last executing test programs: 31.094337973s ago: executing program 0 (id=579): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x5}) 30.921958292s ago: executing program 0 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000600)={0xeeee0000, 0x9b000, 0xfffffffe}) 30.556323205s ago: executing program 0 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0x3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 30.265168464s ago: executing program 0 (id=584): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 29.608274726s ago: executing program 0 (id=588): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80186e82, 0x0) 29.090639245s ago: executing program 0 (id=593): unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) 28.697744612s ago: executing program 32 (id=593): unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) 3.596160106s ago: executing program 3 (id=784): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 3.433090384s ago: executing program 2 (id=787): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000340)={@id={0x2, 0x0, @c}, 0x0, r1}) 3.403933269s ago: executing program 3 (id=788): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 3.234319808s ago: executing program 2 (id=790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000004580)=[{{&(0x7f0000002880)={0x2, 0x0, @private=0xa0100ff}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000000900)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) 2.952945666s ago: executing program 3 (id=792): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x2004c0a0) 2.93413602s ago: executing program 3 (id=794): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) 2.221016461s ago: executing program 2 (id=801): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nodelalloc}, {@orlov}, {@abort}, {@nombcache}, {@orlov}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.802460582s ago: executing program 1 (id=804): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x5}, 0x4) 1.749167862s ago: executing program 2 (id=805): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(r0, &(0x7f0000009d40)=[{{&(0x7f0000001f80)=@sco, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002000)="fb", 0x1}], 0x1}}], 0x1, 0x4004000) 1.668081256s ago: executing program 1 (id=807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.589109829s ago: executing program 1 (id=808): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000110000000040100"}) 1.546737947s ago: executing program 4 (id=809): r0 = timerfd_create(0x8, 0x0) read(r0, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.497054755s ago: executing program 2 (id=810): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 1.477116868s ago: executing program 1 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.389478013s ago: executing program 1 (id=812): request_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x2a18091, 0x0) 1.374652756s ago: executing program 4 (id=813): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) 1.29242004s ago: executing program 3 (id=814): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.181148979s ago: executing program 1 (id=815): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000400)={0x20, 0x8, 0x4, "e3ab0ef6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 745.809003ms ago: executing program 2 (id=816): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000080)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@nodiscard}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 639.606501ms ago: executing program 4 (id=817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 365.295388ms ago: executing program 4 (id=818): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 149.121325ms ago: executing program 4 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 15.226837ms ago: executing program 4 (id=820): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0xfea5) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) 0s ago: executing program 3 (id=821): shutdown(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0xa0001) kernel console output (not intermixed with test programs): T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.939950][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.955166][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.967689][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.978387][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.989206][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.017333][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.029839][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.030812][ T5837] syz.1.9[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 65.080108][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.089953][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.099900][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108208][ T5837] loop1: detected capacity change from 0 to 4096 [ 65.109161][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.186064][ T5838] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.192883][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.198283][ T5837] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 65.228805][ T5837] NILFS (loop1): mounting fs with errors [ 65.239694][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.308118][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.332585][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.337634][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.360598][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.378763][ T5837] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 65.428001][ T5837] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 65.459455][ T5837] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 65.471367][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.484432][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.563329][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.591271][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.689553][ T5841] [U] [ 65.692431][ T5841] [U] [ 65.695143][ T5841] [U] [ 65.697844][ T5841] [U] [ 65.700554][ T5841] [U] [ 65.703263][ T5841] [U] [ 65.705970][ T5841] [U] [ 65.708672][ T5841] [U] [ 65.754094][ T5841] [U] [ 65.756830][ T5841] [U] [ 65.759527][ T5841] [U] [ 65.767531][ T5840] [U] [ 65.778094][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.808858][ T5844] loop0: detected capacity change from 0 to 256 [ 65.821861][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.943955][ T5849] loop3: detected capacity change from 0 to 256 [ 66.193907][ T5770] Bluetooth: hci0: command tx timeout [ 66.273872][ T5770] Bluetooth: hci3: command tx timeout [ 66.280376][ T51] Bluetooth: hci2: command tx timeout [ 66.286216][ T5773] Bluetooth: hci1: command tx timeout [ 66.580088][ T5863] 9pnet_fd: p9_fd_create_unix (5863): problem connecting socket: ./file0: -111 [ 66.811043][ T5851] loop2: detected capacity change from 0 to 32768 [ 66.885171][ T5851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (5851) [ 66.885210][ T5869] loop3: detected capacity change from 0 to 1024 [ 66.952318][ T5851] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.988416][ T5851] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 67.033597][ T5851] BTRFS info (device loop2): using free space tree [ 67.048076][ T5869] hfsplus: b-tree write err: -5, ino 2 [ 67.155414][ T5853] loop1: detected capacity change from 0 to 32768 [ 67.217013][ T3542] hfsplus: b-tree write err: -5, ino 25 [ 67.222954][ T3542] hfsplus: b-tree write err: -5, ino 4 [ 67.304800][ T5851] BTRFS info (device loop2): enabling ssd optimizations [ 67.311789][ T5851] BTRFS info (device loop2): auto enabling async discard [ 67.336849][ T5853] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.422291][ T5867] loop0: detected capacity change from 0 to 32768 [ 67.538229][ T5867] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 67.570014][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.674537][ T5853] XFS (loop1): Ending clean mount [ 67.736061][ T5867] XFS (loop0): Ending clean mount [ 67.742672][ T5853] XFS (loop1): Quotacheck needed: Please wait. [ 67.752967][ T5867] XFS (loop0): Quotacheck needed: Please wait. [ 67.902007][ T5867] XFS (loop0): Quotacheck: Done. [ 67.902008][ T5853] XFS (loop1): Quotacheck: Done. [ 67.939833][ T5755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5755) [ 68.194457][ T5764] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 68.252255][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 68.276830][ T5773] Bluetooth: hci0: command tx timeout [ 68.354679][ T5773] Bluetooth: hci3: command tx timeout [ 68.360130][ T5773] Bluetooth: hci1: command tx timeout [ 68.360660][ T51] Bluetooth: hci2: command tx timeout [ 68.711543][ T5915] loop0: detected capacity change from 0 to 128 [ 68.743765][ T5915] ======================================================= [ 68.743765][ T5915] WARNING: The mand mount option has been deprecated and [ 68.743765][ T5915] and is ignored by this kernel. Remove the mand [ 68.743765][ T5915] option from the mount to silence this warning. [ 68.743765][ T5915] ======================================================= [ 68.778732][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.778810][ T5908] loop3: detected capacity change from 0 to 32768 [ 68.803422][ T5908] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.24 (5908) [ 68.856997][ T5915] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 68.976606][ T5908] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 69.040668][ T5908] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 69.085807][ T5908] BTRFS info (device loop3): using free space tree [ 69.127949][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 69.274165][ T5908] BTRFS info (device loop3): enabling ssd optimizations [ 69.299724][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 69.308622][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 69.318404][ T5941] netlink: 'syz.1.30': attribute type 14 has an invalid length. [ 69.325532][ T5908] BTRFS info (device loop3): auto enabling async discard [ 69.326490][ T5941] netlink: 'syz.1.30': attribute type 12 has an invalid length. [ 69.700879][ T5945] loop0: detected capacity change from 0 to 4096 [ 69.719059][ T5762] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 69.872315][ T5918] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 69.905707][ T5918] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.168000][ T5961] set_capacity_and_notify: 1 callbacks suppressed [ 70.168021][ T5961] loop1: detected capacity change from 0 to 8192 [ 70.169515][ T5918] XFS (loop2): Ending clean mount [ 70.218681][ T5966] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 70.241058][ T5918] XFS (loop2): Quotacheck needed: Please wait. [ 70.265238][ T5961] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.371638][ T5918] XFS (loop2): Quotacheck: Done. [ 70.423450][ T5961] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 70.432808][ T5961] REISERFS (device loop1): using ordered data mode [ 70.506533][ T5961] reiserfs: using flush barriers [ 70.588899][ T5961] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.677238][ T5961] REISERFS (device loop1): checking transaction log (loop1) [ 70.705394][ T5973] loop0: detected capacity change from 0 to 64 [ 70.717425][ T5961] REISERFS (device loop1): Using tea hash to sort names [ 70.742309][ T5961] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 70.799014][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 71.140542][ T5977] sp0: Synchronizing with TNC [ 71.167855][ T5975] loop3: detected capacity change from 0 to 4096 [ 71.212764][ T5975] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 71.268550][ T5980] Bluetooth: MGMT ver 1.22 [ 71.270954][ T5975] ntfs: volume version 3.1. [ 71.292226][ T5975] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 71.314270][ T5975] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 71.345566][ T5975] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 71.416481][ T5984] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.44'. [ 71.471485][ T5984] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 71.486943][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.487093][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.510238][ T5984] openvswitch: netlink: Message has 1 unknown bytes. [ 71.512140][ T5975] ntfs: (device loop3): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 71.703941][ T5990] can0: slcan on ttyS3. [ 71.894237][ T5989] can0 (unregistered): slcan off ttyS3. [ 72.686873][ T6033] loop3: detected capacity change from 0 to 1024 [ 72.775685][ T6033] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 72.799393][ T6038] netlink: 'syz.0.63': attribute type 8 has an invalid length. [ 72.813213][ T6033] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 72.839366][ T6033] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.879421][ T6033] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.62: unexpected bad inode w/o EXT4_IGET_BAD [ 72.944245][ T6033] EXT4-fs (loop3): no journal found [ 72.971815][ T6033] EXT4-fs (loop3): can't get journal size [ 72.998034][ T6033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.130309][ T6046] loop0: detected capacity change from 0 to 512 [ 73.314478][ T51] Bluetooth: hci0: command tx timeout [ 73.346964][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.433207][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 73.441937][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 73.493152][ T6051] netlink: 'syz.2.67': attribute type 15 has an invalid length. [ 73.793783][ T3558] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.849996][ T6066] loop2: detected capacity change from 0 to 4096 [ 73.877831][ T6073] loop0: detected capacity change from 0 to 256 [ 73.914184][ T6076] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.997735][ T3558] usb 2-1: Using ep0 maxpacket: 16 [ 74.029563][ T3558] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.100067][ T6066] NILFS (loop2): nilfs_sufile_do_free: segment 7 is already clean [ 74.116881][ T3558] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 74.134290][ T6066] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean [ 74.153108][ T3558] usb 2-1: config 127 has no interface number 0 [ 74.163345][ T3558] usb 2-1: config 127 interface 124 has no altsetting 0 [ 74.200717][ T3558] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 74.224583][ T3558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.232604][ T3558] usb 2-1: Product: syz [ 74.267270][ T3558] usb 2-1: Manufacturer: syz [ 74.271909][ T3558] usb 2-1: SerialNumber: syz [ 74.399270][ T27] audit: type=1326 audit(1776080145.862:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 74.463954][ T27] audit: type=1326 audit(1776080145.862:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 74.530906][ T27] audit: type=1326 audit(1776080145.862:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 74.560204][ T27] audit: type=1326 audit(1776080145.862:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 74.586502][ T27] audit: type=1326 audit(1776080145.912:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e72d5d04e code=0x7ffc0000 [ 74.656012][ T6091] loop0: detected capacity change from 0 to 64 [ 75.078476][ T6099] loop0: detected capacity change from 0 to 1024 [ 75.126518][ T6099] hfsplus: bad catalog entry type [ 75.180264][ T1134] hfsplus: b-tree write err: -5, ino 25 [ 75.203295][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 75.215987][ T1134] hfsplus: b-tree write err: -5, ino 2 [ 75.303693][ T3558] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 75.493770][ T6093] loop2: detected capacity change from 0 to 65536 [ 75.522295][ T3558] usb 2-1: device firmware changed [ 75.532016][ T6093] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 75.561356][ T3558] usb 2-1: USB disconnect, device number 2 [ 75.630889][ T6093] XFS (loop2): Ending clean mount [ 75.773156][ T3558] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.801169][ T5763] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 76.023282][ T3558] usb 2-1: Using ep0 maxpacket: 16 [ 76.051626][ T3558] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 76.083272][ T3558] usb 2-1: config 127 has no interface number 0 [ 76.090171][ T3558] usb 2-1: config 127 interface 124 has no altsetting 0 [ 76.128798][ T3558] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 76.153233][ T3558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.161255][ T3558] usb 2-1: Product: syz [ 76.188063][ T3558] usb 2-1: Manufacturer: syz [ 76.208569][ T3558] usb 2-1: SerialNumber: syz [ 76.227902][ T6118] loop2: detected capacity change from 0 to 256 [ 76.269873][ T6118] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 76.365876][ T6115] loop0: detected capacity change from 0 to 32768 [ 76.564816][ T6115] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 77.097244][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 77.229540][ T6134] loop2: detected capacity change from 0 to 512 [ 77.273820][ T6134] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.309980][ T6134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.390156][ T6134] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.95: bad orphan inode 131083 [ 77.470307][ T3558] usb 2-1: USB disconnect, device number 3 [ 77.488917][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.971804][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.474253][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 78.574319][ T6148] loop3: detected capacity change from 0 to 32768 [ 78.643539][ T6148] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.746985][ T6148] XFS (loop3): Ending clean mount [ 79.077920][ T6182] blktrace: Concurrent blktraces are not allowed on loop4 [ 79.086319][ T5762] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.427336][ T6189] nftables ruleset with unbound set [ 79.797111][ T6198] warning: `syz.0.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.962088][ T6184] loop1: detected capacity change from 0 to 40427 [ 79.990496][ T6200] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 80.012060][ T6184] F2FS-fs (loop1): invalid crc value [ 80.049629][ T6184] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.148930][ T6207] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 80.188258][ T6207] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 80.214284][ T6184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.223704][ T6207] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 80.230276][ T6207] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 80.244301][ T6207] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 80.425493][ T5765] syz-executor: attempt to access beyond end of device [ 80.425493][ T5765] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.454407][ T5765] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 80.914402][ T6224] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 80.922207][ T6224] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 81.436824][ T6238] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.631343][ T6226] loop0: detected capacity change from 0 to 32768 [ 81.725437][ T6226] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.731499][ T28] cfg80211: failed to load regulatory.db [ 81.787510][ T6234] loop1: detected capacity change from 0 to 32768 [ 81.797359][ T6234] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.124 (6234) [ 81.822257][ T6234] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 81.849215][ T6234] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 81.919523][ T6234] BTRFS info (device loop1): using free space tree [ 81.993436][ T6226] XFS (loop0): Ending clean mount [ 82.026670][ T6226] XFS (loop0): Quotacheck needed: Please wait. [ 82.136698][ T6234] BTRFS info (device loop1): enabling ssd optimizations [ 82.157452][ T6234] BTRFS info (device loop1): auto enabling async discard [ 82.166799][ T6226] XFS (loop0): Quotacheck: Done. [ 82.191088][ T6236] loop3: detected capacity change from 0 to 32768 [ 82.280351][ T6236] JBD2: Ignoring recovery information on journal [ 82.478959][ T6236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 82.510329][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.566328][ T5765] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 82.823506][ T5771] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.911620][ T5762] ocfs2: Unmounting device (7,3) on (node local) [ 82.956776][ T6278] loop0: detected capacity change from 0 to 512 [ 83.023151][ T5771] usb 3-1: Using ep0 maxpacket: 32 [ 83.031213][ T6278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.037466][ T5771] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 83.053420][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.077721][ T5771] usb 3-1: Product: syz [ 83.081913][ T5771] usb 3-1: Manufacturer: syz [ 83.105341][ T5771] usb 3-1: SerialNumber: syz [ 83.111271][ T6278] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.141: bad orphan inode 131083 [ 83.124306][ T5771] usb 3-1: config 0 descriptor?? [ 83.135411][ T5771] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 83.136069][ T6278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.143642][ T5771] dvb-usb: bulk message failed: -22 (4/0) [ 83.163268][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 83.173880][ T5771] dvb-usb: bulk message failed: -22 (5/0) [ 83.179627][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 83.206311][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.217064][ T5771] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 83.225290][ T5771] usb 3-1: media controller created [ 83.312068][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.355785][ T6275] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 83.403377][ T6275] dvb-usb: bulk message failed: -22 (7/0) [ 83.423430][ T5771] usb 3-1: selecting invalid altsetting 3 [ 83.429196][ T5771] ttusb2: set interface to alts=3 failed [ 83.435462][ T6275] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 83.453460][ T6275] ttusb2: i2c transfer failed. [ 83.498451][ T6284] loop3: detected capacity change from 0 to 8192 [ 83.539296][ T6284] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.587257][ T5771] DVB: Unable to find symbol tda10086_attach() [ 83.605464][ T27] kauditd_printk_skb: 368 callbacks suppressed [ 83.605477][ T27] audit: type=1800 audit(1776080155.072:375): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.144" name="file2" dev="loop3" ino=1048604 res=0 errno=0 [ 83.609646][ T5771] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 83.645102][ T6284] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.668904][ T6284] FAT-fs (loop3): Filesystem has been set read-only [ 83.699092][ T5771] dvb-usb: bulk message failed: -22 (4/0) [ 83.722509][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.723430][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 83.790138][ T5771] dvb-usb: bulk message failed: -22 (5/0) [ 83.805368][ T5771] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 83.835903][ T5771] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 83.907337][ T5771] usb 3-1: USB disconnect, device number 2 [ 84.053719][ T5771] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 84.128385][ T6282] loop1: detected capacity change from 0 to 32768 [ 84.184568][ T6301] loop0: detected capacity change from 0 to 512 [ 84.220264][ T6282] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 84.234115][ T6301] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.148: corrupted in-inode xattr: bad e_name length [ 84.286235][ T6301] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.148: couldn't read orphan inode 15 (err -117) [ 84.304608][ T6282] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.326793][ T6301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.459414][ T6282] XFS (loop1): Ending clean mount [ 84.489160][ T6282] XFS (loop1): Quotacheck needed: Please wait. [ 84.541400][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.578244][ T6282] XFS (loop1): Quotacheck: Done. [ 84.714999][ T5765] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.863818][ T6317] capability: warning: `syz.0.154' uses deprecated v2 capabilities in a way that may be insecure [ 85.432953][ T6315] loop2: detected capacity change from 0 to 32768 [ 85.453186][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.481158][ T6315] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 85.571181][ T6337] loop3: detected capacity change from 0 to 256 [ 85.629324][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 85.643176][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 85.673312][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.704822][ T6337] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 85.717391][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.733333][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.739089][ T6337] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 85.763156][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.772275][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.785703][ T23] usb 2-1: config 0 descriptor?? [ 85.968385][ T6341] support for cryptoloop has been removed. Use dm-crypt instead. [ 86.184838][ T6349] loop2: detected capacity change from 0 to 64 [ 86.234775][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.259795][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.277499][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.306267][ T6351] tmpfs: Cannot retroactively limit inodes [ 86.312424][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.354384][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.383394][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.390664][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.404075][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.413032][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.423270][ T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.434339][ T23] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 86.447120][ T23] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 86.458823][ T23] microsoft 0003:045E:07DA.0001: no inputs found [ 86.473245][ T23] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 86.522880][ T23] usb 2-1: USB disconnect, device number 4 [ 86.677533][ T6356] fido_id[6356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.151876][ T6360] loop3: detected capacity change from 0 to 32768 [ 87.189257][ T6360] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.172 (6360) [ 87.237143][ T6360] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 87.272566][ T6374] loop0: detected capacity change from 0 to 4096 [ 87.280236][ T6360] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 87.300328][ T6378] ceph: Unexpected value for 'acl' [ 87.301104][ T6360] BTRFS info (device loop3): enabling ssd optimizations [ 87.318122][ T6360] BTRFS info (device loop3): not using ssd optimizations [ 87.336260][ T6360] BTRFS info (device loop3): turning off barriers [ 87.354383][ T6360] BTRFS info (device loop3): using free space tree [ 87.653373][ T6360] BTRFS warning (device loop3): this kernel does not support the incompat:16,incompat:23,incompat:36,incompat:43,incompat:46,incompat:48,incompat:49,incompat:54,incompat:60,incompat:62,incompat:63 feature bits [ 87.842070][ T5762] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 88.018205][ T6410] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 88.500472][ T6424] netlink: set zone limit has 8 unknown bytes [ 88.667689][ T6412] loop2: detected capacity change from 0 to 32768 [ 88.723641][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.843372][ T3558] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.933156][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 88.940263][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.949012][ T23] usb 2-1: config 0 has no interface number 0 [ 88.963626][ T23] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.971341][ T6436] loop3: detected capacity change from 0 to 512 [ 88.977235][ T23] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 88.997031][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.007051][ T23] usb 2-1: Product: syz [ 89.012792][ T23] usb 2-1: Manufacturer: syz [ 89.017912][ T23] usb 2-1: SerialNumber: syz [ 89.027846][ T23] usb 2-1: config 0 descriptor?? [ 89.035623][ T3558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.057623][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.070977][ T3558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.084572][ T23] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 89.087867][ T6436] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.095923][ T3558] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 89.114763][ T23] em28xx 2-1:0.132: Video interface 132 found: [ 89.124049][ T3558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.136818][ T3558] usb 1-1: config 0 descriptor?? [ 89.263810][ T6436] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.204: resize_inode disabled but reserved GDT blocks non-zero [ 89.337139][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.482587][ T23] em28xx 2-1:0.132: chip ID is em2710/2820 [ 89.495876][ T6445] loop2: detected capacity change from 0 to 256 [ 89.504479][ T6445] exfat: Deprecated parameter 'namecase' [ 89.559777][ T6445] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 89.596028][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.617629][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.643412][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.651576][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.685229][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.702060][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.716864][ T3558] logitech-djreceiver 0003:046D:C52F.0002: unknown main item tag 0x0 [ 89.777213][ T23] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 89.823176][ T23] em28xx 2-1:0.132: board has no eeprom [ 89.889184][ T3558] usb 1-1: USB disconnect, device number 2 [ 89.904732][ T23] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.926949][ T23] em28xx 2-1:0.132: analog set to bulk mode. [ 89.935006][ T5805] em28xx 2-1:0.132: Registering V4L2 extension [ 89.972967][ T23] usb 2-1: USB disconnect, device number 5 [ 89.989211][ T23] em28xx 2-1:0.132: Disconnecting em28xx [ 90.148435][ T5805] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 90.156880][ T5805] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 90.165040][ T5805] em28xx 2-1:0.132: No AC97 audio processor [ 90.176680][ T5805] usb 2-1: Decoder not found [ 90.181299][ T5805] em28xx 2-1:0.132: failed to create media graph [ 90.192282][ T5805] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 90.206846][ T5805] em28xx 2-1:0.132: Remote control support is not available for this card. [ 90.223699][ T23] em28xx 2-1:0.132: Closing input extension [ 90.251762][ T23] em28xx 2-1:0.132: Freeing device [ 90.267293][ T6449] loop3: detected capacity change from 0 to 32768 [ 90.355534][ T6449] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.498560][ T6449] XFS (loop3): Ending clean mount [ 90.531334][ T6449] XFS (loop3): Quotacheck needed: Please wait. [ 90.639858][ T6449] XFS (loop3): Quotacheck: Done. [ 90.766820][ T5762] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.225072][ T6483] loop2: detected capacity change from 0 to 4096 [ 91.303438][ T6486] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.459965][ T6483] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 91.751096][ T6477] loop1: detected capacity change from 0 to 40427 [ 91.775244][ T6479] loop0: detected capacity change from 0 to 32768 [ 91.784316][ T6477] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 91.812720][ T6477] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 91.837978][ T6479] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.862523][ T6477] F2FS-fs (loop1): invalid crc value [ 91.980661][ T6477] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.111836][ T6479] XFS (loop0): Ending clean mount [ 92.226540][ T6477] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 92.249328][ T6477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.290146][ T6514] loop3: detected capacity change from 0 to 128 [ 92.371429][ T6514] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.463513][ T6514] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.602122][ T5765] syz-executor: attempt to access beyond end of device [ 92.602122][ T5765] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.636240][ T5762] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.651557][ T5765] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 92.704471][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.933188][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.139175][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.164432][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.184237][ T23] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 93.198741][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.210317][ T23] usb 3-1: config 0 descriptor?? [ 93.509850][ T6540] loop1: detected capacity change from 0 to 1024 [ 93.651141][ T23] hkems 0003:2006:0118.0003: bogus close delimiter [ 93.687584][ T23] hkems 0003:2006:0118.0003: item 0 0 2 10 parsing failed [ 93.718423][ T23] hkems 0003:2006:0118.0003: parse failed [ 93.742165][ T23] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 93.905743][ T23] usb 3-1: USB disconnect, device number 3 [ 94.118034][ T6556] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.245'. [ 94.178148][ T6556] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 94.309036][ T6566] loop1: detected capacity change from 0 to 64 [ 94.405275][ T6567] loop3: detected capacity change from 0 to 4096 [ 94.629454][ T6567] ntfs3: loop3: ino=21, "file1" fallocate(0x10) is not supported [ 94.905865][ T6576] loop2: detected capacity change from 0 to 8192 [ 94.926694][ T6576] REISERFS warning (device loop2): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 [ 95.119230][ T6582] loop1: detected capacity change from 0 to 4096 [ 95.218590][ T6582] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 95.330395][ T6582] ntfs3: loop1: Failed to load $Extend (-22). [ 95.350879][ T6582] ntfs3: loop1: Failed to initialize $Extend. [ 95.440422][ T6589] loop2: detected capacity change from 0 to 4096 [ 95.516452][ T27] audit: type=1800 audit(1776080166.982:376): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 95.622931][ T6579] loop3: detected capacity change from 0 to 32768 [ 95.659994][ T6579] (syz.3.255,6579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.707850][ T6579] (syz.3.255,6579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.838030][ T6579] JBD2: Ignoring recovery information on journal [ 95.845585][ T6591] loop0: detected capacity change from 0 to 4096 [ 95.870728][ T6591] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 95.924807][ T6591] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 95.943399][ T6591] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 95.971288][ T6591] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 95.990422][ T6579] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.014706][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 96.107904][ T6591] ntfs: volume version 3.1. [ 96.146270][ T6601] loop2: detected capacity change from 0 to 64 [ 96.240193][ T6591] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 96.307411][ T6591] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 96.416162][ T5763] hfs: node 4:3 still has 1 user(s)! [ 96.548270][ T6606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.589806][ T6606] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.617748][ T6606] EXT4-fs (loop2): 1 truncate cleaned up [ 96.646255][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.674177][ T6607] TCP: TCP_TX_DELAY enabled [ 96.738630][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.759519][ T6579] syz.3.255 (6579) used greatest stack depth: 18768 bytes left [ 96.880562][ T5762] ocfs2: Unmounting device (7,3) on (node local) [ 97.015648][ T6612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.043714][ T6612] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.262817][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.278857][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 97.610384][ T6628] set_capacity_and_notify: 2 callbacks suppressed [ 97.610399][ T6628] loop2: detected capacity change from 0 to 64 [ 97.688050][ T6630] loop0: detected capacity change from 0 to 2048 [ 97.782919][ T6630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.882176][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.277'. [ 97.974423][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.221589][ T6642] loop0: detected capacity change from 0 to 4096 [ 98.276844][ T6645] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.654150][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 98.807619][ T6661] loop3: detected capacity change from 0 to 512 [ 98.824619][ T6661] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.939406][ T6644] loop1: detected capacity change from 0 to 32768 [ 99.006555][ T6644] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.099527][ T6644] XFS (loop1): Ending clean mount [ 99.128533][ T6644] XFS (loop1): Quotacheck needed: Please wait. [ 99.240621][ T6644] XFS (loop1): Quotacheck: Done. [ 99.514995][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.703893][ T6659] loop2: detected capacity change from 0 to 40427 [ 99.736709][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.758740][ T6659] F2FS-fs (loop2): invalid crc value [ 99.775563][ T6659] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.850186][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 99.879468][ T6659] F2FS-fs (loop2): Start checkpoint disabled! [ 99.906142][ T6659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 99.943393][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 99.948854][ T6673] loop3: detected capacity change from 0 to 32768 [ 99.978883][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.014939][ T6673] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 100.014939][ T6673] [ 100.023500][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.055877][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.093748][ T787] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.116212][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.147142][ T787] usb 1-1: config 0 descriptor?? [ 100.214966][ T6681] loop1: detected capacity change from 0 to 1024 [ 100.459074][ T3542] hfsplus: b-tree write err: -5, ino 25 [ 100.473616][ T3542] hfsplus: b-tree write err: -5, ino 4 [ 100.487140][ T3542] hfsplus: b-tree write err: -5, ino 2 [ 100.505648][ T3542] hfsplus: b-tree write err: -5, ino 17 [ 100.591775][ T6685] loop1: detected capacity change from 0 to 256 [ 100.626392][ T787] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 100.633417][ T6685] FAT-fs (loop1): Directory bread(block 64) failed [ 100.641829][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.672440][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.679817][ T6685] FAT-fs (loop1): Directory bread(block 65) failed [ 100.679933][ T6685] FAT-fs (loop1): Directory bread(block 66) failed [ 100.713193][ T6685] FAT-fs (loop1): Directory bread(block 67) failed [ 100.725954][ T6685] FAT-fs (loop1): Directory bread(block 68) failed [ 100.747666][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.758143][ T6685] FAT-fs (loop1): Directory bread(block 69) failed [ 100.766317][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.775930][ T6685] FAT-fs (loop1): Directory bread(block 70) failed [ 100.793567][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.796050][ T6685] FAT-fs (loop1): Directory bread(block 71) failed [ 100.809946][ T6689] loop2: detected capacity change from 0 to 512 [ 100.816801][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.830160][ T6685] FAT-fs (loop1): Directory bread(block 72) failed [ 100.835503][ T6689] EXT4-fs: Ignoring removed bh option [ 100.859336][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.869875][ T6685] FAT-fs (loop1): Directory bread(block 73) failed [ 100.897367][ T787] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.905495][ T6689] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.924407][ T787] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 100.937158][ T787] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 100.984357][ T6689] EXT4-fs (loop2): 1 truncate cleaned up [ 101.005628][ T6689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.012117][ T787] microsoft 0003:045E:07DA.0004: no inputs found [ 101.093716][ T787] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 101.124126][ T6689] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 101.181699][ T787] usb 1-1: USB disconnect, device number 3 [ 101.246221][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.660466][ T5806] IPVS: starting estimator thread 0... [ 101.710660][ T6687] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 101.751456][ T6687] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.763467][ T6709] IPVS: using max 19 ests per chain, 45600 per kthread [ 101.823261][ T6687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.966073][ T6687] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.980417][ T6687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.212756][ T5762] syz-executor: attempt to access beyond end of device [ 102.212756][ T5762] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.247664][ T6705] XFS: noikeep mount option is deprecated. [ 102.266425][ T5762] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.338939][ T6705] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.609520][ T6705] XFS (loop2): Ending clean mount [ 102.633854][ T6705] XFS (loop2): Quotacheck needed: Please wait. [ 102.716068][ T6705] XFS (loop2): Quotacheck: Done. [ 102.775113][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 102.989128][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.180447][ T6745] set_capacity_and_notify: 2 callbacks suppressed [ 103.180461][ T6745] loop3: detected capacity change from 0 to 1024 [ 103.229812][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.230704][ T6723] loop0: detected capacity change from 0 to 32768 [ 103.254835][ T6745] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.309: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 103.449488][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.101429][ T6768] loop3: detected capacity change from 0 to 128 [ 104.115947][ T6749] loop1: detected capacity change from 0 to 32768 [ 104.125522][ T6749] (syz.1.316,6749,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.168984][ T6749] (syz.1.316,6749,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.187623][ T6768] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 104.202552][ T6768] FAT-fs (loop3): Filesystem has been set read-only [ 104.223151][ T6749] JBD2: Ignoring recovery information on journal [ 104.351562][ T6749] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.377566][ T6751] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 104.534339][ T6766] loop2: detected capacity change from 0 to 32768 [ 104.606291][ T6766] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.762119][ T6766] XFS (loop2): Ending clean mount [ 104.930816][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 104.932690][ T5763] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.454151][ T6797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'. [ 105.486344][ T6793] mmap: syz.0.329 (6793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.498136][ T6797] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.641746][ T6791] loop3: detected capacity change from 0 to 32768 [ 105.673327][ T6791] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.331 (6791) [ 105.694193][ T6791] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 105.727780][ T6791] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 105.749698][ T6791] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 105.778732][ T6791] BTRFS info (device loop3): use zstd compression, level 3 [ 105.798949][ T6791] BTRFS info (device loop3): using free space tree [ 105.893830][ T6791] BTRFS info (device loop3): enabling ssd optimizations [ 105.903145][ T3558] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.921421][ T6791] BTRFS info (device loop3): auto enabling async discard [ 106.039369][ T5762] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.094979][ T3558] usb 3-1: Using ep0 maxpacket: 16 [ 106.108057][ T3558] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.146804][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.188363][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.224704][ T3558] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.246918][ T3558] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.289594][ T3558] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.307348][ T3558] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.323526][ T3558] usb 3-1: Manufacturer: syz [ 106.330687][ T3558] usb 3-1: config 0 descriptor?? [ 106.463261][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 106.613805][ T3558] rc_core: IR keymap rc-hauppauge not found [ 106.619856][ T3558] Registered IR keymap rc-empty [ 106.625270][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.653334][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.663130][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.676039][ T23] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 106.687936][ T3558] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 106.700630][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.709253][ T23] usb 1-1: Product: syz [ 106.715082][ T23] usb 1-1: Manufacturer: syz [ 106.719691][ T23] usb 1-1: SerialNumber: syz [ 106.724685][ T3558] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 106.740297][ T23] usb 1-1: config 0 descriptor?? [ 106.763358][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.800220][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.843444][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.883221][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.913702][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.943351][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.953860][ T23] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 106.973267][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.013392][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.043202][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.073258][ T3558] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.104357][ T3558] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 107.114874][ T3558] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.133759][ T3558] usb 3-1: USB disconnect, device number 4 [ 107.181030][ T5771] usb 1-1: USB disconnect, device number 4 [ 107.680180][ T6833] loop1: detected capacity change from 0 to 256 [ 107.931605][ T6841] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 108.270405][ T6853] loop3: detected capacity change from 0 to 64 [ 108.292389][ T6855] loop1: detected capacity change from 0 to 1024 [ 108.337906][ T6837] loop2: detected capacity change from 0 to 32768 [ 108.382290][ T6837] (syz.2.340,6837,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.421346][ T6837] (syz.2.340,6837,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.467866][ T6837] JBD2: Ignoring recovery information on journal [ 108.490319][ T42] hfsplus: b-tree write err: -5, ino 25 [ 108.521063][ T42] hfsplus: b-tree write err: -5, ino 4 [ 108.527706][ T42] hfsplus: b-tree write err: -5, ino 2 [ 108.538803][ T42] hfsplus: b-tree write err: -5, ino 17 [ 108.598686][ T6837] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.641599][ T6863] loop0: detected capacity change from 0 to 512 [ 108.727944][ T6863] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.355: EA inode hash validation failed [ 108.772055][ T6863] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.355: corrupted inode contents [ 108.808492][ T6863] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #15: comm syz.0.355: mark_inode_dirty error [ 108.834824][ T6863] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.355: corrupted inode contents [ 108.917961][ T6863] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2998: inode #15: comm syz.0.355: mark_inode_dirty error [ 108.934802][ T6863] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.355: mark inode dirty (error -117) [ 108.952095][ T6863] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 108.982523][ T6863] EXT4-fs (loop0): 1 orphan inode deleted [ 109.004222][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.067737][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 109.142151][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.442066][ T6879] loop0: detected capacity change from 0 to 512 [ 109.451072][ T6877] loop2: detected capacity change from 0 to 2048 [ 109.462670][ T6879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.475976][ T6877] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.502444][ T6880] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.528392][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.560655][ T6879] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.634773][ T6879] EXT4-fs error (device loop0): __ext4_new_inode:1290: comm syz.0.360: failed to insert inode 16: doubly allocated? [ 109.804904][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.893561][ T6886] loop2: detected capacity change from 0 to 2048 [ 109.920000][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.985128][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.029695][ T6890] loop0: detected capacity change from 0 to 512 [ 110.082167][ T6893] loop3: detected capacity change from 0 to 512 [ 110.122441][ T6890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.142708][ T6890] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.177882][ T6893] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #15: comm syz.3.365: corrupted inode contents [ 110.202651][ T6890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.212619][ T6890] EXT4-fs: Cannot change journaled quota options when quota turned on [ 110.264194][ T6893] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 110.293971][ T6893] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #15: comm syz.3.365: corrupted inode contents [ 110.313636][ T3558] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.329999][ T6893] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.365: mark_inode_dirty error [ 110.346769][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.356480][ T6893] EXT4-fs (loop3): 1 orphan inode deleted [ 110.365015][ T6893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.483903][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.535198][ T3558] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 110.567367][ T3558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.586035][ T3558] usb 2-1: Product: syz [ 110.621680][ T3558] usb 2-1: Manufacturer: syz [ 110.628735][ T3558] usb 2-1: SerialNumber: syz [ 110.644327][ T3558] usb 2-1: config 0 descriptor?? [ 110.713623][ T6898] loop2: detected capacity change from 0 to 32768 [ 110.782539][ T6898] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 110.811144][ T6904] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 110.841374][ T6898] JBD2: Ignoring recovery information on journal [ 110.877680][ T3558] usb 2-1: USB disconnect, device number 6 [ 111.046304][ T6898] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 111.172452][ T6898] process 'syz.2.366' launched './file1' with NULL argv: empty string added [ 111.267514][ T6900] (syz.0.367,6900,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.293497][ T6900] (syz.0.367,6900,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.360578][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 111.388087][ T6900] JBD2: Ignoring recovery information on journal [ 111.537034][ T6900] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.604613][ T1134] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 111.717651][ T6922] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.377'. [ 111.821480][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 112.461302][ T6938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.613558][ T6938] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.383: reserved inode found cleared - inode=1 [ 112.633605][ T6930] (syz.2.380,6930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.658900][ T6930] (syz.2.380,6930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.731914][ T6930] JBD2: Ignoring recovery information on journal [ 112.733523][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.816053][ T6930] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.124864][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 113.732005][ T6963] set_capacity_and_notify: 6 callbacks suppressed [ 113.732019][ T6963] loop2: detected capacity change from 0 to 512 [ 113.816585][ T6963] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.392: corrupted inode contents [ 113.897387][ T6963] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 113.940445][ T6963] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.392: corrupted inode contents [ 113.980230][ T6963] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.392: mark_inode_dirty error [ 114.032547][ T6963] EXT4-fs (loop2): 1 orphan inode deleted [ 114.052032][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.119001][ T6952] loop0: detected capacity change from 0 to 32768 [ 114.172645][ T6952] (syz.0.389,6952,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.198125][ T6952] (syz.0.389,6952,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.230779][ T6952] JBD2: Ignoring recovery information on journal [ 114.269614][ T6952] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.295086][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.315356][ T6975] loop1: detected capacity change from 0 to 2048 [ 114.378031][ T6975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.425532][ T6967] loop3: detected capacity change from 0 to 32768 [ 114.584064][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.718211][ T6979] loop2: detected capacity change from 0 to 2048 [ 114.833902][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 114.849720][ T6979] loop2: p1 p2 p3 [ 115.260896][ T5753] udevd[5753]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 115.266294][ T6290] udevd[6290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 115.303224][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 115.820538][ T6981] loop1: detected capacity change from 0 to 40427 [ 115.851231][ T6981] F2FS-fs (loop1): invalid crc value [ 115.870648][ T6981] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.988602][ T6981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.190945][ T5765] syz-executor: attempt to access beyond end of device [ 116.190945][ T5765] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.217814][ T5765] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.554278][ T7011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.412'. [ 116.750506][ T7015] loop3: detected capacity change from 0 to 4096 [ 116.805203][ T7018] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.842365][ T7017] loop1: detected capacity change from 0 to 1024 [ 116.887628][ T7017] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 116.949564][ T7015] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2048, cno=5, offset=63330, blocknr=0, vblocknr=34359803903 [ 116.954517][ T7023] fuse: Invalid rootmode [ 116.982757][ T7015] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 117.013266][ T7017] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.409: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.062990][ T7017] EXT4-fs (loop1): Remounting filesystem read-only [ 117.079740][ T7017] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 117.097168][ T7017] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 117.121350][ T7017] EXT4-fs (loop1): 1 orphan inode deleted [ 117.130511][ T7017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.263824][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.383310][ T5805] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.607709][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.628282][ T5805] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 117.647959][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.674307][ T5805] usb 3-1: config 0 descriptor?? [ 117.926930][ T7035] loop1: detected capacity change from 0 to 32768 [ 117.999774][ T7039] loop3: detected capacity change from 0 to 32768 [ 118.099714][ T7039] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.279912][ T7039] XFS (loop3): Ending clean mount [ 118.318328][ T5805] ath6kl: Failed to read usb control message: -71 [ 118.330332][ T7039] XFS (loop3): Quotacheck needed: Please wait. [ 118.358767][ T5805] ath6kl: Unable to read the bmi data from the device: -71 [ 118.378430][ T5805] ath6kl: unable to read target info byte count: -71 [ 118.419635][ T5805] ath6kl: Failed to init ath6kl core: -71 [ 118.433319][ T7039] XFS (loop3): Quotacheck: Done. [ 118.446575][ T5805] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 118.459384][ T5805] usb 3-1: USB disconnect, device number 5 [ 118.562803][ T5762] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.937170][ T7070] loop0: detected capacity change from 0 to 256 [ 119.000848][ T7070] FAT-fs (loop0): Directory bread(block 64) failed [ 119.014344][ T7070] FAT-fs (loop0): Directory bread(block 65) failed [ 119.039896][ T7070] FAT-fs (loop0): Directory bread(block 66) failed [ 119.053233][ T7070] FAT-fs (loop0): Directory bread(block 67) failed [ 119.059869][ T7070] FAT-fs (loop0): Directory bread(block 68) failed [ 119.103132][ T7070] FAT-fs (loop0): Directory bread(block 69) failed [ 119.113457][ T7070] FAT-fs (loop0): Directory bread(block 70) failed [ 119.122701][ T7070] FAT-fs (loop0): Directory bread(block 71) failed [ 119.146301][ T7070] FAT-fs (loop0): Directory bread(block 72) failed [ 119.152858][ T7070] FAT-fs (loop0): Directory bread(block 73) failed [ 119.658672][ T7072] loop2: detected capacity change from 0 to 32768 [ 119.845104][ T7087] loop0: detected capacity change from 0 to 4096 [ 119.868421][ T7087] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 119.981798][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 120.013226][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 120.062341][ T7076] loop1: detected capacity change from 0 to 40427 [ 120.087342][ T7076] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.115528][ T7076] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.146905][ T7076] F2FS-fs (loop1): invalid crc value [ 120.175108][ T7076] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.322043][ T7076] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.345011][ T7076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.554700][ T7106] loop3: detected capacity change from 0 to 64 [ 120.776455][ T7108] loop0: detected capacity change from 0 to 2048 [ 120.808052][ T7108] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.850635][ T7113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.867646][ T5755] udevd[5755]: incorrect nilfs2 checksum on /dev/loop0 [ 121.741674][ T7130] loop1: detected capacity change from 0 to 32768 [ 121.780278][ T7130] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.866436][ T7130] XFS (loop1): Ending clean mount [ 122.080205][ T7141] loop0: detected capacity change from 0 to 4096 [ 122.093335][ T7141] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 122.159700][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.253420][ T7141] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 122.423581][ T7141] ntfs3: loop0: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 122.708783][ T7152] loop2: detected capacity change from 0 to 512 [ 122.727473][ T7152] EXT4-fs (loop2): #blocks per group too big: 466944 [ 122.745894][ T7156] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 122.874225][ T7154] loop3: detected capacity change from 0 to 8192 [ 122.928738][ T7154] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.963241][ T7154] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 122.972508][ T7154] REISERFS (device loop3): using ordered data mode [ 122.980163][ T7154] reiserfs: using flush barriers [ 122.989390][ T7154] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.008680][ T7154] REISERFS (device loop3): checking transaction log (loop3) [ 123.070820][ T7154] REISERFS (device loop3): Using r5 hash to sort names [ 123.078375][ T7154] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 123.605502][ T7177] IPVS: Error connecting to the multicast addr [ 124.277886][ T7207] capability: warning: `syz.3.492' uses 32-bit capabilities (legacy support in use) [ 124.563459][ T27] audit: type=1326 audit(1776080196.022:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.608595][ T7223] overlayfs: missing 'lowerdir' [ 124.638366][ T27] audit: type=1326 audit(1776080196.022:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.686437][ T27] audit: type=1326 audit(1776080196.082:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.746277][ T27] audit: type=1326 audit(1776080196.082:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.780173][ T7218] set_capacity_and_notify: 2 callbacks suppressed [ 124.780186][ T7218] loop2: detected capacity change from 0 to 8192 [ 124.806696][ T27] audit: type=1326 audit(1776080196.082:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.834662][ T27] audit: type=1326 audit(1776080196.082:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.863903][ T7218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.865696][ T27] audit: type=1326 audit(1776080196.082:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.899556][ T27] audit: type=1326 audit(1776080196.082:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.922147][ T7218] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 124.922174][ T27] audit: type=1326 audit(1776080196.082:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.954809][ T27] audit: type=1326 audit(1776080196.082:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4448b9c819 code=0x7ffc0000 [ 124.983377][ T7218] REISERFS (device loop2): using ordered data mode [ 124.989932][ T7218] reiserfs: using flush barriers [ 125.007275][ T7218] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.034644][ T7218] REISERFS (device loop2): checking transaction log (loop2) [ 125.103379][ T5805] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.260562][ T7218] REISERFS (device loop2): Using r5 hash to sort names [ 125.281142][ T7218] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 125.355580][ T5805] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.374969][ T5805] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.401799][ T5805] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.443265][ T5805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 125.503539][ T5805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 125.546100][ T5805] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.579542][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.592837][ T7240] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 125.594097][ T5805] usb 4-1: Product: syz [ 125.633739][ T5805] usb 4-1: Manufacturer: syz [ 125.643802][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 125.663142][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 125.710091][ T5805] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 125.721399][ T5805] cdc_wdm 4-1:1.0: Unknown control protocol [ 125.737282][ T7230] loop1: detected capacity change from 0 to 32768 [ 125.920449][ T5771] usb 4-1: USB disconnect, device number 2 [ 126.121323][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.305423][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.323405][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.343372][ T787] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 126.365982][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.392245][ T787] usb 1-1: config 0 descriptor?? [ 126.828166][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.518'. [ 126.841641][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.849975][ T7250] loop2: detected capacity change from 0 to 32768 [ 126.858987][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.880908][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.901996][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.918966][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.926477][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.933791][ T787] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 126.936559][ T5805] XFS (loop2): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 126.956360][ T787] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 127.042303][ T787] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 127.076139][ T7272] loop3: detected capacity change from 0 to 64 [ 127.089683][ T787] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 127.137535][ T787] arvo: probe of 0003:1E7D:30D4.0005 failed with error -71 [ 127.172384][ T787] usb 1-1: USB disconnect, device number 5 [ 127.591332][ T7280] loop1: detected capacity change from 0 to 4096 [ 127.617452][ T7280] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 127.834154][ T7280] overlayfs: upper fs does not support tmpfile. [ 127.851020][ T7280] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.334543][ T7295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.532'. [ 128.390588][ T7282] loop3: detected capacity change from 0 to 40427 [ 128.404744][ T7282] F2FS-fs (loop3): invalid crc value [ 128.428354][ T7282] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.458465][ T7284] loop2: detected capacity change from 0 to 32768 [ 128.495364][ T7284] [ 128.495364][ T7284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.495364][ T7284] [ 128.541236][ T7298] loop1: detected capacity change from 0 to 2048 [ 128.555289][ T7284] ERROR: (device loop2): ea_get: invalid ea.flag [ 128.555289][ T7284] [ 128.584624][ T7284] ERROR: (device loop2): remounting filesystem as read-only [ 128.616305][ T7282] F2FS-fs (loop3): Start checkpoint disabled! [ 128.632836][ T7298] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.673198][ T7282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 128.682983][ T5778] udevd[5778]: incorrect nilfs2 checksum on /dev/loop1 [ 128.693090][ T7298] NILFS (loop1): mounting unchecked fs [ 128.749369][ T7298] NILFS (loop1): recovery complete [ 128.784213][ T7302] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.392441][ T7300] loop0: detected capacity change from 0 to 32768 [ 129.510277][ T7300] ialloc: diAlloc returned -5! [ 129.587364][ T7315] loop1: detected capacity change from 0 to 256 [ 129.613988][ T7315] exfat: Deprecated parameter 'utf8' [ 129.665896][ T7315] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 129.757519][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 129.757532][ T27] audit: type=1800 audit(1776080201.222:456): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="file1" dev="loop1" ino=1048647 res=0 errno=0 [ 129.837271][ T27] audit: type=1800 audit(1776080201.262:457): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="file1" dev="loop1" ino=1048647 res=0 errno=0 [ 130.221105][ T7331] loop0: detected capacity change from 0 to 512 [ 130.276427][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.388163][ T7331] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.474640][ T7331] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.548: corrupted xattr block 32: overlapping e_value [ 130.585751][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.706948][ T5805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.905885][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.923144][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.943525][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.972141][ T5805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.995061][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.024514][ T5805] usb 2-1: config 0 descriptor?? [ 131.153315][ T3558] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.198949][ T7350] loop2: detected capacity change from 0 to 32768 [ 131.241861][ T7350] JBD2: Ignoring recovery information on journal [ 131.304473][ T7350] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.311530][ T7367] bridge1: entered allmulticast mode [ 131.329948][ T7367] team0: Port device bridge1 added [ 131.369945][ T3558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.435467][ T3558] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.436428][ T7350] (syz.2.557,7350,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 131.451030][ T5805] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 131.461401][ T3558] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 131.471634][ T5805] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 131.479798][ T3558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.495139][ T7350] (syz.2.557,7350,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 81604378625 from the device. [ 131.504963][ T3558] usb 1-1: config 0 descriptor?? [ 131.543648][ T5805] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 131.669943][ T28] usb 2-1: USB disconnect, device number 7 [ 131.728804][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 131.763808][ T7371] fido_id[7371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.954979][ T7378] loop2: detected capacity change from 0 to 64 [ 132.012850][ T3558] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 132.033138][ T3558] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 132.039968][ T3558] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 132.051266][ T3558] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 132.060302][ T3558] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 132.075361][ T3558] kone 0003:1E7D:2CED.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 132.173383][ T7381] loop2: detected capacity change from 0 to 128 [ 132.252586][ T7381] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.267055][ T3558] usb 1-1: USB disconnect, device number 6 [ 132.359623][ T7381] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.506070][ T5763] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.650698][ T7392] loop2: detected capacity change from 0 to 256 [ 132.907839][ T7383] loop3: detected capacity change from 0 to 32768 [ 132.921717][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929958][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930416][ T7383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.570 (7383) [ 132.976065][ T7383] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.006352][ T7383] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.023243][ T7383] BTRFS info (device loop3): using free space tree [ 133.203228][ T7383] BTRFS info (device loop3): enabling ssd optimizations [ 133.238029][ T7383] BTRFS info (device loop3): auto enabling async discard [ 133.346214][ T7390] loop1: detected capacity change from 0 to 32768 [ 133.368181][ T7390] XFS: attr2 mount option is deprecated. [ 133.473385][ T7390] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.511967][ T5762] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.650351][ T7390] XFS (loop1): Ending clean mount [ 133.688407][ T7390] XFS (loop1): Quotacheck needed: Please wait. [ 133.780930][ T7390] XFS (loop1): Quotacheck: Done. [ 133.874991][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 134.041981][ T7439] loop0: detected capacity change from 0 to 64 [ 134.057062][ T5765] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.333888][ T7440] overlayfs: upper fs needs to support d_type. [ 134.370415][ T7419] loop2: detected capacity change from 0 to 32768 [ 134.411890][ T7440] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.433322][ T7440] overlayfs: failed to set xattr on upper [ 134.461770][ T7440] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.462882][ T7419] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 134.462882][ T7419] [ 134.478515][ T7440] overlayfs: ...falling back to index=off. [ 134.503856][ T7419] ERROR: (device loop2): remounting filesystem as read-only [ 134.513200][ T7440] overlayfs: ...falling back to uuid=null. [ 134.530601][ T7419] ERROR: (device loop2): jfs_unlink: [ 134.530601][ T7419] [ 134.553242][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 134.561291][ T7443] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 134.561291][ T7443] [ 134.691767][ T5764] Bad inode number on dev loop0: 4160749571 is out of range [ 134.694869][ T7445] loop1: detected capacity change from 0 to 2048 [ 134.706924][ T5764] Bad inode number on dev loop0: 4160749571 is out of range [ 134.721292][ T7445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.314797][ T7458] set_capacity_and_notify: 1 callbacks suppressed [ 135.314811][ T7458] loop2: detected capacity change from 0 to 128 [ 135.350091][ T1031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.479802][ T1031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.505042][ T7458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.515618][ T7458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 135.528212][ T7458] System zones: 1-3, 19-19, 35-36 [ 135.536871][ T7458] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.556950][ T7458] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.586205][ T1031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.670103][ T5763] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.670371][ T7466] loop3: detected capacity change from 0 to 128 [ 135.750553][ T1031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.761864][ T7466] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 135.791635][ T7466] hpfs: filesystem error: improperly stopped [ 135.798489][ T7466] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 135.807845][ T7466] hpfs: You really don't want any checks? You are crazy... [ 135.821123][ T7466] hpfs: Code page index out of array [ 135.853416][ T7466] hpfs: code page support is disabled [ 135.883438][ T7466] hpfs: hpfs_map_4sectors(): unaligned read [ 135.890848][ T7466] hpfs: hpfs_map_4sectors(): unaligned read [ 135.941447][ T7466] hpfs: filesystem error: unable to find root dir [ 136.464038][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.474532][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.482898][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.492224][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.521783][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.529631][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.770499][ T7494] loop1: detected capacity change from 0 to 764 [ 137.503153][ T3558] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.635938][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 137.649197][ T7499] loop3: detected capacity change from 0 to 32768 [ 137.685238][ T3558] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.698731][ T3558] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.718680][ T3558] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.777306][ T3558] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.796590][ T3558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.827511][ T3558] usb 3-1: Product: syz [ 137.831714][ T3558] usb 3-1: Manufacturer: syz [ 137.844599][ T3558] usb 3-1: SerialNumber: syz [ 138.021141][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.028605][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.036523][ T7479] bridge_slave_0: entered allmulticast mode [ 138.050450][ T7479] bridge_slave_0: entered promiscuous mode [ 138.059299][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.073445][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.073628][ T3558] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.080598][ T7479] bridge_slave_1: entered allmulticast mode [ 138.099002][ T7479] bridge_slave_1: entered promiscuous mode [ 138.276189][ T5771] usb 3-1: USB disconnect, device number 6 [ 138.295818][ T7515] loop1: detected capacity change from 0 to 40427 [ 138.314401][ T5771] usblp0: removed [ 138.336446][ T7515] F2FS-fs (loop1): invalid crc value [ 138.395976][ T7515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.570279][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.579832][ T7515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.593720][ T5773] Bluetooth: hci1: command tx timeout [ 138.695312][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.062408][ T27] audit: type=1326 audit(1776080210.522:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 139.191409][ T27] audit: type=1326 audit(1776080210.522:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 139.310737][ T27] audit: type=1326 audit(1776080210.552:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 139.393162][ T27] audit: type=1326 audit(1776080210.552:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 139.463170][ T27] audit: type=1326 audit(1776080210.552:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 139.529723][ T27] audit: type=1326 audit(1776080210.552:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e72d9c819 code=0x7ffc0000 [ 140.129278][ T1031] hsr_slave_0: left promiscuous mode [ 140.158097][ T1031] hsr_slave_1: left promiscuous mode [ 140.164483][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.219342][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.247447][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.255014][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.282755][ T1031] bridge_slave_1: left allmulticast mode [ 140.303208][ T1031] bridge_slave_1: left promiscuous mode [ 140.312095][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.351457][ T1031] bridge_slave_0: left allmulticast mode [ 140.358598][ T1031] bridge_slave_0: left promiscuous mode [ 140.365482][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.427337][ T1031] veth1_macvtap: left promiscuous mode [ 140.444554][ T1031] veth0_macvtap: left promiscuous mode [ 140.464570][ T1031] veth1_vlan: left promiscuous mode [ 140.480386][ T1031] veth0_vlan: left promiscuous mode [ 140.674270][ T5773] Bluetooth: hci1: command tx timeout [ 140.776231][ T7577] loop3: detected capacity change from 0 to 4096 [ 140.802385][ T7577] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 140.866110][ T7577] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.918824][ T7577] ntfs3: loop3: failed to convert "c46c" to iso8859-14 [ 141.441836][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 141.485568][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 141.529558][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.574401][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.869416][ T1031] bond0 (unregistering): Released all slaves [ 141.951439][ T7479] team0: Port device team_slave_0 added [ 141.976317][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.1.630'. [ 141.994028][ T7575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.071985][ T7479] team0: Port device team_slave_1 added [ 142.182429][ T7588] loop1: detected capacity change from 0 to 256 [ 142.209175][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.234700][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.285441][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.330405][ T7593] loop2: detected capacity change from 0 to 2048 [ 142.332138][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.348701][ T7588] FAT-fs (loop1): Directory bread(block 64) failed [ 142.375889][ T7588] FAT-fs (loop1): Directory bread(block 65) failed [ 142.382506][ T7588] FAT-fs (loop1): Directory bread(block 66) failed [ 142.397372][ T7593] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.430093][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.463615][ T7588] FAT-fs (loop1): Directory bread(block 67) failed [ 142.470273][ T7588] FAT-fs (loop1): Directory bread(block 68) failed [ 142.496256][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.498327][ T7588] FAT-fs (loop1): Directory bread(block 69) failed [ 142.558001][ T7593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.594810][ T7588] FAT-fs (loop1): Directory bread(block 70) failed [ 142.601413][ T7588] FAT-fs (loop1): Directory bread(block 71) failed [ 142.608256][ T7588] FAT-fs (loop1): Directory bread(block 72) failed [ 142.619388][ T7588] FAT-fs (loop1): Directory bread(block 73) failed [ 142.753831][ T5773] Bluetooth: hci1: command tx timeout [ 142.769795][ T7479] hsr_slave_0: entered promiscuous mode [ 142.779835][ T7593] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.637: bg 0: block 234: padding at end of block bitmap is not set [ 142.840533][ T7479] hsr_slave_1: entered promiscuous mode [ 142.844617][ T7593] EXT4-fs (loop2): Remounting filesystem read-only [ 142.863305][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.876714][ T7479] Cannot create hsr debugfs directory [ 142.894632][ T1134] bond0: (slave bond_slave_0): interface is now down [ 142.901638][ T1134] bond0: (slave bond_slave_1): interface is now down [ 142.919061][ T1031] IPVS: stop unused estimator thread 0... [ 142.949642][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.086487][ T3533] bond0: (slave bond_slave_0): interface is now down [ 143.113350][ T3533] bond0: (slave bond_slave_1): interface is now down [ 143.254655][ T1031] bond0: (slave bond_slave_0): interface is now down [ 143.293552][ T1031] bond0: (slave bond_slave_1): interface is now down [ 143.438094][ T1031] bond0: (slave bond_slave_0): interface is now down [ 143.473642][ T1031] bond0: (slave bond_slave_1): interface is now down [ 143.561972][ T7626] tipc: Invalid UDP bearer configuration [ 143.562025][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 143.614705][ T3542] bond0: (slave bond_slave_0): interface is now down [ 143.637964][ T3542] bond0: (slave bond_slave_1): interface is now down [ 143.665032][ T7479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.706093][ T7479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.776144][ T7479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.784123][ T1031] bond0: (slave bond_slave_0): interface is now down [ 143.791066][ T1031] bond0: (slave bond_slave_1): interface is now down [ 143.838574][ T7479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.980149][ T3542] bond0: (slave bond_slave_0): interface is now down [ 144.008565][ T3542] bond0: (slave bond_slave_1): interface is now down [ 144.136645][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.164452][ T59] bond0: (slave bond_slave_0): interface is now down [ 144.187836][ T59] bond0: (slave bond_slave_1): interface is now down [ 144.192412][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.240832][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.248041][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.314496][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.321653][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.343380][ T3488] bond0: (slave bond_slave_0): interface is now down [ 144.365337][ T3488] bond0: (slave bond_slave_1): interface is now down [ 144.543595][ T3488] bond0: (slave bond_slave_0): interface is now down [ 144.562126][ T3488] bond0: (slave bond_slave_1): interface is now down [ 144.609472][ T3488] bond0: now running without any active interface! [ 144.834208][ T5773] Bluetooth: hci1: command tx timeout [ 145.024764][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.316533][ T27] audit: type=1326 audit(1776080216.782:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b6f9c819 code=0x7ffc0000 [ 145.350336][ T27] audit: type=1326 audit(1776080216.782:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b6f9c819 code=0x7ffc0000 [ 145.385328][ T27] audit: type=1326 audit(1776080216.822:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe3b6f9c819 code=0x7ffc0000 [ 145.415981][ T27] audit: type=1326 audit(1776080216.822:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b6f9c819 code=0x7ffc0000 [ 145.440009][ T27] audit: type=1326 audit(1776080216.822:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b6f9c819 code=0x7ffc0000 [ 145.776972][ T7479] veth0_vlan: entered promiscuous mode [ 145.828340][ T7479] veth1_vlan: entered promiscuous mode [ 145.839419][ T7694] loop3: detected capacity change from 0 to 1024 [ 145.918401][ T7694] hfsplus: small file entry [ 145.971527][ T7479] veth0_macvtap: entered promiscuous mode [ 146.011407][ T7479] veth1_macvtap: entered promiscuous mode [ 146.042021][ T7700] loop2: detected capacity change from 0 to 256 [ 146.071522][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.143188][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.173443][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.216990][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.253405][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.283142][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.324919][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.372366][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.433736][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.454816][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.483337][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.512952][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.548450][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.588178][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.633610][ T7479] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.660161][ T7479] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.683460][ T7479] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.702370][ T7479] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.729910][ T7691] loop1: detected capacity change from 0 to 32768 [ 146.829580][ T7691] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.966346][ T7691] XFS (loop1): Ending clean mount [ 147.158005][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.184162][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.206878][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.285694][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.295030][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.393223][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.605312][ T23] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.623097][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.642709][ T23] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.673753][ T23] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.681777][ T23] usb 4-1: Manufacturer: syz [ 147.702693][ T23] usb 4-1: config 0 descriptor?? [ 147.864528][ T23] rc_core: IR keymap rc-hauppauge not found [ 147.896721][ T23] Registered IR keymap rc-empty [ 147.913641][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 147.953806][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 148.219235][ C1] igorplugusb 4-1:0.0: receive overflow invalid: 39 [ 148.251853][ T7766] loop2: detected capacity change from 0 to 1024 [ 148.320162][ T7766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.352451][ T7766] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 148.429678][ T23] usb 4-1: USB disconnect, device number 3 [ 148.431473][ T7766] ptrace attach of ""[7770] was attempted by "./syz-executor exec"[7766] [ 148.890392][ T7760] loop4: detected capacity change from 0 to 32768 [ 149.003503][ T7760] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.204559][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.690'. [ 149.270328][ T7760] XFS (loop4): Ending clean mount [ 149.278147][ T27] audit: type=1326 audit(1776080220.732:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e72d9c819 code=0x0 [ 149.499849][ T7479] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.509126][ T7775] loop1: detected capacity change from 0 to 40427 [ 149.511481][ T7775] F2FS-fs (loop1): invalid crc value [ 149.546564][ T7775] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.777699][ T7775] F2FS-fs (loop1): Start checkpoint disabled! [ 149.845148][ T7775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 150.055040][ T7821] tipc: Started in network mode [ 150.083547][ T7821] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 150.116784][ T7821] tipc: Enabled bearer , priority 10 [ 150.250935][ T7826] loop3: detected capacity change from 0 to 512 [ 150.288847][ T3533] kworker/u4:9: attempt to access beyond end of device [ 150.288847][ T3533] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 150.317260][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 150.324811][ T7826] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.346538][ T3533] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.354324][ T3533] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.360582][ T7826] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.488541][ T7826] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 150.524006][ T7826] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 150.556300][ T7826] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.699: Failed to acquire dquot type 1 [ 150.610290][ T7826] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.699: bg 0: block 40: padding at end of block bitmap is not set [ 150.687002][ T7826] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 150.733786][ T7826] EXT4-fs (loop3): 1 truncate cleaned up [ 150.741761][ T7826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.991089][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.236821][ T5771] tipc: Node number set to 10005162 [ 151.323372][ T5839] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 151.491868][ T7866] loop2: detected capacity change from 0 to 4096 [ 151.524192][ T5839] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 151.533487][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.570793][ T5839] usb 2-1: config 0 descriptor?? [ 151.599303][ T7869] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.606048][ T5839] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 151.698599][ T7866] NILFS (loop2): nilfs_sufile_do_free: segment 8 is already clean [ 151.813350][ T5839] gp8psk: usb in 128 operation failed. [ 152.030035][ T5839] gp8psk: usb in 146 operation failed. [ 152.043329][ T5839] gp8psk: failed to get FW version [ 152.059034][ T5839] gp8psk: usb in 149 operation failed. [ 152.079500][ T5839] gp8psk: failed to get FPGA version [ 152.080261][ T7863] loop4: detected capacity change from 0 to 32768 [ 152.092344][ T7861] loop3: detected capacity change from 0 to 32768 [ 152.104852][ T5839] gp8psk: usb in 138 operation failed. [ 152.110345][ T5839] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 152.138973][ T7863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.710 (7863) [ 152.166946][ T5839] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 152.201048][ T5839] usb 2-1: USB disconnect, device number 8 [ 152.247701][ T7861] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.707 (7861) [ 152.291431][ T7863] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.340095][ T7863] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 152.366796][ T7861] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 152.384187][ T7863] BTRFS info (device loop4): setting nodatasum [ 152.390108][ T7861] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 152.390368][ T7863] BTRFS info (device loop4): force zlib compression, level 3 [ 152.446334][ T7861] BTRFS info (device loop3): using free space tree [ 152.453551][ T7863] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.462797][ T7863] BTRFS info (device loop4): use lzo compression, level 0 [ 152.490835][ T7863] BTRFS info (device loop4): turning on flush-on-commit [ 152.519942][ T7863] BTRFS info (device loop4): enabling auto defrag [ 152.559969][ T7863] BTRFS info (device loop4): max_inline at 4096 [ 152.603882][ T7863] BTRFS info (device loop4): using free space tree [ 152.661800][ T7861] BTRFS info (device loop3): enabling ssd optimizations [ 152.669023][ T7861] BTRFS info (device loop3): auto enabling async discard [ 152.866011][ T7863] BTRFS info (device loop4): enabling ssd optimizations [ 152.983570][ T5762] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 153.233962][ T7479] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.291115][ T5755] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop3 scanned by udevd (5755) [ 153.297965][ T7923] loop1: detected capacity change from 0 to 4096 [ 153.338538][ T7923] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 153.340128][ T7879] loop2: detected capacity change from 0 to 32768 [ 153.537278][ T7879] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 153.578287][ T7923] ntfs: volume version 3.1. [ 153.646975][ T7879] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.836562][ T7923] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 153.907097][ T7879] XFS (loop2): Ending clean mount [ 153.919080][ T7923] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 153.934953][ T7879] XFS (loop2): Quotacheck needed: Please wait. [ 154.046997][ T7879] XFS (loop2): Quotacheck: Done. [ 154.330905][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.600445][ T7927] loop3: detected capacity change from 0 to 32768 [ 154.745256][ T7927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 155.004202][ T5762] ocfs2: Unmounting device (7,3) on (node local) [ 155.046161][ T7947] loop4: detected capacity change from 0 to 32768 [ 155.150375][ T7947] read_mapping_page failed! [ 155.157496][ T7947] ERROR: (device loop4): txCommit: [ 155.157496][ T7947] [ 155.221866][ T3488] read_mapping_page failed! [ 155.250307][ T3488] ERROR: (device loop4): txCommit: [ 155.250307][ T3488] [ 155.277118][ T3488] jfs_write_inode: jfs_commit_inode failed! [ 155.410490][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 155.703289][ T7977] syz.4.739 uses obsolete (PF_INET,SOCK_PACKET) [ 155.739389][ T7979] IPVS: Unknown mcast interface: [ 155.844726][ T7981] loop2: detected capacity change from 0 to 128 [ 155.914867][ T7981] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 155.914969][ T7981] FAT-fs (loop2): Filesystem has been set read-only [ 156.384834][ T7969] loop3: detected capacity change from 0 to 40427 [ 156.405538][ T7969] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 156.411990][ T7969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 156.449966][ T7969] F2FS-fs (loop3): invalid crc value [ 156.746275][ T7969] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 156.782034][ T7969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.536938][ T8026] mkiss: ax0: crc mode is auto. [ 157.617623][ T8003] loop4: detected capacity change from 0 to 40427 [ 157.662613][ T8003] F2FS-fs (loop4): invalid crc value [ 157.740352][ T8003] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.965364][ T8003] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 158.102187][ T7479] syz-executor: attempt to access beyond end of device [ 158.102187][ T7479] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.133463][ T7479] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.586176][ T8058] loop3: detected capacity change from 0 to 1024 [ 158.613642][ T8043] loop2: detected capacity change from 0 to 32768 [ 158.702702][ T8043] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.805632][ T8058] hfsplus: request for non-existent node 33554434 in B*Tree [ 158.883292][ T8058] hfsplus: request for non-existent node 33554434 in B*Tree [ 158.914402][ T8058] hfsplus: request for non-existent node 33554434 in B*Tree [ 158.982124][ T8058] hfsplus: request for non-existent node 33554434 in B*Tree [ 158.991878][ T8043] XFS (loop2): Ending clean mount [ 159.022992][ T8069] hfsplus: request for non-existent node 33554434 in B*Tree [ 159.032318][ T8043] XFS (loop2): Quotacheck needed: Please wait. [ 159.098169][ T8043] XFS (loop2): Quotacheck: Done. [ 159.173875][ T8069] hfsplus: request for non-existent node 33554434 in B*Tree [ 159.307634][ T1134] hfsplus: request for non-existent node 33554434 in B*Tree [ 159.324100][ T1134] hfsplus: request for non-existent node 33554434 in B*Tree [ 159.360556][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.484194][ T8095] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 160.172195][ T8115] loop2: detected capacity change from 0 to 4096 [ 160.219760][ T8115] NILFS (loop2): invalid segment: Checksum error in segment payload [ 160.242055][ T8115] NILFS (loop2): trying rollback from an earlier position [ 160.267273][ T8115] NILFS (loop2): recovery complete [ 160.280740][ T8119] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.615711][ T8129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.782'. [ 160.837922][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.851317][ T8139] loop2: detected capacity change from 0 to 128 [ 160.894099][ T8139] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.930905][ T8139] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.999194][ T5763] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.056885][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 161.075440][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.101079][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 161.111725][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 161.118778][ T8149] loop4: detected capacity change from 0 to 1024 [ 161.121092][ T23] usb 2-1: Manufacturer: syz [ 161.140556][ T23] usb 2-1: config 0 descriptor?? [ 161.157444][ T8149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.190762][ T8149] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.238181][ T23] rc_core: IR keymap rc-hauppauge not found [ 161.248566][ T23] Registered IR keymap rc-empty [ 161.273381][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 161.311275][ T7479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.335233][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 161.623151][ T5839] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 161.652239][ C1] igorplugusb 2-1:0.0: receive overflow invalid: 39 [ 161.830192][ T5839] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 161.845428][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.855880][ T8] usb 2-1: USB disconnect, device number 9 [ 161.884079][ T5839] usb 4-1: config 0 descriptor?? [ 161.895170][ T5839] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 161.966971][ T8172] loop4: detected capacity change from 0 to 512 [ 161.977772][ T8172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.024449][ T8172] EXT4-fs (loop4): 1 truncate cleaned up [ 162.034506][ T8172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.078502][ T8175] loop2: detected capacity change from 0 to 512 [ 162.114442][ T5839] gp8psk: usb in 128 operation failed. [ 162.139753][ T8175] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 162.151626][ T7479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.210058][ T8175] EXT4-fs (loop2): 1 truncate cleaned up [ 162.222945][ T8175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.257523][ T8175] EXT4-fs: Ignoring removed orlov option [ 162.263629][ T8175] EXT4-fs: Ignoring removed orlov option [ 162.271610][ T8175] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.801: Abort forced by user [ 162.306148][ T8175] EXT4-fs (loop2): Remounting filesystem read-only [ 162.331611][ T5839] gp8psk: usb in 146 operation failed. [ 162.333206][ T8175] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.349595][ T5839] gp8psk: failed to get FW version [ 162.377504][ T5839] gp8psk: usb in 149 operation failed. [ 162.382997][ T5839] gp8psk: failed to get FPGA version [ 162.394760][ T5839] gp8psk: usb in 138 operation failed. [ 162.400239][ T5839] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 162.426283][ T5839] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 162.446437][ T5839] usb 4-1: USB disconnect, device number 4 [ 162.471816][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.970353][ T27] audit: type=1326 audit(1776080234.432:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.045190][ T27] audit: type=1326 audit(1776080234.472:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.076490][ T27] audit: type=1326 audit(1776080234.472:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.108156][ T27] audit: type=1326 audit(1776080234.482:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.151836][ T27] audit: type=1326 audit(1776080234.482:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.176729][ T27] audit: type=1326 audit(1776080234.482:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.199591][ T27] audit: type=1326 audit(1776080234.482:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.223437][ T27] audit: type=1326 audit(1776080234.482:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.239170][ T8204] loop3: detected capacity change from 0 to 8192 [ 163.250353][ T27] audit: type=1326 audit(1776080234.482:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.291590][ T8204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.294768][ T27] audit: type=1326 audit(1776080234.482:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcad259c819 code=0x7ffc0000 [ 163.313094][ T8204] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 163.345082][ T8204] REISERFS (device loop3): using ordered data mode [ 163.351962][ T8204] reiserfs: using flush barriers [ 163.390916][ T8195] loop2: detected capacity change from 0 to 32768 [ 163.416847][ T8195] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 163.428081][ T5839] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.436520][ T8204] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.483906][ T8204] REISERFS (device loop3): checking transaction log (loop3) [ 163.520964][ T8204] REISERFS (device loop3): Using r5 hash to sort names [ 163.558405][ T8204] reiserfs: enabling write barrier flush mode [ 163.601528][ T6290] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 163.643404][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 163.673230][ T5839] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 163.733224][ T8204] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 163.771864][ T5839] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.794148][ T8204] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 163.805434][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.823586][ T5839] usb 2-1: Product: syz [ 163.827878][ T8204] REISERFS (device loop3): Remounting filesystem read-only [ 163.837975][ T5839] usb 2-1: Manufacturer: syz [ 163.854053][ T5839] usb 2-1: SerialNumber: syz [ 163.858825][ T8204] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 163.889197][ T5839] r8152-cfgselector 2-1: config 0 descriptor?? [ 163.908325][ T8204] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 163.992231][ T8204] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 164.018577][ T8204] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 164.038406][ T8204] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 164.095859][ T8204] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 164.132965][ T5839] r8152-cfgselector 2-1: Needed 1 retries to read version [ 164.154291][ T5839] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 164.168535][ T8204] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 164.208829][ T8204] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 164.277188][ T5762] ------------[ cut here ]------------ [ 164.282719][ T5762] kernel BUG at fs/reiserfs/journal.c:1916! [ 164.297514][ T5762] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 164.303616][ T5762] CPU: 0 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 [ 164.311164][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.321224][ T5762] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 164.327045][ T5762] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 164.346658][ T5762] RSP: 0018:ffffc9000468fb00 EFLAGS: 00010293 [ 164.352734][ T5762] RAX: ffffffff82297e46 RBX: 1ffff920008d1f64 RCX: ffff888028c51e00 [ 164.360712][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.368669][ T5762] RBP: ffffc9000468fbf8 R08: ffffc9000468fb77 R09: 0000000000000000 [ 164.376701][ T5762] R10: ffffc9000468fb40 R11: fffff520008d1f6f R12: ffffc90004891000 [ 164.384664][ T5762] R13: dffffc0000000000 R14: ffff88805d5ea630 R15: 0000000000000000 [ 164.392637][ T5762] FS: 000055555fcf4500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 164.401554][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.408153][ T5762] CR2: 000000110c2d5b8b CR3: 0000000060f76000 CR4: 00000000003506f0 [ 164.416122][ T5762] Call Trace: [ 164.419405][ T5762] [ 164.422331][ T5762] ? journal_release+0x30/0x30 [ 164.427089][ T5762] journal_release+0x1f/0x30 [ 164.431670][ T5762] reiserfs_put_super+0x26b/0x510 [ 164.436688][ T5762] ? hook_inode_free_security+0xb0/0xb0 [ 164.442240][ T5762] ? evict_inodes+0x63c/0x6a0 [ 164.446922][ T5762] ? reiserfs_dirty_inode+0x270/0x270 [ 164.452299][ T5762] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 164.457941][ T5762] ? reiserfs_dirty_inode+0x270/0x270 [ 164.463314][ T5762] generic_shutdown_super+0x134/0x2b0 [ 164.468680][ T5762] kill_block_super+0x44/0x90 [ 164.473348][ T5762] deactivate_locked_super+0x97/0x100 [ 164.478714][ T5762] cleanup_mnt+0x43b/0x4d0 [ 164.483123][ T5762] task_work_run+0x1d4/0x260 [ 164.487710][ T5762] ? task_work_cancel+0x220/0x220 [ 164.492733][ T5762] ? exit_to_user_mode_loop+0x3b/0x110 [ 164.498184][ T5762] exit_to_user_mode_loop+0xe6/0x110 [ 164.503463][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 164.509008][ T5762] syscall_exit_to_user_mode+0x1a/0x50 [ 164.514457][ T5762] do_syscall_64+0x61/0xa0 [ 164.518860][ T5762] ? clear_bhb_loop+0x40/0x90 [ 164.523523][ T5762] ? clear_bhb_loop+0x40/0x90 [ 164.528188][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.534069][ T5762] RIP: 0033:0x7f4e72d9da57 [ 164.538490][ T5762] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 164.558083][ T5762] RSP: 002b:00007ffd91977448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.566484][ T5762] RAX: 0000000000000000 RBX: 00007f4e72e32048 RCX: 00007f4e72d9da57 [ 164.574444][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd91977500 [ 164.582400][ T5762] RBP: 00007ffd91977500 R08: 00007ffd91978500 R09: 00000000ffffffff [ 164.590354][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd91978590 [ 164.598308][ T5762] R13: 00007f4e72e32048 R14: 000000000002816d R15: 00007ffd919785d0 [ 164.606270][ T5762] [ 164.609275][ T5762] Modules linked in: [ 164.634335][ T8211] loop2: detected capacity change from 0 to 32768 [ 164.654421][ T5839] usb 2-1: USB disconnect, device number 10 [ 164.706818][ T5762] ---[ end trace 0000000000000000 ]--- [ 164.713445][ T5763] read_mapping_page failed! [ 164.714246][ T5762] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 164.718121][ T5763] ERROR: (device loop2): txCommit: [ 164.718121][ T5763] [ 164.740162][ T5763] ERROR: (device loop2): remounting filesystem as read-only [ 164.762153][ T5762] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 164.785859][ T5762] RSP: 0018:ffffc9000468fb00 EFLAGS: 00010293 [ 164.803380][ T5762] RAX: ffffffff82297e46 RBX: 1ffff920008d1f64 RCX: ffff888028c51e00 [ 164.816604][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.837548][ T5762] RBP: ffffc9000468fbf8 R08: ffffc9000468fb77 R09: 0000000000000000 [ 164.854499][ T5762] R10: ffffc9000468fb40 R11: fffff520008d1f6f R12: ffffc90004891000 [ 164.869987][ T5762] R13: dffffc0000000000 R14: ffff88805d5ea630 R15: 0000000000000000 [ 164.878278][ T5762] FS: 000055555fcf4500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 164.890101][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.896958][ T5762] CR2: 00007f6524d4b000 CR3: 0000000060f76000 CR4: 00000000003506e0 [ 164.905180][ T5762] Kernel panic - not syncing: Fatal exception [ 164.911530][ T5762] Kernel Offset: disabled [ 164.915842][ T5762] Rebooting in 86400 seconds..