': attribute type 25 has an invalid length. [ 165.240970][ T6637] netlink: 'syz.2.854': attribute type 25 has an invalid length. [ 165.302147][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 166.008897][ T6659] loop2: detected capacity change from 0 to 4096 [ 166.321787][ T6646] netlink: 9 bytes leftover after parsing attributes in process `syz.4.858'. [ 166.352943][ T6646] device gretap0 entered promiscuous mode [ 166.402524][ T6650] netlink: 5 bytes leftover after parsing attributes in process `syz.4.858'. [ 166.455356][ T6650] 0ªî{X¹¦: renamed from gretap0 [ 166.510622][ T6650] device 30ªî{X¹¦ left promiscuous mode [ 166.567126][ T6650] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 166.687612][ T6657] loop3: detected capacity change from 0 to 32768 [ 166.701951][ T6650] syz.4.858 (6650) used greatest stack depth: 20208 bytes left [ 166.709691][ T6657] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.863 (6657) [ 166.777669][ T6657] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 166.810141][ T6671] loop4: detected capacity change from 0 to 128 [ 166.817853][ T6657] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 166.829439][ T6669] vcan0: MTU too low for tipc bearer [ 166.836256][ T6669] tipc: Enabling of bearer rejected, failed to enable media [ 166.848907][ T6657] BTRFS info (device loop3): using free space tree [ 166.900736][ T6671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.940540][ T6671] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.003221][ T6657] BTRFS info (device loop3): enabling ssd optimizations [ 167.120538][ T6671] ./file0: Can't open blockdev [ 167.122062][ T6657] BTRFS warning (device loop3): can't clear the free_space_tree,verity,compat_ro:4,compat_ro:6,compat_ro:10,compat_ro:12,compat_ro:14,compat_ro:19,compat_ro:20,compat_ro:23,compat_ro:24,compat_ro:25,compat_ro:26,compat_ro:28,compat_ro:29,compat_ro:32,compat_ro:33,compat_ro:35,compat_ro:37,compat_ro:38,compat_ro:39,compat_ro:41,compat_ro:42,compat_ro:43,compat_ro:44,compat_ro:45,compat_ro:46,compat_ro:52,compat_ro:55,compat_ro:57,compat_ro:61,compat_ro:63 feature bits while mounted [ 167.267258][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 167.483601][ T4280] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 167.654436][ T6709] loop0: detected capacity change from 0 to 512 [ 167.723322][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 167.812897][ T6709] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 168.243051][ T6699] loop2: detected capacity change from 0 to 32768 [ 168.286954][ T6699] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.872 (6699) [ 168.389906][ T6699] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 168.415452][ T6699] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 168.462458][ T6699] BTRFS info (device loop2): using free space tree [ 168.797098][ T6707] loop4: detected capacity change from 0 to 32768 [ 168.850902][ T6707] XFS: noikeep mount option is deprecated. [ 168.931782][ T6699] BTRFS info (device loop2): enabling ssd optimizations [ 169.001683][ T6707] XFS (loop4): Mounting V5 Filesystem [ 169.082061][ T6707] XFS (loop4): Ending clean mount [ 169.088803][ T6766] loop1: detected capacity change from 0 to 1024 [ 169.146849][ T6707] XFS (loop4): Quotacheck needed: Please wait. [ 169.211722][ T27] audit: type=1326 audit(1769601299.587:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0639aeb9 code=0x7ffc0000 [ 169.316961][ T6707] XFS (loop4): Quotacheck: Done. [ 169.337805][ T4272] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.640234][ T6775] tipc: Started in network mode [ 169.670209][ T6775] tipc: Node identity ac1414aa, cluster identity 4711 [ 169.708548][ T6775] tipc: Enabled bearer , priority 10 [ 169.720321][ T4277] XFS (loop4): Unmounting Filesystem [ 170.276097][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 170.609774][ T6808] loop3: detected capacity change from 0 to 256 [ 170.687512][ T6808] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d) [ 170.708772][ T6810] loop0: detected capacity change from 0 to 256 [ 170.789944][ T6810] exfat: Deprecated parameter 'namecase' [ 170.827304][ T6810] exfat: Deprecated parameter 'utf8' [ 170.831062][ T4325] tipc: Node number set to 2886997162 [ 170.899132][ T6810] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 171.333587][ T6824] loop0: detected capacity change from 0 to 512 [ 171.390251][ T6824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.410210][ T6824] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 171.452997][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 171.570636][ T4325] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 171.594194][ T6802] loop4: detected capacity change from 0 to 32768 [ 171.767131][ T4325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.788861][ T4325] usb 4-1: config 0 has no interface number 0 [ 171.818128][ T4325] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 171.838848][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.857762][ T4325] usb 4-1: config 0 descriptor?? [ 171.866800][ T4325] usb 4-1: selecting invalid altsetting 1 [ 171.897219][ T4325] dvb_ttusb_budget: ttusb_init_controller: error [ 171.916486][ T4325] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 171.997086][ T27] audit: type=1326 audit(1769601302.367:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.4.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c17f9aeb9 code=0x0 [ 172.093457][ T6848] loop0: detected capacity change from 0 to 512 [ 172.162768][ T6848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.190663][ T6848] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.238820][ T4325] DVB: Unable to find symbol cx22700_attach() [ 172.322267][ T6855] loop1: detected capacity change from 0 to 512 [ 172.400089][ T6855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.456615][ T6855] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.498564][ T4325] DVB: Unable to find symbol tda10046_attach() [ 172.509368][ T4325] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 172.533984][ T4325] usb 4-1: USB disconnect, device number 7 [ 172.868388][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 172.875916][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 173.085147][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.928'. [ 173.341873][ T6871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.409121][ T6871] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.419147][ T6872] loop3: detected capacity change from 0 to 4096 [ 173.641634][ T6872] ntfs3: loop3: ino=1f, "file3" ntfs_rename [ 173.749932][ T6883] loop1: detected capacity change from 0 to 256 [ 173.791522][ T6883] exfat: Deprecated parameter 'namecase' [ 173.811098][ T6883] exfat: Deprecated parameter 'utf8' [ 173.851733][ T6883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 174.493868][ T6865] loop2: detected capacity change from 0 to 40427 [ 174.524833][ T6865] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 174.568366][ T6865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 174.585935][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.949'. [ 174.592388][ T6865] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 174.638689][ T6865] F2FS-fs (loop2): invalid crc value [ 174.665044][ T6865] F2FS-fs (loop2): Found nat_bits in checkpoint [ 174.851158][ T6865] F2FS-fs (loop2): Start checkpoint disabled! [ 174.895326][ T6865] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 174.902513][ T6865] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 174.939664][ T6918] loop1: detected capacity change from 0 to 2048 [ 174.992547][ T6918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.121165][ T6922] tipc: Enabled bearer , priority 0 [ 175.341085][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 175.382727][ T6924] device gretap0 entered promiscuous mode [ 175.408380][ T6926] loop0: detected capacity change from 0 to 2048 [ 175.447364][ T6930] loop1: detected capacity change from 0 to 512 [ 175.487132][ T6930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.488140][ T6926] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.542102][ T6930] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.587434][ T6931] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.632244][ T6930] EXT4-fs (loop1): 1 truncate cleaned up [ 175.659338][ T6930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.719349][ T6930] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 7937 new) [ 175.772430][ T6930] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 175.981739][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 176.229377][ T6942] loop4: detected capacity change from 0 to 8192 [ 176.325449][ T6950] loop2: detected capacity change from 0 to 512 [ 176.338251][ T6942] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.382254][ T6942] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 176.415593][ T6950] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 176.472471][ T6942] REISERFS (device loop4): using ordered data mode [ 176.478183][ T6928] loop3: detected capacity change from 0 to 32768 [ 176.508507][ T6942] reiserfs: using flush barriers [ 176.553811][ T6928] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 176.553811][ T6928] [ 176.569760][ T6942] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.680870][ T6942] REISERFS (device loop4): checking transaction log (loop4) [ 176.716920][ T6942] REISERFS (device loop4): Using r5 hash to sort names [ 176.768597][ T6942] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 176.847359][ T6942] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.720514][ T129] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.895525][ T6957] loop0: detected capacity change from 0 to 32768 [ 177.904722][ T6984] loop1: detected capacity change from 0 to 64 [ 177.913487][ T6985] xt_socket: unknown flags 0xd0 [ 177.926817][ T6957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.971 (6957) [ 177.940606][ T129] usb 5-1: Using ep0 maxpacket: 16 [ 177.951624][ T129] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 177.991595][ T129] usb 5-1: config 0 has no interface number 0 [ 178.008115][ T6957] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.010583][ T6987] device dummy0 entered promiscuous mode [ 178.034939][ T129] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 178.057269][ T129] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.067725][ T6957] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 178.083566][ T6987] device dummy0 left promiscuous mode [ 178.117848][ T129] usb 5-1: New USB device found, idVendor=7dd7, idProduct=902f, bcdDevice=a3.2c [ 178.146326][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.147291][ T6957] BTRFS info (device loop0): setting nodatacow, compression disabled [ 178.167859][ T129] usb 5-1: Product: syz [ 178.186238][ T129] usb 5-1: Manufacturer: syz [ 178.188264][ T6957] BTRFS info (device loop0): force clearing of disk cache [ 178.204191][ T6957] BTRFS info (device loop0): enabling ssd optimizations [ 178.211576][ T129] usb 5-1: SerialNumber: syz [ 178.216564][ T129] usb 5-1: config 0 descriptor?? [ 178.228047][ T6957] BTRFS info (device loop0): using spread ssd allocation scheme [ 178.236281][ T6971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.236354][ T6957] BTRFS info (device loop0): turning off barriers [ 178.236408][ T6957] BTRFS info (device loop0): disabling free space tree [ 178.253188][ T6971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.265912][ T6957] BTRFS info (device loop0): not using ssd optimizations [ 178.274723][ T6957] BTRFS info (device loop0): not using spread ssd allocation scheme [ 178.590824][ T129] usb 5-1: MIDIStreaming interface descriptor not found [ 178.659313][ T129] usb 5-1: USB disconnect, device number 6 [ 178.699769][ T6957] BTRFS info (device loop0): rebuilding free space tree [ 178.754291][ T6957] BTRFS info (device loop0): disabling free space tree [ 178.774536][ T6957] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.781450][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.993'. [ 178.796612][ T6957] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.134744][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.236089][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.463700][ T7035] kernel profiling enabled (shift: 5) [ 179.490484][ T4920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.690520][ T4920] usb 3-1: Using ep0 maxpacket: 32 [ 179.698132][ T4920] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.736640][ T4920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.756512][ T4920] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 179.782103][ T4920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.830106][ T4920] usb 3-1: config 0 descriptor?? [ 179.870591][ T4393] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.928195][ T7043] netlink: 790 bytes leftover after parsing attributes in process `syz.0.1004'. [ 180.060621][ T4393] usb 4-1: Using ep0 maxpacket: 8 [ 180.067358][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.096199][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.126744][ T4393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.170670][ T4393] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 180.226131][ T4393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.273765][ T4393] usb 4-1: config 0 descriptor?? [ 180.274339][ T4920] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 180.311452][ T4920] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 180.337039][ T4920] magicmouse 0003:05AC:0324.000E: hidraw0: USB HID v0.0a Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 180.369726][ T4920] magicmouse 0003:05AC:0324.000E: magicmouse input not registered [ 180.412160][ T4920] magicmouse: probe of 0003:05AC:0324.000E failed with error -12 [ 180.518357][ T4556] usb 3-1: USB disconnect, device number 7 [ 180.690486][ T4393] kye 0003:0458:4018.000F: unbalanced delimiter at end of report description [ 180.716009][ T7057] fido_id[7057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.720127][ T4393] kye 0003:0458:4018.000F: parse failed [ 180.776352][ T4393] kye: probe of 0003:0458:4018.000F failed with error -22 [ 180.931084][ T4393] usb 4-1: USB disconnect, device number 8 [ 181.020797][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.180666][ T7075] loop4: detected capacity change from 0 to 4096 [ 181.212911][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.228786][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 181.236580][ T7075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.254116][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.300139][ T26] usb 2-1: config 0 descriptor?? [ 181.316119][ T7075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.404519][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 181.716994][ T7090] loop2: detected capacity change from 0 to 512 [ 181.729168][ T26] lg-g15 0003:046D:C222.0010: unbalanced delimiter at end of report description [ 181.753876][ T26] lg-g15: probe of 0003:046D:C222.0010 failed with error -22 [ 181.801548][ T7090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.855194][ T7090] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.960458][ T4324] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.989740][ T26] usb 2-1: USB disconnect, device number 7 [ 182.063899][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 182.072327][ T7099] mkiss: ax0: crc mode is auto. [ 182.180247][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.197903][ T4324] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 182.231791][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.254290][ T4324] usb 4-1: config 0 descriptor?? [ 182.368482][ T7110] loop0: detected capacity change from 0 to 256 [ 182.401535][ T7110] exfat: Deprecated parameter 'utf8' [ 182.420804][ T7110] exfat: Deprecated parameter 'utf8' [ 182.426240][ T7110] exfat: Deprecated parameter 'utf8' [ 182.514579][ T7110] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 182.830841][ T7119] loop1: detected capacity change from 0 to 1024 [ 182.870892][ T4324] video4linux radio48: keene_cmd_set failed (-71) [ 182.877836][ T4324] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 182.934573][ T4324] usb 4-1: USB disconnect, device number 9 [ 183.431421][ T7137] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.859341][ T7148] loop1: detected capacity change from 0 to 4096 [ 183.934352][ T7148] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 184.051654][ T7148] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 184.085608][ T27] audit: type=1326 audit(1769601314.457:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.3.1058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f249ff9aeb9 code=0x0 [ 184.296311][ T7171] trusted_key: encrypted_key: keylen parameter is missing [ 184.545591][ T7177] netlink: 'syz.1.1063': attribute type 2 has an invalid length. [ 184.609098][ T7179] loop2: detected capacity change from 0 to 128 [ 184.670470][ T7179] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 184.689044][ T7183] loop4: detected capacity change from 0 to 8 [ 184.757760][ T7183] SQUASHFS error: lzo decompression failed, data probably corrupt [ 184.800422][ T7183] SQUASHFS error: Failed to read block 0x91: -5 [ 184.810699][ T7183] SQUASHFS error: Unable to read metadata cache entry [8f] [ 184.825392][ T7183] SQUASHFS error: Unable to read inode 0x11f [ 185.188239][ T7194] program syz.2.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.218169][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 185.948699][ T7191] loop1: detected capacity change from 0 to 32768 [ 185.967883][ T7223] loop4: detected capacity change from 0 to 256 [ 185.996190][ T7224] loop2: detected capacity change from 0 to 2048 [ 186.017559][ T7191] JBD2: Ignoring recovery information on journal [ 186.051541][ T7224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.062072][ T7191] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 186.158552][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 186.211295][ T7223] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 186.352844][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 187.549964][ T7261] loop1: detected capacity change from 0 to 8192 [ 187.578508][ T7261] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.592060][ T7261] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 187.601741][ T7261] REISERFS (device loop1): using ordered data mode [ 187.608427][ T7261] reiserfs: using flush barriers [ 187.615953][ T7261] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.632918][ T7261] REISERFS (device loop1): checking transaction log (loop1) [ 187.651591][ T7261] REISERFS (device loop1): Using r5 hash to sort names [ 187.669262][ T7261] reiserfs: enabling write barrier flush mode [ 187.690935][ T7261] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 187.712682][ T7261] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 187.732527][ T7261] REISERFS (device loop1): Remounting filesystem read-only [ 187.751816][ T7261] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 187.785209][ T7261] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 187.833025][ T7261] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 187.872710][ T7261] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 187.938539][ T7261] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 187.974326][ T7276] loop2: detected capacity change from 0 to 256 [ 187.974931][ T7261] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 187.992809][ T7276] exfat: Deprecated parameter 'utf8' [ 187.998768][ T7277] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 188.045896][ T7276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 188.080701][ T7261] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 188.125001][ T7261] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 188.246468][ T7243] loop3: detected capacity change from 0 to 40427 [ 188.286591][ T7281] loop0: detected capacity change from 0 to 22 [ 188.313822][ T7243] F2FS-fs (loop3): invalid crc value [ 188.342694][ T7281] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 188.379978][ T7243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.441148][ T7281] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 188.485444][ T4276] ------------[ cut here ]------------ [ 188.491257][ T4276] kernel BUG at fs/reiserfs/journal.c:1916! [ 188.499308][ T4276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 188.505421][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 188.512997][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.523075][ T4276] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 188.528908][ T4276] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 188.548523][ T4276] RSP: 0018:ffffc90003e87b00 EFLAGS: 00010293 [ 188.554623][ T4276] RAX: ffffffff821b2332 RBX: 1ffff920007d0f64 RCX: ffff88802cfebb80 [ 188.562632][ T4276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.570642][ T4276] RBP: ffffc90003e87bf8 R08: ffffc90003e87b77 R09: ffffc90003e87b40 [ 188.578642][ T4276] R10: dffffc0000000000 R11: fffff520007d0f6f R12: ffffc900032a9000 [ 188.586650][ T4276] R13: dffffc0000000000 R14: ffff88814374a678 R15: 0000000000000000 [ 188.594826][ T4276] FS: 000055557c684500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 188.600597][ T7243] F2FS-fs (loop3): Start checkpoint disabled! [ 188.603784][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.603803][ T4276] CR2: 00007f5652dc8000 CR3: 000000005a3a1000 CR4: 00000000003506e0 [ 188.603824][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.632450][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.640451][ T4276] Call Trace: [ 188.643759][ T4276] [ 188.646714][ T4276] ? journal_release+0x30/0x30 [ 188.650784][ T7243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 188.651509][ T4276] journal_release+0x1b/0x30 [ 188.663584][ T4276] reiserfs_put_super+0x267/0x510 [ 188.668653][ T4276] ? hook_inode_free_security+0xa0/0xa0 [ 188.674229][ T4276] ? evict_inodes+0x642/0x6a0 [ 188.678929][ T4276] ? reiserfs_dirty_inode+0x260/0x260 [ 188.684340][ T4276] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 188.690009][ T4276] ? reiserfs_dirty_inode+0x260/0x260 [ 188.695417][ T4276] generic_shutdown_super+0x130/0x340 [ 188.699782][ T7243] syz.3.1093: attempt to access beyond end of device [ 188.699782][ T7243] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.700803][ T4276] kill_block_super+0x7c/0xe0 [ 188.700832][ T4276] deactivate_locked_super+0x93/0xf0 [ 188.700854][ T4276] cleanup_mnt+0x42c/0x4b0 [ 188.700875][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 188.700905][ T4276] task_work_run+0x1d0/0x260 [ 188.700930][ T4276] ? task_work_cancel+0x220/0x220 [ 188.700955][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 188.700983][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 188.754659][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 188.760244][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 188.765732][ T4276] do_syscall_64+0x58/0xa0 [ 188.770182][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 188.774884][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 188.779570][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.785486][ T4276] RIP: 0033:0x7f3540d9c117 [ 188.789900][ T4276] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 188.809503][ T4276] RSP: 002b:00007ffe15bb2758 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 188.817912][ T4276] RAX: 0000000000000000 RBX: 00007f3540e0471f RCX: 00007f3540d9c117 [ 188.825882][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe15bb2810 [ 188.833847][ T4276] RBP: 00007ffe15bb2810 R08: 00007ffe15bb3810 R09: 00000000ffffffff [ 188.841822][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe15bb38a0 [ 188.849794][ T4276] R13: 00007f3540e0471f R14: 000000000002df82 R15: 00007ffe15bb38e0 [ 188.857787][ T4276] [ 188.860800][ T4276] Modules linked in: [ 188.866293][ T4276] ---[ end trace 0000000000000000 ]--- [ 188.871888][ T4276] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 188.877728][ T4276] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 188.897478][ T4276] RSP: 0018:ffffc90003e87b00 EFLAGS: 00010293 [ 188.903644][ T4276] RAX: ffffffff821b2332 RBX: 1ffff920007d0f64 RCX: ffff88802cfebb80 [ 188.911745][ T4276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.919745][ T4276] RBP: ffffc90003e87bf8 R08: ffffc90003e87b77 R09: ffffc90003e87b40 [ 188.927857][ T4276] R10: dffffc0000000000 R11: fffff520007d0f6f R12: ffffc900032a9000 [ 188.940005][ T4276] R13: dffffc0000000000 R14: ffff88814374a678 R15: 0000000000000000 [ 188.958749][ T4276] FS: 000055557c684500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 188.967765][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.974513][ T4276] CR2: 00007f5652dc8000 CR3: 000000005a3a1000 CR4: 00000000003506e0 [ 188.984032][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.992614][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.002167][ T4276] Kernel panic - not syncing: Fatal exception [ 189.008572][ T4276] Kernel Offset: disabled [ 189.012894][ T4276] Rebooting in 86400 seconds..