last executing test programs: 3.264359281s ago: executing program 1 (id=2038): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) 2.877791999s ago: executing program 1 (id=2041): r0 = syz_open_procfs(0x0, &(0x7f0000001640)='stat\x00') rt_sigaction(0x1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000540)) syz_fuse_handle_req(r0, &(0x7f0000001680)="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", 0x2000, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.800768881s ago: executing program 0 (id=2043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) 2.705062638s ago: executing program 0 (id=2045): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x2200886, &(0x7f0000000040)=ANY=[@ANYBLOB="2c696e746567726974792c646973636172643d3078303030303030303030303030303030382c6469736361726400756d61736b303030303030302c726573697a652c646973636172642c726573697a653d3078303030303030303030303030303030392c6572726f72733d72656d6f756e746861727365743d63703836312c00a963a7e1f5df03dc012c00"/150, @ANYRES16, @ANYRESDEC=0x0], 0x5, 0x6172, &(0x7f0000006400)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/234, 0xea) 2.649772119s ago: executing program 1 (id=2046): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$netrom_NETROM_N2(r1, 0x12, 0x3, 0x0, 0x0) 2.509630505s ago: executing program 1 (id=2048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 2.3435835s ago: executing program 1 (id=2050): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noflush_merge}, {}, {@acl}, {@alloc_mode_reuse}, {@errors_continue}, {@disable_roll_forward}, {@background_gc_on}, {@noinline_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@errors_remount}, {@noinline_dentry}]}, 0x1, 0x550e, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000e1ffffffffffffff03"]) 1.692575827s ago: executing program 3 (id=2057): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x88, &(0x7f000001f640)=ANY=[@ANYBLOB='decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666f7263652c666f7263652c6e6c733d6d616363656e746575726f2c706172743d3078303030303030303030303030303030362c666f7263652c00b20a970faa9c317b6bcabe474cae31ba89c1625a2e9ee8a7648d4ffdae5266f879928f1e02635af5f47c0e5c4fba4c704be62a11d3462794532032457a1293a8950acffefbf2378e73ea9ae55a57ddb4c9be1aecc0ba25fd359c02636f7d3d9532e5e050859f2d2b4bffca2d8376e71c93f1153a992683cfe7"], 0x41, 0x700, &(0x7f0000001980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.43930419s ago: executing program 0 (id=2060): unshare(0x22020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 1.388834199s ago: executing program 3 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.321186708s ago: executing program 4 (id=2062): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) 1.217345566s ago: executing program 0 (id=2064): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 1.097491284s ago: executing program 3 (id=2065): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200001, &(0x7f0000000100)=ANY=[], 0x5a, 0x21c, &(0x7f0000000380)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.025948841s ago: executing program 2 (id=2066): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200001, &(0x7f0000000200)={[{@type={'type', 0x3d, "fcffffff"}}, {@nodecompose}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x100}}, {}]}, 0x3, 0x6a4, &(0x7f0000000e00)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 958.747977ms ago: executing program 4 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x64, r1, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x64}}, 0x0) 847.541215ms ago: executing program 4 (id=2068): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d10, &(0x7f0000000200)={{0x9}}) 752.819401ms ago: executing program 3 (id=2069): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000540)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@uid}, {@uid}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortad}, {@uid_forget}, {@unhide}]}, 0x1, 0xc4d, &(0x7f0000001d40)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000280)='.\x02\x00') 703.225682ms ago: executing program 2 (id=2070): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x3a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) 698.131604ms ago: executing program 0 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000ff03000000000000000003052f5a8381ba1830"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x4000000000000e3, 0x0, 0x0) 695.732049ms ago: executing program 4 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x400}, 0x1c}, 0x8}, 0x800) 570.392395ms ago: executing program 2 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 553.847791ms ago: executing program 2 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfe5f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) 464.337247ms ago: executing program 2 (id=2075): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) truncate(&(0x7f00000000c0)='./file1\x00', 0x18) 455.105375ms ago: executing program 4 (id=2076): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) 356.801637ms ago: executing program 1 (id=2077): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r0, 0x0) 347.272772ms ago: executing program 3 (id=2078): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc3d, &(0x7f00000021c0)="$eJzs3U9sHOd9N/DfM1qKK/l9KyZ2FSeNi01bJLJiufoXU7EKd1XTbAPIMhGKuQXgiqTUhSmSIKlGNtKC6aWHHgIURQ85EWiNAikaGE0R9Mi0LpBcfChy6oloYSMoemCLADkFLGb2WXFJkRYjihJlfT429d2deZ6Z55lZzVAEn3kCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4vdcunT6THnUrAICH6croV0+fdf8HgCfKVf/+BwAAAAAAAAAAAACAgy5FEU9Hirkra2m8et9Rv9zuu3V7bGh4+2pHUlXzUFW+/KqfOXvu/JdeGrzQzcvtmY+o/6B9Jt4YvXqp8erszbn5qYWFqcnG2Ex7YnZyatdb2Gv9rU5WB6Bx881bk9evLzTOvnhu0+rbAx/2P3V84OLg86ee65YdGxoeHt0oUu8tX7vvhnTsNMLjcBRxKlK88L2fplZEFLH3Y1F/uOd+qyNVJ05WnRgbGq46Mt1uzSyWK0e6B6KIaPRUanaP0fbnImp9D7UPO2tGLJXNLxt8suze6FxrvnVteqox0ppfbC+2Z2dGUqe1ZX8aUcSFFLEcEav9d2+uL4qoRYrvHFtL1yLiUPc4fLEaGLxzO4p97OMulO1s9EUsF4/BOTvA+qOI1yPFz947ERP5OlNdaz4f8XqZP4h4p8xXIlL5wTgf8cE2nyMeT7Uo4s/L839xLU1W14PudeXy1xpfmbk+21O2e135Je8Pd10pHtH94ciWfDgO+LWpHkW0qiv+Wrr/b3YAAAAAAAAAAAAAAAAAeNCORBGfjhSv/dsfVeOKoxqXfuzi4O8P/P/eMePP3mM7ZdkXI2Kp2N2Y3MN5YOBIGknpEY8lfpLVo4g/zuP/vvWoGwMAAAAAAAAAAAAAAAAAAPBEK+InkeLl90+k5eidU7w9c6NxtXVtujMrbHfu3+6c6evr6+uN1MlmzvGcSzmXc67kXM0ZRa6fs5lzPOdSzuWcKzlXc8ahXD9nM+d4zqWcyzlXcq7mjFqun7OZczznUs7lnCs5V3PGAZm7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg46SIIn4RKb79jbUUKSKaEePRyZX+R906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrJaRKTq/44T5R/no3m4zE9Gc7DMV6J5KWerylrzW4+g/exNXyrix5Giv/7unROez39f592dj0G8882Nd5+pdfJQd+XAh/1PHT92cXD415/d6XXargEnL7dnbt1ujA0ND4/2LK7lvX+yZ9lA3m/xYLpORCy89fabrenpqfn7f1F+BPZQ/TF6kWpPSk+9qF5E7UA049H0nSdAef//IFL89vv/3r3hd+7/9fh/nXd37vDx8z/ZuP+/vHVDu7z/17bWy/f/8p6+3f3/6Z5lL+fvRvpqEfXFm3N9xyPqC2+9fap9s3Vj6sbUzPnTp788OPjlc6f7DkfUr7enp3pe9e70rlYAAAAAAAAAAAAAAAAAHDypiN+NFK0fr6VGRNyuxmsNXBx8/tRzh+JQNd5q07jtN0avXmq8Ontzbn5qYWFqsjE2056YnZza7e7q1XCvsaHhfenMPR3Z5/Yfqb86O/fWfPvGHy5uu/5o/dK1hcX51sT2q+NIFBHN3iUnqwaPDQ1XjZ5ut2aqqiPbDqb/5fWlIv4jUkycb6TP5WV5/P/WEf6bxv8vbd3QPo3//0TPsnKfKRXx80jxhb94Nj5XtfNo3HXMcrm/iRQnL3w2l4vDZbluGzrPFeiMDCzL/k+k+IdfbC7bHQ/59EbZM7s+sI+J8vwfixTf/7Pvxm/kZZuf/7D9+T+6dUP3d/6Le53/Z3qWHd30vIIH0Hmq838qUrzy9Lvxm3nZRz3/o/vsjRO58J3nc+zT3/9f7Vk2kPf7Ww+m6wAAAAAAAAAAAI+1vlTE30aKHw7X0kt52W5+/29y64b26fe/PtWzbPLBzFd0zxd7PqgAAAAAcED0pSJ+EiluLL57Zwz15vHfPeM/f2dj/OdQ2rK2+jnfr1TPDXiQP//rNZD3O773bgMAAAAAAAAAAAAAAAAAAMCBklIRL+X51Mer8fyTO86nvhIpXvuvF3K5dLws150HfqD6s35ldubUpenp2YnWYuva9FRjdK41MVXWfSZSrP31Z3PdoppfvTvffGeO94252OcjxfDfdct25mLvzk3+zEbZM2XZT0SK//z7zWWrqam/8GGeY78qe7Ys+1eR4uv/tE3ZiDi+UfZcWfa7keJHX290yx4ty3afj/qpjbIvTswW+3NiAAAAAAAAAAAAAAAAAAAAeKL0pSL+NFL8983lO2P58/z/fT1vK+98s2e+/y1uV/P8D1Tz/+/0+n7m/6+eK7C0014BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjKUURb0eKuStraaW/fN9Rv9yeuXV7bGh4+2pHUlXzUFW+/KqfOXvu/JdeGrzQzY+u/6B9Ot4YvXqp8erszbn5qYWFqcnG2Ex7YnZyatdb2Gv9rU5WB6Bx881bk9evLzTOvnhu0+rbAx/2P3V84OLg86ee65YdGxoeHu0pU+u7773fJe2w/HAU8ZeR4oXv/TT9sD+iiL0fi3t8dvbbkaoTJ6tOjA0NVx2ZbrdmFsuVI90DUUQ0eio1u8foIZyLPWlGLJXNLxt8suze6FxrvnVteqox0ppfbC+2Z2dGUqe1ZX8aUcSFFLEcEav9d2+uL4p4M1J859ha+uf+iEPd4/DFK6NfPX1253YU+9jHXSjb2eiLWC4eg3N2gPVHEf8YKX723on4l/6IWnS+4vMRr5f5g4h3onO+U/nBOB/xwTafIx5PtSjif8vzf3EtvddfXg+615XLX2t8Zeb6bE/Z7nXlsb8/PEwH/NpUjyJ+VF3x19K/+nsNAAAAAAAAAAAAAAAAcIAU8WuR4uX3T6RqfPCdMcXtmRuNq61r051hfd2xf90x0+vr6+uN1MlmzvGcSzmXc67kXM0ZRa6fs1lmfX19PL9fyrmccyXnas44lOvnbOYcz7mUcznnSs7VnFHL9XM2c47nXMq5nHMl52rOOCBj9wAAAAAAAAAAAAAAAAAAgI+Xovovxbe/sZbW+yOiWY/x6MwzvWI+0I+9/wsAAP//+j76iA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 322.359389ms ago: executing program 4 (id=2079): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800080, &(0x7f0000000880)=ANY=[@ANYBLOB="00e00f334500f3c676b516ff247935e1cf351749b2049c74608ed501762b0749b446c69306ddbe47a2fcf33361c6922932c6179b6a717a0000000000000000000000000000000000004482ccf36f1b6439da3d86f0ae909d329bfa53c5b2023fe23349f11ab390e7e85370d7fa2c865b4660ae32a10a2b327cc655941402f7421add98e3918c156af9a0c635b5d5225f3b645cd4ba2144c1ab16d2a5a47d695b1156c4d49d1f4e3498cabf74c30ce390e109fad9c2ba459f51fa6e3e101cdb", @ANYRES32, @ANYBLOB="9bd6b1328ee031c43d8a18cf6c0114bd83b08e69b2d0b35fe83e10235970ee66ec68e8e8228cb1e7cafe0edfb36e3c4fb906b6ffad555375868f520c08aed501a5e01e52ea6f991139e2908353594154cb4b66f419"], 0x1, 0x177, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 124.824522ms ago: executing program 0 (id=2080): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @win={{0xb804}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x3ff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 18.824847ms ago: executing program 3 (id=2081): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@nogrpid}, {@usrquota}, {@auto_da_alloc}]}, 0x1, 0x55b, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000003c0)='./file1\x00', 0x14927e, 0x0) pwrite64(r0, &(0x7f0000000400)=')', 0x1, 0x0) 0s ago: executing program 2 (id=2082): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='40::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) kernel console output (not intermixed with test programs): oop1: detected capacity change from 0 to 512 [ 116.227363][ T7356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.270538][ T7313] XFS (loop0): Ending clean mount [ 116.278196][ T7356] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.373238][ T7313] XFS (loop0): Quotacheck needed: Please wait. [ 116.441513][ T7313] XFS (loop0): Quotacheck: Done. [ 116.544550][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.586697][ T7371] loop4: detected capacity change from 0 to 2048 [ 116.643415][ T7371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.658980][ T7379] @ÿ: renamed from vlan0 (while UP) [ 116.691981][ T7383] loop2: detected capacity change from 0 to 512 [ 116.743503][ T5235] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 116.811605][ T7371] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 116.869949][ T7383] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.985395][ T5238] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 117.374316][ T7411] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.880'. [ 117.497093][ T7418] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 117.538670][ T7418] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.885'. [ 117.562735][ T7418] netlink: 'syz.1.885': attribute type 2 has an invalid length. [ 118.159887][ T7452] ALSA: mixer_oss: invalid OSS volume 'í' [ 118.263102][ T7456] loop0: detected capacity change from 0 to 4096 [ 118.332816][ T7464] Unsupported ieee802154 address type: 0 [ 118.432984][ T7456] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 118.718631][ T7482] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 118.736721][ T7482] netlink: 'syz.3.917': attribute type 2 has an invalid length. [ 119.059424][ T7491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.920'. [ 119.088426][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 119.122240][ T7491] netlink: 31 bytes leftover after parsing attributes in process `syz.1.920'. [ 119.148631][ T7491] netlink: 'syz.1.920': attribute type 3 has an invalid length. [ 119.169594][ T7491] netlink: 'syz.1.920': attribute type 2 has an invalid length. [ 119.192624][ T7491] netlink: 31 bytes leftover after parsing attributes in process `syz.1.920'. [ 119.335634][ T7456] loop0: detected capacity change from 0 to 32768 [ 119.362571][ T7456] bcachefs (/dev/loop0): error reading superblock: block size (0) smaller than device block size (512) [ 119.394565][ T7456] bcachefs: bch2_fs_get_tree() error: block_size_too_small [ 119.451461][ T7476] loop2: detected capacity change from 0 to 32768 [ 119.462752][ T7476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.912 (7476) [ 119.537986][ T7476] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.595813][ T7476] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.608571][ T7476] BTRFS info (device loop2): using free-space-tree [ 119.902964][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 120.212018][ T7547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.457234][ T7567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.565042][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 120.636136][ T5238] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.735839][ T7583] netlink: 'syz.1.956': attribute type 2 has an invalid length. [ 120.775545][ T7583] netlink: 244 bytes leftover after parsing attributes in process `syz.1.956'. [ 120.891400][ T7587] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 120.999782][ T7591] loop0: detected capacity change from 0 to 16 [ 121.043959][ T7591] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.129929][ T7591] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 121.216359][ T7591] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[1851] [ 121.279279][ T7591] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 121.517172][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 121.574704][ T7618] loop0: detected capacity change from 0 to 1024 [ 121.610148][ T7615] vlan2: entered allmulticast mode [ 121.661176][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.972'. [ 121.698242][ T7618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.824495][ T7618] EXT4-fs error (device loop0): ext4_lookup:1811: comm syz.0.970: inode #12: comm syz.0.970: iget: illegal inode # [ 121.891434][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 122.040079][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.078539][ T7650] loop1: detected capacity change from 0 to 2048 [ 122.169593][ T7650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.251162][ T7650] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.419755][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.987'. [ 122.434289][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.987'. [ 122.444306][ T7668] netlink: 'syz.2.989': attribute type 21 has an invalid length. [ 122.454730][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.465477][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 122.743396][ T7682] netlink: 'syz.1.991': attribute type 30 has an invalid length. [ 122.820656][ T7687] loop2: detected capacity change from 0 to 1024 [ 122.896446][ T7687] fuse: Bad value for 'fd' [ 123.786788][ T7728] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 123.814517][ T7730] xt_l2tp: v2 sid > 0xffff: 4278190080 [ 123.852267][ T7728] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1019'. [ 123.905465][ T7732] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 123.924022][ T7732] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1021'. [ 123.953821][ T7732] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 124.051672][ T7739] loop0: detected capacity change from 0 to 256 [ 124.107895][ T7739] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 124.244546][ T7701] loop4: detected capacity change from 0 to 32768 [ 124.304198][ T7701] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.580434][ T7701] XFS (loop4): Ending clean mount [ 124.692525][ T5226] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.206640][ T7791] loop2: detected capacity change from 0 to 256 [ 125.224646][ T7791] exfat: Deprecated parameter 'utf8' [ 125.233500][ T7791] exfat: Deprecated parameter 'namecase' [ 125.242972][ T7791] exfat: Deprecated parameter 'utf8' [ 125.268544][ T4623] Bluetooth: hci4: command tx timeout [ 125.301590][ T7793] xt_recent: hitcount (184549376) is larger than allowed maximum (65535) [ 125.377637][ T7791] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 125.393515][ T7765] loop0: detected capacity change from 0 to 32768 [ 125.532891][ T7765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1032 (7765) [ 125.583227][ T7765] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.593829][ T7765] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 125.602587][ T7765] BTRFS info (device loop0): using free-space-tree [ 125.709444][ T7815] __nla_validate_parse: 1 callbacks suppressed [ 125.709465][ T7815] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1056'. [ 125.730517][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 125.743414][ T7815] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 125.936897][ T7822] vlan2: entered allmulticast mode [ 126.014733][ T7765] BTRFS info (device loop0 state M): setting nodatasum [ 126.038050][ T7765] BTRFS info (device loop0 state M): setting nodatasum [ 126.199376][ T5235] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.635541][ T7870] sock: sock_timestamping_bind_phc: sock not bind to device [ 126.721883][ T7874] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 126.970832][ T7884] loop0: detected capacity change from 0 to 256 [ 127.008753][ T7884] vfat: Bad value for 'shortname' [ 127.060755][ T7884] loop0: detected capacity change from 0 to 256 [ 127.067442][ T7884] exfat: Deprecated parameter 'utf8' [ 127.086313][ T7889] netlink: 'syz.2.1084': attribute type 58 has an invalid length. [ 127.087381][ T7884] exfat: Unexpected value for 'utf8' [ 127.218031][ T7894] loop1: detected capacity change from 0 to 512 [ 127.248299][ T7894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.300434][ T5229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.308158][ T7894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.342738][ T7894] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.371636][ T7901] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.384622][ T7894] EXT4-fs (loop1): 1 truncate cleaned up [ 127.396190][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.511764][ T5229] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 127.522705][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.548194][ T5229] usb 5-1: Product: syz [ 127.558476][ T5229] usb 5-1: Manufacturer: syz [ 127.563126][ T5229] usb 5-1: SerialNumber: syz [ 127.602836][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.609958][ T5229] usb 5-1: config 0 descriptor?? [ 127.698948][ T940] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.712148][ T7916] raw_sendmsg: syz.1.1094 forgot to set AF_INET. Fix it! [ 127.767996][ T7918] loop3: detected capacity change from 0 to 2048 [ 127.845268][ T7921] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.898620][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 127.901603][ T940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 127.922168][ T940] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 127.932558][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.943681][ T940] usb 1-1: Product: syz [ 127.963713][ T940] usb 1-1: Manufacturer: syz [ 127.999027][ T940] usb 1-1: SerialNumber: syz [ 128.020321][ T940] usb 1-1: config 0 descriptor?? [ 128.033830][ T5229] usb 5-1: f81604_write: reg: 105 data: a8 failed: -EPROTO [ 128.051720][ T5229] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 128.061866][ T7906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.073174][ T940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.100875][ T5229] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 128.134674][ T5229] usb 5-1: USB disconnect, device number 8 [ 128.287453][ T940] usb 1-1: USB disconnect, device number 5 [ 128.307109][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 128.325122][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 128.366666][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 128.620090][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'. [ 128.819608][ T7957] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 128.827465][ T7957] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1116'. [ 128.937309][ T7959] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.999351][ T7943] loop1: detected capacity change from 0 to 32768 [ 129.173174][ T7943] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.363365][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 129.549819][ T7962] loop0: detected capacity change from 0 to 32768 [ 129.568895][ T7962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1119 (7962) [ 129.803589][ T7943] XFS (loop1): Ending clean mount [ 129.812476][ T7962] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.843304][ T7962] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 129.868447][ T7962] BTRFS info (device loop0): using free-space-tree [ 130.108621][ T5240] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.189797][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 130.219220][ T5235] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.413456][ T8035] overlayfs: conflicting options: userxattr,verity=require [ 130.499539][ T8038] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 131.056851][ T5336] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.064671][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.259001][ T5336] usb 3-1: Using ep0 maxpacket: 16 [ 131.278818][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.314515][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.327102][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 131.336420][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.357486][ T9] usb 5-1: config 0 descriptor?? [ 131.403297][ T5336] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 131.418775][ T5336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.426852][ T5336] usb 3-1: Product: syz [ 131.438716][ T5336] usb 3-1: Manufacturer: syz [ 131.443463][ T5336] usb 3-1: SerialNumber: syz [ 131.456245][ T5336] usb 3-1: config 0 descriptor?? [ 131.684638][ T5336] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v92 fw v159.0.0 (1 channels) [ 131.763516][ T8089] loop3: detected capacity change from 0 to 4096 [ 131.775576][ T9] appletouch 5-1:0.0: Failed to request geyser raw mode [ 131.783049][ T9] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 131.829494][ T9] usb 5-1: USB disconnect, device number 9 [ 131.885498][ T5336] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 131.916582][ T5336] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 131.972909][ T8089] ntfs3: loop3: ino=21, The size of extended attributes must not exceed 64KiB [ 132.039318][ T5336] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 132.099863][ T5336] usb 3-1: USB disconnect, device number 9 [ 132.403934][ T8107] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 132.448790][ T8107] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.477807][ T8110] usb usb8: usbfs: process 8110 (syz.4.1177) did not claim interface 0 before use [ 132.690838][ T8118] loop2: detected capacity change from 0 to 256 [ 132.761161][ T8122] loop3: detected capacity change from 0 to 512 [ 132.827210][ T8122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.880590][ T8122] EXT4-fs (loop3): 1 truncate cleaned up [ 132.902337][ T8122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.909030][ T8125] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1185'. [ 132.933451][ T8096] loop1: detected capacity change from 0 to 32768 [ 132.943293][ T8096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1170 (8096) [ 133.055717][ T8096] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.078083][ T8096] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.087149][ T8096] BTRFS info (device loop1): using free-space-tree [ 133.103241][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.128735][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135078][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.409829][ T8143] loop3: detected capacity change from 0 to 8 [ 133.557925][ T8143] SQUASHFS error: zlib decompression failed, data probably corrupt [ 133.566709][ T8143] SQUASHFS error: Failed to read block 0x13e: -5 [ 133.573217][ T8143] SQUASHFS error: Unable to read metadata cache entry [13c] [ 133.580663][ T8143] SQUASHFS error: Unable to read directory block [13c:26] [ 133.629770][ T8116] loop0: detected capacity change from 0 to 32768 [ 133.636892][ T8116] XFS: attr2 mount option is deprecated. [ 133.642723][ T8116] XFS: attr2 mount option is deprecated. [ 133.648553][ T8116] XFS: ikeep mount option is deprecated. [ 133.692689][ T8116] XFS: noikeep mount option is deprecated. [ 133.798952][ T5240] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.886923][ T8116] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 134.317209][ T8116] XFS (loop0): Ending clean mount [ 134.361268][ T8116] XFS (loop0): Quotacheck needed: Please wait. [ 134.424430][ T8137] loop4: detected capacity change from 0 to 32768 [ 134.477051][ T8137] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.527467][ T8116] XFS (loop0): Quotacheck: Done. [ 134.678027][ T8137] XFS (loop4): Ending clean mount [ 134.692397][ T8137] XFS (loop4): Quotacheck needed: Please wait. [ 134.752246][ T5235] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 134.866331][ T8137] XFS (loop4): Quotacheck: Done. [ 135.022434][ T5226] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.089363][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.198061][ T8221] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1216'. [ 135.278598][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 135.320392][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 135.338130][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 135.350958][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.359727][ T9] usb 2-1: Product: syz [ 135.365485][ T9] usb 2-1: Manufacturer: syz [ 135.374267][ T9] usb 2-1: SerialNumber: syz [ 135.401508][ T9] usb 2-1: config 0 descriptor?? [ 135.421005][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 135.434964][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 135.487011][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 135.520654][ T9] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 135.564383][ T9] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 135.665827][ T8234] loop0: detected capacity change from 0 to 4096 [ 135.676464][ T9] usb 2-1: USB disconnect, device number 5 [ 135.694022][ T8234] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 136.056100][ T8257] loop3: detected capacity change from 0 to 256 [ 136.063222][ T8257] exfat: Deprecated parameter 'utf8' [ 136.069402][ T8257] exfat: Deprecated parameter 'utf8' [ 136.074759][ T8257] exfat: Deprecated parameter 'utf8' [ 136.098019][ T8257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 136.206610][ T5336] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.382880][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 136.411072][ T5336] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 136.422979][ T5336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.455523][ T5336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 136.485642][ T5336] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 136.501560][ T5336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.513756][ T8262] loop1: detected capacity change from 0 to 4096 [ 136.537048][ T8262] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 136.640389][ T8262] ntfs3: loop1: failed to convert "c46c" to iso8859-9 [ 136.666764][ T8278] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1244'. [ 136.831452][ T5336] usb 3-1: config 0 descriptor?? [ 136.857683][ T8247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880174][ T5336] gspca_main: spca561-2.14.0 probing abcd:cdee [ 136.903078][ T8288] netlink: 121244 bytes leftover after parsing attributes in process `syz.4.1248'. [ 136.929145][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'. [ 136.948810][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'. [ 136.963544][ T8290] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 137.003047][ T8290] bond1: entered allmulticast mode [ 137.009008][ T8290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.114739][ T5336] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 137.139259][ T5336] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.165410][ T8301] netlink: 'syz.4.1254': attribute type 8 has an invalid length. [ 137.173384][ T5336] usb 3-1: MIDIStreaming interface descriptor not found [ 137.215395][ T8301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1254'. [ 137.254406][ T5336] usb 3-1: USB disconnect, device number 10 [ 137.505241][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.700570][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.853820][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.112518][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.131445][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.143302][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.161274][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.176533][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.185879][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.194355][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.376393][ T8338] loop0: detected capacity change from 0 to 1024 [ 138.490718][ T8338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.680086][ T8315] loop4: detected capacity change from 0 to 32768 [ 138.683234][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.718900][ T72] bridge_slave_1: left allmulticast mode [ 138.725073][ T72] bridge_slave_1: left promiscuous mode [ 138.734493][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.758074][ T8315] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1262 (8315) [ 138.798109][ T72] bridge_slave_0: left allmulticast mode [ 138.804211][ T72] bridge_slave_0: left promiscuous mode [ 138.810115][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.874968][ T8315] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.908559][ T5307] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.910589][ T8315] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 138.946873][ T8315] BTRFS info (device loop4): using free-space-tree [ 139.098716][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 139.127857][ T5307] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 139.134791][ T8315] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 139.166230][ T5307] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 139.179407][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.196965][ T5307] usb 3-1: Product: syz [ 139.197268][ T5226] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.205407][ T5307] usb 3-1: Manufacturer: syz [ 139.216366][ T5307] usb 3-1: SerialNumber: syz [ 139.245301][ T5307] usb 3-1: config 0 descriptor?? [ 139.270607][ T8351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.289645][ T5307] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.560045][ T5307] usb 3-1: USB disconnect, device number 11 [ 139.766260][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.787527][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.801083][ T72] bond0 (unregistering): Released all slaves [ 139.821885][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 140.018637][ T8388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1284'. [ 140.027902][ T8388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1284'. [ 140.309041][ T5236] Bluetooth: hci1: command tx timeout [ 140.455146][ T8382] loop4: detected capacity change from 0 to 32768 [ 140.764926][ T8426] netlink: set zone limit has 8 unknown bytes [ 140.801884][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.823618][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.834751][ T8329] bridge_slave_0: entered allmulticast mode [ 140.841906][ T8329] bridge_slave_0: entered promiscuous mode [ 141.107296][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.114712][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.122926][ T8329] bridge_slave_1: entered allmulticast mode [ 141.130363][ T8329] bridge_slave_1: entered promiscuous mode [ 141.368125][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.395643][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1306'. [ 141.425201][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.601309][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1311'. [ 141.710896][ T8462] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 141.828883][ T8465] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 141.870836][ T8465] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1315'. [ 141.918444][ T72] hsr_slave_0: left promiscuous mode [ 141.948058][ T8466] loop1: detected capacity change from 0 to 4096 [ 141.965340][ T72] hsr_slave_1: left promiscuous mode [ 142.013762][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.030385][ T8471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.050219][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.091448][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.134926][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.215381][ T8477] loop0: detected capacity change from 0 to 16 [ 142.225292][ T8477] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.268999][ T72] veth1_macvtap: left promiscuous mode [ 142.286451][ T72] veth0_macvtap: left promiscuous mode [ 142.293778][ T72] veth1_vlan: left promiscuous mode [ 142.299669][ T72] veth0_vlan: left promiscuous mode [ 142.377202][ T8454] loop2: detected capacity change from 0 to 32768 [ 142.390251][ T5236] Bluetooth: hci1: command tx timeout [ 142.428571][ T8454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1309 (8454) [ 142.454690][ T8481] afs: Bad value for 'source' [ 142.467089][ T8454] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.480015][ T8454] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 142.489194][ T8454] BTRFS info (device loop2): disk space caching is enabled [ 142.498626][ T8454] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 142.711892][ T8454] BTRFS info (device loop2): rebuilding free space tree [ 142.801671][ T8454] BTRFS info (device loop2): disabling free space tree [ 142.832940][ T8454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.848633][ T8454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.881790][ T8454] BTRFS info (device loop2): checking UUID tree [ 143.088644][ T5238] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.617762][ T8507] loop0: detected capacity change from 0 to 32768 [ 143.735405][ T8507] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.745453][ T8526] vivid-000: ================= START STATUS ================= [ 143.756488][ T8526] vivid-000: Generate PTS: true [ 143.763121][ T8526] vivid-000: Generate SCR: true [ 143.768779][ T8526] tpg source WxH: 320x180 (R'G'B) [ 143.773843][ T8526] tpg field: 1 [ 143.803266][ T8526] tpg crop: 320x180@0x0 [ 143.809423][ T8526] tpg compose: 320x180@0x0 [ 143.823725][ T8526] tpg colorspace: 8 [ 143.834574][ T8526] tpg transfer function: 0/0 [ 143.851061][ T8526] tpg quantization: 0/0 [ 143.855297][ T8526] tpg RGB range: 0/2 [ 143.866709][ T8526] vivid-000: ================== END STATUS ================== [ 143.900483][ T8507] XFS (loop0): Ending clean mount [ 143.914265][ T8507] XFS (loop0): Quotacheck needed: Please wait. [ 143.981627][ T8507] XFS (loop0): Quotacheck: Done. [ 144.017729][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1335'. [ 144.135501][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.153209][ T72] team0 (unregistering): Port device team_slave_1 removed [ 144.371417][ T72] team0 (unregistering): Port device team_slave_0 removed [ 144.468698][ T5236] Bluetooth: hci1: command tx timeout [ 144.726611][ T8556] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1347'. [ 144.737749][ T8556] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1347'. [ 144.757827][ T8556] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1347'. [ 145.056795][ T8329] team0: Port device team_slave_0 added [ 145.067618][ T8329] team0: Port device team_slave_1 added [ 145.095285][ T8506] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 145.218879][ T5336] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.254245][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.261759][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.291194][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.358398][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.365391][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.458430][ T5336] usb 1-1: Using ep0 maxpacket: 8 [ 145.492707][ T5336] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 145.503967][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.509522][ T5336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.606309][ T5336] usb 1-1: config 0 has no interface number 0 [ 145.629252][ T5336] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 145.661546][ T5336] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 145.736436][ T5336] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 145.769300][ T5336] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.770416][ T8329] hsr_slave_0: entered promiscuous mode [ 145.814850][ T8329] hsr_slave_1: entered promiscuous mode [ 145.831705][ T5336] usb 1-1: config 0 interface 52 has no altsetting 0 [ 145.847021][ T8329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.847882][ T5336] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 145.893335][ T8329] Cannot create hsr debugfs directory [ 145.894888][ T5336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.000897][ T5336] usb 1-1: config 0 descriptor?? [ 146.433700][ T5229] usb 1-1: USB disconnect, device number 6 [ 146.548552][ T5236] Bluetooth: hci1: command tx timeout [ 146.606105][ T8619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1372'. [ 146.626565][ T8619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1372'. [ 146.890251][ T8633] loop2: detected capacity change from 0 to 256 [ 146.946710][ T8633] FAT-fs (loop2): Directory bread(block 64) failed [ 146.954702][ T8633] FAT-fs (loop2): Directory bread(block 65) failed [ 146.975803][ T8633] FAT-fs (loop2): Directory bread(block 66) failed [ 146.992582][ T8633] FAT-fs (loop2): Directory bread(block 67) failed [ 147.007059][ T8633] FAT-fs (loop2): Directory bread(block 68) failed [ 147.036663][ T8633] FAT-fs (loop2): Directory bread(block 69) failed [ 147.071036][ T8633] FAT-fs (loop2): Directory bread(block 70) failed [ 147.098540][ T8633] FAT-fs (loop2): Directory bread(block 71) failed [ 147.105190][ T8633] FAT-fs (loop2): Directory bread(block 72) failed [ 147.111896][ T8633] FAT-fs (loop2): Directory bread(block 73) failed [ 147.150556][ T8639] [U] ÿ [ 147.362989][ T8329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.416253][ T8329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.451122][ T8651] loop2: detected capacity change from 0 to 4096 [ 147.556925][ T8329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.589060][ T8329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.641669][ T8651] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 147.882741][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.970105][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.999763][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.008189][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.029632][ T8667] loop4: detected capacity change from 0 to 4096 [ 148.031530][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.037284][ T8667] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 148.043194][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.092630][ T8677] loop2: detected capacity change from 0 to 128 [ 148.279309][ T8667] ntfs3: loop4: failed to convert "c46c" to macinuit [ 148.693423][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.863019][ T8329] veth0_vlan: entered promiscuous mode [ 148.904151][ T8329] veth1_vlan: entered promiscuous mode [ 148.926551][ T8329] veth0_macvtap: entered promiscuous mode [ 148.936003][ T8329] veth1_macvtap: entered promiscuous mode [ 148.953075][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.963796][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.974147][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.985205][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.995399][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.006132][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.016251][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.026887][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.038087][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.048646][ T8656] loop0: detected capacity change from 0 to 32768 [ 149.156773][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.177055][ T8656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1387 (8656) [ 149.198575][ T8720] loop4: detected capacity change from 0 to 2048 [ 149.227425][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.245340][ T8720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.306595][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.348696][ T8656] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.373955][ T8656] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.379083][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.419695][ T8656] BTRFS info (device loop0): using free-space-tree [ 149.438514][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.463291][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.485153][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.568378][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.589540][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.611456][ T8329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.621032][ T8329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.636009][ T8329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.645902][ T8329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.539705][ T5235] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.584914][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.618878][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.692456][ T8765] loop1: detected capacity change from 0 to 16 [ 150.716457][ T8765] erofs: Unknown parameter '18446744073709551615' [ 150.779431][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.787301][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.078266][ T8775] netlink: 'syz.2.1426': attribute type 2 has an invalid length. [ 151.275782][ T8786] loop3: detected capacity change from 0 to 512 [ 151.383504][ T8786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.498589][ T8786] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.623212][ T8806] loop4: detected capacity change from 0 to 1764 [ 151.737427][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1440'. [ 151.841106][ T8329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.864868][ T29] audit: type=1326 audit(1724333468.487:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd2979e79 code=0x0 [ 152.641719][ T8858] loop3: detected capacity change from 0 to 128 [ 152.674793][ T8860] loop2: detected capacity change from 0 to 256 [ 152.682022][ T8858] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 152.694743][ T8860] exfat: Deprecated parameter 'utf8' [ 152.695019][ T8862] loop4: detected capacity change from 0 to 256 [ 152.762015][ T8862] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.785954][ T8860] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 153.118501][ T5229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.263292][ T8882] loop4: detected capacity change from 0 to 2048 [ 153.307731][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.348584][ T5229] usb 4-1: Using ep0 maxpacket: 32 [ 153.365898][ T5229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.391305][ T5229] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 153.406710][ T5229] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.423066][ T5229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.433022][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.441158][ T5229] usb 4-1: SerialNumber: syz [ 153.457002][ T5229] cdc_ether 4-1:1.0: skipping garbage [ 153.462872][ T5229] usb 4-1: bad CDC descriptors [ 153.497127][ T8884] loop0: detected capacity change from 0 to 8192 [ 153.505855][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.514900][ T8892] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 153.561524][ T8884] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.623605][ T8884] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 153.676411][ T5277] usb 4-1: USB disconnect, device number 6 [ 153.744122][ T8894] loop4: detected capacity change from 0 to 4096 [ 154.092422][ T8908] CIFS: VFS: Malformed UNC in devname [ 154.550105][ T8932] loop4: detected capacity change from 0 to 128 [ 154.568846][ T940] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.631142][ T8936] loop2: detected capacity change from 0 to 256 [ 154.788997][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 154.797722][ T940] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 154.832939][ T940] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 154.872334][ T940] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 154.907023][ T940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.924996][ T940] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 154.935288][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.945009][ T940] usb 2-1: Product: syz [ 154.977468][ T940] usb 2-1: Manufacturer: syz [ 154.995714][ T940] usb 2-1: SerialNumber: syz [ 155.018785][ T8947] netlink: 'syz.2.1508': attribute type 8 has an invalid length. [ 155.030973][ T940] usb 2-1: config 0 descriptor?? [ 155.058305][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 155.137872][ T8934] loop0: detected capacity change from 0 to 32768 [ 155.154449][ T8934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1501 (8934) [ 155.173213][ T8934] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.184430][ T8934] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.193711][ T8934] BTRFS info (device loop0): using free-space-tree [ 155.251089][ T8954] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.279195][ T940] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 155.297839][ T4669] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 155.341062][ T4669] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 155.483793][ T6777] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 155.486876][ T5307] usb 2-1: USB disconnect, device number 6 [ 155.569042][ T4669] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 155.653103][ T5336] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.695546][ T8975] loop4: detected capacity change from 0 to 8192 [ 155.746568][ T8975] loop4: p1 p3 p4 [ 155.751014][ T8975] loop4: partition table partially beyond EOD, truncated [ 155.773344][ T5235] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.775846][ T8975] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 155.820064][ T8975] loop4: p3 start 4294901760 is beyond EOD, truncated [ 155.842625][ T8975] loop4: p4 size 50331648 extends beyond EOD, truncated [ 155.868688][ T5336] usb 4-1: Using ep0 maxpacket: 8 [ 155.908792][ T5336] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 155.932655][ T5336] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 155.948582][ T4684] loop4: p1 p3 p4 [ 155.955105][ T4684] loop4: partition table partially beyond EOD, truncated [ 155.968422][ T5336] usb 4-1: Product: syz [ 155.972627][ T5336] usb 4-1: Manufacturer: syz [ 155.988136][ T4684] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 155.999596][ T5336] usb 4-1: SerialNumber: syz [ 156.006775][ T5336] usb 4-1: config 0 descriptor?? [ 156.012707][ T4684] loop4: p3 start 4294901760 is beyond EOD, truncated [ 156.024676][ T4684] loop4: p4 size 50331648 extends beyond EOD, truncated [ 156.041104][ T5336] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 156.145006][ T6776] udevd[6776]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 156.163141][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 156.329192][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 156.410418][ T6776] udevd[6776]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 156.425153][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 156.470110][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1523'. [ 156.647776][ T5336] gspca_zc3xx: reg_w_i err -71 [ 156.658905][ T5336] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 156.698933][ T5336] usb 4-1: USB disconnect, device number 7 [ 157.008826][ T9014] netlink: 'syz.2.1531': attribute type 2 has an invalid length. [ 157.409288][ T9025] loop2: detected capacity change from 0 to 512 [ 157.444622][ T9025] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.525718][ T9003] loop4: detected capacity change from 0 to 32768 [ 157.533985][ T9003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1526 (9003) [ 157.579812][ T9003] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.590254][ T9003] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 157.600771][ T9003] BTRFS info (device loop4): disk space caching is enabled [ 157.618080][ T5238] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 157.627984][ T9003] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 157.950728][ T9060] loop2: detected capacity change from 0 to 1024 [ 158.033325][ T9003] BTRFS info (device loop4): rebuilding free space tree [ 158.054035][ T9003] BTRFS info (device loop4): disabling free space tree [ 158.061250][ T9003] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.072213][ T9003] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.102705][ T9003] BTRFS info (device loop4): checking UUID tree [ 158.208577][ T9069] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1548'. [ 158.237238][ T9069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1548'. [ 158.401969][ T5226] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.643733][ T9082] loop0: detected capacity change from 0 to 1024 [ 158.761654][ T9082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.848545][ T9090] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #2: comm syz.0.1555: corrupted in-inode xattr: bad e_name length [ 159.038037][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.243521][ T9052] loop3: detected capacity change from 0 to 32768 [ 159.276519][ T9052] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1543 (9052) [ 159.326413][ T9052] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.359119][ T9108] netlink: 'syz.1.1565': attribute type 2 has an invalid length. [ 159.374824][ T9110] netlink: 'syz.4.1566': attribute type 2 has an invalid length. [ 159.380409][ T9052] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.443190][ T9113] loop2: detected capacity change from 0 to 512 [ 159.460149][ T9052] BTRFS info (device loop3): using free-space-tree [ 159.507239][ T9113] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1568: corrupted in-inode xattr: invalid ea_ino [ 159.677570][ T9113] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1568: couldn't read orphan inode 15 (err -117) [ 159.728822][ T9124] loop1: detected capacity change from 0 to 4096 [ 159.792669][ T9145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.822379][ T9113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.849721][ T8329] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.909777][ T5238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.939505][ T5229] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 160.106227][ T9151] loop2: detected capacity change from 0 to 64 [ 160.397327][ T9153] loop1: detected capacity change from 0 to 32768 [ 160.417431][ T9153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1576 (9153) [ 160.473133][ T9153] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.483727][ T9153] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 160.494496][ T9153] BTRFS info (device loop1): using free-space-tree [ 160.502293][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.514057][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.524493][ T5229] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.534185][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.646414][ T5229] usb 5-1: config 0 descriptor?? [ 160.746928][ T5229] hub 5-1:0.0: USB hub found [ 160.851427][ T9176] loop0: detected capacity change from 0 to 256 [ 160.925695][ T9178] erspan0: entered promiscuous mode [ 160.971404][ T5229] hub 5-1:0.0: 1 port detected [ 160.976810][ T9178] erspan0: left promiscuous mode [ 161.172188][ T5229] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 161.182209][ T5229] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 161.204489][ T5240] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.205833][ T5229] usbhid 5-1:0.0: can't add hid device: -71 [ 161.235491][ T5229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.323501][ T5229] usb 5-1: USB disconnect, device number 10 [ 161.624710][ T9162] loop3: detected capacity change from 0 to 32768 [ 161.807307][ T9162] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.817262][ T9190] loop0: detected capacity change from 0 to 32768 [ 161.841681][ T9190] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1588 (9190) [ 162.087472][ T9214] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314752, 8, 0, 0, 0) [ 162.145633][ T9202] loop2: detected capacity change from 0 to 32768 [ 162.159316][ T9190] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.174711][ T9202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1592 (9202) [ 162.233521][ T9218] loop1: detected capacity change from 0 to 512 [ 162.241865][ T9202] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.288484][ T9218] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1598: casefold flag without casefold feature [ 162.300597][ T9190] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 162.310052][ T9202] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 162.319327][ T9202] BTRFS info (device loop2): using free-space-tree [ 162.411699][ T9190] BTRFS info (device loop0): disk space caching is enabled [ 162.419213][ T9190] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 162.438843][ T9218] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1598: couldn't read orphan inode 15 (err -117) [ 162.456337][ T9218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.546325][ T9162] XFS (loop3): Ending clean mount [ 162.554848][ T9162] XFS (loop3): Quotacheck needed: Please wait. [ 162.607726][ T5238] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.618596][ T9190] BTRFS info (device loop0): rebuilding free space tree [ 162.664000][ T9190] BTRFS info (device loop0): disabling free space tree [ 162.673565][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.684026][ T9190] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.700749][ T9190] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.744503][ T9162] XFS (loop3): Quotacheck: Done. [ 162.795941][ T9190] BTRFS info (device loop0): checking UUID tree [ 163.024980][ T8329] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.106418][ T5235] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.159356][ T29] audit: type=1326 audit(1724333479.787:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.2.1608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a50579e79 code=0x0 [ 163.269243][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.488220][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.517160][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.538259][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.557725][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.580883][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.591035][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.620901][ T9] usb 2-1: Product: syz [ 163.625139][ T9] usb 2-1: Manufacturer: syz [ 163.647060][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 163.657350][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 163.685995][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.693732][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 163.784234][ T9269] loop4: detected capacity change from 0 to 32768 [ 163.794059][ T9269] XFS: noikeep mount option is deprecated. [ 163.852784][ T9269] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 163.877745][ T9] usb 2-1: USB disconnect, device number 7 [ 163.923732][ T9269] XFS (loop4): Ending clean mount [ 163.934027][ T9269] XFS (loop4): Quotacheck needed: Please wait. [ 163.972021][ T9269] XFS (loop4): Quotacheck: Done. [ 164.065693][ T5226] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 164.268815][ T29] audit: type=1800 audit(1724333480.887:7): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1614" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 164.543072][ T9295] loop0: detected capacity change from 0 to 8192 [ 164.600945][ T9295] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.614565][ T9295] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 164.626231][ T9295] REISERFS (device loop0): using writeback data mode [ 164.651932][ T9295] REISERFS warning (device loop0): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 164.675657][ T9295] REISERFS warning (device loop0): sh-462 journal_init: unable to initialize journal device [ 164.961613][ T9316] Bluetooth: MGMT ver 1.23 [ 165.362927][ T9322] loop0: detected capacity change from 0 to 4096 [ 165.462671][ T5278] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.485250][ T9322] ntfs3: loop0: failed to convert "0080" to macturkish [ 165.498515][ T9328] sp0: Synchronizing with TNC [ 165.502467][ T9322] ntfs3: loop0: failed to convert name for inode 1e. [ 165.649047][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 165.666430][ T9307] loop3: detected capacity change from 0 to 32768 [ 165.683071][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.703783][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.714702][ T9307] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1618 (9307) [ 165.738493][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.760571][ T5278] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.770120][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.781638][ T5278] usb 3-1: config 0 descriptor?? [ 165.805688][ T9307] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.838610][ T9307] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 165.858716][ T9307] BTRFS info (device loop3): disk space caching is enabled [ 165.876147][ T9307] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 166.056103][ T9354] loop0: detected capacity change from 0 to 512 [ 166.133417][ T9354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.165140][ T9307] BTRFS info (device loop3): rebuilding free space tree [ 166.213690][ T9307] BTRFS info (device loop3): disabling free space tree [ 166.238224][ T9307] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.254286][ T5278] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 166.267271][ T5278] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 166.279138][ T9354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.288995][ T5278] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 166.306115][ T9307] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.365409][ T5278] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 166.372510][ T9338] loop1: detected capacity change from 0 to 32768 [ 166.382472][ T9338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1634 (9338) [ 166.386505][ T9354] EXT4-fs (loop0): 1 orphan inode deleted [ 166.405757][ T9338] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.408517][ T5278] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 166.419843][ T9338] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.448173][ T9307] BTRFS info (device loop3): checking UUID tree [ 166.451963][ T9354] EXT4-fs (loop0): 1 truncate cleaned up [ 166.487247][ T9338] BTRFS info (device loop1): using free-space-tree [ 166.523984][ T5278] microsoft 0003:045E:07DA.0001: parse failed [ 166.530911][ T5278] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 166.658941][ T9354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.808998][ T8329] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.873736][ T9354] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 166.959238][ T5278] usb 3-1: USB disconnect, device number 12 [ 166.970859][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.048876][ T9373] loop4: detected capacity change from 0 to 32768 [ 167.100380][ T9373] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.164770][ T9373] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.368463][ T9373] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 167.389587][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 167.396503][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 167.627636][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 231ms [ 167.649986][ T5240] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.673861][ T9391] loop3: detected capacity change from 0 to 32768 [ 167.676305][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 167.760264][ T9373] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.785223][ T9391] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.176645][ T9389] loop0: detected capacity change from 0 to 32768 [ 168.199952][ T9391] XFS (loop3): Ending clean mount [ 168.395196][ T9389] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.460391][ T8329] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.934567][ T9389] XFS (loop0): Ending clean mount [ 169.012259][ T9389] XFS (loop0): Quotacheck needed: Please wait. [ 169.125734][ T9389] XFS (loop0): Quotacheck: Done. [ 169.203635][ T29] audit: type=1800 audit(1724333485.797:8): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1640" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 169.235346][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.216385][ T9455] loop3: detected capacity change from 0 to 32768 [ 170.471307][ T9449] loop0: detected capacity change from 0 to 32768 [ 170.550821][ T9455] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.672520][ T9451] loop4: detected capacity change from 0 to 32768 [ 170.683607][ T9451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1660 (9451) [ 170.706815][ T9449] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.716820][ T9451] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.749567][ T9451] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 170.793199][ T9455] XFS (loop3): Ending clean mount [ 170.820927][ T9451] BTRFS info (device loop4): using free-space-tree [ 170.890107][ T8329] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.963412][ T9449] XFS (loop0): Ending clean mount [ 170.973453][ T9449] XFS (loop0): Quotacheck needed: Please wait. [ 171.132723][ T9464] loop1: detected capacity change from 0 to 32768 [ 171.458072][ T9449] XFS (loop0): Quotacheck: Done. [ 171.538033][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.615002][ T9464] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.766077][ T9464] XFS (loop1): Ending clean mount [ 172.038989][ T5240] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.078776][ T9504] loop3: detected capacity change from 0 to 64 [ 172.251864][ T9507] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.410361][ T5226] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.606336][ T9517] loop1: detected capacity change from 0 to 512 [ 172.859466][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.918502][ T9517] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 172.939464][ T9517] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1666: invalid indirect mapped block 2683928664 (level 1) [ 173.017458][ T9517] EXT4-fs (loop1): Remounting filesystem read-only [ 173.050348][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 173.060390][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 173.073351][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 173.083762][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 173.096037][ T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 173.114291][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.123901][ T9517] EXT4-fs (loop1): 1 truncate cleaned up [ 173.141662][ T9517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.154767][ T5307] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.177604][ T9] usb 4-1: Product: syz [ 173.188287][ T9] usb 4-1: Manufacturer: syz [ 173.203336][ T9] usb 4-1: SerialNumber: syz [ 173.231488][ T9] usb 4-1: config 0 descriptor?? [ 173.280020][ T9] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 173.291687][ T9517] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 173.311583][ T9524] loop2: detected capacity change from 0 to 32768 [ 173.332265][ T9524] XFS: noikeep mount option is deprecated. [ 173.351860][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.372089][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.388266][ T5307] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 173.388359][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.393027][ T5307] usb 1-1: config 0 descriptor?? [ 173.394221][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.492275][ T9] scsi host1: usb-storage 4-1:0.0 [ 173.514616][ T9524] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 173.677314][ T5277] usb 4-1: USB disconnect, device number 8 [ 173.709603][ T9555] loop1: detected capacity change from 0 to 512 [ 173.712875][ T9524] XFS (loop2): Ending clean mount [ 173.717350][ T9555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.729789][ T9524] XFS (loop2): Quotacheck needed: Please wait. [ 173.771663][ T9555] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.811390][ T9555] EXT4-fs (loop1): 1 orphan inode deleted [ 173.817671][ T9555] EXT4-fs (loop1): 1 truncate cleaned up [ 173.820249][ T5307] cypress 0003:04B4:DE61.0002: item fetching failed at offset 5/7 [ 173.831406][ T9524] XFS (loop2): Quotacheck: Done. [ 173.836307][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.837705][ T5307] cypress 0003:04B4:DE61.0002: parse failed [ 173.855644][ T5307] cypress 0003:04B4:DE61.0002: probe with driver cypress failed with error -22 [ 173.892014][ T9555] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.928704][ T5238] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 173.946230][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.985752][ T5278] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.112244][ T5277] usb 1-1: USB disconnect, device number 7 [ 174.179198][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 174.211453][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.228745][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.254980][ T5278] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 174.273249][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.299057][ T5278] usb 5-1: config 0 descriptor?? [ 174.725789][ T5278] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 174.733897][ T5278] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 174.752969][ T5278] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 174.774152][ T5278] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 174.781372][ T5278] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 174.816585][ T5278] elecom 0003:056E:00FE.0003: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 174.827350][ T9575] loop2: detected capacity change from 0 to 1024 [ 174.851785][ T9575] hfsplus: unable to parse mount options [ 174.987561][ T5336] usb 5-1: USB disconnect, device number 11 [ 175.043559][ T9571] loop3: detected capacity change from 0 to 32768 [ 175.115966][ T9571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1690 (9571) [ 175.134086][ T9571] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.177454][ T9571] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 175.207761][ T9571] BTRFS info (device loop3): using free-space-tree [ 175.329582][ T9561] loop1: detected capacity change from 0 to 32768 [ 175.433366][ T9561] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 175.443589][ T9561] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 175.569730][ T9561] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 175.582740][ T5277] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 175.592163][ T8329] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.593037][ T5277] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 175.714597][ T5277] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 175.742302][ T5277] gfs2: fsid=syz:syz.0: jid=0: Done [ 175.768058][ T9561] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 175.818474][ T5229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.068759][ T5229] usb 3-1: Using ep0 maxpacket: 32 [ 176.072082][ T5229] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 176.072115][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.072137][ T5229] usb 3-1: Product: syz [ 176.072160][ T5229] usb 3-1: Manufacturer: syz [ 176.072176][ T5229] usb 3-1: SerialNumber: syz [ 176.076437][ T5229] usb 3-1: config 0 descriptor?? [ 176.447628][ T9633] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 176.607726][ T9638] loop1: detected capacity change from 0 to 128 [ 176.655995][ T9638] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.670303][ T9638] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.827277][ T9622] loop3: detected capacity change from 0 to 40427 [ 176.840670][ T9622] F2FS-fs (loop3): Invalid log sectorsize (2) [ 176.847109][ T9622] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 176.905735][ T5240] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.981387][ T9622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.999197][ T5229] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 177.135104][ T9622] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 177.135136][ T9622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.183282][ T9622] F2FS-fs (loop3): Unrecognized mount option "noload" or missing value [ 177.424879][ T5229] usb 3-1: USB disconnect, device number 13 [ 177.480490][ T9674] program syz.4.1726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.835230][ T9681] loop4: detected capacity change from 0 to 4096 [ 177.859503][ T9681] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 177.876715][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1733'. [ 178.109511][ T9695] loop3: detected capacity change from 0 to 64 [ 178.228949][ T9690] loop0: detected capacity change from 0 to 32768 [ 178.238838][ T9690] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1734 (9690) [ 178.245072][ T9681] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 178.353525][ T9690] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.364580][ T9690] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 178.377389][ T9690] BTRFS info (device loop0): using free-space-tree [ 178.550474][ T5226] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 178.816182][ T5307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.826524][ T5235] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.897112][ T9730] usb usb5: usbfs: process 9730 (syz.4.1746) did not claim interface 0 before use [ 178.932998][ T9732] loop3: detected capacity change from 0 to 24 [ 178.956078][ T9732] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 179.021623][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 179.041109][ T9732] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 179.061597][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.091637][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.105523][ T5307] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 179.116558][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.146824][ T5307] usb 2-1: config 0 descriptor?? [ 179.298600][ T9736] loop4: detected capacity change from 0 to 256 [ 179.374817][ T9736] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0619d298, utbl_chksum : 0xe619d30d) [ 179.580568][ T5336] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.591479][ T5307] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 179.619250][ T5307] cypress 0003:04B4:0001.0004: item fetching failed at offset 2/5 [ 179.628143][ T9748] netlink: 'syz.2.1754': attribute type 21 has an invalid length. [ 179.637766][ T5307] cypress 0003:04B4:0001.0004: parse failed [ 179.642705][ T9748] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1754'. [ 179.645502][ T5307] cypress 0003:04B4:0001.0004: probe with driver cypress failed with error -22 [ 179.805813][ T9754] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1757'. [ 179.806455][ T5336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.837541][ T8] usb 2-1: USB disconnect, device number 8 [ 179.847233][ T5336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.859457][ T5336] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 179.870649][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.879188][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 179.906734][ T5336] usb 4-1: config 0 descriptor?? [ 180.031563][ T9758] loop0: detected capacity change from 0 to 64 [ 180.355528][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.370389][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.371200][ T9746] loop4: detected capacity change from 0 to 40427 [ 180.379161][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.385481][ T9746] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 180.399188][ T9746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.408685][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.429573][ T9746] F2FS-fs (loop4): invalid crc value [ 180.442064][ T9746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.459631][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.472719][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.481508][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.513047][ T5336] semitek 0003:1EA7:0907.0005: unknown main item tag 0x0 [ 180.542151][ T5336] semitek 0003:1EA7:0907.0005: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 180.576491][ T9746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.585690][ T5336] usb 4-1: USB disconnect, device number 9 [ 180.597577][ T9746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.597841][ T9770] erspan0: entered promiscuous mode [ 180.640863][ T9770] erspan0: left promiscuous mode [ 180.690165][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.713978][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.747025][ T8] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 180.784989][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.824008][ T8] usb 3-1: config 0 descriptor?? [ 181.045257][ T9781] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 181.273162][ T5230] Bluetooth: hci0: command 0x0406 tx timeout [ 181.273190][ T5241] Bluetooth: hci3: command 0x0406 tx timeout [ 181.274111][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 181.279607][ T5243] Bluetooth: hci2: command 0x0406 tx timeout [ 181.332708][ T8] asus 0003:048D:CE50.0006: unknown main item tag 0xd [ 181.347796][ T8] asus 0003:048D:CE50.0006: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 181.355093][ T9787] loop3: detected capacity change from 0 to 4096 [ 181.359396][ T8] asus 0003:048D:CE50.0006: Asus input not registered [ 181.387199][ T8] asus 0003:048D:CE50.0006: probe with driver asus failed with error -12 [ 181.433000][ T9788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.586978][ T5278] usb 3-1: USB disconnect, device number 14 [ 181.784536][ T9797] loop1: detected capacity change from 0 to 64 [ 181.848151][ T9783] loop0: detected capacity change from 0 to 40427 [ 181.857695][ T9783] F2FS-fs (loop0): Invalid log sectorsize (2) [ 181.864317][ T9783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 181.891098][ T9783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.019747][ T9783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.027187][ T9783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.149058][ T9783] F2FS-fs (loop0): Unrecognized mount option "noload" or missing value [ 182.224471][ T9811] loop2: detected capacity change from 0 to 24 [ 182.242218][ T9811] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 182.262045][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.289123][ T9811] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 182.479906][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.502776][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.528549][ T8] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 182.558240][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.577640][ T8] usb 5-1: config 0 descriptor?? [ 182.624755][ T9800] loop3: detected capacity change from 0 to 32768 [ 182.699973][ T9800] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.978792][ T9800] XFS (loop3): Ending clean mount [ 182.991375][ T9800] XFS (loop3): Quotacheck needed: Please wait. [ 183.129044][ T9840] Bluetooth: MGMT ver 1.23 [ 183.141779][ T8] cougar 0003:060B:700A.0007: item fetching failed at offset 2/5 [ 183.147967][ T9800] XFS (loop3): Quotacheck: Done. [ 183.162955][ T9809] loop1: detected capacity change from 0 to 32768 [ 183.175215][ T8] cougar 0003:060B:700A.0007: parse failed [ 183.182122][ T9809] XFS: noikeep mount option is deprecated. [ 183.195138][ T8] cougar 0003:060B:700A.0007: probe with driver cougar failed with error -22 [ 183.265461][ T9845] loop2: detected capacity change from 0 to 64 [ 183.280641][ T8329] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.283319][ T9809] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 183.316752][ T9845] hfs: keylen 94 too large [ 183.333564][ T8] usb 5-1: USB disconnect, device number 12 [ 183.367861][ T9845] hfs: keylen 94 too large [ 183.374628][ T9854] loop0: detected capacity change from 0 to 16 [ 183.399106][ T9854] erofs: (device loop0): mounted with root inode @ nid 36. [ 183.446190][ T9809] XFS (loop1): Ending clean mount [ 183.487841][ T9856] loop2: detected capacity change from 0 to 47 [ 183.505168][ T9809] XFS (loop1): Quotacheck needed: Please wait. [ 183.603077][ T9809] XFS (loop1): Quotacheck: Done. [ 183.657716][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 183.695783][ T5240] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 183.801587][ T5277] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.911365][ T9869] loop2: detected capacity change from 0 to 2048 [ 183.942093][ T9869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.989843][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 184.009458][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.023291][ T5238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.036651][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.107101][ T5277] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.128530][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.150506][ T5277] usb 1-1: config 0 descriptor?? [ 184.255387][ T9882] pim6reg: entered allmulticast mode [ 184.264812][ T9882] pim6reg: left allmulticast mode [ 184.593662][ T5277] savu 0003:1E7D:2D5A.0008: unbalanced collection at end of report description [ 184.634578][ T5277] savu 0003:1E7D:2D5A.0008: parse failed [ 184.644660][ T9886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1810'. [ 184.664258][ T5277] savu 0003:1E7D:2D5A.0008: probe with driver savu failed with error -22 [ 184.788048][ T9880] loop2: detected capacity change from 0 to 40427 [ 184.792713][ T5277] usb 1-1: USB disconnect, device number 8 [ 184.813866][ T9880] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.827287][ T9880] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.839537][ T9880] F2FS-fs (loop2): invalid crc value [ 184.854027][ T9880] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.919447][ T9896] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 184.946736][ T9880] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 185.005021][ T9880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.131052][ T9880] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 185.249879][ T9904] loop3: detected capacity change from 0 to 4096 [ 185.269445][ T9904] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 185.560971][ T5277] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.769110][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 185.795282][ T5277] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.855588][ T5277] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.873910][ T9912] loop1: detected capacity change from 0 to 32768 [ 185.877179][ T5277] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.947549][ T9912] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.983474][ T5277] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.990708][ T5277] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 186.001210][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.012893][ T5277] usb 5-1: config 0 descriptor?? [ 186.202076][ T9912] XFS (loop1): Ending clean mount [ 186.288201][ T9942] loop3: detected capacity change from 0 to 47 [ 186.358029][ T5240] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.488497][ T5336] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.489569][ T5277] hid-generic 0003:045E:05DA.0009: ignoring exceeding usage max [ 186.533535][ T5277] hid-generic 0003:045E:05DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.4-1/input0 [ 186.682881][ T5336] usb 1-1: Using ep0 maxpacket: 8 [ 186.725958][ T5336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.737951][ T8] usb 5-1: USB disconnect, device number 13 [ 186.747172][ T5336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.772859][ T5336] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 186.813883][ T5336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.829929][ T5336] usb 1-1: config 0 descriptor?? [ 187.028638][ T5277] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 187.215288][ T9967] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1840'. [ 187.228647][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 187.242438][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.265460][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.277659][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.304205][ T5277] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.318215][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.380666][ T5277] usb 3-1: config 0 descriptor?? [ 187.427563][ T9963] loop3: detected capacity change from 0 to 40427 [ 187.441831][ T9963] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 187.449842][ T9963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.464512][ T5336] belkin 0003:1020:0006.000A: unknown main item tag 0xd [ 187.483168][ T5336] belkin 0003:1020:0006.000A: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 187.526635][ T9963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.579924][ T5229] usb 1-1: USB disconnect, device number 9 [ 187.622296][ T9963] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.639754][ T9963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.689521][ T9963] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 187.788566][ T5278] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 187.809265][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.816557][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.825162][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.833289][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.841370][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.849041][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.856305][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.865781][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.897531][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.921164][ T5277] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 187.944136][ T5277] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input13 [ 188.000075][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.012638][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.038430][ T5278] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 188.058026][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.075761][ T9974] loop4: detected capacity change from 0 to 32768 [ 188.089227][ T5278] usb 2-1: config 0 descriptor?? [ 188.098250][ T5277] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 188.158761][ T5277] usb 3-1: USB disconnect, device number 15 [ 188.197627][ T9974] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.363039][ T9974] XFS (loop4): Ending clean mount [ 188.612686][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.624923][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x6 [ 188.633969][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x5 [ 188.648537][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x4 [ 188.660510][ T5226] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.678541][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.685814][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.772849][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.780375][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.797628][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.806885][ T5278] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 188.879899][ T5278] elecom 0003:056E:00FE.000C: unknown global tag 0xd [ 188.907140][ T5278] elecom 0003:056E:00FE.000C: item 0 4 1 13 parsing failed [ 188.950099][ T5278] elecom 0003:056E:00FE.000C: probe with driver elecom failed with error -22 [ 189.077563][ T5278] usb 2-1: USB disconnect, device number 9 [ 189.458098][T10012] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 189.486420][T10012] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.1855'. [ 189.512238][T10001] loop2: detected capacity change from 0 to 32768 [ 189.632157][T10015] loop1: detected capacity change from 0 to 2048 [ 189.659381][T10015] NILFS (loop1): invalid segment: Sequence number mismatch [ 189.688480][T10015] NILFS (loop1): trying rollback from an earlier position [ 189.789050][T10015] NILFS (loop1): recovery complete [ 189.813009][T10020] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.815628][ T9994] loop3: detected capacity change from 0 to 40427 [ 189.842549][T10022] loop4: detected capacity change from 0 to 1024 [ 189.889700][T10022] hfsplus: walked past end of dir [ 189.901361][ T9994] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.055593][ T9994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.097241][T10034] loop2: detected capacity change from 0 to 128 [ 190.280730][ T8329] syz-executor: attempt to access beyond end of device [ 190.280730][ T8329] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.336474][ T8329] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 190.464530][T10029] loop1: detected capacity change from 0 to 8192 [ 190.474911][T10044] loop4: detected capacity change from 0 to 512 [ 190.495670][T10029] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.532397][T10044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback. [ 190.715534][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 190.960421][T10051] loop4: detected capacity change from 0 to 2048 [ 191.011150][T10053] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.393612][T10041] loop0: detected capacity change from 0 to 32768 [ 191.607030][T10046] loop2: detected capacity change from 0 to 32768 [ 191.666730][T10046] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 191.680481][ T5278] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.732045][T10046] XFS (loop2): Ending clean mount [ 191.788615][ T5307] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.807925][T10082] loop0: detected capacity change from 0 to 4096 [ 191.858643][T10083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.890571][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 191.909538][ T5238] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 191.978550][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.989937][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.999821][ T5278] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 192.009141][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.039017][ T5278] usb 2-1: config 0 descriptor?? [ 192.047340][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.078468][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.099120][ T5307] usb 5-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 192.108261][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.260397][ T5307] usb 5-1: config 0 descriptor?? [ 192.282943][ T5278] usbhid 2-1:0.0: can't add hid device: -71 [ 192.289850][ T5278] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 192.324587][ T5278] usb 2-1: USB disconnect, device number 10 [ 192.448982][T10085] loop3: detected capacity change from 0 to 32768 [ 192.458299][T10085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1884 (10085) [ 192.509512][T10085] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.526873][T10085] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 192.599163][T10085] BTRFS info (device loop3): using free-space-tree [ 192.735341][ T5307] wacom 0003:056A:0303.000D: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 192.768931][ T5307] wacom 0003:056A:0303.000D: hidraw0: USB HID v0.00 Device [HID 056a:0303] on usb-dummy_hcd.4-1/input0 [ 192.803192][ T5307] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0303.000D/input/input14 [ 192.880899][ T8329] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.908637][ T5278] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.967670][ T5307] usb 5-1: USB disconnect, device number 14 [ 193.130223][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.151576][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.183116][ T5278] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 193.210723][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.252666][ T5278] usb 2-1: config 0 descriptor?? [ 193.280646][T10099] loop2: detected capacity change from 0 to 32768 [ 193.290660][ T5278] HFC-S_USB 2-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 193.317844][T10099] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1890 (10099) [ 193.385623][T10099] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 193.438512][T10099] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.447299][T10099] BTRFS info (device loop2): using free-space-tree [ 193.566916][ T5278] usbhid 2-1:0.0: can't add hid device: -71 [ 193.599593][ T5278] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.617382][ T5278] usb 2-1: USB disconnect, device number 11 [ 193.688533][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1892'. [ 193.706573][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1892'. [ 193.875017][ T5238] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.177029][T10118] loop3: detected capacity change from 0 to 32768 [ 194.241505][ T29] audit: type=1800 audit(1724333510.847:9): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1891" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 194.550153][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.556505][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835960][T10170] loop1: detected capacity change from 0 to 764 [ 195.055425][T10179] loop3: detected capacity change from 0 to 512 [ 195.139343][T10179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1913: bg 0: block 5: invalid block bitmap [ 195.239928][T10179] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 195.293210][T10190] loop4: detected capacity change from 0 to 1024 [ 195.300435][T10190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.358105][T10190] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 195.378518][ T5307] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.397807][T10179] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1913: invalid indirect mapped block 3 (level 2) [ 195.425082][T10179] EXT4-fs (loop3): 1 orphan inode deleted [ 195.431528][T10179] EXT4-fs (loop3): 1 truncate cleaned up [ 195.445837][T10179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.537099][ T8329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.562832][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.579952][T10190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.597290][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.607444][ T5307] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 195.616768][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.653707][ T5307] usb 1-1: config 0 descriptor?? [ 195.709108][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.726719][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.888558][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 195.897949][ T25] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 195.908214][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.908243][ T25] usb 2-1: Product: syz [ 195.921417][ T25] usb 2-1: Manufacturer: syz [ 195.926303][ T25] usb 2-1: SerialNumber: syz [ 195.939364][ T25] usb 2-1: config 0 descriptor?? [ 195.953102][ T25] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 196.004445][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.095694][ T5307] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 196.103166][ T5307] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 196.120020][ T5307] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 196.127701][ T5307] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 196.128550][ T5277] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.145337][ T5307] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 196.167144][ T25] usb 2-1: USB disconnect, device number 12 [ 196.172328][ T5307] zydacron 0003:13EC:0006.000E: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 196.229076][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 196.243600][ T8] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.254882][ T8] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.265315][ T8] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.278826][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.285463][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 196.295246][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.305872][ T8] usb 4-1: config 0 descriptor?? [ 196.326027][ T5229] usb 1-1: USB disconnect, device number 10 [ 196.343638][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 196.357359][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.384147][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.402052][ T5277] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 196.415395][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.426380][ T5277] usb 5-1: config 0 descriptor?? [ 196.735968][ T8] hid-generic 0003:045E:05DA.000F: unbalanced delimiter at end of report description [ 196.746338][ T8] hid-generic 0003:045E:05DA.000F: probe with driver hid-generic failed with error -22 [ 196.866670][ T5277] glorious 0003:258A:0033.0010: unknown main item tag 0x0 [ 196.890010][ T5277] glorious 0003:258A:0033.0010: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 196.968195][ T5277] usb 4-1: USB disconnect, device number 10 [ 197.078194][ T5229] usb 5-1: USB disconnect, device number 15 [ 197.168469][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.248301][T10218] loop1: detected capacity change from 0 to 32768 [ 197.405669][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.426700][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.445800][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.458836][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.469049][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.496099][ T8] usb 1-1: config 0 descriptor?? [ 197.629027][T10228] loop1: detected capacity change from 0 to 64 [ 197.880886][T10236] loop4: detected capacity change from 0 to 1024 [ 197.895233][T10236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.923011][T10236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.936302][ T8] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 197.945499][ T8] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description [ 197.957695][ T8] plantronics 0003:047F:FFFF.0011: parse failed [ 197.964429][ T8] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 198.053293][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.225545][ T5307] usb 1-1: USB disconnect, device number 11 [ 198.664428][T10224] loop2: detected capacity change from 0 to 40427 [ 198.681597][T10224] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 198.698113][T10224] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.698488][ T5307] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 198.742323][T10224] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.874629][T10224] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 198.882277][T10224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.923594][T10224] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 198.948458][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 198.972447][ T5307] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 198.990465][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.008674][ T5307] usb 5-1: Product: syz [ 199.012886][ T5307] usb 5-1: Manufacturer: syz [ 199.017504][ T5307] usb 5-1: SerialNumber: syz [ 199.040777][ T5307] usb 5-1: config 0 descriptor?? [ 199.129526][ T5229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 199.276643][ T5307] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 199.318435][ T5229] usb 1-1: Using ep0 maxpacket: 32 [ 199.325687][ T5229] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.333092][T10264] loop3: detected capacity change from 0 to 32768 [ 199.343766][ T5229] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.353626][T10264] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1950 (10264) [ 199.356521][T10264] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.388008][T10264] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 199.392569][ T5229] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.408004][T10265] loop1: detected capacity change from 0 to 32768 [ 199.414718][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.415591][T10264] BTRFS info (device loop3): using free-space-tree [ 199.433527][ T5229] hub 1-1:4.0: USB hub found [ 199.436995][T10265] XFS: ikeep mount option is deprecated. [ 199.449996][T10265] XFS: noikeep mount option is deprecated. [ 199.558609][ T5277] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.562082][T10265] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 199.681318][ T5307] usb write operation failed. (-71) [ 199.708655][T10265] XFS (loop1): Ending clean mount [ 199.717605][ T5307] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.721745][T10265] XFS (loop1): Quotacheck needed: Please wait. [ 199.753339][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 199.753798][ T5307] dvbdev: DVB: registering new adapter (Terratec H7) [ 199.758622][ T5229] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 199.786677][ T5307] usb 5-1: media controller created [ 199.792855][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.800523][ T5307] usb read operation failed. (-71) [ 199.810120][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.820241][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.836586][T10265] XFS (loop1): Quotacheck: Done. [ 199.848459][ T5307] usb write operation failed. (-71) [ 199.870291][ T5307] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 199.883718][ T5277] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 199.890089][ T5307] usb 5-1: USB disconnect, device number 16 [ 199.893888][ T8329] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.911049][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.959441][ T5277] usb 3-1: config 0 descriptor?? [ 199.990380][ T5240] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.174731][ T9] usb 1-1: USB disconnect, device number 12 [ 200.260655][T10300] syz.3.1954 (10300) used obsolete PPPIOCDETACH ioctl [ 200.423149][ T5277] belkin 0003:050D:3201.0012: item fetching failed at offset 5/7 [ 200.444686][ T5277] belkin 0003:050D:3201.0012: parse failed [ 200.456288][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'. [ 200.466422][ T5277] belkin 0003:050D:3201.0012: probe with driver belkin failed with error -22 [ 200.629315][ T5277] usb 3-1: USB disconnect, device number 16 [ 200.641939][T10314] loop0: detected capacity change from 0 to 256 [ 200.678149][T10314] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 201.323336][T10336] loop2: detected capacity change from 0 to 1024 [ 201.399666][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 201.590710][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.608758][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.634203][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 201.666437][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.713964][ T9] usb 4-1: config 0 descriptor?? [ 202.128493][ T5277] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.202566][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.214019][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x6 [ 202.225805][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x5 [ 202.245576][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x4 [ 202.272734][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.288586][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.295840][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.308942][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 202.318665][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.327157][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.332579][ T5277] usb 1-1: config index 0 descriptor too short (expected 7382, got 27) [ 202.346939][ T9] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 202.353988][ T5277] usb 1-1: config 195 has an invalid descriptor of length 0, skipping remainder of the config [ 202.354019][ T5277] usb 1-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 202.354058][ T5277] usb 1-1: config 195 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.354084][ T5277] usb 1-1: config 195 interface 0 has no altsetting 0 [ 202.440560][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 202.464770][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.475407][ T5277] usb 1-1: Product: syz [ 202.480213][ T5277] usb 1-1: Manufacturer: syz [ 202.484837][ T5277] usb 1-1: SerialNumber: syz [ 202.496271][ T9] elecom 0003:056E:00FE.0013: unknown global tag 0xd [ 202.508992][ T9] elecom 0003:056E:00FE.0013: item 0 4 1 13 parsing failed [ 202.526022][ T5277] hub 1-1:195.0: bad descriptor, ignoring hub [ 202.534010][ T5277] hub 1-1:195.0: probe with driver hub failed with error -5 [ 202.543792][ T9] elecom 0003:056E:00FE.0013: probe with driver elecom failed with error -22 [ 202.547076][ T5277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 202.566654][T10378] netlink: 'syz.4.1992': attribute type 3 has an invalid length. [ 202.599173][ T9] usb 4-1: USB disconnect, device number 11 [ 202.733569][ T5277] gspca_zc3xx: reg_w_i err -71 [ 202.813267][T10390] loop2: detected capacity change from 0 to 512 [ 202.853667][T10390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.878693][T10390] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.953376][T10390] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.1998: corrupted inode contents [ 202.974634][T10390] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz.2.1998: mark_inode_dirty error [ 202.993222][T10390] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.1998: corrupted inode contents [ 203.006801][T10390] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1998: mark_inode_dirty error [ 203.008567][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 203.068869][ T5238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.211125][T10405] loop3: detected capacity change from 0 to 512 [ 203.243467][ T25] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 203.248827][T10405] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 203.252934][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.275037][ T25] usb 5-1: Product: syz [ 203.277948][T10405] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2003: invalid indirect mapped block 2683928664 (level 1) [ 203.279595][ T25] usb 5-1: Manufacturer: syz [ 203.279617][ T25] usb 5-1: SerialNumber: syz [ 203.281615][ T25] usb 5-1: config 0 descriptor?? [ 203.324614][T10405] EXT4-fs (loop3): 1 truncate cleaned up [ 203.355308][T10405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.358511][ T5277] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 203.379947][ T5277] gspca_zc3xx 1-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 203.599143][ T8329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.626465][ T5307] usb 5-1: USB disconnect, device number 17 [ 203.679833][ T5277] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 203.764844][T10416] loop3: detected capacity change from 0 to 2048 [ 203.953895][T10412] loop1: detected capacity change from 0 to 32768 [ 203.974772][T10416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.002024][T10416] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.043330][T10412] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 204.090019][ T8329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.192938][T10412] XFS (loop1): Ending clean mount [ 204.358733][ T5240] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 204.413762][T10437] loop3: detected capacity change from 0 to 256 [ 204.421238][T10437] exfat: Deprecated parameter 'utf8' [ 204.526179][T10437] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 204.529622][ T5277] usb 1-1: failed to restore interface 0 altsetting 6 (error=-71) [ 204.583569][ T5277] usb 1-1: USB disconnect, device number 13 [ 204.711484][T10424] loop2: detected capacity change from 0 to 32768 [ 204.762800][T10424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2010 (10424) [ 204.805565][T10444] loop4: detected capacity change from 0 to 512 [ 204.874224][T10424] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.889083][T10424] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 204.901386][T10444] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 204.908555][T10424] BTRFS info (device loop2): using free-space-tree [ 204.910153][T10444] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.938676][T10444] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 204.951837][T10444] EXT4-fs warning (device loop4): ext4_enable_quotas:7073: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.993460][T10444] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 205.046296][T10444] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.2016: casefold flag without casefold feature [ 205.054172][T10454] loop1: detected capacity change from 0 to 1024 [ 205.091458][T10444] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2016: couldn't read orphan inode 16 (err -117) [ 205.116366][T10444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.196574][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.207421][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 205.307308][ T1069] hfsplus: b-tree write err: -5, ino 4 [ 205.384396][ T5238] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.558637][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.757238][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.769248][T10491] random: crng reseeded on system resumption [ 205.820117][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.866725][ T9] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 205.885093][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.918210][ T9] usb 4-1: config 0 descriptor?? [ 206.177960][T10498] loop1: detected capacity change from 0 to 4096 [ 206.206744][T10498] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 206.281702][T10498] ntfs3: loop1: failed to convert "076c" to cp932 [ 206.358792][ T9] hid-multitouch 0003:0EEF:72D0.0014: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 206.546153][T10480] loop0: detected capacity change from 0 to 32768 [ 206.558115][ T9] usb 4-1: USB disconnect, device number 12 [ 206.614159][T10480] gfs2: fsid=\]+_.)!]^\: Trying to join cluster "lock_nolock", "\]+_.)!]^\" [ 206.627059][T10480] gfs2: fsid=\]+_.)!]^\: Now mounting FS (format 0)... [ 206.653196][T10480] gfs2: fsid=\]+_.)!]^\.s: journal 0 mapped with 3 extents in 0ms [ 206.689705][ T5278] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.758229][T10480] gfs2: fsid=\]+_.)!]^\.s: first mount done, others may mount [ 206.929639][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 206.944019][ T5278] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 206.944099][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.944120][ T5278] usb 3-1: Product: syz [ 206.944134][ T5278] usb 3-1: Manufacturer: syz [ 206.944151][ T5278] usb 3-1: SerialNumber: syz [ 206.949358][ T5278] usb 3-1: config 0 descriptor?? [ 207.066182][T10512] loop4: detected capacity change from 0 to 512 [ 207.188313][T10512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.217613][T10512] EXT4-fs (loop4): Test dummy encryption mode enabled [ 207.256110][T10512] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.2040: iget: bogus i_mode (0) [ 207.304924][T10512] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2040: couldn't read orphan inode 17 (err -117) [ 207.345446][T10512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.436633][ T5278] airspy 3-1:0.0: Board ID: 00 [ 207.452526][ T5278] airspy 3-1:0.0: Firmware version: [ 207.554751][T10512] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 207.579863][T10512] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2040: bg 0: block 7: invalid block bitmap [ 207.647244][ T5278] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 207.711709][ T5278] airspy 3-1:0.0: Registered as swradio16 [ 207.717502][ T5278] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 207.737738][T10540] loop3: detected capacity change from 0 to 64 [ 207.764998][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.780411][ T29] audit: type=1800 audit(1724333524.397:10): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2049" name="file2" dev="loop3" ino=19 res=0 errno=0 [ 207.840411][ T5278] usb 3-1: USB disconnect, device number 17 [ 208.259139][T10552] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2054'. [ 208.395327][T10529] loop0: detected capacity change from 0 to 32768 [ 208.447091][T10556] loop3: detected capacity change from 0 to 1024 [ 208.479703][T10559] loop4: detected capacity change from 0 to 64 [ 208.536971][T10556] hfsplus: bad catalog entry type [ 208.585217][T10561] loop2: detected capacity change from 0 to 64 [ 208.670279][T10561] Trying to free block not in datazone [ 208.753829][ T1069] hfsplus: b-tree write err: -5, ino 4 [ 208.971586][T10571] loop0: detected capacity change from 0 to 2048 [ 209.043774][T10573] loop3: detected capacity change from 0 to 64 [ 209.093664][T10542] loop1: detected capacity change from 0 to 40427 [ 209.110141][T10571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.146260][T10577] loop2: detected capacity change from 0 to 1024 [ 209.231150][ T29] audit: type=1800 audit(1724333525.857:11): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2064" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 209.256409][T10542] F2FS-fs (loop1): invalid crc value [ 209.287817][T10577] hfsplus: bad catalog entry type [ 209.317862][T10542] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.445117][T10585] loop3: detected capacity change from 0 to 2048 [ 209.528815][T10542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 209.549050][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.565439][T10585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.624982][T10596] loop2: detected capacity change from 0 to 1024 [ 209.736434][T10600] loop4: detected capacity change from 0 to 8 [ 209.835702][T10604] loop3: detected capacity change from 0 to 2048 [ 209.838226][T10600] SQUASHFS error: lzo decompression failed, data probably corrupt [ 209.846716][T10604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.862575][T10596] syz.2.2075: attempt to access beyond end of device [ 209.862575][T10596] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 209.929462][T10600] SQUASHFS error: Failed to read block 0x71: -5 [ 209.964513][T10600] ================================================================== [ 209.972624][T10600] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 209.981245][T10600] Read of size 4 at addr ffff88802c955bc0 by task syz.4.2079/10600 [ 209.989154][T10600] [ 209.991506][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.4.2079 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 210.001861][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.011947][T10600] Call Trace: [ 210.015249][T10600] [ 210.018203][T10600] dump_stack_lvl+0x241/0x360 [ 210.022909][T10600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.028145][T10600] ? __pfx__printk+0x10/0x10 [ 210.032770][T10600] ? _printk+0xd5/0x120 [ 210.036960][T10600] ? __virt_addr_valid+0x183/0x530 [ 210.042103][T10600] ? __virt_addr_valid+0x183/0x530 [ 210.047398][T10600] print_report+0x169/0x550 [ 210.051909][T10600] ? __virt_addr_valid+0x183/0x530 [ 210.057014][T10600] ? __virt_addr_valid+0x183/0x530 [ 210.062120][T10600] ? __virt_addr_valid+0x45f/0x530 [ 210.067225][T10600] ? __phys_addr+0xba/0x170 [ 210.071732][T10600] ? squashfs_readahead+0x210c/0x2680 [ 210.077109][T10600] kasan_report+0x143/0x180 [ 210.081617][T10600] ? squashfs_readahead+0x210c/0x2680 [ 210.086993][T10600] squashfs_readahead+0x210c/0x2680 [ 210.092199][T10600] ? squashfs_readahead+0x6f0/0x2680 [ 210.097487][T10600] ? __pfx_squashfs_readahead+0x10/0x10 [ 210.103035][T10600] ? blk_start_plug+0x70/0x1b0 [ 210.107800][T10600] read_pages+0x17e/0x840 [ 210.112133][T10600] ? percpu_ref_put+0x19/0x180 [ 210.116911][T10600] ? __pfx_read_pages+0x10/0x10 [ 210.121764][T10600] ? filemap_add_folio+0x26d/0x650 [ 210.126968][T10600] ? __pfx_filemap_add_folio+0x10/0x10 [ 210.132432][T10600] page_cache_ra_unbounded+0x6ce/0x7f0 [ 210.137894][T10600] filemap_get_pages+0x543/0x2330 [ 210.142919][T10600] ? __lock_acquire+0x1384/0x2050 [ 210.147955][T10600] ? __pfx_filemap_get_pages+0x10/0x10 [ 210.153413][T10600] ? __pfx___might_resched+0x10/0x10 [ 210.158709][T10600] filemap_read+0x457/0xfa0 [ 210.163214][T10600] ? __pfx_lock_release+0x10/0x10 [ 210.168259][T10600] ? __pfx_filemap_read+0x10/0x10 [ 210.173300][T10600] ? __pfx_aa_file_perm+0x10/0x10 [ 210.178350][T10600] ? iov_iter_kvec+0x4e/0x180 [ 210.183035][T10600] __kernel_read+0x532/0x9f0 [ 210.187624][T10600] ? __pfx___kernel_read+0x10/0x10 [ 210.192731][T10600] ? end_current_label_crit_section+0x151/0x180 [ 210.199152][T10600] ? rw_verify_area+0x56a/0x700 [ 210.204000][T10600] ? kernel_read+0x1d/0x70 [ 210.208416][T10600] bprm_execve+0xa2b/0x1770 [ 210.213015][T10600] ? __pfx_bprm_execve+0x10/0x10 [ 210.218052][T10600] ? copy_string_kernel+0x1c9/0x1f0 [ 210.223271][T10600] do_execveat_common+0x55f/0x6f0 [ 210.229626][T10600] __x64_sys_execveat+0xc4/0xe0 [ 210.234490][T10600] do_syscall_64+0xf3/0x230 [ 210.239005][T10600] ? clear_bhb_loop+0x35/0x90 [ 210.243792][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.250332][T10600] RIP: 0033:0x7fa1fa179e79 [ 210.254856][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.274552][T10600] RSP: 002b:00007fa1f9ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 210.282970][T10600] RAX: ffffffffffffffda RBX: 00007fa1fa315f80 RCX: 00007fa1fa179e79 [ 210.291039][T10600] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 210.299032][T10600] RBP: 00007fa1fa1e7916 R08: 0000000000000000 R09: 0000000000000000 [ 210.307006][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.315068][T10600] R13: 0000000000000000 R14: 00007fa1fa315f80 R15: 00007ffef188e6a8 [ 210.323055][T10600] [ 210.326069][T10600] [ 210.328384][T10600] Allocated by task 10600: [ 210.333309][T10600] kasan_save_track+0x3f/0x80 [ 210.337991][T10600] __kasan_kmalloc+0x98/0xb0 [ 210.342577][T10600] __kmalloc_cache_noprof+0x19c/0x2c0 [ 210.347948][T10600] squashfs_page_actor_init_special+0x64/0x440 [ 210.354104][T10600] squashfs_readahead+0x188f/0x2680 [ 210.359405][T10600] read_pages+0x17e/0x840 [ 210.363784][T10600] page_cache_ra_unbounded+0x6ce/0x7f0 [ 210.369248][T10600] filemap_get_pages+0x543/0x2330 [ 210.374268][T10600] filemap_read+0x457/0xfa0 [ 210.378777][T10600] __kernel_read+0x532/0x9f0 [ 210.383371][T10600] bprm_execve+0xa2b/0x1770 [ 210.387876][T10600] do_execveat_common+0x55f/0x6f0 [ 210.392916][T10600] __x64_sys_execveat+0xc4/0xe0 [ 210.397874][T10600] do_syscall_64+0xf3/0x230 [ 210.402499][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.408411][T10600] [ 210.410743][T10600] Freed by task 10600: [ 210.414807][T10600] kasan_save_track+0x3f/0x80 [ 210.419575][T10600] kasan_save_free_info+0x40/0x50 [ 210.424603][T10600] __kasan_slab_free+0x59/0x70 [ 210.429367][T10600] kfree+0x196/0x3e0 [ 210.433264][T10600] squashfs_readahead+0x195b/0x2680 [ 210.438558][T10600] read_pages+0x17e/0x840 [ 210.442885][T10600] page_cache_ra_unbounded+0x6ce/0x7f0 [ 210.448351][T10600] filemap_get_pages+0x543/0x2330 [ 210.453371][T10600] filemap_read+0x457/0xfa0 [ 210.457868][T10600] __kernel_read+0x532/0x9f0 [ 210.462452][T10600] bprm_execve+0xa2b/0x1770 [ 210.466951][T10600] do_execveat_common+0x55f/0x6f0 [ 210.471969][T10600] __x64_sys_execveat+0xc4/0xe0 [ 210.476818][T10600] do_syscall_64+0xf3/0x230 [ 210.481318][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.487234][T10600] [ 210.489554][T10600] The buggy address belongs to the object at ffff88802c955b80 [ 210.489554][T10600] which belongs to the cache kmalloc-96 of size 96 [ 210.503446][T10600] The buggy address is located 64 bytes inside of [ 210.503446][T10600] freed 96-byte region [ffff88802c955b80, ffff88802c955be0) [ 210.517163][T10600] [ 210.519489][T10600] The buggy address belongs to the physical page: [ 210.526180][T10600] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c955 [ 210.534944][T10600] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 210.542059][T10600] page_type: 0xfdffffff(slab) [ 210.546729][T10600] raw: 00fff00000000000 ffff888015841280 ffffea000070b480 dead000000000004 [ 210.555338][T10600] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 210.564000][T10600] page dumped because: kasan: bad access detected [ 210.570411][T10600] page_owner tracks the page as allocated [ 210.576110][T10600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 10500985416, free_ts 0 [ 210.593731][T10600] post_alloc_hook+0x1f3/0x230 [ 210.598504][T10600] get_page_from_freelist+0x3131/0x3280 [ 210.604062][T10600] __alloc_pages_noprof+0x29e/0x780 [ 210.609281][T10600] alloc_slab_page+0x5f/0x120 [ 210.613964][T10600] allocate_slab+0x5a/0x2f0 [ 210.618469][T10600] ___slab_alloc+0xcd1/0x14b0 [ 210.623143][T10600] __slab_alloc+0x58/0xa0 [ 210.627469][T10600] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 210.632924][T10600] locate_module_kobject+0x6f/0x160 [ 210.638120][T10600] version_sysfs_builtin+0x5e/0xe0 [ 210.643225][T10600] param_sysfs_builtin_init+0x2c/0x40 [ 210.648587][T10600] do_one_initcall+0x248/0x880 [ 210.653351][T10600] do_initcall_level+0x157/0x210 [ 210.658294][T10600] do_initcalls+0x3f/0x80 [ 210.662629][T10600] kernel_init_freeable+0x435/0x5d0 [ 210.667913][T10600] kernel_init+0x1d/0x2b0 [ 210.672413][T10600] page_owner free stack trace missing [ 210.677770][T10600] [ 210.680094][T10600] Memory state around the buggy address: [ 210.685713][T10600] ffff88802c955a80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 210.693766][T10600] ffff88802c955b00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 210.701821][T10600] >ffff88802c955b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 210.709872][T10600] ^ [ 210.716015][T10600] ffff88802c955c00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 210.724170][T10600] ffff88802c955c80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 210.732226][T10600] ================================================================== [ 210.758539][T10600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.765782][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.4.2079 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 210.778051][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.788118][T10600] Call Trace: [ 210.791407][T10600] [ 210.794340][T10600] dump_stack_lvl+0x241/0x360 [ 210.799020][T10600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.804214][T10600] ? __pfx__printk+0x10/0x10 [ 210.808802][T10600] ? preempt_schedule+0xe1/0xf0 [ 210.813654][T10600] ? vscnprintf+0x5d/0x90 [ 210.817986][T10600] panic+0x349/0x880 [ 210.821888][T10600] ? check_panic_on_warn+0x21/0xb0 [ 210.826998][T10600] ? __pfx_panic+0x10/0x10 [ 210.831501][T10600] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 210.837487][T10600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.843897][T10600] ? print_report+0x502/0x550 [ 210.848574][T10600] check_panic_on_warn+0x86/0xb0 [ 210.853512][T10600] ? squashfs_readahead+0x210c/0x2680 [ 210.859064][T10600] end_report+0x77/0x160 [ 210.863306][T10600] kasan_report+0x154/0x180 [ 210.867815][T10600] ? squashfs_readahead+0x210c/0x2680 [ 210.873188][T10600] squashfs_readahead+0x210c/0x2680 [ 210.878402][T10600] ? squashfs_readahead+0x6f0/0x2680 [ 210.883686][T10600] ? __pfx_squashfs_readahead+0x10/0x10 [ 210.889242][T10600] ? blk_start_plug+0x70/0x1b0 [ 210.894011][T10600] read_pages+0x17e/0x840 [ 210.898336][T10600] ? percpu_ref_put+0x19/0x180 [ 210.903108][T10600] ? __pfx_read_pages+0x10/0x10 [ 210.907952][T10600] ? filemap_add_folio+0x26d/0x650 [ 210.913061][T10600] ? __pfx_filemap_add_folio+0x10/0x10 [ 210.918610][T10600] page_cache_ra_unbounded+0x6ce/0x7f0 [ 210.924070][T10600] filemap_get_pages+0x543/0x2330 [ 210.929095][T10600] ? __lock_acquire+0x1384/0x2050 [ 210.934307][T10600] ? __pfx_filemap_get_pages+0x10/0x10 [ 210.939777][T10600] ? __pfx___might_resched+0x10/0x10 [ 210.945064][T10600] filemap_read+0x457/0xfa0 [ 210.949571][T10600] ? __pfx_lock_release+0x10/0x10 [ 210.956420][T10600] ? __pfx_filemap_read+0x10/0x10 [ 210.961451][T10600] ? __pfx_aa_file_perm+0x10/0x10 [ 210.966479][T10600] ? iov_iter_kvec+0x4e/0x180 [ 210.971155][T10600] __kernel_read+0x532/0x9f0 [ 210.975745][T10600] ? __pfx___kernel_read+0x10/0x10 [ 210.980860][T10600] ? end_current_label_crit_section+0x151/0x180 [ 210.987189][T10600] ? rw_verify_area+0x56a/0x700 [ 210.992031][T10600] ? kernel_read+0x1d/0x70 [ 210.996443][T10600] bprm_execve+0xa2b/0x1770 [ 211.000951][T10600] ? __pfx_bprm_execve+0x10/0x10 [ 211.005889][T10600] ? copy_string_kernel+0x1c9/0x1f0 [ 211.011084][T10600] do_execveat_common+0x55f/0x6f0 [ 211.016133][T10600] __x64_sys_execveat+0xc4/0xe0 [ 211.020990][T10600] do_syscall_64+0xf3/0x230 [ 211.025528][T10600] ? clear_bhb_loop+0x35/0x90 [ 211.030203][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.036096][T10600] RIP: 0033:0x7fa1fa179e79 [ 211.040508][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.060290][T10600] RSP: 002b:00007fa1f9ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 211.068805][T10600] RAX: ffffffffffffffda RBX: 00007fa1fa315f80 RCX: 00007fa1fa179e79 [ 211.076869][T10600] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 211.084923][T10600] RBP: 00007fa1fa1e7916 R08: 0000000000000000 R09: 0000000000000000 [ 211.092897][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.100953][T10600] R13: 0000000000000000 R14: 00007fa1fa315f80 R15: 00007ffef188e6a8 [ 211.108929][T10600] [ 211.112051][T10600] Kernel Offset: disabled [ 211.116363][T10600] Rebooting in 86400 seconds..