last executing test programs: 44.88055975s ago: executing program 2 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 44.647974337s ago: executing program 2 (id=2044): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x3e5) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x80000004) 44.440446652s ago: executing program 2 (id=2050): ioperm(0x1000, 0x1000, 0x8000000000000001) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 44.283257847s ago: executing program 2 (id=2052): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) 43.850685458s ago: executing program 2 (id=2059): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 43.475533228s ago: executing program 2 (id=2063): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0xa82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x11, 0x6, 0x0, 0xffffffff, 0x0}) 28.275248275s ago: executing program 32 (id=2063): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0xa82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x11, 0x6, 0x0, 0xffffffff, 0x0}) 3.239972061s ago: executing program 4 (id=2389): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r0) creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) 3.076090326s ago: executing program 4 (id=2390): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0xfffffff9, 0xffffffff, 0x40}) r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80200) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) 2.986852208s ago: executing program 4 (id=2391): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) memfd_secret(0x0) 2.92122981s ago: executing program 4 (id=2392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 2.541520371s ago: executing program 1 (id=2393): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f00000001c0)=@gcm_256={{0x282}, '\x00', "9bcfa2696eb0288490edef897b0348d78114845f84298bd59d9b655db1ac9aba", '\x00', "c245411efc9da029"}, 0x38) listen(r0, 0xeb) 2.495314882s ago: executing program 4 (id=2394): syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.349567566s ago: executing program 1 (id=2396): r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40106e8c, 0x0) 2.276681218s ago: executing program 0 (id=2397): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x9a8, 0x46, @private2, @empty, 0x700, 0x8, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.929441898s ago: executing program 0 (id=2400): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x6, 0x5, 0xc88}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.674957224s ago: executing program 1 (id=2401): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1.607109646s ago: executing program 0 (id=2402): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@debug}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000340)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYBLOB="ecd153"], 0xfe37, 0x2) 1.488739369s ago: executing program 3 (id=2403): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000000)={[{@force}, {@force}, {}, {@part={'part', 0x3d, 0x205}}, {@gid}, {@part={'part', 0x3d, 0xde16}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 1.404257662s ago: executing program 1 (id=2404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.247846466s ago: executing program 3 (id=2405): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x2, 0x0, {0x2, 0x20}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.168574568s ago: executing program 1 (id=2406): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 820.420758ms ago: executing program 3 (id=2407): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x9) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x40, 0x3, &(0x7f0000000140)={0x19, "827c004f5a089918a2c4249a1f40dd4b29906e348ab8bb16c6c4720c53d2f8b445"}}) 769.095389ms ago: executing program 0 (id=2408): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0)=0x1fe, 0x7, 0x2, 0x0, 0x0, 0x0) 545.970195ms ago: executing program 3 (id=2409): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@mmap={0x1, 0x1, 0x4, 0x4, 0x1, {}, {0x3, 0x0, 0x0, 0xd, 0xf, 0x9, "66eb3996"}, 0x9836, 0x1, {}, 0x7}) 487.479447ms ago: executing program 4 (id=2410): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x5, 0x2f, {0x2f, 0xc, "6169ea9641938c58a5238ad60375b149973e9840bbb7c69c1b54867b07c04a96588091576dcad6d86b57c0d947"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 336.646741ms ago: executing program 3 (id=2411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 268.051583ms ago: executing program 0 (id=2412): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 42.462999ms ago: executing program 0 (id=2413): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="be4d071716b8", 0x6}], 0x1) 33.791379ms ago: executing program 1 (id=2414): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x1c2d82e1) 0s ago: executing program 3 (id=2415): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010005", 0x7) kernel console output (not intermixed with test programs): 9.835203][ T9579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.989350][ T5773] syz-executor: attempt to access beyond end of device [ 249.989350][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.012142][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 250.017306][ T8] cp210x 3-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 250.038585][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 250.060400][ T8] usb 3-1: USB disconnect, device number 11 [ 250.096565][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.125656][ T8] cp210x 3-1:0.4: device disconnected [ 250.187650][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'. [ 250.201348][ T9605] IPVS: Error joining to the multicast group [ 250.781361][ T9617] FAT-fs (loop0): Directory bread(block 64) failed [ 250.797823][ T9617] FAT-fs (loop0): Directory bread(block 65) failed [ 250.804505][ T9617] FAT-fs (loop0): Directory bread(block 66) failed [ 250.832330][ T9617] FAT-fs (loop0): Directory bread(block 67) failed [ 250.861016][ T9617] FAT-fs (loop0): Directory bread(block 68) failed [ 250.877924][ T9617] FAT-fs (loop0): Directory bread(block 69) failed [ 250.892928][ T9617] FAT-fs (loop0): Directory bread(block 70) failed [ 250.918446][ T9617] FAT-fs (loop0): Directory bread(block 71) failed [ 250.929217][ T9617] FAT-fs (loop0): Directory bread(block 72) failed [ 250.942863][ T9617] FAT-fs (loop0): Directory bread(block 73) failed [ 251.625830][ T9622] set_capacity_and_notify: 3 callbacks suppressed [ 251.625845][ T9622] loop1: detected capacity change from 0 to 40427 [ 251.673952][ T9622] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 251.711101][ T9622] F2FS-fs (loop1): invalid crc value [ 251.735995][ T9622] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.798839][ T9646] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1441'. [ 251.835128][ T9627] loop2: detected capacity change from 0 to 40427 [ 251.867327][ T9627] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 251.884865][ T9622] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.894206][ T9627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 251.943396][ T9627] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 251.982439][ T9627] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c [ 252.021877][ T9627] F2FS-fs (loop2): invalid crc value [ 252.046425][ T9627] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 252.107900][ T9627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.121839][ T5776] syz-executor: attempt to access beyond end of device [ 252.121839][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.148617][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 252.236203][ T9627] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 252.293814][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 252.346712][ T9627] F2FS-fs (loop2): Start checkpoint disabled! [ 252.362405][ T9627] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 252.379929][ T9651] bridge0: entered promiscuous mode [ 252.385726][ T9627] F2FS-fs (loop2): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 252.421564][ T9627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 252.443850][ T9640] loop0: detected capacity change from 0 to 40427 [ 252.444730][ T9627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 252.470504][ T9640] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 252.493613][ T9640] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 252.533025][ T9640] F2FS-fs (loop0): invalid crc value [ 252.612679][ T9627] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 252.877287][ T9640] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 252.908236][ T9640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.996196][ T4132] kworker/u4:9: attempt to access beyond end of device [ 252.996196][ T4132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.024958][ T4132] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 253.780948][ T9673] loop0: detected capacity change from 0 to 4096 [ 253.791713][ T9662] loop3: detected capacity change from 0 to 40427 [ 253.804306][ T9662] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 253.811531][ T9662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.849472][ T9662] F2FS-fs (loop3): heap/no_heap options were deprecated [ 253.861504][ T9662] F2FS-fs (loop3): invalid crc value [ 253.870506][ T9673] NILFS (loop0): invalid segment: Checksum error in segment payload [ 253.878809][ T9673] NILFS (loop0): trying rollback from an earlier position [ 253.888236][ T9662] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.922576][ T9673] NILFS (loop0): recovery complete [ 253.938258][ T9677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.975095][ T9662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 253.995160][ T9662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.296323][ T5773] syz-executor: attempt to access beyond end of device [ 254.296323][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.335575][ T5773] F2FS-fs (loop3): Remounting filesystem read-only [ 254.348158][ T9669] loop1: detected capacity change from 0 to 32768 [ 254.448762][ T9669] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.649292][ T9669] XFS (loop1): Ending clean mount [ 254.659393][ T9669] XFS (loop1): Quotacheck needed: Please wait. [ 254.751359][ T9669] XFS (loop1): Quotacheck: Done. [ 254.792027][ T9680] loop2: detected capacity change from 0 to 32768 [ 254.855417][ T9680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1451 (9680) [ 254.926461][ T9680] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.960526][ T9680] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 254.996843][ T9680] BTRFS info (device loop2): using free space tree [ 255.213177][ T9680] BTRFS info (device loop2): enabling ssd optimizations [ 255.235476][ T9680] BTRFS info (device loop2): auto enabling async discard [ 255.405501][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.775117][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.784669][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003568][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.287084][ T9715] loop3: detected capacity change from 0 to 40427 [ 256.330270][ T9715] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 256.350436][ T9715] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.381895][ T9715] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 256.405967][ T9715] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 256.458395][ T9715] F2FS-fs (loop3): invalid crc value [ 256.483824][ T9715] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 256.515451][ T9726] loop0: detected capacity change from 0 to 4096 [ 256.533533][ T9715] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.594725][ T9731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.672950][ T9715] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 256.730535][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 256.832385][ T9715] F2FS-fs (loop3): Start checkpoint disabled! [ 256.840847][ T9715] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 256.852737][ T9715] F2FS-fs (loop3): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 256.948228][ T9715] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.994639][ T9715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 257.048216][ T9737] vivid-007: ================= START STATUS ================= [ 257.069462][ T9737] vivid-007: Enable Output Cropping: true grabbed [ 257.084578][ T9737] vivid-007: Enable Output Composing: true grabbed [ 257.111705][ T9737] vivid-007: Enable Output Scaler: true grabbed [ 257.126686][ T9737] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 257.154360][ T9737] vivid-007: Transmit Mode: HDMI grabbed [ 257.164400][ T9737] vivid-007: Display Present: true inactive [ 257.177798][ T9737] vivid-007: Hotplug Present: 0x00000001 [ 257.198658][ T9715] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 257.199319][ T9737] vivid-007: RxSense Present: 0x00000001 [ 257.241477][ T9737] vivid-007: EDID Present: 0x00000001 [ 257.270258][ T9737] vivid-007: ================== END STATUS ================== [ 257.335930][ T9724] loop2: detected capacity change from 0 to 40427 [ 257.345786][ T9724] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 257.354373][ T9724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 257.400357][ T9724] F2FS-fs (loop2): invalid crc value [ 257.550390][ T9750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1468'. [ 257.588657][ T9752] loop1: detected capacity change from 0 to 256 [ 257.592946][ T12] kworker/u4:1: attempt to access beyond end of device [ 257.592946][ T12] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.630577][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 257.664205][ T9752] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 257.718801][ T9724] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 257.734812][ T9724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.907193][ T5778] syz-executor: attempt to access beyond end of device [ 257.907193][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.978392][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 258.569152][ T9755] loop0: detected capacity change from 0 to 32768 [ 258.613975][ T9755] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 258.990442][ T8306] ocfs2: Unmounting device (7,0) on (node local) [ 259.110655][ T9763] loop1: detected capacity change from 0 to 40427 [ 259.174977][ T9763] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 259.208046][ T9763] F2FS-fs (loop1): invalid crc value [ 259.248638][ T9763] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.420850][ T9763] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.622778][ T5776] syz-executor: attempt to access beyond end of device [ 259.622778][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.655698][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 259.723808][ T9793] loop3: detected capacity change from 0 to 4096 [ 259.861798][ T9793] ntfs: volume version 3.1. [ 260.050438][ T9786] loop2: detected capacity change from 0 to 32768 [ 260.100916][ T9786] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1482 (9786) [ 260.170686][ T9786] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.234084][ T9786] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 260.265946][ T9786] BTRFS info (device loop2): force clearing of disk cache [ 260.273145][ T9786] BTRFS info (device loop2): enabling auto defrag [ 260.295126][ T9786] BTRFS info (device loop2): max_inline at 0 [ 260.301191][ T9786] BTRFS info (device loop2): enabling disk space caching [ 260.321324][ T9786] BTRFS info (device loop2): disk space caching is enabled [ 260.330176][ T9803] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1491'. [ 260.489069][ T9786] BTRFS info (device loop2): enabling ssd optimizations [ 260.504731][ T9786] BTRFS info (device loop2): auto enabling async discard [ 260.579738][ T9786] BTRFS info (device loop2): rebuilding free space tree [ 260.681719][ T9786] BTRFS info (device loop2): disabling free space tree [ 260.700850][ T9786] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.744640][ T9786] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 261.228136][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 261.290192][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.420755][ T9801] loop0: detected capacity change from 0 to 40427 [ 261.488252][ T9801] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 261.552324][ T9801] F2FS-fs (loop0): invalid crc value [ 261.597968][ T9801] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.706522][ T9839] loop3: detected capacity change from 0 to 64 [ 261.794845][ T9801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.928716][ T9829] loop1: detected capacity change from 0 to 32768 [ 261.943655][ T8306] syz-executor: attempt to access beyond end of device [ 261.943655][ T8306] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.004407][ T8306] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 262.714727][ T9859] loop3: detected capacity change from 0 to 512 [ 262.737776][ T9859] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.827634][ T9859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1508: invalid indirect mapped block 9 (level 0) [ 262.855680][ T9859] EXT4-fs (loop3): 1 truncate cleaned up [ 262.882603][ T9859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.930730][ T9867] loop1: detected capacity change from 0 to 128 [ 262.964466][ T9867] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.011922][ T9867] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.048457][ T28] audit: type=1800 audit(1777563542.077:47): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1508" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 263.178447][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.756370][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 263.768768][ T9895] netlink: 'syz.3.1525': attribute type 5 has an invalid length. [ 263.944747][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 264.105371][ T9909] loop0: detected capacity change from 0 to 8 [ 264.207187][ T9909] SQUASHFS error: Unable to read directory block [629:46] [ 264.278409][ T9914] loop1: detected capacity change from 0 to 512 [ 264.319913][ T9914] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #11: comm syz.1.1532: unexpected EA_INODE flag [ 264.358580][ T9914] EXT4-fs (loop1): Remounting filesystem read-only [ 264.396920][ T9914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.673988][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.073875][ T9915] loop3: detected capacity change from 0 to 32768 [ 265.099520][ T9915] [ 265.099520][ T9915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.099520][ T9915] [ 265.131618][ T9915] ERROR: (device loop3): diWrite: ixpxd invalid [ 265.131618][ T9915] [ 265.151529][ T9915] ERROR: (device loop3): remounting filesystem as read-only [ 265.160584][ T9915] ERROR: (device loop3): txCommit: [ 265.160584][ T9915] [ 265.190554][ T9915] ERROR: (device loop3): dtSearch: stack overrun! [ 265.190554][ T9915] [ 265.226420][ T9915] btstack dump: [ 265.230373][ T9915] bn = 0, index = 0 [ 265.238114][ T9915] bn = 0, index = 0 [ 265.241976][ T9915] bn = 0, index = 0 [ 265.254887][ T9915] bn = 0, index = 0 [ 265.266999][ T9915] bn = 0, index = 0 [ 265.273912][ T9915] bn = 0, index = 0 [ 265.284094][ T9915] bn = 0, index = 0 [ 265.293345][ T9915] bn = 0, index = 0 [ 265.304801][ T9915] jfs_lookup: dtSearch returned -5 [ 265.419199][ T9947] loop1: detected capacity change from 0 to 1024 [ 265.597352][ T11] hfsplus: b-tree write err: -5, ino 25 [ 265.603150][ T11] hfsplus: b-tree write err: -5, ino 4 [ 265.654991][ T11] hfsplus: b-tree write err: -5, ino 2 [ 265.877406][ T9961] loop3: detected capacity change from 0 to 64 [ 266.035076][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 266.073939][ T9967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1555'. [ 266.301225][ T9973] erspan0: entered promiscuous mode [ 266.620974][ T9984] loop2: detected capacity change from 0 to 2048 [ 266.677595][ T9984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.794599][ T28] audit: type=1800 audit(1777563545.817:48): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1563" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 267.068905][ T9995] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 267.246106][T10001] tipc: Started in network mode [ 267.274625][T10001] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 267.303697][T10001] tipc: Enabling of bearer rejected, failed to enable media [ 267.368724][T10005] loop1: detected capacity change from 0 to 1024 [ 267.467002][T10005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.489384][T10005] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.619119][T10017] loop2: detected capacity change from 0 to 512 [ 267.687808][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.207345][T10013] loop3: detected capacity change from 0 to 32768 [ 268.745122][T10043] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 268.801699][T10027] loop1: detected capacity change from 0 to 32768 [ 268.828684][T10027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1583 (10027) [ 268.887971][T10027] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.923135][T10027] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 268.944604][T10027] BTRFS info (device loop1): using free space tree [ 269.011271][T10062] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1591'. [ 269.100790][T10027] BTRFS info (device loop1): enabling ssd optimizations [ 269.146441][T10027] BTRFS info (device loop1): auto enabling async discard [ 269.230357][T10067] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 269.251987][T10027] BTRFS info (device loop1): device stats zeroed by syz.1.1583 (10027) [ 269.262075][T10067] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1592'. [ 269.338445][T10070] loop2: detected capacity change from 0 to 2048 [ 269.359565][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.386403][T10070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.547537][ T6008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (6008) [ 269.645519][T10078] loop3: detected capacity change from 0 to 64 [ 269.773561][ T28] audit: type=1800 audit(1777563548.797:49): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1598" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 270.042818][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 270.210720][T10084] loop3: detected capacity change from 0 to 8192 [ 270.247217][T10084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 270.261779][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 270.279951][T10084] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 270.289408][T10084] REISERFS (device loop3): using ordered data mode [ 270.296630][T10084] reiserfs: using flush barriers [ 270.306359][T10091] loop1: detected capacity change from 0 to 512 [ 270.314262][T10084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 270.337831][ T27] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 270.342713][T10084] REISERFS (device loop3): checking transaction log (loop3) [ 270.369201][T10084] REISERFS (device loop3): Using r5 hash to sort names [ 270.376705][T10084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 270.395288][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.403357][ T27] usb 1-1: Product: syz [ 270.461054][T10084] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 270.467703][ T27] usb 1-1: Manufacturer: syz [ 270.495445][ T27] usb 1-1: SerialNumber: syz [ 270.519705][ T27] usb 1-1: config 0 descriptor?? [ 270.538439][T10084] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 270.567321][ T27] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 270.592474][T10084] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 270.606612][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 270.612402][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 270.674367][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 270.704695][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 270.739539][T10097] loop1: detected capacity change from 0 to 128 [ 270.757128][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.806620][T10080] ttusb2: i2c wr len=58 too high [ 270.812331][ T27] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 270.841253][ T27] usb 1-1: media controller created [ 270.910390][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.010342][ T27] usb 1-1: selecting invalid altsetting 3 [ 271.029157][ T27] ttusb2: set interface to alts=3 failed [ 271.179517][ T27] DVB: Unable to find symbol tda10086_attach() [ 271.189644][ T27] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 271.209310][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 271.239206][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.261558][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 271.271555][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.306861][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 271.358124][ T27] usb 1-1: USB disconnect, device number 18 [ 271.463582][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 271.506721][T10114] loop2: detected capacity change from 0 to 512 [ 271.617786][T10114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.617905][T10114] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.842028][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.004349][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 272.042800][T10129] loop0: detected capacity change from 0 to 4096 [ 272.072206][T10129] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 272.259772][T10129] ntfs3: loop0: failed to convert "c46c" to cp1255 [ 272.394256][T10144] loop3: detected capacity change from 0 to 256 [ 272.408157][T10144] exfat: Deprecated parameter 'utf8' [ 272.454815][T10144] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 272.488787][T10147] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 272.504832][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 272.533866][T10147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 272.595030][T10147] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.604147][T10153] sctp: [Deprecated]: syz.0.1632 (pid 10153) Use of int in max_burst socket option. [ 272.604147][T10153] Use struct sctp_assoc_value instead [ 272.694966][T10147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1630: bg 0: block 361: padding at end of block bitmap is not set [ 272.727541][T10147] EXT4-fs (loop2): Remounting filesystem read-only [ 272.768228][T10147] EXT4-fs (loop2): 1 truncate cleaned up [ 272.795889][T10147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 273.236759][T10168] set_capacity_and_notify: 1 callbacks suppressed [ 273.236775][T10168] loop3: detected capacity change from 0 to 2048 [ 273.280928][T10168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 273.326735][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 273.496400][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.904435][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 274.476925][T10181] loop2: detected capacity change from 0 to 40427 [ 274.497332][T10191] loop3: detected capacity change from 0 to 32768 [ 274.504120][T10181] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 274.529341][T10181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 274.567125][T10181] F2FS-fs (loop2): build fault injection attr: rate: 27487, type: 0x7ffff [ 274.601102][T10181] F2FS-fs (loop2): invalid crc value [ 274.639500][T10191] find_entry called with index = 0 [ 274.663238][T10181] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.683638][T10203] loop0: detected capacity change from 0 to 512 [ 274.696012][T10191] read_mapping_page failed! [ 274.705007][T10191] ERROR: (device loop3): txCommit: [ 274.705007][T10191] [ 274.806021][T10203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.838085][T10193] loop1: detected capacity change from 0 to 32768 [ 274.864311][T10203] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.896972][ T28] audit: type=1800 audit(1777563553.927:50): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1654" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 274.928419][T10181] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 274.936238][T10181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 274.945283][T10193] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 274.964861][ T5786] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.972441][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 274.984913][T10193] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.032101][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.250106][T10193] XFS (loop1): Ending clean mount [ 275.454976][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.820880][T10226] loop3: detected capacity change from 0 to 512 [ 275.882612][T10226] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 275.912225][T10226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.967979][T10226] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 276.006006][T10226] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 276.032928][T10226] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1661: Failed to acquire dquot type 1 [ 276.055400][T10226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1661: bg 0: block 40: padding at end of block bitmap is not set [ 276.076664][T10231] loop1: detected capacity change from 0 to 256 [ 276.105746][T10231] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x4de368d8, utbl_chksum : 0xe619d30d) [ 276.122698][T10226] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 276.145297][T10226] EXT4-fs (loop3): 1 truncate cleaned up [ 276.152458][T10226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.234885][ T5818] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 276.286490][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.415431][T10216] loop0: detected capacity change from 0 to 40427 [ 276.447047][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.456423][T10216] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 276.471333][T10216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 276.478720][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 276.504337][T10216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.514602][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.555331][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 276.597574][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.630064][ T5818] usb 3-1: config 0 descriptor?? [ 276.639455][T10229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.700022][T10216] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.716398][T10216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 276.823031][ T8306] syz-executor: attempt to access beyond end of device [ 276.823031][ T8306] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.875200][ T8306] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 277.145779][ T5818] logitech-hidpp-device 0003:046D:C081.000E: ignoring exceeding usage max [ 277.173817][T10253] loop3: detected capacity change from 0 to 128 [ 277.198716][ T5818] logitech-hidpp-device 0003:046D:C081.000E: item fetching failed at offset 24/40 [ 277.212669][T10253] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 277.230256][ T5818] logitech-hidpp-device 0003:046D:C081.000E: hidpp_probe:parse failed [ 277.258721][ T5818] logitech-hidpp-device: probe of 0003:046D:C081.000E failed with error -22 [ 277.289849][T10253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.409443][ T5818] usb 3-1: USB disconnect, device number 12 [ 277.445610][ T5787] Bluetooth: hci2: command tx timeout [ 278.540643][T10264] loop3: detected capacity change from 0 to 40427 [ 278.570214][T10264] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 278.591083][T10264] F2FS-fs (loop3): Image doesn't support compression [ 278.624792][T10264] F2FS-fs (loop3): Image doesn't support compression [ 278.655053][T10264] F2FS-fs (loop3): invalid crc value [ 278.686943][T10264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.806692][T10292] loop1: detected capacity change from 0 to 764 [ 278.853244][T10278] loop2: detected capacity change from 0 to 32768 [ 278.870468][T10264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.920038][T10278] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 278.928877][T10278] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.963392][T10264] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 279.056131][T10264] syz.3.1678: attempt to access beyond end of device [ 279.056131][T10264] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 279.111439][T10278] XFS (loop2): Ending clean mount [ 279.118170][T10304] loop1: detected capacity change from 0 to 8 [ 279.133027][T10278] XFS (loop2): Quotacheck needed: Please wait. [ 279.182386][T10294] loop0: detected capacity change from 0 to 4096 [ 279.228904][ T5773] syz-executor: attempt to access beyond end of device [ 279.228904][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.242234][T10294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.249297][ T5773] F2FS-fs (loop3): Remounting filesystem read-only [ 279.297888][T10278] XFS (loop2): Quotacheck: Done. [ 279.596356][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.643129][T10310] loop1: detected capacity change from 0 to 1024 [ 279.665191][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 279.802154][T10310] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 279.849785][T10312] loop0: detected capacity change from 0 to 512 [ 279.856336][T10310] hfsplus: xattr search failed [ 279.862169][T10310] hfsplus: can't free extent [ 279.872440][T10312] EXT4-fs: Ignoring removed nobh option [ 279.909657][T10312] EXT4-fs: Invalid uid value -1 [ 280.108749][T10314] loop0: detected capacity change from 0 to 512 [ 280.142787][T10314] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 280.742653][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 280.775704][T10331] netlink: 'syz.0.1704': attribute type 2 has an invalid length. [ 280.783502][T10331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1704'. [ 281.023514][T10316] loop3: detected capacity change from 0 to 40427 [ 281.042430][T10321] loop2: detected capacity change from 0 to 32768 [ 281.101564][T10316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.113356][T10321] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 281.228481][T10321] XFS (loop2): Ending clean mount [ 281.251509][T10316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 281.263157][T10321] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 281.294666][T10321] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 281.381373][T10321] XFS (loop2): Unmount and run xfs_repair [ 281.395462][ T2321] pvrusb2: request_firmware fatal error with code=-110 [ 281.402444][T10321] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 281.438147][ T2321] pvrusb2: Failure uploading firmware1 [ 281.443660][ T2321] pvrusb2: Device initialization was not successful. [ 281.454132][T10321] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 281.475235][T10321] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 281.484134][T10321] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 281.493158][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 281.514600][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 281.538152][T10321] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 281.555395][ T2321] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 281.565979][ T5837] pvrusb2: Device being rendered inoperable [ 281.574744][T10321] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 281.584962][ T2321] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 281.593452][ T5773] syz-executor: attempt to access beyond end of device [ 281.593452][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.608362][T10321] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 281.619563][T10321] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 281.635807][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 281.664751][T10321] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 281.673677][T10321] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 281.734749][T10321] XFS (loop2): Failed to initialize disk quotas. [ 281.853680][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.201028][T10366] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 282.220471][T10366] NILFS (loop1): mounting unchecked fs [ 282.318172][T10366] NILFS (loop1): recovery complete [ 282.336103][T10369] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.348158][ T6008] udevd[6008]: incorrect nilfs2 checksum on /dev/loop1 [ 282.561897][T10373] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 282.594818][T10373] NILFS (loop2): mounting unchecked fs [ 282.663269][T10375] erofs: (device loop3): mounted with root inode @ nid 36. [ 282.682791][T10373] NILFS (loop2): recovery complete [ 282.698575][T10375] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 282.717756][T10375] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 282.721236][T10380] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.771043][T10375] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 282.824608][T10375] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 283.027966][T10385] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 283.145175][T10386] hfsplus: bad catalog entry type [ 283.183020][ T5778] sysv_free_block: flc_count > flc_size [ 283.193492][ T5778] sysv_free_block: flc_count > flc_size [ 283.201800][ T5778] sysv_free_block: flc_count > flc_size [ 283.234800][ T5778] sysv_free_block: flc_count > flc_size [ 283.240408][ T5778] sysv_free_block: flc_count > flc_size [ 283.261284][ T5778] sysv_free_block: flc_count > flc_size [ 283.267889][ T5778] sysv_free_block: flc_count > flc_size [ 283.273670][ T5778] sysv_free_block: flc_count > flc_size [ 283.284286][ T5778] sysv_free_block: flc_count > flc_size [ 283.292816][ T5778] sysv_free_block: flc_count > flc_size [ 283.299835][ T1149] hfsplus: b-tree write err: -5, ino 25 [ 283.309753][ T1149] hfsplus: b-tree write err: -5, ino 4 [ 283.316837][ T5778] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 283.328597][ T1149] hfsplus: b-tree write err: -5, ino 2 [ 283.558965][T10396] FAT-fs (loop2): Directory bread(block 64) failed [ 283.593907][T10396] FAT-fs (loop2): Directory bread(block 65) failed [ 283.625985][T10396] FAT-fs (loop2): Directory bread(block 66) failed [ 283.632576][T10396] FAT-fs (loop2): Directory bread(block 67) failed [ 283.691418][T10396] FAT-fs (loop2): Directory bread(block 68) failed [ 283.717553][T10396] FAT-fs (loop2): Directory bread(block 69) failed [ 283.724248][T10396] FAT-fs (loop2): Directory bread(block 70) failed [ 283.756644][T10396] FAT-fs (loop2): Directory bread(block 71) failed [ 283.763337][T10406] set_capacity_and_notify: 6 callbacks suppressed [ 283.763349][T10406] loop0: detected capacity change from 0 to 1024 [ 283.779305][T10396] FAT-fs (loop2): Directory bread(block 72) failed [ 283.789015][T10396] FAT-fs (loop2): Directory bread(block 73) failed [ 284.010019][T10404] loop1: detected capacity change from 0 to 8192 [ 284.034364][T10404] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.069893][T10404] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 284.080339][T10404] REISERFS (device loop1): using ordered data mode [ 284.087098][T10404] reiserfs: using flush barriers [ 284.104596][T10404] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.121576][T10404] REISERFS (device loop1): checking transaction log (loop1) [ 284.143288][T10404] REISERFS (device loop1): Using tea hash to sort names [ 284.161708][T10404] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 284.369045][T10417] [U] M٭Q& K4 [ 284.516059][T10420] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1739'. [ 284.534628][T10420] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1739'. [ 284.567738][T10422] loop2: detected capacity change from 0 to 256 [ 284.632835][T10422] FAT-fs (loop2): Directory bread(block 64) failed [ 284.652818][T10422] FAT-fs (loop2): Directory bread(block 65) failed [ 284.674387][T10422] FAT-fs (loop2): Directory bread(block 66) failed [ 284.704806][T10422] FAT-fs (loop2): Directory bread(block 67) failed [ 284.727314][T10422] FAT-fs (loop2): Directory bread(block 68) failed [ 284.748497][T10422] FAT-fs (loop2): Directory bread(block 69) failed [ 284.757090][T10422] FAT-fs (loop2): Directory bread(block 70) failed [ 284.763662][T10422] FAT-fs (loop2): Directory bread(block 71) failed [ 284.783497][T10424] loop1: detected capacity change from 0 to 128 [ 284.795495][T10422] FAT-fs (loop2): Directory bread(block 72) failed [ 284.802166][T10422] FAT-fs (loop2): Directory bread(block 73) failed [ 285.528114][T10449] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1753'. [ 285.581905][T10451] loop0: detected capacity change from 0 to 64 [ 285.686671][T10455] loop2: detected capacity change from 0 to 736 [ 286.080845][T10460] bridge0: entered promiscuous mode [ 286.094762][T10460] macsec1: entered promiscuous mode [ 286.288980][T10453] loop1: detected capacity change from 0 to 32768 [ 286.307944][T10453] (syz.1.1755,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.347760][T10453] (syz.1.1755,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.447588][T10453] JBD2: Ignoring recovery information on journal [ 286.545926][T10453] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 286.652178][T10477] loop0: detected capacity change from 0 to 4096 [ 286.806977][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 286.819806][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 286.899727][T10477] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 286.936889][T10477] ntfs3: loop0: Failed to load $Extend (-22). [ 286.943060][T10477] ntfs3: loop0: Failed to initialize $Extend. [ 287.013173][ T28] audit: type=1800 audit(1777563566.037:51): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1766" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 287.156771][T10487] loop1: detected capacity change from 0 to 24 [ 287.539418][T10491] loop1: detected capacity change from 0 to 8192 [ 287.614450][T10491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 287.669536][T10491] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 287.719366][T10491] REISERFS (device loop1): using ordered data mode [ 287.736269][T10485] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 287.753160][T10491] reiserfs: using flush barriers [ 287.760276][T10485] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 287.791344][T10485] F2FS-fs (loop2): invalid crc value [ 287.801005][T10491] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 287.835173][T10491] REISERFS (device loop1): checking transaction log (loop1) [ 287.857886][T10491] REISERFS (device loop1): Using r5 hash to sort names [ 287.894999][T10491] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 287.945388][T10491] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 288.174590][T10485] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 288.181724][T10485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.367038][T10485] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 288.670808][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1779'. [ 288.702388][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1779'. [ 288.810988][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 288.893174][T10507] [U] [ 289.004687][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 289.045906][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 289.078991][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.087754][ T8] usb 2-1: Product: syz [ 289.091965][ T8] usb 2-1: Manufacturer: syz [ 289.098147][ T8] usb 2-1: SerialNumber: syz [ 289.105518][ T8] usb 2-1: config 0 descriptor?? [ 289.117257][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 289.146730][T10516] set_capacity_and_notify: 2 callbacks suppressed [ 289.146745][T10516] loop3: detected capacity change from 0 to 1024 [ 289.340108][T10522] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1785'. [ 289.513704][T10526] loop2: detected capacity change from 0 to 128 [ 289.530525][ T8] gspca_se401: Wrong descriptor type [ 289.571071][T10526] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 289.598208][T10528] 9p: Unknown Cache mode or invalid value m [ 289.616884][T10526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.740379][ T5818] usb 2-1: USB disconnect, device number 12 [ 289.846526][T10534] loop0: detected capacity change from 0 to 1024 [ 290.669720][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 290.859181][T10559] loop1: detected capacity change from 0 to 4096 [ 290.886837][T10559] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 291.287184][T10538] loop2: detected capacity change from 0 to 32768 [ 291.374699][T10538] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 291.500481][T10538] XFS (loop2): Ending clean mount [ 291.873793][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.319550][T10602] netlink: 'syz.3.1808': attribute type 5 has an invalid length. [ 292.684912][T10610] tipc: Started in network mode [ 292.689846][T10610] tipc: Node identity , cluster identity 4711 [ 292.953498][T10623] CIFS mount error: No usable UNC path provided in device string! [ 292.953498][T10623] [ 292.989696][T10623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.065195][T10621] loop3: detected capacity change from 0 to 4096 [ 293.100628][T10621] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 293.884248][T10647] loop0: detected capacity change from 0 to 256 [ 294.127196][T10653] loop1: detected capacity change from 0 to 64 [ 294.175014][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.194463][T10654] loop0: detected capacity change from 0 to 2048 [ 294.291453][T10654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.345680][T10654] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 294.395498][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 294.422311][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.435914][ T27] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.446081][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.457163][ T27] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 294.461274][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.484595][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.492687][ T27] usb 3-1: Product: syz [ 294.501837][ T27] usb 3-1: Manufacturer: syz [ 294.513060][ T27] usb 3-1: SerialNumber: syz [ 294.532366][ T27] usb 3-1: config 0 descriptor?? [ 294.982910][ T27] gs_usb 3-1:0.0: Configuring for 40 interfaces [ 295.184926][ T27] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 295.193743][ T27] gs_usb: probe of 3-1:0.0 failed with error -71 [ 295.208702][ T27] usb 3-1: USB disconnect, device number 13 [ 295.806601][T10668] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 295.871997][T10668] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 296.579301][T10673] loop3: detected capacity change from 0 to 32768 [ 296.646920][T10673] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.778026][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 296.812798][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 296.822996][T10702] netlink: 'syz.1.1851': attribute type 15 has an invalid length. [ 296.831015][T10702] netlink: 'syz.1.1851': attribute type 18 has an invalid length. [ 296.862606][T10673] XFS (loop3): Ending clean mount [ 296.882206][T10673] XFS (loop3): Quotacheck needed: Please wait. [ 297.012765][T10673] XFS (loop3): Quotacheck: Done. [ 297.031176][T10712] vivid-000: disconnect [ 297.037430][T10711] vivid-000: reconnect [ 297.050847][T10708] loop1: detected capacity change from 0 to 1024 [ 297.120139][T10708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.193628][T10708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.389775][T10724] ip6tnl1: entered allmulticast mode [ 297.433630][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.456874][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.918974][T10738] loop3: detected capacity change from 0 to 256 [ 297.938667][T10738] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.975357][T10738] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 297.993836][T10740] bond0: option ad_select: unable to set because the bond device is up [ 298.017278][T10738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 298.121641][T10743] loop1: detected capacity change from 0 to 512 [ 298.159318][T10743] EXT4-fs: Ignoring removed orlov option [ 298.203234][T10743] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.211802][T10743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.235505][T10743] EXT4-fs (loop1): 1 truncate cleaned up [ 298.242597][T10743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.432859][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.696916][T10766] loop0: detected capacity change from 0 to 64 [ 298.809083][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 299.305159][T10786] loop1: detected capacity change from 0 to 512 [ 299.339041][T10786] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1890: invalid block [ 299.392674][T10786] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1890: invalid indirect mapped block 4294967295 (level 1) [ 299.435652][T10786] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1890: invalid indirect mapped block 4294967295 (level 1) [ 299.454335][T10786] EXT4-fs (loop1): 2 truncates cleaned up [ 299.462482][T10786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.475414][ T5820] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 299.534138][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.676390][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.687581][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.698221][ T5820] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 299.707638][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.725281][ T5820] usb 3-1: config 0 descriptor?? [ 299.960581][T10805] loop0: detected capacity change from 0 to 1024 [ 300.147735][ T5820] aquacomputer_d5next 0003:0C70:F0B6.000F: item fetching failed at offset 5/7 [ 300.165147][ T5820] aquacomputer_d5next: probe of 0003:0C70:F0B6.000F failed with error -22 [ 300.380524][ T5820] usb 3-1: USB disconnect, device number 14 [ 300.442334][ T28] audit: type=1326 audit(1777563579.467:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.1.1893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53799cdd9 code=0x7fc00000 [ 300.541846][T10820] loop1: detected capacity change from 0 to 128 [ 300.605501][T10822] loop0: detected capacity change from 0 to 256 [ 300.615607][T10822] exfat: Deprecated parameter 'namecase' [ 300.646467][T10822] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 300.949105][T10834] loop1: detected capacity change from 0 to 8 [ 301.040752][T10834] SQUASHFS error: Unable to read directory block [2c0:35] [ 301.181990][T10840] loop0: detected capacity change from 0 to 1024 [ 301.309688][T10840] hfsplus: bad catalog entry type [ 301.405106][ T1119] hfsplus: b-tree write err: -5, ino 25 [ 301.422149][ T1119] hfsplus: b-tree write err: -5, ino 4 [ 301.431813][ T1119] hfsplus: b-tree write err: -5, ino 2 [ 301.620532][T10848] loop1: detected capacity change from 0 to 4096 [ 302.090571][T10863] loop3: detected capacity change from 0 to 4096 [ 302.136120][T10863] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 302.190599][T10863] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 302.219459][T10863] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 302.543540][T10876] loop1: detected capacity change from 0 to 1024 [ 302.631025][T10876] hfsplus: request for non-existent node 134217728 in B*Tree [ 302.655059][T10876] hfsplus: request for non-existent node 134217728 in B*Tree [ 302.892622][T10866] loop0: detected capacity change from 0 to 32768 [ 302.950432][T10866] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 303.153150][T10866] XFS (loop0): Ending clean mount [ 303.304592][ T1819] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 303.319072][ T8306] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 303.515487][ T1819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.535828][ T1819] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.567527][ T1819] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 303.605636][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.629217][ T1819] usb 2-1: config 0 descriptor?? [ 303.661612][ T1819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 303.689184][ T1819] dvb-usb: bulk message failed: -22 (3/0) [ 303.717037][ T1819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 303.734675][ T1819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 303.751583][ T1819] usb 2-1: media controller created [ 303.784657][ T1819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.826630][ T1819] dvb-usb: bulk message failed: -22 (6/0) [ 303.865076][ T1819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 303.896831][ T1819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 303.917757][ T1819] dvb-usb: schedule remote query interval to 150 msecs. [ 303.934685][ T1819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 303.980862][ T1819] usb 2-1: USB disconnect, device number 13 [ 304.079427][ T1819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 304.282040][T10937] ceph: Unexpected value for 'acl' [ 304.328417][T10930] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 304.359751][T10930] ntfs3: loop2: Failed to load $Extend (-22). [ 304.375985][T10930] ntfs3: loop2: Failed to initialize $Extend. [ 304.478102][T10930] overlayfs: upper fs does not support tmpfile. [ 304.546934][T10930] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 304.569955][T10930] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null. [ 304.609104][T10930] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 304.629093][T10930] overlayfs: failed to verify upper root origin [ 304.735863][ T12] ntfs3: loop2: ino=9, ntfs3_write_inode failed, -22. [ 304.745372][ T5778] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 304.769035][T10951] set_capacity_and_notify: 1 callbacks suppressed [ 304.769048][T10951] loop3: detected capacity change from 0 to 256 [ 304.867865][T10953] loop1: detected capacity change from 0 to 512 [ 304.937414][T10955] loop2: detected capacity change from 0 to 256 [ 304.946953][T10953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.136846][T10955] FAT-fs (loop2): Directory bread(block 64) failed [ 305.143519][T10955] FAT-fs (loop2): Directory bread(block 65) failed [ 305.171315][T10955] FAT-fs (loop2): Directory bread(block 66) failed [ 305.183147][T10955] FAT-fs (loop2): Directory bread(block 67) failed [ 305.211796][T10955] FAT-fs (loop2): Directory bread(block 68) failed [ 305.220315][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.236037][T10955] FAT-fs (loop2): Directory bread(block 69) failed [ 305.242676][T10955] FAT-fs (loop2): Directory bread(block 70) failed [ 305.258099][T10955] FAT-fs (loop2): Directory bread(block 71) failed [ 305.279922][T10955] FAT-fs (loop2): Directory bread(block 72) failed [ 305.301465][T10955] FAT-fs (loop2): Directory bread(block 73) failed [ 305.385260][T10967] 9pnet_fd: p9_fd_create_tcp (10967): problem binding to privport [ 306.039321][T10987] tipc: Started in network mode [ 306.058523][T10987] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 306.075977][T10987] tipc: Enabled bearer , priority 10 [ 306.143929][T10977] loop2: detected capacity change from 0 to 32768 [ 306.160525][T10977] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1975 (10977) [ 306.186134][T10977] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 306.204868][T10977] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 306.221783][T10977] BTRFS info (device loop2): setting nodatacow, compression disabled [ 306.237769][T10977] BTRFS info (device loop2): enabling disk space caching [ 306.264977][T10977] BTRFS info (device loop2): force clearing of disk cache [ 306.272174][T10977] BTRFS info (device loop2): enabling ssd optimizations [ 306.311163][T10977] BTRFS info (device loop2): using spread ssd allocation scheme [ 306.344559][T10977] BTRFS info (device loop2): turning on sync discard [ 306.351335][T10977] BTRFS info (device loop2): turning off barriers [ 306.375305][T10977] BTRFS info (device loop2): not using ssd optimizations [ 306.382378][T10977] BTRFS info (device loop2): not using spread ssd allocation scheme [ 306.410769][T10977] BTRFS info (device loop2): force zlib compression, level 3 [ 306.431085][T10977] BTRFS info (device loop2): disk space caching is enabled [ 306.472067][T10977] workqueue: max_active 32768 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 306.515632][T10977] workqueue: max_active 32768 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 306.569425][T10977] workqueue: max_active 32768 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 306.601045][T10977] workqueue: max_active 32768 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 306.645680][T10977] workqueue: max_active 32768 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 306.695020][T10977] workqueue: max_active 32768 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 306.771748][T10977] workqueue: max_active 32768 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 306.891656][T10977] BTRFS info (device loop2): rebuilding free space tree [ 306.971373][T10977] BTRFS info (device loop2): disabling free space tree [ 306.985211][T10977] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 307.004884][T10977] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 307.037989][T11014] loop3: detected capacity change from 0 to 4096 [ 307.048060][T11014] EXT4-fs: Ignoring removed orlov option [ 307.083173][T11014] EXT4-fs (loop3): Test dummy encryption mode enabled [ 307.167326][T10991] loop1: detected capacity change from 0 to 40427 [ 307.196209][T11014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.205989][ T8] tipc: Node number set to 4269801488 [ 307.219829][T10991] F2FS-fs (loop1): invalid crc value [ 307.247500][T10991] F2FS-fs (loop1): Found nat_bits in checkpoint [ 307.316164][T11014] fs-verity (loop3, inode 13): Unknown hash algorithm number: 0 [ 307.409579][ T5778] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 307.424370][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.441045][T10991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 307.501877][T10996] loop0: detected capacity change from 0 to 32768 [ 307.554903][T10996] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1984 (10996) [ 307.644760][T10996] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 307.706450][T10996] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 307.752165][T10996] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 307.782560][T10996] BTRFS info (device loop0): use zstd compression, level 3 [ 307.826109][T10996] BTRFS info (device loop0): using free space tree [ 307.942658][T10996] BTRFS info (device loop0): enabling ssd optimizations [ 307.962524][T10996] BTRFS info (device loop0): auto enabling async discard [ 308.235569][ T8306] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 308.665513][T11057] loop2: detected capacity change from 0 to 256 [ 308.774727][T11027] loop3: detected capacity change from 0 to 32768 [ 308.861615][T11027] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.059118][T11027] XFS (loop3): Ending clean mount [ 309.424839][T11084] netlink: 'syz.0.2001': attribute type 2 has an invalid length. [ 309.465498][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.523984][T11052] loop1: detected capacity change from 0 to 32768 [ 309.673203][T11088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.734680][T11088] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.851434][T11088] EXT4-fs error (device loop0): ext4_xattr_block_find:1879: inode #15: comm syz.0.2004: corrupted xattr block 33: invalid ea_ino [ 309.970312][T11088] EXT4-fs (loop0): Remounting filesystem read-only [ 310.023976][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.045920][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.085062][ T12] Quota error (device loop0): write_blk: dquota write failed [ 310.109328][ T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 310.129751][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.160947][ T12] Quota error (device loop0): write_blk: dquota write failed [ 310.176458][ T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 310.200547][T11096] set_capacity_and_notify: 1 callbacks suppressed [ 310.200561][T11096] loop2: detected capacity change from 0 to 4096 [ 310.228784][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 310.280288][ T12] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 310.439437][T11096] ntfs3: loop2: failed to convert "0080" to maciceland [ 310.467970][T11096] ntfs3: loop2: failed to convert name for inode 1e. [ 310.484002][ T28] audit: type=1326 audit(1777563589.507:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.0.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 310.538502][ T28] audit: type=1326 audit(1777563589.507:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.0.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 310.622844][ T28] audit: type=1326 audit(1777563589.507:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.0.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 310.659813][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2012'. [ 310.705482][ T28] audit: type=1326 audit(1777563589.507:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.0.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 310.847748][ T28] audit: type=1326 audit(1777563589.507:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11105 comm="syz.0.2008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 310.902865][T11118] veth1_macvtap: left promiscuous mode [ 310.919295][T11118] macsec0: entered promiscuous mode [ 310.964376][T11119] veth1_macvtap: entered promiscuous mode [ 310.994989][T11119] macsec0: left promiscuous mode [ 311.132112][T11126] loop1: detected capacity change from 0 to 512 [ 311.220822][T11126] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.2019: corrupted in-inode xattr: invalid ea_ino [ 311.304347][T11126] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2019: couldn't read orphan inode 15 (err -117) [ 311.385854][T11126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.577120][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.770160][T11145] loop1: detected capacity change from 0 to 512 [ 311.798115][T11145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.843954][T11145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 311.874944][T11145] EXT4-fs (loop1): orphan cleanup on readonly fs [ 311.914901][T11145] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 311.956131][T11145] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 311.963080][T11145] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #13: comm syz.1.2025: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 311.984700][T11145] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2025: couldn't read orphan inode 13 (err -117) [ 312.025929][T11145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.069035][T11145] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.2025: inode #15: comm syz.1.2025: iget: illegal inode # [ 312.170285][T11127] loop2: detected capacity change from 0 to 32768 [ 312.214856][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.583200][T11163] loop0: detected capacity change from 0 to 16 [ 312.633958][T11163] erofs: (device loop0): mounted with root inode @ nid 36. [ 312.687955][T11163] syz.0.2035: attempt to access beyond end of device [ 312.687955][T11163] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 312.764120][T11163] syz.0.2035: attempt to access beyond end of device [ 312.764120][T11163] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 312.806521][T11163] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 313.630727][T11199] loop2: detected capacity change from 0 to 2048 [ 313.721237][T11201] binder: 11200:11201 ioctl c0306201 200000000080 returned -22 [ 313.765174][T11204] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.056531][T11212] loop3: detected capacity change from 0 to 256 [ 314.063827][T11212] exfat: Deprecated parameter 'utf8' [ 314.094777][T11212] exfat: Deprecated parameter 'utf8' [ 314.148842][T11216] veth1_macvtap: left promiscuous mode [ 314.156345][T11216] macsec0: entered promiscuous mode [ 314.177996][T11212] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d) [ 314.220961][T11219] veth1_macvtap: entered promiscuous mode [ 314.235636][T11219] macsec0: left promiscuous mode [ 314.347977][T11221] sock: sock_timestamping_bind_phc: sock not bind to device [ 314.399512][ T5155] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 314.501065][T11228] QAT: Invalid ioctl 21531 [ 314.624616][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 314.631747][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.664460][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.687814][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.711579][ T5155] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.730981][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.768051][ T5155] usb 1-1: config 0 descriptor?? [ 315.057796][T11242] veth1_macvtap: left promiscuous mode [ 315.063590][T11242] macsec0: entered promiscuous mode [ 315.089503][T11242] veth1_macvtap: entered promiscuous mode [ 315.105742][T11242] macsec0: left promiscuous mode [ 315.185045][ T5155] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 315.204316][ T5155] microsoft 0003:045E:07DA.0010: item 0 4 0 9 parsing failed [ 315.228264][ T5155] microsoft 0003:045E:07DA.0010: parse failed [ 315.248090][ T5155] microsoft: probe of 0003:045E:07DA.0010 failed with error -22 [ 315.310281][T11244] loop1: detected capacity change from 0 to 4096 [ 315.329277][T11244] __ntfs_error: 6 callbacks suppressed [ 315.329293][T11244] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 315.374074][T11244] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 315.396880][ T8] usb 1-1: USB disconnect, device number 19 [ 315.406903][T11236] loop3: detected capacity change from 0 to 40427 [ 315.417986][T11244] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 315.433572][T11244] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 315.471635][T11236] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.482503][T11244] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 315.533227][T11244] ntfs: volume version 3.1. [ 315.547089][T11244] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 315.579894][T11244] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 315.607119][T11244] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 315.619631][T11244] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 315.632532][T11244] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 315.657721][T11236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 316.102135][T11251] loop1: detected capacity change from 0 to 4096 [ 316.236666][T11251] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 316.260061][T11251] ntfs3: loop1: Failed to load $Extend (-22). [ 316.276735][T11251] ntfs3: loop1: Failed to initialize $Extend. [ 316.365817][T11251] overlayfs: upper fs does not support tmpfile. [ 316.378195][T11251] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.386436][T11251] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null. [ 316.397035][T11251] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 316.404162][T11251] overlayfs: failed to verify upper root origin [ 316.453978][ T49] ntfs3: loop1: ino=9, ntfs3_write_inode failed, -22. [ 316.467635][ T5776] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 316.796322][T11275] loop0: detected capacity change from 0 to 128 [ 316.819670][T11275] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 316.833285][T11275] hpfs: filesystem error: improperly stopped [ 316.843795][T11275] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 316.852876][T11275] hpfs: You really don't want any checks? You are crazy... [ 316.865818][T11275] hpfs: hpfs_map_sector(): read error [ 316.871591][T11275] hpfs: code page support is disabled [ 316.879080][T11275] hpfs: hpfs_map_4sectors(): unaligned read [ 316.886605][T11275] hpfs: hpfs_map_4sectors(): unaligned read [ 316.892606][T11275] hpfs: filesystem error: unable to find root dir [ 316.917627][T11275] hpfs: hpfs_map_4sectors(): unaligned read [ 317.030666][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 317.210966][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.217436][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.453832][T11293] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 317.746494][T11291] loop0: detected capacity change from 0 to 32768 [ 318.233066][T11302] loop1: detected capacity change from 0 to 8192 [ 318.248827][T11302] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 318.269673][T11302] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 318.279927][T11302] REISERFS (device loop1): using ordered data mode [ 318.286813][T11302] reiserfs: using flush barriers [ 318.309317][T11302] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 318.355131][T11302] REISERFS (device loop1): checking transaction log (loop1) [ 318.401724][T11302] REISERFS (device loop1): Using r5 hash to sort names [ 318.425020][T11302] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 318.724925][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 318.873972][T11322] tipc: Enabling of bearer rejected, failed to enable media [ 319.077092][T11330] loop0: detected capacity change from 0 to 256 [ 319.095358][T11330] exfat: Deprecated parameter 'utf8' [ 319.101389][T11330] exfat: Deprecated parameter 'namecase' [ 319.159107][T11330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 319.265436][T11332] loop1: detected capacity change from 0 to 4096 [ 319.305844][T11332] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 319.687291][T11343] loop1: detected capacity change from 0 to 256 [ 320.050400][T11352] loop1: detected capacity change from 0 to 256 [ 320.078700][T11352] exfat: Deprecated parameter 'namecase' [ 320.137914][T11352] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 320.375178][ C1] sd 0:0:1:0: [sda] tag#9821 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 320.385736][ C1] sd 0:0:1:0: [sda] tag#9821 CDB: Write(6) 0a 00 4e 23 00 00 00 06 fe 80 00 00 [ 320.436125][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 320.659510][T11362] nbd: couldn't find device at index 10240 [ 320.670805][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.694754][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 320.714316][ T27] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 320.723756][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.759015][ T27] usb 1-1: config 0 descriptor?? [ 320.883586][T11356] set_capacity_and_notify: 1 callbacks suppressed [ 320.883602][T11356] loop3: detected capacity change from 0 to 32768 [ 320.927857][T11356] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 321.018179][T11374] loop1: detected capacity change from 0 to 4096 [ 321.038338][T11356] XFS (loop3): Ending clean mount [ 321.106760][T11375] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.129680][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 321.233220][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 321.233235][ T28] audit: type=1800 audit(1777563600.257:65): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2131" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 321.406511][ T27] Bluetooth: Can't get version to change to load ram patch err [ 321.417977][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2132'. [ 321.455230][ T27] Bluetooth: Loading sysconfig file failed [ 321.461324][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 321.461330][ T27] ath3k: probe of 1-1:0.0 failed with error -71 [ 321.470426][ T27] usb 1-1: USB disconnect, device number 20 [ 321.618516][T11379] loop3: detected capacity change from 0 to 512 [ 321.645287][T11379] EXT4-fs: Ignoring removed oldalloc option [ 321.654986][T11379] EXT4-fs (loop3): Test dummy encryption mode enabled [ 321.700632][T11379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.825363][T11379] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 321.956730][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.117610][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 322.250166][T11396] loop0: detected capacity change from 0 to 2048 [ 322.306785][T11396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.345082][T11400] vivid-002: disconnect [ 322.355366][T11399] vivid-002: reconnect [ 322.521825][T11402] loop3: detected capacity change from 0 to 4096 [ 322.596940][T11407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.638533][T11402] syz.3.2143: attempt to access beyond end of device [ 322.638533][T11402] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 322.664782][T11402] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 322.851451][T11411] loop3: detected capacity change from 0 to 512 [ 322.870723][T11411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 322.898522][T11411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 322.906930][T11411] System zones: 1-12 [ 322.919347][T11411] EXT4-fs (loop3): 1 truncate cleaned up [ 322.946172][T11411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.034862][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 323.053221][T11404] loop1: detected capacity change from 0 to 32768 [ 323.068221][T11404] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.2144 (11404) [ 323.107683][T11404] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 323.134687][T11404] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 323.154958][T11404] BTRFS info (device loop1): using free space tree [ 323.182599][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.235316][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 323.257434][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 323.268358][ T8] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 323.276866][ T8] usb 1-1: Product: syz [ 323.281202][ T8] usb 1-1: Manufacturer: syz [ 323.286250][ T8] usb 1-1: SerialNumber: syz [ 323.293879][ T8] usb 1-1: config 0 descriptor?? [ 323.304014][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 323.334889][T11404] BTRFS info (device loop1): enabling ssd optimizations [ 323.341891][T11404] BTRFS info (device loop1): auto enabling async discard [ 323.582432][ T5776] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 323.851749][T11434] loop1: detected capacity change from 0 to 1024 [ 323.864092][T11434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.880223][T11434] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 323.890578][T11434] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 323.904742][T11434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.925715][ T8] gspca_zc3xx: reg_w_i err -71 [ 323.930850][ T8] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 323.964872][ T8] usb 1-1: USB disconnect, device number 21 [ 323.990743][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.643582][T11452] ALSA: mixer_oss: invalid OSS volume 'O' [ 324.651261][T11452] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 324.830776][T11457] loop0: detected capacity change from 0 to 1024 [ 325.127521][T11445] loop1: detected capacity change from 0 to 40427 [ 325.175375][T11445] F2FS-fs (loop1): invalid crc value [ 325.205353][T11445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 325.341387][T11445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.399811][T11445] syz.1.2155: attempt to access beyond end of device [ 325.399811][T11445] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.447805][T11445] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 325.553392][T11468] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 325.578216][T11468] ntfs3: loop0: Failed to load $Extend (-22). [ 325.584458][T11468] ntfs3: loop0: Failed to initialize $Extend. [ 325.640719][ T28] audit: type=1800 audit(1777563604.667:66): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2165" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 326.104664][ T8] IPVS: starting estimator thread 0... [ 326.205272][T11485] IPVS: using max 21 ests per chain, 50400 per kthread [ 326.234834][T11489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2174'. [ 327.071826][T11500] set_capacity_and_notify: 1 callbacks suppressed [ 327.071842][T11500] loop3: detected capacity change from 0 to 32768 [ 327.079843][T11503] loop1: detected capacity change from 0 to 32768 [ 327.092824][T11500] XFS: attr2 mount option is deprecated. [ 327.126526][T11503] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 327.126526][T11503] [ 327.152432][T11503] ERROR: (device loop1): remounting filesystem as read-only [ 327.163506][T11500] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.268200][T11500] XFS (loop3): Ending clean mount [ 327.321526][T11500] XFS (loop3): Quotacheck needed: Please wait. [ 327.443371][T11500] XFS (loop3): Quotacheck: Done. [ 327.625585][T11527] loop1: detected capacity change from 0 to 2048 [ 327.683772][T11527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.719310][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.023571][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2193'. [ 328.374827][ T5155] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 328.586625][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.607838][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.618666][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.632566][ T5155] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 328.641970][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.654711][ T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 328.663261][ T5155] usb 1-1: config 0 descriptor?? [ 328.841819][T11547] loop3: detected capacity change from 0 to 32768 [ 328.858249][T11547] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2199 (11547) [ 328.875736][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 328.890323][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.902740][T11547] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.913222][T11547] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 328.922022][T11547] BTRFS info (device loop3): using free space tree [ 328.935884][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.956210][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.969290][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.978860][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.991045][ T27] usb 2-1: config 0 descriptor?? [ 329.009138][T11547] BTRFS info (device loop3): enabling ssd optimizations [ 329.016795][T11547] BTRFS info (device loop3): auto enabling async discard [ 329.130743][ T5773] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.148529][ T5155] hid (null): invalid report_count -1471370603 [ 329.165656][ T5155] hid (null): unknown global tag 0xe [ 329.171059][ T5155] hid (null): invalid report_count 15657 [ 329.191018][ T5155] magicmouse 0003:05AC:0265.0011: unexpected long global item [ 329.225716][ T5155] magicmouse 0003:05AC:0265.0011: magicmouse hid parse failed [ 329.233433][ T5155] magicmouse: probe of 0003:05AC:0265.0011 failed with error -22 [ 329.402403][ T5155] usb 1-1: USB disconnect, device number 22 [ 329.460418][ T27] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 329.491170][ T27] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 329.567120][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input15 [ 329.712893][ T27] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 329.795972][ T27] usb 2-1: USB disconnect, device number 14 [ 329.940758][T11571] fido_id[11571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 330.168555][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.190861][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.199726][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.210983][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.219070][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.233911][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.530259][T11575] chnl_net:caif_netlink_parms(): no params data found [ 330.744790][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.752076][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.760119][T11575] bridge_slave_0: entered allmulticast mode [ 330.767819][T11575] bridge_slave_0: entered promiscuous mode [ 330.777963][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.785851][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.793509][T11575] bridge_slave_1: entered allmulticast mode [ 330.801199][T11575] bridge_slave_1: entered promiscuous mode [ 330.837582][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.850513][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.927747][T11575] team0: Port device team_slave_0 added [ 330.938281][T11575] team0: Port device team_slave_1 added [ 330.983081][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.990989][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.020834][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.043433][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.060024][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.094236][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.219900][T11575] hsr_slave_0: entered promiscuous mode [ 331.222661][T11588] loop0: detected capacity change from 0 to 32768 [ 331.237690][T11575] hsr_slave_1: entered promiscuous mode [ 331.247735][T11588] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.2207 (11588) [ 331.262482][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.300747][T11575] Cannot create hsr debugfs directory [ 331.313363][T11588] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 331.333904][T11588] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 331.353957][T11588] BTRFS info (device loop0): using free space tree [ 331.532084][T11588] BTRFS info (device loop0): enabling ssd optimizations [ 331.539242][T11588] BTRFS info (device loop0): auto enabling async discard [ 331.662535][T11596] loop1: detected capacity change from 0 to 32768 [ 331.702252][T11596] JBD2: Ignoring recovery information on journal [ 331.768918][ T8306] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 331.827530][T11596] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 331.902352][T11575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.972373][T11575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.005449][T11575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.082154][T11575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.096133][ T6008] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 11 /dev/loop0 scanned by udevd (6008) [ 332.247350][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 332.325105][ T5786] Bluetooth: hci4: command tx timeout [ 332.449595][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.541357][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.593403][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.600630][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.643516][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.650744][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.308118][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.749344][T11657] loop0: detected capacity change from 0 to 512 [ 333.794873][T11657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 333.859822][T11657] EXT4-fs (loop0): 1 orphan inode deleted [ 333.869653][T11635] loop1: detected capacity change from 0 to 32768 [ 333.878028][T11657] EXT4-fs (loop0): 1 truncate cleaned up [ 333.888571][T11657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.909622][T11575] veth0_vlan: entered promiscuous mode [ 333.936556][T11575] veth1_vlan: entered promiscuous mode [ 333.960721][T11657] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 255: comm syz.0.2226: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 334.024372][T11575] veth0_macvtap: entered promiscuous mode [ 334.036929][T11575] veth1_macvtap: entered promiscuous mode [ 334.069404][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.095900][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.123969][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.139060][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.165170][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.193305][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.221664][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.254935][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.284650][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.303405][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.327695][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.357899][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.380832][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.405732][ T5786] Bluetooth: hci4: command tx timeout [ 334.422881][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.443932][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.455424][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.466350][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.485040][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.503852][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.524440][T11575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.553747][T11575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.574618][T11575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.597981][T11575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.669270][ T1819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 334.789122][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.801988][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.861231][ T4132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.871882][ T4132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.882042][ T1819] usb 1-1: Using ep0 maxpacket: 32 [ 334.903266][ T1819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.922494][ T1819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.941394][ T1819] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.951124][ T1819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.981770][ T1819] usb 1-1: config 0 descriptor?? [ 335.003595][ T1819] hub 1-1:0.0: USB hub found [ 335.059549][T11675] loop1: detected capacity change from 0 to 512 [ 335.079461][T11675] EXT4-fs: Ignoring removed bh option [ 335.106617][T11675] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 335.133270][T11675] EXT4-fs (loop1): 1 truncate cleaned up [ 335.159532][T11675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.205041][ T1819] hub 1-1:0.0: 26 ports detected [ 335.215605][ T1819] hub 1-1:0.0: insufficient power available to use all downstream ports [ 335.290607][T11675] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 335.320755][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2234'. [ 335.358215][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.419468][ T1819] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 335.445746][ T1819] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 335.496804][ T1819] usbhid 1-1:0.0: can't add hid device: -71 [ 335.502870][ T1819] usbhid: probe of 1-1:0.0 failed with error -71 [ 335.567197][ T1819] usb 1-1: USB disconnect, device number 23 [ 335.573731][T11682] loop4: detected capacity change from 0 to 4096 [ 335.691806][T11684] team0: Port device team_slave_0 removed [ 335.760797][T11682] ntfs3: loop4: ino=21, "file1" fallocate(0x40) is not supported [ 336.485162][ T5786] Bluetooth: hci4: command tx timeout [ 336.541937][ T28] audit: type=1326 audit(1777563615.567:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53799cdd9 code=0x7ffc0000 [ 336.566107][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.639356][ T28] audit: type=1326 audit(1777563615.567:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53799cdd9 code=0x7ffc0000 [ 336.721285][ T28] audit: type=1326 audit(1777563615.567:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fe53799cdd9 code=0x7ffc0000 [ 336.733375][T11691] loop0: detected capacity change from 0 to 40427 [ 336.773681][T11691] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 336.798918][ T28] audit: type=1326 audit(1777563615.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53799cdd9 code=0x7ffc0000 [ 336.832546][T11691] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 336.925433][T11691] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 336.968075][T11712] loop1: detected capacity change from 0 to 128 [ 336.985977][T11712] EXT4-fs: inline encryption not supported [ 337.004014][T11691] F2FS-fs (loop0): Found nat_bits in checkpoint [ 337.034645][T11712] EXT4-fs (loop1): Test dummy encryption mode enabled [ 337.077686][T11712] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.160882][T11712] ext4 filesystem being mounted at /578/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.240337][T11691] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 337.254576][T11691] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.297552][T11722] loop3: detected capacity change from 0 to 1024 [ 337.315309][T11712] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 337.441367][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.468671][T11722] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 337.502191][ T28] audit: type=1804 audit(1777563616.527:71): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2252" name="/newroot/589/file0/file1" dev="loop3" ino=20 res=1 errno=0 [ 337.553496][T11722] hfsplus: xattr searching failed [ 337.586698][T11723] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 337.625496][T11723] hfsplus: xattr searching failed [ 337.634863][T11725] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 337.642628][T11725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2254'. [ 337.725240][T11723] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 337.731857][T11723] hfsplus: xattr searching failed [ 337.768377][T11723] syz.3.2252: attempt to access beyond end of device [ 337.768377][T11723] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 337.814880][T11723] Buffer I/O error on dev loop3, logical block 458752, async page read [ 337.823627][T11723] hfsplus: unable to mark blocks free: error -5 [ 337.843699][T11723] hfsplus: can't free extent [ 338.092451][T11735] loop1: detected capacity change from 0 to 128 [ 338.156740][T11735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.184745][T11735] ext4 filesystem being mounted at /582/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.234209][T11719] loop4: detected capacity change from 0 to 32768 [ 338.280332][T11719] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 338.327096][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.421191][T11719] XFS (loop4): Ending clean mount [ 338.564914][ T5786] Bluetooth: hci4: command tx timeout [ 338.807327][T11575] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 338.843774][T11760] loop1: detected capacity change from 0 to 128 [ 338.873281][T11762] loop0: detected capacity change from 0 to 1024 [ 338.916982][T11762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.150250][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.292377][T11768] loop0: detected capacity change from 0 to 256 [ 339.337947][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2269'. [ 339.355707][T11768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'. [ 339.631250][T11774] loop0: detected capacity change from 0 to 4096 [ 339.678888][T11779] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.486104][T11799] loop1: detected capacity change from 0 to 512 [ 340.576620][T11799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.680903][T11799] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.753216][T11799] EXT4-fs warning (device loop1): __ext4_ioctl:1260: Setting inode version is not supported with metadata_csum enabled. [ 340.847616][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.917061][T11796] loop0: detected capacity change from 0 to 32768 [ 341.048474][T11816] tipc: Can't bind to reserved service type 1 [ 341.638544][T11831] loop1: detected capacity change from 0 to 4096 [ 341.679678][T11831] NILFS (loop1): invalid segment: Checksum error in segment payload [ 341.708274][T11831] NILFS (loop1): trying rollback from an earlier position [ 341.769987][T11831] NILFS (loop1): recovery complete [ 341.844750][T11812] loop4: detected capacity change from 0 to 40427 [ 341.873681][T11812] F2FS-fs (loop4): invalid crc value [ 341.891889][T11812] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.044964][T11812] F2FS-fs (loop4): Start checkpoint disabled! [ 342.064332][T11812] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 342.136098][T11840] loop0: detected capacity change from 0 to 1024 [ 342.177527][T11812] F2FS-fs (loop4): Skipping Checkpoint. Checkpoints currently disabled. [ 342.326185][ T34] hfsplus: b-tree write err: -5, ino 25 [ 342.332105][ T34] hfsplus: b-tree write err: -5, ino 4 [ 342.343135][ T34] hfsplus: b-tree write err: -5, ino 2 [ 342.353393][ T34] hfsplus: b-tree write err: -5, ino 26 [ 342.472547][ T49] kworker/u4:3: attempt to access beyond end of device [ 342.472547][ T49] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 342.512238][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.527627][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.546026][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.564186][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.811941][ T2321] pvrusb2: request_firmware fatal error with code=-110 [ 342.830836][ T2321] pvrusb2: Failure uploading firmware1 [ 342.836845][ T2321] pvrusb2: Device initialization was not successful. [ 342.847412][T11854] loop1: detected capacity change from 0 to 4096 [ 342.856392][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 342.868202][T11854] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 342.888459][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.901413][ T5837] pvrusb2: Device being rendered inoperable [ 342.935331][ T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 342.962668][T11854] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 343.135507][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 343.146527][ T27] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 343.158380][ T27] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 343.178366][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.214916][ T27] usb 1-1: Product: syz [ 343.226137][ T27] usb 1-1: Manufacturer: syz [ 343.239035][ T27] usb 1-1: SerialNumber: syz [ 343.254219][ T27] r8152-cfgselector 1-1: config 0 descriptor?? [ 343.275062][ T5837] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 343.404020][T11865] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.475288][ T5837] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 343.483463][ T5837] usb 4-1: config 0 has no interface number 0 [ 343.505919][ T27] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 343.507351][T11862] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 343.534674][ T5837] usb 4-1: config 0 interface 36 altsetting 215 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.563903][ T5837] usb 4-1: config 0 interface 36 altsetting 215 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.600356][ T5837] usb 4-1: config 0 interface 36 has no altsetting 0 [ 343.621613][ T5837] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.642510][ T5837] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 343.678401][ T5837] usb 4-1: Manufacturer: syz [ 343.700172][ T5837] usb 4-1: config 0 descriptor?? [ 343.709679][ T27] usb 1-1: USB disconnect, device number 24 [ 343.769245][T11869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.826434][T11869] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.060281][T11575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.173543][ T5837] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 344.488871][ T5837] usb 4-1: USB disconnect, device number 5 [ 344.575350][T11874] set_capacity_and_notify: 2 callbacks suppressed [ 344.575365][T11874] loop1: detected capacity change from 0 to 32768 [ 344.649118][T11874] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 344.662476][T11874] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.941854][T11874] XFS (loop1): Ending clean mount [ 345.088297][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.115586][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 345.245001][T11902] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 345.277517][T11902] CUSE: unknown device info "3ܟ,̘" [ 345.283393][T11902] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 345.283393][T11902] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 345.330249][T11902] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 345.358965][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.371311][T11902] CUSE: DEVNAME unspecified [ 345.376917][ T787] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 345.403269][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.412251][ T787] usb 5-1: Product: syz [ 345.419887][ T787] usb 5-1: Manufacturer: syz [ 345.424636][ T787] usb 5-1: SerialNumber: syz [ 345.431717][ T787] usb 5-1: config 0 descriptor?? [ 345.581949][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.614880][ T28] audit: type=1326 audit(1777563624.637:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 345.703821][ T28] audit: type=1326 audit(1777563624.637:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 345.779924][ T28] audit: type=1326 audit(1777563624.687:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 345.832534][ T28] audit: type=1326 audit(1777563624.767:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 345.891471][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.902666][ T28] audit: type=1326 audit(1777563624.767:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.2328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bacd9cdd9 code=0x7ffc0000 [ 346.039109][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.087025][ T787] usb 5-1: Firmware version (0.0) predates our first public release. [ 346.102954][ T787] usb 5-1: Please update to version 0.2 or newer [ 346.123707][T11919] loop3: detected capacity change from 0 to 128 [ 346.199806][T11919] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 346.222907][T11919] hpfs: filesystem error: improperly stopped [ 346.278147][T11919] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 346.298218][ T787] usb 5-1: USB disconnect, device number 2 [ 346.316477][T11919] hpfs: You really don't want any checks? You are crazy... [ 346.333119][T11919] hpfs: hpfs_map_sector(): read error [ 346.339647][T11919] hpfs: code page support is disabled [ 346.391337][T11919] hpfs: hpfs_map_4sectors(): unaligned read [ 346.420076][T11919] hpfs: hpfs_map_4sectors(): unaligned read [ 346.436000][T11919] hpfs: filesystem error: unable to find root dir [ 346.568310][T11929] loop0: detected capacity change from 0 to 512 [ 346.635780][ T11] tipc: Disabling bearer [ 346.681903][T11929] EXT4-fs (loop0): 1 orphan inode deleted [ 346.689399][ T11] tipc: Left network mode [ 346.699525][T11929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.802708][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.042968][T11940] loop4: detected capacity change from 0 to 512 [ 347.152153][T11940] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 347.168365][T11940] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.2340: corrupted in-inode xattr: e_value size too large [ 347.284344][T11943] loop1: detected capacity change from 0 to 4096 [ 347.321944][T11940] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2340: couldn't read orphan inode 15 (err -117) [ 347.376182][T11943] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 347.388040][T11940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.406139][T11955] loop3: detected capacity change from 0 to 2048 [ 347.479536][T11943] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 347.497257][T11955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.736423][T11575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.618038][T11979] loop1: detected capacity change from 0 to 8192 [ 348.755222][T11988] loop4: detected capacity change from 0 to 4096 [ 348.791471][T11988] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 348.880643][T11988] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 349.152150][T11992] loop3: detected capacity change from 0 to 4096 [ 349.195576][T11992] EXT4-fs: inline encryption not supported [ 349.220929][T11992] EXT4-fs (loop3): Test dummy encryption mode enabled [ 349.300883][T11992] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 349.404763][T11992] System zones: 0-5 [ 349.441612][T11992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.588295][ T28] audit: type=1800 audit(1777563628.607:77): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2358" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 349.705947][ T11] IPVS: stopping master sync thread 10043 ... [ 349.726368][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.005202][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 350.094305][T11985] loop0: detected capacity change from 0 to 32768 [ 350.265269][T11985] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.442595][T12003] loop1: detected capacity change from 0 to 40427 [ 350.459363][T12003] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 350.493508][T12003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.540200][T11985] XFS (loop0): Ending clean mount [ 350.554571][T12003] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 350.583819][T11985] XFS (loop0): Quotacheck needed: Please wait. [ 350.603424][T12003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.818024][ T11] hsr_slave_0: left promiscuous mode [ 350.847514][T11985] XFS (loop0): Quotacheck: Done. [ 350.853296][ T11] hsr_slave_1: left promiscuous mode [ 350.884793][T12003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 350.898755][T12003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.965597][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.973064][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.042908][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.085810][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.106534][ T11] bridge_slave_1: left allmulticast mode [ 351.112233][ T11] bridge_slave_1: left promiscuous mode [ 351.144440][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.180286][ T11] bridge_slave_0: left allmulticast mode [ 351.186113][ T11] bridge_slave_0: left promiscuous mode [ 351.191909][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.219803][ T8306] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.442262][ T11] bridge0: left promiscuous mode [ 351.491700][ T11] veth1_macvtap: left promiscuous mode [ 351.532946][ T11] veth0_macvtap: left promiscuous mode [ 351.551089][ T11] veth1_vlan: left promiscuous mode [ 351.584215][ T11] veth0_vlan: left promiscuous mode [ 351.731857][T12039] loop3: detected capacity change from 0 to 32768 [ 351.860087][T12039] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 352.003848][T12039] XFS (loop3): Ending clean mount [ 352.030790][T12044] loop4: detected capacity change from 0 to 32768 [ 352.112062][T12044] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.144527][T12039] XFS (loop3): syz.3.2369 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 352.262762][T12044] XFS (loop4): Ending clean mount [ 352.271868][T12044] XFS (loop4): Quotacheck needed: Please wait. [ 352.332299][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 352.369491][T12044] XFS (loop4): Quotacheck: Done. [ 352.592601][T11575] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.967203][T12070] loop3: detected capacity change from 0 to 64 [ 353.300456][T12068] loop0: detected capacity change from 0 to 32768 [ 353.430811][T12076] loop3: detected capacity change from 0 to 4096 [ 353.727505][T12076] ntfs3: loop3: ino=9, attr_set_size [ 354.223600][ T11] team0 (unregistering): Port device team_slave_1 removed [ 354.306734][ T11] team0 (unregistering): Port device team_slave_0 removed [ 354.370996][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.485954][T12091] tmpfs: Cannot change global quota limit on remount [ 354.529668][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.132693][ T11] bond0 (unregistering): Released all slaves [ 355.704238][T12115] loop1: detected capacity change from 0 to 4096 [ 355.724857][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 355.802195][T12122] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.925878][ T5837] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 355.964451][ T5837] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 355.987493][ T5837] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 356.023420][ T5837] usb 5-1: config 220 has no interface number 2 [ 356.049551][T12127] netlink: 'syz.0.2400': attribute type 5 has an invalid length. [ 356.056711][ T5837] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 356.097555][ T5837] usb 5-1: config 220 interface 0 has no altsetting 0 [ 356.114707][ T5837] usb 5-1: config 220 interface 76 has no altsetting 0 [ 356.121643][ T5837] usb 5-1: config 220 interface 1 has no altsetting 0 [ 356.165210][ T5837] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 356.209377][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.231492][ T5837] usb 5-1: Product: syz [ 356.241626][ T5837] usb 5-1: Manufacturer: syz [ 356.276362][ T5837] usb 5-1: SerialNumber: syz [ 356.429238][T12134] loop0: detected capacity change from 0 to 2048 [ 356.441280][T12138] loop3: detected capacity change from 0 to 1024 [ 356.477247][T12134] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002] [ 356.525099][T12138] hfsplus: found bad thread record in catalog [ 356.546725][T12134] System zones: 0-4 [ 356.560572][ T1149] hfsplus: b-tree write err: -5, ino 25 [ 356.568028][ T5837] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 356.574436][ T5837] usb 5-1: No valid video chain found. [ 356.600915][T12134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.615249][ T1149] hfsplus: b-tree write err: -5, ino 4 [ 356.620845][ T1149] hfsplus: b-tree write err: -5, ino 2 [ 356.653950][ T5837] usb 5-1: selecting invalid altsetting 0 [ 356.693345][T12134] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.723113][ T5837] usb 5-1: selecting invalid altsetting 0 [ 356.754621][ T5837] usbtest: probe of 5-1:220.1 failed with error -22 [ 356.789807][ T5837] usb 5-1: USB disconnect, device number 3 [ 356.825083][T12134] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2402: bg 0: block 345: padding at end of block bitmap is not set [ 356.908674][T12134] EXT4-fs (loop0): Remounting filesystem read-only [ 356.916112][T12134] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.0.2402: cleanup dec ref error -117 [ 357.024575][T12147] loop1: detected capacity change from 0 to 8192 [ 357.042532][T12147] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 357.057625][T12147] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 357.068359][T12147] REISERFS (device loop1): using ordered data mode [ 357.075439][T12147] reiserfs: using flush barriers [ 357.084758][T12147] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 357.103144][T12147] REISERFS (device loop1): checking transaction log (loop1) [ 357.120222][ T8306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.130377][T12147] REISERFS (device loop1): Using r5 hash to sort names [ 357.171727][T12147] reiserfs: enabling write barrier flush mode [ 357.211085][T12147] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 357.285013][T12147] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 357.351257][T12147] REISERFS (device loop1): Remounting filesystem read-only [ 357.369702][T12147] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 357.432820][T12147] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 357.474010][T12147] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 357.514143][T12147] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 357.553456][T12147] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 357.595688][T12147] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 357.644025][T12147] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 357.680166][T12147] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 357.734818][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 357.789904][ T5776] ------------[ cut here ]------------ [ 357.795560][ T5776] kernel BUG at fs/reiserfs/journal.c:1916! [ 357.823979][ T5776] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 357.830119][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 357.837692][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.847768][ T5776] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 357.853605][ T5776] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 357.873323][ T5776] RSP: 0018:ffffc900046efb00 EFLAGS: 00010293 [ 357.879413][ T5776] RAX: ffffffff82297e06 RBX: 1ffff920008ddf64 RCX: ffff888022da9e00 [ 357.887397][ T5776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.895382][ T5776] RBP: ffffc900046efbf8 R08: ffffc900046efb77 R09: 0000000000000000 [ 357.903378][ T5776] R10: ffffc900046efb40 R11: fffff520008ddf6f R12: ffffc900042ad000 [ 357.911364][ T5776] R13: dffffc0000000000 R14: ffff88807d8ca630 R15: 0000000000000000 [ 357.919357][ T5776] FS: 000055558d49c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 357.928295][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.934888][ T5776] CR2: 000055e7195755f1 CR3: 0000000062349000 CR4: 00000000003506f0 [ 357.942881][ T5776] Call Trace: [ 357.946187][ T5776] [ 357.949133][ T5776] ? journal_release+0x30/0x30 [ 357.953921][ T5776] journal_release+0x1f/0x30 [ 357.958534][ T5776] reiserfs_put_super+0x26b/0x510 [ 357.963579][ T5776] ? hook_inode_free_security+0xb0/0xb0 [ 357.969170][ T5776] ? evict_inodes+0x63c/0x6a0 [ 357.973855][ T5776] ? reiserfs_dirty_inode+0x270/0x270 [ 357.979301][ T5776] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 357.984960][ T5776] ? reiserfs_dirty_inode+0x270/0x270 [ 357.990345][ T5776] generic_shutdown_super+0x134/0x2b0 [ 357.995828][ T5776] kill_block_super+0x44/0x90 [ 358.000522][ T5776] deactivate_locked_super+0x97/0x100 [ 358.005904][ T5776] cleanup_mnt+0x43b/0x4d0 [ 358.010331][ T5776] task_work_run+0x1d4/0x260 [ 358.014944][ T5776] ? task_work_cancel+0x220/0x220 [ 358.019996][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 358.025468][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 358.030776][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 358.036343][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 358.041824][ T5776] do_syscall_64+0x61/0xa0 [ 358.046257][ T5776] ? clear_bhb_loop+0x40/0x90 [ 358.050959][ T5776] ? clear_bhb_loop+0x40/0x90 [ 358.055737][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.061643][ T5776] RIP: 0033:0x7fe53799e017 [ 358.066104][ T5776] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 358.085716][ T5776] RSP: 002b:00007fff712ab138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.094138][ T5776] RAX: 0000000000000000 RBX: 00007fe537a32120 RCX: 00007fe53799e017 [ 358.102129][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff712ab1f0 [ 358.110125][ T5776] RBP: 00007fff712ab1f0 R08: 00007fff712ac1f0 R09: 00000000ffffffff [ 358.118114][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff712ac280 [ 358.126098][ T5776] R13: 00007fe537a32120 R14: 000000000005754e R15: 00007fff712ac2c0 [ 358.134091][ T5776] [ 358.137148][ T5776] Modules linked in: [ 358.158401][ T5776] ---[ end trace 0000000000000000 ]--- [ 358.163981][ T5776] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 358.176486][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 358.184028][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.201711][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.230891][ T27] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 358.246903][ T5776] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 358.257269][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.290435][ T5776] RSP: 0018:ffffc900046efb00 EFLAGS: 00010293 [ 358.297929][ T5776] RAX: ffffffff82297e06 RBX: 1ffff920008ddf64 RCX: ffff888022da9e00 [ 358.306143][ T5776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.314205][ T5776] RBP: ffffc900046efbf8 R08: ffffc900046efb77 R09: 0000000000000000 [ 358.325465][ T5776] R10: ffffc900046efb40 R11: fffff520008ddf6f R12: ffffc900042ad000 [ 358.336607][ T27] usb 5-1: config 0 descriptor?? [ 358.344214][ T5776] R13: dffffc0000000000 R14: ffff88807d8ca630 R15: 0000000000000000 [ 358.352814][ T5776] FS: 000055558d49c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 358.363979][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.372083][ T5776] CR2: 00007f4bacfe8158 CR3: 0000000062349000 CR4: 00000000003506f0 [ 358.384212][ T5776] Kernel panic - not syncing: Fatal exception [ 358.390436][ T5776] Kernel Offset: disabled [ 358.394769][ T5776] Rebooting in 86400 seconds..