last executing test programs: 2m9.383210228s ago: executing program 0 (id=99): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) 2m9.073215629s ago: executing program 0 (id=111): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x2d, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2m8.213238695s ago: executing program 0 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m6.069476107s ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 2m6.027145038s ago: executing program 0 (id=117): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 2m5.64682869s ago: executing program 0 (id=122): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 2m5.569460861s ago: executing program 32 (id=122): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 2.926145233s ago: executing program 1 (id=1774): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$eJzs3Au8TtXWMPAx5pyLTdKT5JY55lg8yWWSJLkk5JIkSZIkJCRJkoTkllsSkpB7yD0kt9jJ/X6/J8mRJElISDK/n+q8zvl6z1ffe873ec+7x//3W3vPsdca45lrjb2fdfntvb9pN7By3SoVajMz/FPw109dASAFAPoAwDUAEAFA8SzFs1xan0Fj13/uRcS/1kNTr/QMxJUk/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf/TNum/EGnZlmk5r5Ul7S5//vm/+z+vluf//4bk/P8/1p/6SZP+p23S/7RN+p+2Sf/TNul/2ib9T9uk/2mb9F+ItOxKP3/+N1j+eqj+cNsrezyj/1LeFf3mE0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRZpwLlxkA+Ov4Ss9LCCGEEEIIIYQQ/zoh/ZWegRBCCCGEEEIIIf7fQwCjwUAE6SA9pEAGyAhXQSa4GjLDNZCAayELXAdZ4XrIBtkhB+SEXHAD5AYLBA4YYsgDeSEJN0I+uAnyQwEoCIXAQ2EoAjdDUbgFisGtUBxmLwS4HUpCKSgNZeAOKAt3QjkoDxXgLqgIlaAyVIG7oSrcA9XgXqgO90ENuB9qwgNQCx6E2vAQ1IGHoS48AvXgUagPj0EDaAiN/kv5L0EneBk6QxfoCt2gO7wCPaAn9ILe0Adehb7wGvSD16E/DICB8AYMgjdhMLwFQ2AoDIO3YTiMgJEwCkbDGBgL78A4GA8T4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCIsgFT6CxfAxLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu2B3+T3wCeyFT2EffAb74fP/y/yz8Pf57REQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jALJgFs2JWzIbZMAfmwFyYC3NjbiQkZGTMg3kwiUnMh/kwP+bHglgQPXosgkWwKN6CxbAYFsfiWAJLYEkshaWwDJbBslgWy2E5rHD7XACsiJWxMt6Nd+M9WA2rYXWsjjWwBtbEmlgLa2FtrI11sA7WxbpYD+thfayPDbABNsJG2BgbYxNsgs2wGTbH5tgCW2BLbImtsBW2xtbYBttgW2yL7bAdtscO2AFfwpfwZXwZu2BF1Q27Y3fsgT2wF/bG3vgq9sXX8DV8HfvjAByIb+Ab+CYOxjM4BIfiMByGZdUIHImjkNUYHItjcRyOwwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxEaZiKi7Gs7gEl+IyXI4rcCWuwNW4BlfjOlyP63AjbsTNuBm34lbcjttxJ+7E3bgbP8FP8FP8FPvjftyPB/AAHsSDeAgP4WE8jEfwyNarAPAYHsPjeBxP4Ek8hSfxNJ7GM3gWz+E5PI/n8QK+kOurOrsLrO0P6hKjjEqn0qkUlaIyqowqk8qkMqvMKqESKovKorKqrCqbyqZyqBwql8qlcqvcihQpVrHKo/KopEqqfCqfyq/yq4KqoPLKqyKqiCqqiqpiqpgqrm5TJdTtqqQqpZr6MqqMKqua+XKqvKqgKqiKqpKqrKqoKqqqqqqqqWqquqquaqgaqqZ6QNVS3bAXPqQudaauGoD11ECsrx5TDVRD9SY+rhqrwdhENVXN1JNqKA7BFqqxb6meUa3USGytnlOj8HnVVo3BdupF1V51UB3VS6qTauI7qy5qInZT3dUU7KF6ql6qt5qBldSljlVWr6v+aoAaqN5Q8/FNNVi9pYaooWqYelsNVyPUSDVKjVZj1Fj1jhqnxqsJ6l01UU1Sk9UUNVVNU9PVe2qGmqlmqffVbPWBmqPmqnlqvlqgPlQL1SKVqj5Si9XHaolaqpap5WqFWqlWqdVqjVqr1qn1aoPaqDapzWqL2qq2qe1qh9qpdqndao/6RO1Vn6p96jO1X32uDqi/qIPqC3VIfakOq6/UEfW1Oqq+UcfUt+q46qJOqJPqlPpenVY/qDPqrDqnflTn1U/qgvpZXVRBgUattNZGRzqdTq9TdAadUV+lM+mrdWZ9jU7oa3UWfZ3Oqq/X2XR2nUPn1Ln0DTq3tpq006xjnUfn1Ul9o86nb9L5dQFdUBfSXhfWRfTNuqi+RRfTt+ri+jZdQt+uS+pSurQuo+/QZfWdupwuryvou3RFXUlX1lX03bqqvkdX0/fq6vo+XUPfr2vqB3Qt/aCurR/SdfTDuq5+RNfTj+r6Ovrt/PW4bqyf0E10U91MP6mb66d0C/20bqmf0a30s7q1fk630c/rtvoF3U6/qNvrDrqj/llf1EF31l10V91Nd9ev6B66p+6le+s++lXdV7+m++nXdX89QA/Ub+hB+k09WL+lh+iheph+Ww/XI/RIPUqP1mP0WP2OHqfH6wn6XT1RT9KT9RQ9VU/TvX6rNOtP5I//T/L7/fLqm/UWvVVv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+ov9en9Q/6jD6rz+of9Xl9Xl/47RiAQaOMNsZEJp1Jb1JMBpPRXGUymatNZnONSZhrTRZznclqrjfZTHaTw+Q0ucwNJrexhowzbGKTx+Q1SXOjyWduMvlNAVPQFDLeFDZFzM3/dP4/mN/yyb823zQyjUxj09g0MU1MM9PMNDfNTQvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U1H09F0Mp1MZwTT1XQ13c0rpofpaXqZ3qaPedX0NX1NP9PP9Df9zUAz0Awyg8xgM9gMMUOMAYDhZrgZaUaa0Wa0GWvGmnFmnJlgJpiJZqKZbCabqWaqmW6mmxlmhpllZpnZZraZY+aYeWaeWWAWmIVmoUk1qWaxWWyWmKVmqVlulpuVZqVZbVabtWatWW/Wm41mo1litpgtZpvZZnaYHWaX2WX2mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmlDllTpvT5ow5Y86Zc+a8OW8umAvmorl46bIvUpGKTGSidFG6KCVKiTJGGaNMUaYoc5Q5SkSJKEuUJcoaXR9li7JHOaKcUa7ohih3ZCOKXMRRHOWJ8kbJ6MYoX3RTlD8qEBWMCkU+KhwViW6Oika3RMWiW6Pi0W1Riej2qGRUKiodlYnuiMpGd0blovJRheiuqGJUKaocVYnujqpG90TVonuj6tF9UY3o/qhm9EBUK3owqh09FNWJHo7qRo9E9aJHo/rRY1GDqGHU6F9aP4Qz2Z/wnW0Xmx662e72FdvD9rS9bG/bx75q+9rXbD/7uu1vB9iB9g07yL5pB9u37BA71A6zb9vhdoQdaUfZ0XaMHWvfsePseDvBvmsn2kl2sp1ip9ppdrp9z86wM+0s+76dbT+wc+xcO8/Otwvsh3ahXWRT7Ud2sf3YLrFL7TK73K6wK+0qu9qusWvtOrvebrAb7Sa72W6xW+02u93usDvtLrvb7rGf2L32U7vPfmb328/tAZvy2/vjl/aw/coesV/bo/Ybe8x+a4/b7+wJe9Kest/b0/YHe8aetefsj/a8/clesD/bizZcuri/dHonQ4bSUTpKoRTKSBkpE2WizJSZEpSgLJSFslJWykbZKAfloFyUi3JTbrqEiSkP5aEkJSkf5aP8lJ8KUkHy5KkIFaGiVJSKUTEqTsWpBJWgklSSSlNpuoPuoDvpTipP5ekuuosqUSWqQlWoKlWlalSNqlN1qkE1qCbVpFpUi2pTbapDdagu1aV6VI/qU/2zv/0KMzWmxtSEmlAzakbNqTm1oBbUklpSK2pFrak1taE21JbaUjtqR+2pPXWkjtSJOlFn6kxdqSt1p+7Ug3pQL+pFfagP9aW+1I/6UX/qTwNpIA2iQTSYBtMQGkrD6G0aTiNoJI2i0TSGxtJYGkfjaAJNoIk0kSbTZJpKU2k6TacZNINm0SyaTbNpDs2heTSPFtACWkgLKZVSaTEtpiW0hJbRMlpBK2gVraI1tIbW0TraQBtoE22iLbSFttE22kE7aBftoj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6DgdpxN0gk7RKTpNp+kMnaFzdI7O0090gX6mixQoxWVwGd1VLpO72mV217j/Pc7hcrpc7gaX21mXzWX/u5icc/ldAVfQFXLeFXZF3M2/i0u6Uq60K+PucGXdna7c7+Kqa3b82kV3n6vi7nZV3T2umrvXVXf3uRruflfTPeJquUddbfeYq+MaurruEVfPPerqu8dcA9fQNXdPuRbuadfSPeNauWd/Fy90i9wat9atc+vdXvepO+d+dEfdN+68+8l1dl1cH/eq6+tec/3c666/G/C7eJh72w13I9xIN8qNdmN+F092U1wGN81Nd++5GW7mL/HUv4kXuA/dbJfq5ri5bp6b/0t8aU6p7iO32H3slrilbplb7la4lW6VW/0fc13uNrpNbrPb4z5x29x2t8PtdLvc7l/iS/uxz33m9rvP3RH3tTvovnCH3DF32H31S3xp/465b91x95074U66U+57d9r94M64s7/s/6V9/9797C664ICRFWs2HHE6Ts8pnIEz8lWcia/mzHwNJ/hazsLXcVa+nrNxds7BOTkX38C52TKxY+aY83BeTvKNnI9v4vxcgAtyIfZcmIvwzVyUb+FifCsX59u4BN/OJbkUl+YyfAeX5Tu5HJfnCnwXV+RKXJmr8N1cle/hanwvV+f7uAbfzzX5Aa7FD3Jtfojr8MNclx/hevwo1+fHuAE35Eb8ODfmJ7gJN+Vm/CQ356e4BT/NLfkZbsXPcmt+jtvw89yWX+B2/CK35w7ckV/iTvwyd+Yu3JW7cXd+hXtwT+7FvbkPv8p9+TXux69zfx7AA/kNHsRv8mB+i4fwUB7Gb/NwHsEjeRSP5jE8lt/hcTyeJ/C7PJEn8WSewlN5Gk/n93gGz+RZ/D7P5g94Ds/leTyfF/CHvJAXcSp/xIv5Y17CS3kZL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJbeRtvZ+SdvIt38x7+hPfyp7yPP+P9/Dkf4L/wQf6CD/GXfJi/4iP8NR/lb/gYf8vH+Ts+wSf5FH/Pp/kHPsNn+Rz/yOf5J77AP/NFDgwxxirWsYmjOF2cPk6JM8QZ46viTPHVceb4mjgRXxtnia+Ls8bXx9ni7HGOOGecK74hzh3bmGIXcxzHeeK8cTK+Mc4X3xTnjwvEBeNCsY8Lx0Xim+Oi8S1xsfjWuHh8W1wivj0uGZeKH7mvTHxHXDa+My4Xl48rxHfFFeNKceW4Snx3XDW+J64W3xtXj++Li8X3xzXjB+Ja8YNx7fihuE78cFw3fiSuFz8a148fixvEDeNG8eNx4/iJuEncNG4WPxk3j5+KW8RPxy3jZ+JW8bN/uL5r3C3uHr8SvxKHcK+el5yfXJD8MLkwuSiZmvwouTj5cXJJcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzMoQq6cGjV1574yOfzqf3KT6Dz+iv8pn81T6zv8Yn/LU+i7/OZ/XX+2w+u8/hc/pc/gaf21tP3nn2sc/j8/qkv9Hn8zf5/L6AL+gLee8L+yK+oW/kG/nG/gnfxDf1zfyT/kn/lH/KP+2f9s/4Vv5Z39o/59v4531b/4J/wb/o2/sOvqN/yXfyL4fgu/iuvqvv7rv7Hr6H7+V7+T6+j+/r+/p+vp/v7/v7gX6gH+QH+cF+sB/ih/hhfpgf7of7kX6kH+1H+7F+rB/nx/kJfoKf6Cf6yX6yn+qn+ul+up/hZ/hZfpafnX+2n+Pn+Hl+nl/gF/iFfqFP9al+sV/sl/glfplf5lf4FX6VX+XX+DV+nV/nN/gNfpPf5Lf4LX6b3+Z3+B1+l9/l9/g9fq/f6/f5fX6/3+8P+APngj/oD/kv/WH/lT/iv/ZH/Tf+mP/WH/ff+RP+pD/lv/en/Q/+jD/rz/kf/Xn/k7/gf/YXffBjE+8kxiXGJyYk3k1MTExKTE5MSUxNTEtMT7yXmJGYmZiVeD8xO/FBYk5ibmJeYn5iQeLDxMLEokRq4qPE4sTHiSWJpYllieWJFYmViRBu2BaHPCFvSIYbQ75wU8gfCoSCoVDwoXAoEm4ORcMtoVi4NRQPt4US4fZQMpQKpcOjoX54LDQIDUOj8HhoHJ4ITULT0Cw8GZqHp0KL8HRoGZ4JrcKzoXV4LrQJz4e24YXQLrwY2ocOoWN4KXQKL4fOQYeuoVvoHl4JPULP0Cv0Dn3Cq6FveC30C6+H/mFAGBjeCIPCm2FweCsMCUPDsPB2GB5GhJFhVBgdxoSx4Z0wLowPE8K7YWKYFCaHKWFqmBamh/fCjDAzzArvh9nhgzAnzA3zwvywIHwYFoZFITV8FBaHj8OSsDQsC8sDpKwMq8LqsCasDevC+rAhbAybwuawJWwN28L2sCPsDLvC7rAnfBL2hk/DvvBZ2B8+DwfCX8LB8EU4FL4Mh8NX4Uj4OhwN34Rj4dtwPHwXToST4VT4PpwOP4Qz4Ww4F34M58NP4UL4OVyUv1kTQgghhPhTxv/B+m5/F6n/+Kh++0p3ALh6e87Df7uVBoAN2X4d91S5micA4Jku7R7661KxYteuXX/bdomGKO9cAEhczk8Hl+Ol0AyegpbQFIr+p/PrqTqc5z+on7wNIOPf5KTA5fhy/Vv+Qf0Rs/+w/lyA/Hkv52SAy/Hl+sV+Vzv6pX72xn9QP8MXYwGa/E1eJrgcX65fBJ6AZ6Hl320phBBCCCGEEEL8qqcq3eaP7m8v3Z/nMpdz0sPl+I/uz4UQQgghhBBCCHHlPd+h49OPt2zZtM0/GJT/x6tkkFYG6f57TOPffgDw32Iaf25wpd+ZhBBCCCGEEP9qly/6r/RMhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKItOv/x78Tu9L7KIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxp/ysAAP//OOA13Q==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xc32) 2.606733445s ago: executing program 1 (id=1783): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000021c0)={0x71, 0x0}) 2.551060885s ago: executing program 4 (id=1785): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) 2.442345216s ago: executing program 1 (id=1788): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xec02, 0x8, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001580)=@IORING_OP_ACCEPT={0xd, 0x4, 0x7, r0, 0x0}) io_uring_enter(r0, 0x1a01, 0x0, 0x0, 0x0, 0x0) 2.405910416s ago: executing program 1 (id=1790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c40300020009210010000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x20, 0x2, 0x2, {0x2, 0xd}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 2.246824217s ago: executing program 4 (id=1792): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) 2.130870668s ago: executing program 5 (id=1796): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.022835518s ago: executing program 4 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x2, 0x0) 1.967718449s ago: executing program 4 (id=1800): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000810c0000fdffffff00000000", @ANYRES64, @ANYBLOB="1a85be02545b2426cd301fd5", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x40008c4) 1.82183572s ago: executing program 4 (id=1804): r0 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000005280)='macvtap0\x00', 0x10) connect$caif(r0, &(0x7f0000005b00)=@rfm={0x25, 0x1, "045b49844c0f565fc9e51537fe276ead"}, 0x18) 1.75026828s ago: executing program 2 (id=1806): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0xfffffd7d}, &(0x7f00000001c0)=[{0x0, 0x2c}], 0x1}}], 0x48, 0x20000001}, 0x0) 1.638111421s ago: executing program 2 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000001d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.637712201s ago: executing program 4 (id=1808): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x7, '\x00\x00'}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) 1.618789531s ago: executing program 5 (id=1809): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x2000c081}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_setup(0x1581, &(0x7f0000000000)={0x0, 0x6adf, 0x40, 0x2, 0x3cd}) 1.566242331s ago: executing program 2 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1f, &(0x7f0000000040)={[{@flush_merge}, {@noflush_merge}, {@acl}, {@compress_cache}, {@inline_xattr}, {@compress_cache}, {@noinline_xattr}, {@nodiscard}, {@noacl}, {@background_gc_off}, {@fsync_mode_strict}, {@atgc}, {@gc_merge}, {@fault_type={'fault_type', 0x3d, 0x2}}]}, 0xfd, 0x551b, &(0x7f00000079c0)="$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") 1.460188402s ago: executing program 3 (id=1813): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697"], 0xfe, 0x6228, &(0x7f0000012fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x2, 0x8350}}, 0x6942) 1.210782403s ago: executing program 5 (id=1814): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.210369063s ago: executing program 5 (id=1815): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x9, 0x9, 0x7, 0x83, 0x3}, 0xc) 1.046422594s ago: executing program 5 (id=1816): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 960.630145ms ago: executing program 2 (id=1817): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 765.816876ms ago: executing program 3 (id=1818): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 358.378058ms ago: executing program 2 (id=1819): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb6, &(0x7f0000000140), &(0x7f0000000080)=0x4) 357.630358ms ago: executing program 3 (id=1820): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 291.179679ms ago: executing program 1 (id=1821): unshare(0x2c020400) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) shutdown(r0, 0x7ffffffe) 205.061069ms ago: executing program 2 (id=1822): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 204.741769ms ago: executing program 3 (id=1823): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$describe(0x1d, r1, &(0x7f0000000480)=""/123, 0x7b) 189.315879ms ago: executing program 1 (id=1824): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 123.75315ms ago: executing program 3 (id=1825): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5dcb4641) 30.79515ms ago: executing program 3 (id=1826): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x3c, 0x0}, 0x10) 0s ago: executing program 5 (id=1827): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x12, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): or's value: 2 [ 128.560784][ T6497] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 128.570256][ T6534] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.583848][ T6497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.598164][ T6497] usb 4-1: config 0 descriptor?? [ 128.603417][ T6518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.734 (6518) [ 128.663468][ T6518] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 128.704025][ T6518] BTRFS info (device loop5): using free space tree [ 128.733208][ T6518] BTRFS info (device loop5): has skinny extents [ 129.001617][ T6561] loop4: detected capacity change from 0 to 4096 [ 129.057206][ T6518] BTRFS info (device loop5): enabling ssd optimizations [ 129.074459][ T6561] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 129.110131][ T6497] hid-multitouch 0003:0EEF:72D0.0010: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 129.172776][ T6518] CIFS mount error: No usable UNC path provided in device string! [ 129.172776][ T6518] [ 129.201826][ T6518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.353455][ T4893] usb 4-1: USB disconnect, device number 10 [ 129.379972][ T6561] overlayfs: upper fs does not support tmpfile. [ 129.412161][ T6561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.463528][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 129.493371][ T6561] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 129.535838][ T6561] overlayfs: failed to verify upper root origin [ 129.573179][ T6580] loop2: detected capacity change from 0 to 256 [ 129.653062][ T6580] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.670959][ T6580] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 129.713452][ T6580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 129.908739][ T1214] ntfs3: loop4: ino=1b, Internal error [ 129.935894][ T1214] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 129.965657][ T4188] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 129.977139][ T4188] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 129.983697][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 130.272612][ T6598] loop2: detected capacity change from 0 to 4096 [ 130.339017][ T6598] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 130.426471][ T4893] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 130.488159][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 130.515621][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 130.538203][ T6617] netlink: 'syz.4.772': attribute type 12 has an invalid length. [ 130.665732][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 130.715518][ T6623] loop3: detected capacity change from 0 to 1024 [ 130.786829][ T4893] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 130.910809][ T4893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 130.936398][ T6632] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 130.950929][ T4893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 131.007924][ T4893] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 131.047763][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.066108][ T6609] loop1: detected capacity change from 0 to 32768 [ 131.067381][ T6630] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 131.092411][ T4893] usb 6-1: config 0 descriptor?? [ 131.170387][ T6640] netlink: 52 bytes leftover after parsing attributes in process `syz.4.781'. [ 131.194803][ T6609] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.280873][ T6643] loop3: detected capacity change from 0 to 256 [ 131.322755][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 131.336236][ T6643] FAT-fs (loop3): Directory bread(block 64) failed [ 131.374913][ T6643] FAT-fs (loop3): Directory bread(block 65) failed [ 131.418617][ T6643] FAT-fs (loop3): Directory bread(block 66) failed [ 131.425191][ T6643] FAT-fs (loop3): Directory bread(block 67) failed [ 131.455622][ T6643] FAT-fs (loop3): Directory bread(block 68) failed [ 131.472770][ T6643] FAT-fs (loop3): Directory bread(block 69) failed [ 131.494144][ T6643] FAT-fs (loop3): Directory bread(block 70) failed [ 131.519784][ T6643] FAT-fs (loop3): Directory bread(block 71) failed [ 131.529949][ T6643] FAT-fs (loop3): Directory bread(block 72) failed [ 131.551096][ T6643] FAT-fs (loop3): Directory bread(block 73) failed [ 131.577393][ T4893] logitech 0003:046D:C295.0011: item fetching failed at offset 4/5 [ 131.594837][ T4893] logitech 0003:046D:C295.0011: parse failed [ 131.622344][ T4893] logitech: probe of 0003:046D:C295.0011 failed with error -22 [ 131.797814][ T4291] usb 6-1: USB disconnect, device number 7 [ 131.948478][ T6645] loop1: detected capacity change from 0 to 32768 [ 132.042648][ T6645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.782 (6645) [ 132.100675][ T6645] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 132.140476][ T6645] BTRFS info (device loop1): turning on flush-on-commit [ 132.171872][ T6645] BTRFS info (device loop1): max_inline at 0 [ 132.208641][ T6645] BTRFS info (device loop1): enabling disk space caching [ 132.247895][ T6645] BTRFS info (device loop1): setting nodatasum [ 132.254239][ T6645] BTRFS info (device loop1): turning off barriers [ 132.262867][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 132.293876][ T6645] BTRFS info (device loop1): disabling tree log [ 132.314141][ T6645] BTRFS info (device loop1): enabling ssd optimizations [ 132.334388][ T6645] BTRFS info (device loop1): force clearing of disk cache [ 132.357856][ T6645] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.365529][ T4893] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 132.409090][ T6645] BTRFS info (device loop1): use zstd compression, level 3 [ 132.446001][ T6645] BTRFS info (device loop1): max_inline at 0 [ 132.452037][ T6645] BTRFS info (device loop1): disk space caching is enabled [ 132.466223][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 132.495559][ T6645] BTRFS info (device loop1): has skinny extents [ 132.512899][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 132.550873][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 132.560132][ T6669] loop5: detected capacity change from 0 to 512 [ 132.705360][ T6669] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.737342][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743770][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765836][ T4893] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 132.795314][ T6645] BTRFS info (device loop1): clearing free space tree [ 132.802496][ T4893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.806995][ T6645] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.811452][ T6669] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.831414][ T6645] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.903218][ T6645] BTRFS info (device loop1): checking UUID tree [ 132.917896][ T4893] usb 3-1: config 0 descriptor?? [ 132.967444][ T4893] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 133.037377][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.797'. [ 133.110880][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.797'. [ 133.145807][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.797'. [ 133.150048][ T6659] loop4: detected capacity change from 0 to 40427 [ 133.291387][ T6659] F2FS-fs (loop4): invalid crc value [ 133.376020][ T6659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.458839][ T6706] openvswitch: netlink: Actions may not be safe on all matching packets [ 133.554311][ T6659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 133.625546][ T4893] gp8psk: usb out operation failed. [ 133.630874][ T4893] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 133.664957][ T4893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 133.712860][ T6659] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 133.735725][ T4893] usb 3-1: USB disconnect, device number 9 [ 134.008300][ T6712] loop5: detected capacity change from 0 to 4096 [ 134.117263][ T6712] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 134.220907][ T6722] sch_fq: defrate 4294967295 ignored. [ 134.454504][ T6737] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 134.665716][ T6749] loop1: detected capacity change from 0 to 64 [ 134.683463][ T6750] tipc: Started in network mode [ 134.703758][ T6750] tipc: Node identity 00000000000040120000000000000001, cluster identity 4711 [ 134.714285][ T6750] tipc: Enabling of bearer rejected, failed to enable media [ 134.786301][ T6756] loop3: detected capacity change from 0 to 256 [ 134.837740][ T374] attempt to access beyond end of device [ 134.837740][ T374] loop1: rw=1, want=268435470, limit=64 [ 134.884893][ T6756] FAT-fs (loop3): Directory bread(block 64) failed [ 134.927915][ T374] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 134.929123][ T6763] sch_fq: defrate 4294967295 ignored. [ 134.946942][ T6756] FAT-fs (loop3): Directory bread(block 65) failed [ 134.976763][ T6756] FAT-fs (loop3): Directory bread(block 66) failed [ 134.984102][ T6756] FAT-fs (loop3): Directory bread(block 67) failed [ 135.000200][ T6756] FAT-fs (loop3): Directory bread(block 68) failed [ 135.045710][ T6756] FAT-fs (loop3): Directory bread(block 69) failed [ 135.052540][ T6756] FAT-fs (loop3): Directory bread(block 70) failed [ 135.094550][ T6756] FAT-fs (loop3): Directory bread(block 71) failed [ 135.139787][ T6756] FAT-fs (loop3): Directory bread(block 72) failed [ 135.173813][ T6756] FAT-fs (loop3): Directory bread(block 73) failed [ 135.265704][ T6779] bridge_slave_0: default FDB implementation only supports local addresses [ 135.482312][ T6790] loop5: detected capacity change from 0 to 64 [ 135.613923][ T6793] tipc: Enabling of bearer rejected, failed to enable media [ 135.729652][ T374] attempt to access beyond end of device [ 135.729652][ T374] loop5: rw=1, want=268435470, limit=64 [ 135.786167][ T374] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 135.875006][ T6812] __nla_validate_parse: 2 callbacks suppressed [ 135.875024][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'. [ 135.902933][ T6815] loop2: detected capacity change from 0 to 512 [ 135.925162][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'. [ 135.994374][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'. [ 136.028559][ T6815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.124572][ T6815] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.843: bad orphan inode 131083 [ 136.167253][ T6815] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 136.467845][ T6844] usb usb8: usbfs: process 6844 (syz.1.853) did not claim interface 5 before use [ 136.972397][ T6866] loop3: detected capacity change from 0 to 64 [ 137.248089][ T6833] loop4: detected capacity change from 0 to 32768 [ 137.446523][ T6833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.585556][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 137.612901][ T6887] loop5: detected capacity change from 0 to 256 [ 137.649363][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 137.873863][ T6860] loop2: detected capacity change from 0 to 40427 [ 138.014567][ T6860] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 138.072924][ T6860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.213876][ T6913] loop3: detected capacity change from 0 to 512 [ 138.244768][ T6911] loop1: detected capacity change from 0 to 1024 [ 138.253109][ T6860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.381620][ T6922] netem: change failed [ 138.463654][ T6913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.485667][ T6913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.488213][ T6860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.540140][ T6860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.577516][ T6913] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.877: bad orphan inode 131083 [ 138.680239][ T6913] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 138.803862][ T6938] loop1: detected capacity change from 0 to 512 [ 138.918168][ T4187] attempt to access beyond end of device [ 138.918168][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 138.950078][ T6938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.019950][ T6938] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.882: bad orphan inode 131083 [ 139.084262][ T6913] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 139.122476][ T6938] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 139.642319][ T6970] loop2: detected capacity change from 0 to 64 [ 139.794021][ T6970] hfs: small file entry [ 140.541531][ T7016] mkiss: ax0: crc mode is auto. [ 140.725784][ T7021] loop2: detected capacity change from 0 to 1024 [ 140.741437][ T6424] Bluetooth: hci0: command 0x0405 tx timeout [ 140.755539][ T4429] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 140.809104][ T7021] EXT4-fs (loop2): inline encryption not supported [ 140.899277][ T7030] loop1: detected capacity change from 0 to 1024 [ 140.903627][ T7021] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.912: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.963740][ T6980] loop4: detected capacity change from 0 to 32768 [ 141.019289][ T7021] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 141.035981][ T7021] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.912: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.070444][ T7021] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 141.093990][ T6980] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 141.128933][ T7021] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.912: Failed to acquire dquot type 0 [ 141.141537][ T7021] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 141.155737][ T4429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.184308][ T7021] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.912: mark_inode_dirty error [ 141.196153][ T4429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.209388][ T7021] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 141.233381][ T7021] EXT4-fs (loop2): 1 orphan inode deleted [ 141.233586][ T6980] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 141.246215][ T7021] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 141.287466][ T4429] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 141.300841][ T6980] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 141.312961][ T4429] usb 6-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 141.337478][ T4429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.345927][ T6980] OCFS2: File system is now read-only. [ 141.351680][ T6980] (syz.4.896,6980,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 141.364899][ T4429] usb 6-1: config 0 descriptor?? [ 141.374170][ T1214] hfsplus: b-tree write err: -5, ino 4 [ 141.380091][ T9] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.404554][ T7021] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.912: Invalid inode table block 1 in block_group 0 [ 141.419947][ T6980] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 141.457309][ T6980] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 141.505746][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 141.515508][ T7021] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 141.520879][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:0: Failed to release dquot type 0 [ 141.543208][ T6980] (syz.4.896,6980,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 141.562142][ T6980] (syz.4.896,6980,0):ocfs2_mknod:502 ERROR: status = -30 [ 141.585206][ T6980] (syz.4.896,6980,0):ocfs2_create:676 ERROR: status = -30 [ 141.609959][ T7055] netem: change failed [ 141.652814][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 141.693340][ T4187] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 141.778486][ T4187] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 141.825641][ T4187] EXT4-fs error (device loop2): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 141.888468][ T4429] hid-generic 0003:046D:E104.0012: unbalanced collection at end of report description [ 141.911227][ T4429] hid-generic: probe of 0003:046D:E104.0012 failed with error -22 [ 141.920159][ T7067] loop1: detected capacity change from 0 to 512 [ 142.011979][ T7074] loop4: detected capacity change from 0 to 1024 [ 142.039412][ T7067] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.057590][ T7067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.113651][ T7067] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.928: bad orphan inode 131083 [ 142.137668][ T4725] hfsplus: b-tree write err: -5, ino 4 [ 142.145877][ T4233] usb 6-1: USB disconnect, device number 8 [ 142.218262][ T7067] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 142.421831][ T7085] mkiss: ax0: crc mode is auto. [ 142.430347][ T7067] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 142.457427][ T7092] QAT: Invalid ioctl 1075883590 [ 142.471807][ T7092] QAT: Invalid ioctl 1075883590 [ 142.478610][ T7092] QAT: Invalid ioctl 1075883590 [ 142.493061][ T7092] QAT: Invalid ioctl 1075883590 [ 142.507718][ T7092] QAT: Invalid ioctl 1075883590 [ 142.514445][ T7092] QAT: Invalid ioctl 1075883590 [ 142.519824][ T7092] QAT: Invalid ioctl 1075883590 [ 142.525172][ T7092] QAT: Invalid ioctl 1075883590 [ 142.536063][ T7092] QAT: Invalid ioctl 1075883590 [ 142.541413][ T7092] QAT: Invalid ioctl 1075883590 [ 142.562661][ T7094] loop3: detected capacity change from 0 to 256 [ 142.609468][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 142.620359][ T7094] exfat: Deprecated parameter 'namecase' [ 142.636253][ T7094] exfat: Deprecated parameter 'utf8' [ 142.654290][ T7094] exfat: Deprecated parameter 'utf8' [ 142.717307][ T7094] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 142.967247][ T7109] loop5: detected capacity change from 0 to 2048 [ 142.972565][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 143.025630][ T4429] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 143.054125][ T7109] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.098385][ T7119] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.219053][ T7125] loop4: detected capacity change from 0 to 256 [ 143.226949][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.950'. [ 143.231560][ T7125] exfat: Deprecated parameter 'namecase' [ 143.246139][ T7125] exfat: Deprecated parameter 'utf8' [ 143.316566][ T7125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 143.386768][ T26] audit: type=1800 audit(1761751393.639:10): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.951" name="file1" dev="loop4" ino=1048723 res=0 errno=0 [ 143.425846][ T4429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.465532][ T4429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.511184][ T4429] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 143.522619][ T7134] loop5: detected capacity change from 0 to 64 [ 143.533292][ T4429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.575887][ T4429] usb 3-1: config 0 descriptor?? [ 143.667895][ T7139] sctp: [Deprecated]: syz.4.957 (pid 7139) Use of int in maxseg socket option. [ 143.667895][ T7139] Use struct sctp_assoc_value instead [ 144.036766][ T7128] loop3: detected capacity change from 0 to 32768 [ 144.056707][ T4429] waltop 0003:172F:0032.0013: unknown main item tag 0x0 [ 144.074159][ T4429] waltop 0003:172F:0032.0013: unknown main item tag 0x0 [ 144.081765][ T4429] waltop 0003:172F:0032.0013: unknown main item tag 0x0 [ 144.095567][ T4429] waltop 0003:172F:0032.0013: unknown main item tag 0x0 [ 144.114510][ T4429] waltop 0003:172F:0032.0013: unknown main item tag 0x0 [ 144.141303][ T7128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.151711][ T4429] waltop 0003:172F:0032.0013: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 144.268762][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 144.278124][ T6424] usb 3-1: USB disconnect, device number 10 [ 144.308983][ T7160] fido_id[7160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 144.325772][ T4429] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.391626][ T7149] loop1: detected capacity change from 0 to 32768 [ 144.462850][ T7149] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.514430][ T7149] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 144.537187][ T7149] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.553893][ T7149] OCFS2: File system is now read-only. [ 144.560341][ T7149] (syz.1.963,7149,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 144.578568][ T7149] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 144.595578][ T7149] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.611574][ T7149] (syz.1.963,7149,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 144.622534][ T7149] (syz.1.963,7149,0):ocfs2_mknod:502 ERROR: status = -30 [ 144.629817][ T7149] (syz.1.963,7149,0):ocfs2_create:676 ERROR: status = -30 [ 144.689157][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 144.763523][ T4429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.779620][ T4429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.885734][ T4429] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.900778][ T4429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.936327][ T4429] usb 6-1: SerialNumber: syz [ 145.108778][ T7183] mkiss: ax0: crc mode is auto. [ 145.235042][ T4429] usb 6-1: 0:2 : does not exist [ 145.300242][ T4429] usb 6-1: USB disconnect, device number 9 [ 145.323860][ T7177] loop1: detected capacity change from 0 to 32768 [ 145.369616][ T7190] loop2: detected capacity change from 0 to 4096 [ 145.574262][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.106055][ T7221] loop3: detected capacity change from 0 to 64 [ 146.178514][ T7223] loop5: detected capacity change from 0 to 1024 [ 146.366152][ T7223] hfsplus: hfsplus: Invalid key length: 30819 [ 146.378840][ T7200] loop2: detected capacity change from 0 to 32768 [ 146.515611][ T7234] loop5: detected capacity change from 0 to 64 [ 146.568542][ T7200] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 146.571764][ T7243] loop4: detected capacity change from 0 to 128 [ 146.631486][ T7243] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.668297][ T7200] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 146.699956][ T7243] hpfs: filesystem error: improperly stopped [ 146.715543][ T7243] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 146.735528][ T7200] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.755719][ T7243] hpfs: You really don't want any checks? You are crazy... [ 146.763187][ T7243] hpfs: hpfs_map_sector(): read error [ 146.780577][ T7200] OCFS2: File system is now read-only. [ 146.800396][ T7200] (syz.2.983,7200,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 146.826325][ T7243] hpfs: code page support is disabled [ 146.839014][ T7243] hpfs: hpfs_map_4sectors(): unaligned read [ 146.890778][ T7200] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 146.932742][ T7243] hpfs: hpfs_map_4sectors(): unaligned read [ 146.987067][ T7243] hpfs: filesystem error: unable to find root dir [ 147.035470][ T7200] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 147.053654][ T7243] hpfs: hpfs_map_4sectors(): unaligned read [ 147.074358][ T7243] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 147.096620][ T7200] (syz.2.983,7200,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 147.104942][ T7200] (syz.2.983,7200,0):ocfs2_mknod:502 ERROR: status = -30 [ 147.171368][ T7200] (syz.2.983,7200,0):ocfs2_create:676 ERROR: status = -30 [ 147.236670][ T7257] loop3: detected capacity change from 0 to 4096 [ 147.291324][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 147.306738][ T7257] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.432686][ T7245] loop1: detected capacity change from 0 to 32768 [ 147.443218][ T7257] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 147.499039][ T7257] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.516483][ T7245] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.573309][ T7257] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 147.634414][ T7265] loop2: detected capacity change from 0 to 4096 [ 147.636716][ T7257] ntfs: volume version 3.1. [ 147.656830][ T7265] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 147.686376][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 147.749139][ T7257] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 147.784813][ T7265] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.938742][ T5051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 148.145692][ T4429] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 148.377239][ T7298] loop4: detected capacity change from 0 to 64 [ 148.396078][ T7300] team0: Device vxcan3 is of different type [ 148.525585][ T4433] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.565862][ T7302] program syz.4.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.602772][ T7304] loop2: detected capacity change from 0 to 1764 [ 148.608540][ T4429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.640942][ T4429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.661394][ T4429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64, setting to 8 [ 148.683004][ T4429] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 148.714239][ T4429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.747795][ T4429] usb 6-1: config 0 descriptor?? [ 148.750897][ T7304] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 148.765920][ T7271] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.766625][ T7304] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 148.822603][ T7296] loop3: detected capacity change from 0 to 32768 [ 148.965712][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.007814][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.024833][ T4433] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 149.044553][ T4433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.073169][ T4433] usb 2-1: config 0 descriptor?? [ 149.234604][ T4429] smartjoyplus 0003:6666:8802.0014: hidraw0: USB HID v4.00 Device [HID 6666:8802] on usb-dummy_hcd.5-1/input0 [ 149.273321][ T4429] smartjoyplus 0003:6666:8802.0014: no output reports found [ 149.368191][ T1111] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.435018][ T7330] loop2: detected capacity change from 0 to 128 [ 149.446797][ T6424] usb 6-1: USB disconnect, device number 10 [ 149.474278][ T7330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 149.493804][ T7330] System zones: 1-3, 19-19, 35-36 [ 149.516654][ T7330] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 149.534336][ T7330] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.578523][ T4433] waltop 0003:172F:0032.0015: unknown main item tag 0x0 [ 149.606248][ T4433] waltop 0003:172F:0032.0015: unknown main item tag 0x0 [ 149.615784][ T4433] waltop 0003:172F:0032.0015: unknown main item tag 0x0 [ 149.624221][ T4433] waltop 0003:172F:0032.0015: unknown main item tag 0x0 [ 149.632547][ T4433] waltop 0003:172F:0032.0015: unknown main item tag 0x0 [ 149.641975][ T4433] waltop 0003:172F:0032.0015: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 149.688236][ T1111] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 149.803365][ T4430] usb 2-1: USB disconnect, device number 6 [ 149.815745][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.832776][ T7334] fido_id[7334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.853418][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.872328][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.932224][ T7345] loop2: detected capacity change from 0 to 8 [ 149.957648][ T7347] loop3: detected capacity change from 0 to 64 [ 149.975931][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.985636][ T7345] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 150.004113][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.031858][ T4199] udevd[4199]: incorrect cramfs checksum on /dev/loop2 [ 150.065665][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.073983][ T7345] cramfs: Error -3 while decompressing! [ 150.088500][ T7345] cramfs: ffffffff961ed038(16)->ffff888067316000(4096) [ 150.106127][ T7345] cramfs: Error -3 while decompressing! [ 150.126798][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop2 [ 150.147246][ T7351] loop3: detected capacity change from 0 to 128 [ 150.152761][ T7345] cramfs: ffffffff961ed038(16)->ffff888067316000(4096) [ 150.161179][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.184592][ T7353] loop5: detected capacity change from 0 to 512 [ 150.184666][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.201172][ T7351] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.202758][ T26] audit: type=1800 audit(1761751400.449:11): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1053" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 150.230310][ T7351] hpfs: filesystem error: improperly stopped [ 150.240483][ T7351] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.248684][ T7351] hpfs: You really don't want any checks? You are crazy... [ 150.261990][ T7351] hpfs: hpfs_map_sector(): read error [ 150.264405][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.278508][ T7353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.294749][ T7351] hpfs: code page support is disabled [ 150.310280][ T7351] hpfs: hpfs_map_4sectors(): unaligned read [ 150.320939][ T7353] EXT4-fs (loop5): 1 truncate cleaned up [ 150.344898][ T7353] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,abort,,errors=continue. Quota mode: none. [ 150.374628][ T26] audit: type=1800 audit(1761751400.619:12): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1057" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 150.396582][ T7351] hpfs: hpfs_map_4sectors(): unaligned read [ 150.410110][ T7351] hpfs: filesystem error: unable to find root dir [ 150.426113][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.435501][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.447122][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.460347][ T7356] loop2: detected capacity change from 0 to 256 [ 150.479121][ T7358] loop1: detected capacity change from 0 to 128 [ 150.486553][ T7356] exfat: Deprecated parameter 'utf8' [ 150.492020][ T7356] exfat: Deprecated parameter 'namecase' [ 150.499096][ T7356] exfat: Deprecated parameter 'namecase' [ 150.506311][ T7351] hpfs: hpfs_map_4sectors(): unaligned read [ 150.512418][ T7351] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 150.525271][ T7356] exfat: Deprecated parameter 'utf8' [ 150.541349][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.566523][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.592500][ T7358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 150.605249][ T7356] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 150.634771][ T7358] System zones: 1-3, 19-19, 35-36 [ 150.639352][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.644906][ T7358] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 150.658627][ T7358] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.695872][ T26] audit: type=1800 audit(1761751400.949:13): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1058" name="file1" dev="loop2" ino=1048724 res=0 errno=0 [ 150.765570][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.778454][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.814883][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.897343][ T6417] Bluetooth: hci0: command 0x0405 tx timeout [ 150.936010][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.947827][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.008723][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.115831][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.140242][ T1111] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.163401][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.182402][ T7385] loop3: detected capacity change from 0 to 256 [ 151.232392][ T7388] loop1: detected capacity change from 0 to 128 [ 151.252684][ T7385] exfat: Deprecated parameter 'utf8' [ 151.258479][ T7385] exfat: Deprecated parameter 'utf8' [ 151.268714][ T7385] exfat: Deprecated parameter 'utf8' [ 151.304009][ T7388] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.337000][ T7385] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 151.365799][ T7388] hpfs: filesystem error: improperly stopped [ 151.375909][ T7388] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.391515][ T26] audit: type=1800 audit(1761751401.639:14): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1072" name="file1" dev="loop3" ino=1048725 res=0 errno=0 [ 151.416792][ T1111] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.439932][ T7388] hpfs: You really don't want any checks? You are crazy... [ 151.443384][ T1111] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.490963][ T1111] usb 5-1: Product: syz [ 151.498493][ T7388] hpfs: hpfs_map_sector(): read error [ 151.505637][ T1111] usb 5-1: Manufacturer: syz [ 151.510442][ T1111] usb 5-1: SerialNumber: syz [ 151.528107][ T7388] hpfs: code page support is disabled [ 151.532458][ T1111] usb 5-1: config 0 descriptor?? [ 151.533702][ T7388] hpfs: hpfs_map_4sectors(): unaligned read [ 151.583067][ T7388] hpfs: hpfs_map_4sectors(): unaligned read [ 151.604936][ T7388] hpfs: filesystem error: unable to find root dir [ 151.605241][ T1111] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 151.665254][ T7395] loop2: detected capacity change from 0 to 4096 [ 151.700593][ T7388] hpfs: hpfs_map_4sectors(): unaligned read [ 151.761977][ T7384] loop5: detected capacity change from 0 to 32768 [ 151.769125][ T7388] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 151.805581][ T7395] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.815982][ T7384] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1070 (7384) [ 151.843517][ T7395] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 151.851646][ T6417] usb 5-1: USB disconnect, device number 10 [ 151.867166][ T6417] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 151.884675][ T7395] System zones: 0-5 [ 151.921506][ T7395] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 151.965697][ T374] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.005725][ T7384] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 152.077121][ T7395] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 152.083858][ T7384] BTRFS info (device loop5): using free space tree [ 152.108457][ T7384] BTRFS info (device loop5): has skinny extents [ 152.275557][ T6424] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.387115][ T7434] loop1: detected capacity change from 0 to 256 [ 152.415627][ T7384] BTRFS info (device loop5): enabling ssd optimizations [ 152.437364][ T7433] loop2: detected capacity change from 0 to 764 [ 152.521924][ T7434] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 152.635672][ T6424] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 152.645534][ T6424] usb 4-1: config 0 has no interface number 0 [ 152.687410][ T6424] usb 4-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 152.716664][ T6424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.764706][ T6424] usb 4-1: config 0 descriptor?? [ 152.908434][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 152.931900][ T6417] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.973290][ T7452] loop2: detected capacity change from 0 to 47 [ 153.145703][ T1111] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.195602][ T6417] usb 5-1: Using ep0 maxpacket: 16 [ 153.315690][ T6417] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.343384][ T6417] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.445687][ T6424] asix 4-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.469312][ T6424] asix: probe of 4-1:0.102 failed with error -71 [ 153.496711][ T6424] usb 4-1: USB disconnect, device number 11 [ 153.515587][ T6417] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 153.525233][ T6417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.559689][ T6417] usb 5-1: Product: syz [ 153.563913][ T6417] usb 5-1: Manufacturer: syz [ 153.579972][ T6417] usb 5-1: SerialNumber: syz [ 153.589025][ T7459] loop2: detected capacity change from 0 to 40427 [ 153.593425][ T6417] usb 5-1: config 0 descriptor?? [ 153.615648][ T1111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.696575][ T1111] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 153.712226][ T7459] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 153.729516][ T7459] F2FS-fs (loop2): invalid crc value [ 153.746195][ T7469] loop5: detected capacity change from 0 to 32768 [ 153.759846][ T7459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.802189][ T7459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.827831][ T4187] attempt to access beyond end of device [ 153.827831][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 153.858258][ T7469] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1097 (7469) [ 153.884904][ T6417] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 153.935718][ T1111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 153.957779][ T6417] imon:send_packet: packet tx failed (-71) [ 153.957949][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.974267][ T1111] usb 2-1: Product: syz [ 153.976016][ T6417] imon 5-1:0.0: panel buttons/knobs setup failed [ 153.979140][ T1111] usb 2-1: Manufacturer: syz [ 153.979159][ T1111] usb 2-1: SerialNumber: syz [ 153.991347][ T7469] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 154.045796][ T7469] BTRFS info (device loop5): using free space tree [ 154.052440][ T7469] BTRFS info (device loop5): has skinny extents [ 154.135648][ T6417] rc_core: IR keymap rc-imon-pad not found [ 154.141634][ T6417] Registered IR keymap rc-empty [ 154.167924][ T6417] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 154.179959][ T6417] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 154.197562][ T6417] imon:send_packet: packet tx failed (-71) [ 154.215662][ T6417] imon 5-1:0.0: remote input dev register failed [ 154.234016][ T6417] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 154.297486][ T6417] imon 5-1:0.0: unable to initialize intf0, err 0 [ 154.304126][ T7469] BTRFS info (device loop5): enabling ssd optimizations [ 154.315478][ T6417] imon:imon_probe: failed to initialize context! [ 154.322029][ T6417] imon 5-1:0.0: unable to register, err -19 [ 154.339542][ T6417] usb 5-1: USB disconnect, device number 11 [ 154.346701][ T7469] BTRFS warning (device loop5): can't set the mixed_backref feature bit while mounted [ 154.607732][ T4199] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop5 scanned by udevd (4199) [ 154.673728][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 154.751280][ T1111] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 155.108663][ T7518] loop4: detected capacity change from 0 to 4096 [ 155.218243][ T1111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.223452][ T7529] loop2: detected capacity change from 0 to 1024 [ 155.239003][ T7518] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 155.263929][ T7518] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 155.280163][ T7518] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 155.313668][ T7518] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 155.370478][ T7518] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.399929][ T7518] ntfs: volume version 3.1. [ 155.423350][ T7518] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 155.517217][ T7518] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 155.518355][ T7518] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 155.518380][ T7518] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 155.518396][ T7518] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 155.523906][ T7533] [U] ¦ [ 155.579748][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.604720][ T6424] usb 2-1: USB disconnect, device number 7 [ 155.668027][ T7538] nbd: must specify a size in bytes for the device [ 155.976773][ T6424] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.072806][ T7565] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 156.155851][ T7570] loop2: detected capacity change from 0 to 256 [ 156.235649][ T6424] usb 5-1: Using ep0 maxpacket: 32 [ 156.259825][ T7570] FAT-fs (loop2): Directory bread(block 64) failed [ 156.302633][ T7570] FAT-fs (loop2): Directory bread(block 65) failed [ 156.330352][ T7570] FAT-fs (loop2): Directory bread(block 66) failed [ 156.353699][ T7570] FAT-fs (loop2): Directory bread(block 67) failed [ 156.355807][ T6424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.371174][ T7570] FAT-fs (loop2): Directory bread(block 68) failed [ 156.394240][ T7587] loop3: detected capacity change from 0 to 64 [ 156.404943][ T6424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.405679][ T7570] FAT-fs (loop2): Directory bread(block 69) failed [ 156.425546][ T6424] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.445438][ T6424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.452310][ T7570] FAT-fs (loop2): Directory bread(block 70) failed [ 156.460908][ T7570] FAT-fs (loop2): Directory bread(block 71) failed [ 156.480446][ T7570] FAT-fs (loop2): Directory bread(block 72) failed [ 156.488763][ T6424] usb 5-1: config 0 descriptor?? [ 156.505364][ T7589] sp0: Synchronizing with TNC [ 156.521805][ T7587] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 156.526531][ T6424] hub 5-1:0.0: USB hub found [ 156.543412][ T7570] FAT-fs (loop2): Directory bread(block 73) failed [ 156.747944][ T7540] loop4: detected capacity change from 0 to 1024 [ 156.804474][ T7540] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 156.804474][ T7540] [ 156.837941][ T7540] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 157.031872][ T6424] hub 5-1:0.0: 1 port detected [ 157.070229][ T7612] loop1: detected capacity change from 0 to 64 [ 157.201056][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 157.237846][ T6424] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 157.255315][ T6424] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 157.261484][ T7583] loop5: detected capacity change from 0 to 32768 [ 157.415682][ T6424] usbhid 5-1:0.0: can't add hid device: -71 [ 157.424909][ T6424] usbhid: probe of 5-1:0.0 failed with error -71 [ 157.516814][ T6424] usb 5-1: USB disconnect, device number 12 [ 157.549058][ T7629] loop3: detected capacity change from 0 to 64 [ 157.575539][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1159'. [ 157.584455][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 157.681543][ T7631] netlink: 'syz.5.1159': attribute type 14 has an invalid length. [ 157.713869][ T7631] netlink: 'syz.5.1159': attribute type 11 has an invalid length. [ 157.872976][ T7639] loop2: detected capacity change from 0 to 256 [ 158.000672][ T7639] FAT-fs (loop2): Directory bread(block 64) failed [ 158.026850][ T7645] loop3: detected capacity change from 0 to 1024 [ 158.040488][ T7639] FAT-fs (loop2): Directory bread(block 65) failed [ 158.070011][ T7639] FAT-fs (loop2): Directory bread(block 66) failed [ 158.084298][ T7645] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 158.131748][ T7645] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.134778][ T7639] FAT-fs (loop2): Directory bread(block 67) failed [ 158.171657][ T7619] loop1: detected capacity change from 0 to 32768 [ 158.181451][ T7639] FAT-fs (loop2): Directory bread(block 68) failed [ 158.192696][ T7639] FAT-fs (loop2): Directory bread(block 69) failed [ 158.199869][ T7639] FAT-fs (loop2): Directory bread(block 70) failed [ 158.206644][ T7639] FAT-fs (loop2): Directory bread(block 71) failed [ 158.213336][ T7639] FAT-fs (loop2): Directory bread(block 72) failed [ 158.218034][ T7645] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,bsdgroups,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 158.220121][ T7639] FAT-fs (loop2): Directory bread(block 73) failed [ 158.294827][ T7639] attempt to access beyond end of device [ 158.294827][ T7639] loop2: rw=524288, want=1164, limit=256 [ 158.349642][ T7645] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 158.368356][ T7619] XFS (loop1): Mounting V5 Filesystem [ 158.384161][ T7639] attempt to access beyond end of device [ 158.384161][ T7639] loop2: rw=0, want=1164, limit=256 [ 158.509642][ T7619] XFS (loop1): Ending clean mount [ 158.624723][ T7678] loop5: detected capacity change from 0 to 164 [ 158.805738][ T4182] XFS (loop1): Unmounting Filesystem [ 158.811903][ T7678] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 158.962587][ T7695] netlink: zone id is out of range [ 158.991112][ T7695] netlink: set zone limit has 4 unknown bytes [ 159.156415][ T7699] loop2: detected capacity change from 0 to 4096 [ 159.238550][ T7699] ntfs: volume version 3.1. [ 159.262280][ T7514] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 159.471903][ T7713] loop2: detected capacity change from 0 to 1024 [ 159.529632][ T7713] hfsplus: bad catalog entry type [ 159.560871][ T7514] usb 6-1: Using ep0 maxpacket: 32 [ 159.705800][ T7514] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.751572][ T7728] device batadv1 entered promiscuous mode [ 159.755450][ T7514] usb 6-1: config 0 interface 0 has no altsetting 0 [ 159.774356][ T7514] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 159.798841][ T7514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.831091][ T7514] usb 6-1: config 0 descriptor?? [ 159.833008][ T7705] loop4: detected capacity change from 0 to 32768 [ 159.899505][ T7705] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 159.945653][ T1108] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 159.979495][ T7705] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 160.217757][ T7739] loop1: detected capacity change from 0 to 32768 [ 160.317341][ T7514] lenovo 0003:17EF:6009.0016: unknown main item tag 0x0 [ 160.324513][ T7514] lenovo 0003:17EF:6009.0016: unknown main item tag 0x0 [ 160.332512][ T7514] lenovo 0003:17EF:6009.0016: unknown main item tag 0x0 [ 160.339981][ T7514] lenovo 0003:17EF:6009.0016: unknown main item tag 0x0 [ 160.347474][ T7514] lenovo 0003:17EF:6009.0016: unknown main item tag 0x0 [ 160.350201][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.356921][ T7514] lenovo 0003:17EF:6009.0016: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 160.388390][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.400346][ T1108] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 160.410929][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.434519][ T1108] usb 3-1: config 0 descriptor?? [ 160.515181][ T7752] loop1: detected capacity change from 0 to 256 [ 160.568964][ T6417] usb 6-1: USB disconnect, device number 11 [ 160.576540][ T7752] exfat: Deprecated parameter 'utf8' [ 160.586501][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 160.672850][ T7752] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 160.917511][ T1108] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 160.924482][ T1108] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 160.933866][ T1108] isku 0003:1E7D:319C.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 161.095583][ T6424] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.125874][ T1108] isku 0003:1E7D:319C.0017: couldn't init struct isku_device [ 161.133347][ T1108] isku 0003:1E7D:319C.0017: couldn't install keyboard [ 161.172279][ T1108] isku: probe of 0003:1E7D:319C.0017 failed with error -71 [ 161.191965][ T7771] loop3: detected capacity change from 0 to 256 [ 161.193602][ T1108] usb 3-1: USB disconnect, device number 11 [ 161.263437][ T7771] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 161.282282][ T7773] fido_id[7773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 161.297886][ T7771] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 161.475575][ T6424] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.486017][ T6424] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.567844][ T6424] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.577173][ T6424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.585927][ T6424] usb 2-1: SerialNumber: syz [ 161.766994][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.776545][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.853926][ T7787] loop4: detected capacity change from 0 to 256 [ 161.867979][ T6424] usb 2-1: 0:2 : does not exist [ 161.877265][ T7785] loop2: detected capacity change from 0 to 2048 [ 161.921147][ T6424] usb 2-1: USB disconnect, device number 8 [ 161.956412][ T7787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 161.981521][ T7785] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.075678][ T7792] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.109153][ T7794] loop5: detected capacity change from 0 to 128 [ 162.116644][ T7796] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1229'. [ 162.176365][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.192649][ T7794] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.205342][ T7794] hpfs: filesystem error: improperly stopped [ 162.211825][ T7794] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.221673][ T7794] hpfs: You really don't want any checks? You are crazy... [ 162.240105][ T7794] hpfs: hpfs_map_sector(): read error [ 162.250200][ T7794] hpfs: code page support is disabled [ 162.259307][ T7801] tipc: MTU too low for tipc bearer [ 162.270497][ T7794] hpfs: hpfs_map_4sectors(): unaligned read [ 162.292254][ T7794] hpfs: hpfs_map_4sectors(): unaligned read [ 162.305608][ T7794] hpfs: filesystem error: unable to find root dir [ 162.430360][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 162.459091][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'. [ 162.701745][ T7818] loop5: detected capacity change from 0 to 128 [ 162.925727][ T7822] loop4: detected capacity change from 0 to 4096 [ 162.932895][ T7797] orangefs_mount: mount request failed with -4 [ 162.979888][ T7822] __ntfs_error: 23 callbacks suppressed [ 162.979904][ T7822] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 162.991226][ T7824] loop5: detected capacity change from 0 to 4096 [ 163.002835][ T7514] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.077410][ T7803] loop2: detected capacity change from 0 to 40427 [ 163.096149][ T7822] ntfs: volume version 3.1. [ 163.104411][ T7827] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.130856][ T7822] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 163.177450][ T7803] F2FS-fs (loop2): invalid crc value [ 163.195228][ T7803] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.224241][ T7822] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 163.248909][ T7824] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 163.265902][ T7514] usb 2-1: Using ep0 maxpacket: 32 [ 163.356110][ T7824] Remounting filesystem read-only [ 163.391437][ T7803] F2FS-fs (loop2): Start checkpoint disabled! [ 163.408060][ T7514] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.421853][ T7803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 163.427214][ T7514] usb 2-1: config 0 has no interface number 0 [ 163.451823][ T7514] usb 2-1: config 0 interface 12 has no altsetting 0 [ 163.503735][ T4676] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 163.665716][ T7514] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.685143][ T7514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.693560][ T7514] usb 2-1: Product: syz [ 163.698656][ T7514] usb 2-1: Manufacturer: syz [ 163.703378][ T7514] usb 2-1: SerialNumber: syz [ 163.720276][ T7514] usb 2-1: config 0 descriptor?? [ 163.817316][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.078464][ T7846] loop4: detected capacity change from 0 to 256 [ 164.325499][ T7455] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 164.350757][ T1111] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.357573][ T7856] loop3: detected capacity change from 0 to 2048 [ 164.412365][ T7856] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.453250][ T4199] udevd[4199]: incorrect nilfs2 checksum on /dev/loop3 [ 164.461053][ T7859] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.492785][ T7861] loop4: detected capacity change from 0 to 1024 [ 164.586016][ T7514] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.608754][ T7514] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.620250][ T151] hfsplus: b-tree write err: -5, ino 4 [ 164.622170][ T7514] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.634990][ T7514] f81534: probe of 2-1:0.12 failed with error -71 [ 164.689623][ T7514] usb 2-1: USB disconnect, device number 9 [ 164.698698][ T7455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 164.732385][ T7455] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 164.742014][ T7455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.755931][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.758764][ T7455] usb 6-1: config 0 descriptor?? [ 164.775818][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.785882][ T7844] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 164.868868][ T7875] netlink: 'syz.4.1266': attribute type 30 has an invalid length. [ 164.886021][ T1111] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.896077][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.911334][ T1111] usb 3-1: SerialNumber: syz [ 164.996607][ T7879] sp0: Synchronizing with TNC [ 165.003462][ T7878] [U] è [ 165.095854][ T7883] loop1: detected capacity change from 0 to 1024 [ 165.218420][ T1111] usb 3-1: 0:2 : does not exist [ 165.262910][ T374] hfsplus: b-tree write err: -5, ino 4 [ 165.270376][ T7455] belkin 0003:050D:3201.0018: item fetching failed at offset 0/3 [ 165.282975][ T7455] belkin 0003:050D:3201.0018: parse failed [ 165.291867][ T7455] belkin: probe of 0003:050D:3201.0018 failed with error -22 [ 165.306236][ T1111] usb 3-1: USB disconnect, device number 12 [ 165.453621][ T7877] loop3: detected capacity change from 0 to 32768 [ 165.493029][ T7514] usb 6-1: USB disconnect, device number 12 [ 165.563751][ T7877] XFS (loop3): Mounting V5 Filesystem [ 165.645567][ T7877] XFS (loop3): Ending clean mount [ 165.657563][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.682144][ T7877] XFS (loop3): Quotacheck needed: Please wait. [ 165.848616][ T7877] XFS (loop3): Quotacheck: Done. [ 165.891515][ T4185] XFS (loop3): Unmounting Filesystem [ 166.030819][ T7931] loop5: detected capacity change from 0 to 512 [ 166.189011][ T7931] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 166.222224][ T7931] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.334828][ T7944] loop4: detected capacity change from 0 to 1024 [ 166.410700][ T7931] FAT-fs (loop5): FAT read failed (blocknr 128) [ 166.524284][ T151] hfsplus: b-tree write err: -5, ino 4 [ 166.708995][ T7958] vim2m vim2m.0: vidioc_s_fmt queue busy [ 166.862683][ T7965] loop4: detected capacity change from 0 to 2048 [ 166.885757][ T4233] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.943093][ T7969] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.255182][ T7950] loop2: detected capacity change from 0 to 40427 [ 167.283696][ T7985] loop4: detected capacity change from 0 to 1024 [ 167.295906][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.323750][ T7950] F2FS-fs (loop2): invalid crc value [ 167.327679][ T4233] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 167.349387][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.365260][ T4233] usb 4-1: config 0 descriptor?? [ 167.372622][ T7985] EXT4-fs (loop4): Ignoring removed orlov option [ 167.382470][ T7985] EXT4-fs (loop4): Ignoring removed nobh option [ 167.394216][ T7950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.419248][ T7985] EXT4-fs (loop4): Ignoring removed bh option [ 167.505006][ T7985] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,orlov,barrier=0x0000000000000002,journal_dev=0x0000000000000001,data_err=ignore,max_batch_time=0x0000000000000007,min_batch_time=0x0000000000000008,grpquota,nobh,user_xattr,bh,abort,,errors=continue. Quota mode: writeback. [ 167.591650][ T7950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 167.605657][ T7455] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.797798][ T7994] loop5: detected capacity change from 0 to 32768 [ 167.829689][ T7994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1318 (7994) [ 167.845626][ T4233] hid_mf 0003:0079:1846.0019: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 167.891181][ T4233] hid_mf 0003:0079:1846.0019: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 167.941612][ T7994] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 167.960697][ T7994] BTRFS info (device loop5): using free space tree [ 167.972573][ T7994] BTRFS info (device loop5): has skinny extents [ 168.050849][ T4428] usb 4-1: USB disconnect, device number 12 [ 168.076477][ T8005] fido_id[8005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 168.155635][ T7455] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 168.170450][ T7455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.195461][ T7455] usb 2-1: Product: syz [ 168.201325][ T7455] usb 2-1: Manufacturer: syz [ 168.211872][ T7455] usb 2-1: SerialNumber: syz [ 168.238489][ T7455] usb 2-1: config 0 descriptor?? [ 168.284146][ T7994] BTRFS info (device loop5): enabling ssd optimizations [ 168.515790][ T7455] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 168.527504][ T8048] loop2: detected capacity change from 0 to 128 [ 168.639797][ T8048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.730448][ T8048] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.736938][ T7455] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 168.749075][ T7455] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 168.756258][ T7455] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 168.942205][ T8058] loop3: detected capacity change from 0 to 64 [ 168.976152][ T7455] peak_usb: probe of 2-1:0.0 failed with error -22 [ 168.988621][ T7455] usb 2-1: USB disconnect, device number 10 [ 169.062076][ T146] Bluetooth: hci0: link tx timeout [ 169.068062][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.086073][ T8058] hfs: keylen 94 too large [ 169.274600][ T8075] loop2: detected capacity change from 0 to 1024 [ 169.405806][ T8075] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.450405][ T8083] loop4: detected capacity change from 0 to 4096 [ 169.481400][ T8075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 169.496291][ T8092] loop3: detected capacity change from 0 to 16 [ 169.520605][ T8075] System zones: 0-1, 3-36 [ 169.535748][ T8083] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 169.538523][ T8075] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,max_dir_size_kb=0x0000000000000002,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 169.648525][ T8102] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1359'. [ 169.683414][ T8092] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.865580][ T7455] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 170.015702][ T7514] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 170.125583][ T7455] usb 6-1: Using ep0 maxpacket: 8 [ 170.245721][ T7455] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.294444][ T7455] usb 6-1: config 0 interface 0 has no altsetting 0 [ 170.310251][ T7455] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 170.318753][ T8105] loop1: detected capacity change from 0 to 32768 [ 170.321259][ T7455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.346340][ T7455] usb 6-1: config 0 descriptor?? [ 170.405273][ T8105] (syz.1.1360,8105,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.405620][ T8105] (syz.1.1360,8105,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.444722][ T8105] JBD2: Ignoring recovery information on journal [ 170.449888][ T7514] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 170.449908][ T7514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.455711][ T7514] usb 3-1: config 0 descriptor?? [ 170.491889][ T8105] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 170.550421][ T4428] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.661731][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 170.825860][ T4428] usb 4-1: Using ep0 maxpacket: 8 [ 170.834682][ T7455] uclogic 0003:5543:0042.001A: unbalanced collection at end of report description [ 170.847178][ T7455] uclogic 0003:5543:0042.001A: parse failed [ 170.853201][ T7455] uclogic: probe of 0003:5543:0042.001A failed with error -22 [ 170.899478][ T8138] loop4: detected capacity change from 0 to 32768 [ 170.965834][ T4428] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 170.994911][ T4428] usb 4-1: config 2 has no interface number 0 [ 171.016760][ T4428] usb 4-1: config 2 interface 31 has no altsetting 0 [ 171.029015][ T8138] jfs_lookup: iget failed on inum 4 [ 171.034917][ T8138] jfs_lookup: iget failed on inum 4 [ 171.041476][ T7455] usb 6-1: USB disconnect, device number 13 [ 171.071213][ T8148] loop1: detected capacity change from 0 to 512 [ 171.145858][ T7514] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 171.165801][ T7514] asix: probe of 3-1:0.0 failed with error -71 [ 171.172644][ T8148] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 171.192464][ T8148] UDF-fs: Scanning with blocksize 512 failed [ 171.208692][ T7514] usb 3-1: USB disconnect, device number 13 [ 171.215895][ T4428] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 171.224999][ T4428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.248802][ T8148] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 171.265453][ T4428] usb 4-1: Product: syz [ 171.269733][ T8148] UDF-fs: Scanning with blocksize 1024 failed [ 171.276412][ T4428] usb 4-1: Manufacturer: syz [ 171.285912][ T4428] usb 4-1: SerialNumber: syz [ 171.291640][ T8148] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 171.296891][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 171.304517][ T8148] UDF-fs: Scanning with blocksize 2048 failed [ 171.315096][ T8148] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 171.333305][ T8148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.415168][ T8152] hugetlbfs: Bad value for 'nr_inodes' [ 171.508167][ T8156] loop4: detected capacity change from 0 to 160 [ 171.586455][ T8160] loop1: detected capacity change from 0 to 4096 [ 171.667411][ T8163] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.744192][ T8167] device sit0 entered promiscuous mode [ 171.809846][ T8167] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 171.859951][ T8167] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1388'. [ 172.145771][ T4428] ch9200: probe of 4-1:2.31 failed with error -22 [ 172.162087][ T8179] loop4: detected capacity change from 0 to 4096 [ 172.163823][ T4428] usb 4-1: USB disconnect, device number 13 [ 172.174861][ T7514] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.227349][ T8162] loop5: detected capacity change from 0 to 32768 [ 172.235495][ T8179] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 172.282929][ T8185] tipc: Started in network mode [ 172.288067][ T8185] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 172.307758][ T8185] tipc: Enabled bearer , priority 10 [ 172.429871][ T5051] ntfs3: loop4: ino=1b, Internal error [ 172.440547][ T5051] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 172.460797][ T5051] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.575870][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 172.585144][ T7514] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.604848][ T8195] loop5: detected capacity change from 0 to 24 [ 172.610137][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 172.620788][ T7514] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 172.620813][ T7514] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.620832][ T7514] usb 2-1: config 220 has no interface number 2 [ 172.620879][ T7514] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.620915][ T7514] usb 2-1: config 220 interface 0 has no altsetting 0 [ 172.620932][ T7514] usb 2-1: config 220 interface 76 has no altsetting 0 [ 172.620950][ T7514] usb 2-1: config 220 interface 1 has no altsetting 0 [ 172.693174][ T8199] loop3: detected capacity change from 0 to 128 [ 172.734588][ T8192] netlink: 'syz.2.1402': attribute type 11 has an invalid length. [ 172.769191][ T8199] EXT4-fs (loop3): Ignoring removed nobh option [ 172.795816][ T7514] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.815969][ T7514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.844719][ T8199] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 172.867297][ T7514] usb 2-1: Product: syz [ 172.888643][ T7514] usb 2-1: Manufacturer: syz [ 172.893287][ T7514] usb 2-1: SerialNumber: syz [ 172.908054][ T8199] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.030394][ T8199] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 173.107732][ T8211] loop2: detected capacity change from 0 to 4096 [ 173.320550][ T8211] ntfs3: loop2: ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 173.351484][ T4233] tipc: Node number set to 10005162 [ 173.399620][ T7514] usb 2-1: selecting invalid altsetting 0 [ 173.408174][ T7514] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 173.423073][ T7514] usb 2-1: No valid video chain found. [ 173.475631][ T4187] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 173.484393][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 173.546676][ T7514] usb 2-1: selecting invalid altsetting 0 [ 173.570125][ T8235] loop3: detected capacity change from 0 to 512 [ 173.570882][ T7514] usbtest: probe of 2-1:220.1 failed with error -22 [ 173.576935][ T8233] loop5: detected capacity change from 0 to 2048 [ 173.615297][ T7514] usb 2-1: USB disconnect, device number 11 [ 173.680047][ T8235] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.705310][ T8239] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.736746][ T8235] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 173.751092][ T8235] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1422: Corrupt directory, running e2fsck is recommended [ 173.770830][ T8235] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 173.783873][ T8235] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.1422: corrupted in-inode xattr [ 173.815774][ T8235] EXT4-fs (loop3): Remounting filesystem read-only [ 173.820910][ T8241] loop2: detected capacity change from 0 to 2048 [ 173.822445][ T8235] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1422: couldn't read orphan inode 15 (err -117) [ 173.916108][ T8241] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.950810][ T8235] EXT4-fs (loop3): Remounting filesystem read-only [ 173.957811][ T8235] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 174.023917][ T8241] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.1423: bit already cleared for inode 15 [ 174.072424][ T8255] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.1423: reserved inode found cleared - inode=1 [ 174.309006][ T8268] loop5: detected capacity change from 0 to 512 [ 174.360433][ T8268] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 174.366626][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1434'. [ 174.400757][ T8268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 174.469917][ T8268] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.504273][ T8268] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1435: bad orphan inode 267 [ 174.558972][ T8281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.572976][ T8281] overlayfs: missing 'lowerdir' [ 174.602140][ T8268] EXT4-fs (loop5): Remounting filesystem read-only [ 174.685580][ T8268] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 174.693681][ T8295] loop3: detected capacity change from 0 to 256 [ 174.712550][ T8294] loop1: detected capacity change from 0 to 256 [ 174.723861][ T8295] exfat: Deprecated parameter 'namecase' [ 174.756058][ T8294] exfat: Deprecated parameter 'utf8' [ 174.768013][ T8295] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 174.798861][ T8300] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 174.836532][ T8294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 174.851572][ T8268] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1435: dx entry: limit 0 != root limit 125 [ 174.878218][ T8300] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1449'. [ 174.919556][ T8268] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1435: Corrupt directory, running e2fsck is recommended [ 175.298108][ T6417] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.328138][ T8329] loop5: detected capacity change from 0 to 1024 [ 175.389186][ T8329] EXT4-fs (loop5): Ignoring removed bh option [ 175.396902][ T8329] EXT4-fs (loop5): inline encryption not supported [ 175.403452][ T8329] EXT4-fs (loop5): Ignoring removed nobh option [ 175.430408][ T8329] EXT4-fs (loop5): Ignoring removed bh option [ 175.450609][ T8329] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.534530][ T8329] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,data_err=abort,bh,inlinecrypt,acl,nogrpid,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 175.675610][ T6417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.687227][ T6417] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 175.705528][ T6417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 7724, setting to 1024 [ 175.718298][ T6417] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 175.805855][ T6417] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 175.850718][ T6417] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 175.876168][ T6417] usb 2-1: Manufacturer: syz [ 175.906881][ T6417] usb 2-1: config 0 descriptor?? [ 175.925996][ T8308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.931357][ T8339] loop3: detected capacity change from 0 to 4096 [ 175.947550][ T6417] smsusb:smsusb_probe: board id=9, interface number 0 [ 175.947979][ T8327] loop2: detected capacity change from 0 to 32768 [ 175.996673][ T6417] smsusb:siano_media_device_register: media controller created [ 176.018095][ T6417] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 176.035441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.044453][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.051841][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.059105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.059610][ T8327] XFS (loop2): Mounting V5 Filesystem [ 176.066583][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.079510][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.086798][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.094070][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.101431][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.108743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 176.120794][ T6417] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 176.138252][ T6417] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 176.156376][ T6417] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 176.213111][ T6417] smsusb:smsusb_probe: Device initialized with return code -22 [ 176.253434][ T8327] XFS (loop2): Ending clean mount [ 176.291161][ T6417] smsusb: probe of 2-1:0.0 failed with error -22 [ 176.327962][ T6417] usb 2-1: USB disconnect, device number 12 [ 176.394314][ T4187] XFS (loop2): Unmounting Filesystem [ 176.408105][ T8339] ntfs: volume version 3.1. [ 176.905874][ T8365] loop5: detected capacity change from 0 to 8 [ 176.956376][ T8365] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 177.074986][ T8377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.482699][ T8400] loop3: detected capacity change from 0 to 64 [ 177.525294][ T8400] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 177.605513][ T1111] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.762454][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 177.789349][ T8410] loop5: detected capacity change from 0 to 256 [ 177.873263][ T26] audit: type=1326 audit(1761751428.119:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 177.960249][ T26] audit: type=1326 audit(1761751428.149:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.003029][ T26] audit: type=1326 audit(1761751428.149:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.045767][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.065590][ T1111] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 178.098457][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.103183][ T26] audit: type=1326 audit(1761751428.149:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.135307][ T26] audit: type=1326 audit(1761751428.149:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.140437][ T1111] usb 2-1: config 0 descriptor?? [ 178.180785][ T26] audit: type=1326 audit(1761751428.149:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.211611][ T8424] loop5: detected capacity change from 0 to 64 [ 178.220117][ T8423] loop4: detected capacity change from 0 to 128 [ 178.227763][ T26] audit: type=1326 audit(1761751428.149:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.252490][ T26] audit: type=1326 audit(1761751428.149:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.282406][ T26] audit: type=1326 audit(1761751428.149:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.314758][ T26] audit: type=1326 audit(1761751428.149:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a38f1fc9 code=0x7fc00000 [ 178.401334][ T8423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.486445][ T8423] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.525700][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.610575][ T8429] loop2: detected capacity change from 0 to 2048 [ 178.634739][ T8429] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 178.653598][ T8429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.687188][ T1111] hid (null): invalid report_count 50514 [ 178.694910][ T1111] hid-alps 0003:044E:1215.001B: invalid report_count 50514 [ 178.720462][ T1111] hid-alps 0003:044E:1215.001B: item 0 2 1 9 parsing failed [ 178.738663][ T1111] hid-alps 0003:044E:1215.001B: parse failed [ 178.744705][ T1111] hid-alps: probe of 0003:044E:1215.001B failed with error -22 [ 178.894445][ T8437] loop2: detected capacity change from 0 to 512 [ 178.911288][ T1111] usb 2-1: USB disconnect, device number 13 [ 178.917584][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.937835][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.948074][ T13] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 178.951114][ T8441] loop5: detected capacity change from 0 to 512 [ 178.957534][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.965467][ T1214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.990286][ T13] usb 4-1: config 0 descriptor?? [ 179.000897][ T8437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.013051][ T8437] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.019087][ T8445] loop4: detected capacity change from 0 to 64 [ 179.108280][ T8441] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 179.116058][ T8441] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.167583][ T8441] EXT4-fs (loop5): 1 truncate cleaned up [ 179.182559][ T8451] loop2: detected capacity change from 0 to 64 [ 179.200436][ T8441] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 179.469406][ T8463] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 179.503144][ T8467] loop4: detected capacity change from 0 to 128 [ 179.612960][ T8467] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.650944][ T8467] hpfs: filesystem error: improperly stopped [ 179.655069][ T8476] loop5: detected capacity change from 0 to 1024 [ 179.659202][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 179.673272][ T8467] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.682579][ T8467] hpfs: You really don't want any checks? You are crazy... [ 179.692767][ T8467] hpfs: hpfs_map_sector(): read error [ 179.714726][ T8467] hpfs: code page support is disabled [ 179.730508][ T8467] hpfs: hpfs_map_4sectors(): unaligned read [ 179.736642][ T13] hid-led: probe of 0003:27B8:01ED.001C failed with error -71 [ 179.761186][ T13] usb 4-1: USB disconnect, device number 14 [ 179.780023][ T8467] hpfs: hpfs_map_4sectors(): unaligned read [ 179.813723][ T8467] hpfs: filesystem error: unable to find root dir [ 179.862069][ T8481] device 30ªX¹¦D entered promiscuous mode [ 179.895516][ T8481] device vlan2 entered promiscuous mode [ 179.904158][ T5051] hfsplus: b-tree write err: -5, ino 4 [ 180.344648][ T8505] tipc: Cannot configure node identity twice [ 180.347458][ T8508] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.1539'. [ 180.384038][ T8510] loop1: detected capacity change from 0 to 1024 [ 180.461888][ T8510] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 180.493595][ T8510] netlink: 'syz.1.1540': attribute type 8 has an invalid length. [ 180.738431][ T8531] loop5: detected capacity change from 0 to 256 [ 180.802145][ T8531] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 180.832739][ T8530] loop1: detected capacity change from 0 to 8192 [ 180.886381][ T8530] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 180.897707][ T8530] REISERFS (device loop1): using ordered data mode [ 180.904355][ T8530] reiserfs: using flush barriers [ 180.906468][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 180.922603][ T8530] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.930540][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 180.950932][ T8530] REISERFS (device loop1): checking transaction log (loop1) [ 180.962586][ T8530] REISERFS (device loop1): Using rupasov hash to sort names [ 180.966381][ T8490] loop2: detected capacity change from 0 to 40427 [ 180.985588][ T8530] REISERFS (device loop1): using 3.5.x disk format [ 180.992986][ T8530] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 180.997188][ T8490] F2FS-fs (loop2): invalid crc value [ 181.004407][ T8530] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 181.022038][ T8530] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 181.032704][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 181.033317][ T8530] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 181.053642][ T8530] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 181.100525][ T8490] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.291455][ T8490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.343612][ T8546] device veth1_macvtap left promiscuous mode [ 181.380663][ T8546] device macsec0 entered promiscuous mode [ 181.450158][ T8548] device veth1_macvtap entered promiscuous mode [ 181.471954][ T4187] attempt to access beyond end of device [ 181.471954][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 181.496589][ T8548] device macsec0 left promiscuous mode [ 181.527059][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.841956][ T8569] usb usb8: usbfs: process 8569 (syz.1.1567) did not claim interface 7 before use [ 181.935551][ T13] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 182.293816][ T8589] netlink: 'syz.2.1575': attribute type 4 has an invalid length. [ 182.328015][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.329485][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 182.348321][ T13] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 182.375914][ T8558] loop5: detected capacity change from 0 to 32768 [ 182.385638][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.416296][ T13] usb 4-1: config 0 descriptor?? [ 182.512918][ T8558] XFS (loop5): Mounting V5 Filesystem [ 182.653735][ T8599] mkiss: ax0: crc mode is auto. [ 182.674919][ T8558] XFS (loop5): Ending clean mount [ 182.758837][ T8588] loop4: detected capacity change from 0 to 32768 [ 182.778793][ T4676] XFS (loop5): Unmounting Filesystem [ 182.886809][ T8585] loop1: detected capacity change from 0 to 32768 [ 182.929555][ T13] hid-generic 0003:057E:200E.001D: unbalanced delimiter at end of report description [ 182.945009][ T13] hid-generic: probe of 0003:057E:200E.001D failed with error -22 [ 183.007549][ T8588] XFS (loop4): Mounting V5 Filesystem [ 183.033749][ T8585] XFS (loop1): Mounting V5 Filesystem [ 183.119448][ T8588] XFS (loop4): Ending clean mount [ 183.124344][ T4485] usb 4-1: USB disconnect, device number 15 [ 183.162824][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.251461][ T4188] XFS (loop4): Unmounting Filesystem [ 183.251597][ T8585] XFS (loop1): Ending clean mount [ 183.437247][ T4182] XFS (loop1): Unmounting Filesystem [ 183.784340][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 183.784999][ T8640] loop5: detected capacity change from 0 to 512 [ 183.863721][ T8647] loop3: detected capacity change from 0 to 512 [ 183.907684][ T8640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1591: bg 0: block 5: invalid block bitmap [ 183.967160][ T8647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 184.003399][ T8647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 184.024611][ T8647] System zones: 1-12 [ 184.029860][ T8647] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.052330][ T8640] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 184.074568][ T8647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1594: bg 0: block 361: padding at end of block bitmap is not set [ 184.098707][ T8656] loop1: detected capacity change from 0 to 256 [ 184.112121][ T8640] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1591: invalid indirect mapped block 3 (level 2) [ 184.119623][ T8647] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 184.140470][ T8647] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1594: invalid indirect mapped block 12 (level 1) [ 184.160867][ T8647] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1594: invalid indirect mapped block 2 (level 2) [ 184.175143][ T8647] EXT4-fs (loop3): 1 truncate cleaned up [ 184.187568][ T8647] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 184.224952][ T8640] EXT4-fs (loop5): 1 orphan inode deleted [ 184.238629][ T8640] EXT4-fs (loop5): 1 truncate cleaned up [ 184.245793][ T8662] nbd: must specify at least one socket [ 184.246780][ T8647] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 184.251539][ T8640] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.277684][ T8664] loop2: detected capacity change from 0 to 64 [ 184.284900][ T8656] FAT-fs (loop1): Directory bread(block 64) failed [ 184.308939][ T8656] FAT-fs (loop1): Directory bread(block 65) failed [ 184.328415][ T8656] FAT-fs (loop1): Directory bread(block 66) failed [ 184.354842][ T8656] FAT-fs (loop1): Directory bread(block 67) failed [ 184.386026][ T8656] FAT-fs (loop1): Directory bread(block 68) failed [ 184.429718][ T8656] FAT-fs (loop1): Directory bread(block 69) failed [ 184.471118][ T8656] FAT-fs (loop1): Directory bread(block 70) failed [ 184.485721][ T8656] FAT-fs (loop1): Directory bread(block 71) failed [ 184.492342][ T8656] FAT-fs (loop1): Directory bread(block 72) failed [ 184.562251][ T8656] FAT-fs (loop1): Directory bread(block 73) failed [ 184.805176][ T8681] loop4: detected capacity change from 0 to 2048 [ 184.910822][ T8688] loop1: detected capacity change from 0 to 1024 [ 184.927429][ T8691] loop5: detected capacity change from 0 to 8 [ 184.949164][ T8692] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.057394][ T8688] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #3: block 1: comm syz.1.1610: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.087581][ T8696] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 185.162954][ T8688] __quota_error: 57 callbacks suppressed [ 185.162970][ T8688] Quota error (device loop1): write_blk: dquota write failed [ 185.201799][ T8688] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 185.223471][ T8688] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1610: Failed to acquire dquot type 0 [ 185.263924][ T8696] Remounting filesystem read-only [ 185.287756][ T8688] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.1610: Freeing blocks not in datazone - block = 0, count = 4096 [ 185.341848][ T8688] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1610: Invalid inode bitmap blk 0 in block_group 0 [ 185.345097][ T4188] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 185.356364][ T8688] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 185.385496][ T5051] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.411974][ T8689] loop2: detected capacity change from 0 to 40427 [ 185.420278][ T8688] EXT4-fs (loop1): 1 orphan inode deleted [ 185.428966][ T5051] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 185.437630][ T8688] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 185.450021][ T5051] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 0 [ 185.571111][ T8689] F2FS-fs (loop2): invalid crc value [ 185.626026][ T8689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.788302][ T8689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.805215][ T8719] loop4: detected capacity change from 0 to 256 [ 185.821766][ T8718] loop1: detected capacity change from 0 to 128 [ 185.906174][ T8718] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 185.928626][ T8719] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 186.109517][ T4182] sysv_free_block: trying to free block not in datazone [ 186.161971][ T4182] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 186.326088][ T8721] loop4: detected capacity change from 0 to 8192 [ 186.332920][ T26] audit: type=1326 audit(1761751436.579:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.1.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f47ffafc9 code=0x0 [ 186.414784][ T8721] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 186.447785][ T8739] loop3: detected capacity change from 0 to 1024 [ 186.463500][ T8721] REISERFS (device loop4): using ordered data mode [ 186.506215][ T8721] reiserfs: using flush barriers [ 186.529822][ T8721] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.553449][ T8721] REISERFS (device loop4): checking transaction log (loop4) [ 186.796580][ T8746] loop5: detected capacity change from 0 to 4096 [ 186.800792][ T8721] REISERFS (device loop4): Using tea hash to sort names [ 186.815352][ T8721] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 186.840895][ T8721] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 186.972243][ T8746] NILFS (loop5): invalid segment: Checksum error in segment payload [ 186.989316][ T8746] NILFS (loop5): trying rollback from an earlier position [ 187.029030][ T8750] ptrace attach of ""[8751] was attempted by "./syz-executor exec"[8750] [ 187.096671][ T8744] loop2: detected capacity change from 0 to 32768 [ 187.102204][ T8746] NILFS (loop5): recovery complete [ 187.134436][ T8753] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.143648][ T8744] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1632 (8744) [ 187.280517][ T8744] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.353878][ T8744] BTRFS info (device loop2): enabling ssd optimizations [ 187.376573][ T8744] BTRFS info (device loop2): not using ssd optimizations [ 187.376695][ T8744] BTRFS info (device loop2): turning off barriers [ 187.376718][ T8744] BTRFS info (device loop2): using free space tree [ 187.376733][ T8744] BTRFS info (device loop2): has skinny extents [ 187.793764][ T8756] loop1: detected capacity change from 0 to 32768 [ 188.155545][ T8785] loop5: detected capacity change from 0 to 4096 [ 188.269899][ T8754] loop4: detected capacity change from 0 to 40427 [ 188.328160][ T8785] NILFS (loop5): invalid segment: Checksum error in segment payload [ 188.343815][ T8785] NILFS (loop5): trying rollback from an earlier position [ 188.382502][ T8785] NILFS (loop5): recovery complete [ 188.433728][ T8754] F2FS-fs (loop4): invalid crc value [ 188.454579][ T8754] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 188.457266][ T8791] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.710340][ T8754] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 188.762078][ T8754] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.808755][ T8804] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 188.844598][ T4188] attempt to access beyond end of device [ 188.844598][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 189.280578][ T4485] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 189.300624][ T8790] loop2: detected capacity change from 0 to 32768 [ 189.387139][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1650'. [ 189.483369][ T8790] XFS (loop2): Mounting V5 Filesystem [ 189.665756][ T4485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.712343][ T4485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.770195][ T4485] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 189.795160][ T4485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.826928][ T4485] usb 6-1: config 0 descriptor?? [ 189.843487][ T8790] XFS (loop2): Ending clean mount [ 189.966987][ T4187] XFS (loop2): Unmounting Filesystem [ 190.222965][ T8845] loop3: detected capacity change from 0 to 32768 [ 190.312073][ T8845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1663 (8845) [ 190.323716][ T8847] loop4: detected capacity change from 0 to 32768 [ 190.332379][ T4485] wacom 0003:056A:0000.001E: unbalanced collection at end of report description [ 190.368528][ T4485] wacom 0003:056A:0000.001E: parse failed [ 190.392745][ T4485] wacom: probe of 0003:056A:0000.001E failed with error -22 [ 190.409874][ T8849] loop1: detected capacity change from 0 to 4096 [ 190.435350][ T8847] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.473263][ T8845] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 190.498185][ T8849] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 190.508071][ T8845] BTRFS info (device loop3): allowing degraded mounts [ 190.514954][ T8845] BTRFS info (device loop3): setting nodatasum [ 190.521983][ T8845] BTRFS info (device loop3): disabling tree log [ 190.530219][ T8845] BTRFS info (device loop3): using free space tree [ 190.532573][ T4485] usb 6-1: USB disconnect, device number 14 [ 190.538311][ T8845] BTRFS info (device loop3): has skinny extents [ 190.584412][ T8858] loop2: detected capacity change from 0 to 128 [ 190.614309][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 190.652365][ T8858] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 190.707360][ T8858] hpfs: filesystem error: improperly stopped [ 190.713527][ T8858] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 190.726156][ T8858] hpfs: You really don't want any checks? You are crazy... [ 190.733743][ T8858] hpfs: hpfs_map_sector(): read error [ 190.740640][ T8858] hpfs: code page support is disabled [ 190.746330][ T8858] hpfs: hpfs_map_4sectors(): unaligned read [ 190.752981][ T8858] hpfs: hpfs_map_4sectors(): unaligned read [ 190.774146][ T8858] hpfs: filesystem error: unable to find root dir [ 191.119596][ T8883] use of bytesused == 0 is deprecated and will be removed in the future, [ 191.155574][ T8883] use the actual size instead. [ 191.237451][ T4425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4425) [ 191.408584][ T4270] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 191.442686][ T8897] loop2: detected capacity change from 0 to 4096 [ 191.473904][ T8897] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 191.622965][ T4437] Bluetooth: hci0: command 0x0411 tx timeout [ 191.709230][ T8897] ntfs3: loop2: failed to convert "076c" to iso8859-1 [ 191.785554][ T4270] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 191.813593][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.848074][ T8903] loop1: detected capacity change from 0 to 8192 [ 191.883933][ T8903] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 191.941107][ T4270] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.989787][ T4270] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.014654][ T8903] REISERFS (device loop1): using ordered data mode [ 192.049818][ T4270] usb 6-1: Manufacturer: syz [ 192.060727][ T8903] reiserfs: using flush barriers [ 192.075514][ T4270] usb 6-1: config 0 descriptor?? [ 192.122920][ T8903] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.195834][ T8903] REISERFS (device loop1): checking transaction log (loop1) [ 192.223247][ T8903] REISERFS (device loop1): Using r5 hash to sort names [ 192.225892][ T8905] loop3: detected capacity change from 0 to 32768 [ 192.244139][ T8903] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 192.258218][ T4270] rc_core: IR keymap rc-hauppauge not found [ 192.264395][ T4270] Registered IR keymap rc-empty [ 192.285310][ T8905] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1680 (8905) [ 192.297526][ T4270] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 192.307923][ T8903] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 192.356813][ T4270] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 192.457910][ T8905] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 192.502886][ T8905] BTRFS info (device loop3): using free space tree [ 192.543333][ T8905] BTRFS info (device loop3): has skinny extents [ 192.559576][ T8919] loop2: detected capacity change from 0 to 2048 [ 192.663636][ T8925] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.695460][ C1] igorplugusb 6-1:0.0: receive overflow, at least 33 lost [ 192.696489][ T8899] loop4: detected capacity change from 0 to 40427 [ 192.770099][ T8899] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 192.835890][ T8899] F2FS-fs (loop4): invalid crc value [ 192.852097][ T8942] loop1: detected capacity change from 0 to 128 [ 192.862777][ T8905] BTRFS info (device loop3): enabling ssd optimizations [ 192.873359][ T8899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.913077][ T4270] usb 6-1: USB disconnect, device number 15 [ 193.019875][ T8942] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,jqfmt=vfsv1,dax=inode,dax=never,minixdf,,errors=continue. Quota mode: none. [ 193.031415][ T8950] CUSE: unknown device info "ÿ" [ 193.036432][ T8899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.057519][ T8950] CUSE: zero length info key specified [ 193.062312][ T8942] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.805657][ T6423] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 194.075645][ T6423] usb 6-1: Using ep0 maxpacket: 8 [ 194.160296][ T8987] loop2: detected capacity change from 0 to 4096 [ 194.191967][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192050][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.196539][ T6423] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 194.196569][ T6423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.204586][ T6423] usb 6-1: config 0 descriptor?? [ 194.234381][ T8987] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 194.234407][ T8987] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 194.234715][ T8987] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 194.234740][ T8987] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 194.234790][ T8987] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 194.236926][ T8987] ntfs: volume version 3.1. [ 194.239488][ T8987] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 194.239513][ T8987] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 194.239529][ T8987] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 194.240680][ T8987] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 194.642853][ T9013] loop4: detected capacity change from 0 to 2048 [ 194.679334][ T6423] hid-generic 0003:05AC:0324.001F: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 194.681630][ T8987] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 194.785933][ T9024] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.801392][ T9013] NILFS (loop4): failed to count free inodes: err=-34 [ 194.878446][ T6423] usb 6-1: USB disconnect, device number 16 [ 195.008303][ T9034] hfs: can't find a HFS filesystem on dev nullb0 [ 195.044015][ T9029] fido_id[9029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 195.069760][ T9031] tipc: Enabled bearer , priority 0 [ 195.134687][ T9039] loop2: detected capacity change from 0 to 2048 [ 195.225136][ T9047] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.225975][ T9039] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 195.289052][ T9050] loop4: detected capacity change from 0 to 256 [ 195.304386][ T9039] Remounting filesystem read-only [ 195.357137][ T9039] NILFS (loop2): mounting fs with errors [ 195.363092][ T9052] loop1: detected capacity change from 0 to 1024 [ 195.381386][ T9039] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 195.409005][ T9039] Remounting filesystem read-only [ 195.414079][ T9039] NILFS (loop2): error -5 reading inode: ino=15 [ 195.439350][ T9052] hfsplus: bad catalog entry type [ 195.464271][ T5051] hfsplus: b-tree write err: -5, ino 4 [ 195.834505][ T9074] loop4: detected capacity change from 0 to 512 [ 195.890563][ T9078] sp0: Synchronizing with TNC [ 195.921242][ T9074] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 195.939006][ T9074] EXT4-fs (loop4): Test dummy encryption mode enabled [ 195.958061][ T9086] loop1: detected capacity change from 0 to 8 [ 195.964964][ T9085] loop2: detected capacity change from 0 to 512 [ 196.001344][ T9074] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1746: inode #13: comm syz.4.1746: iget: illegal inode # [ 196.020034][ T9085] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 196.043081][ T9074] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1746: couldn't read orphan inode 13 (err -117) [ 196.047502][ T6423] tipc: Node number set to 2130706433 [ 196.082970][ T9086] unable to read xattr id index table [ 196.096850][ T9085] EXT4-fs (loop2): invalid journal inode [ 196.102577][ T9085] EXT4-fs (loop2): can't get journal size [ 196.128756][ T9085] EXT4-fs (loop2): 1 truncate cleaned up [ 196.134446][ T9085] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 196.167775][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000080222a,delalloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 196.214371][ T9085] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 196.233512][ T9074] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1746: inode #13: comm syz.4.1746: iget: illegal inode # [ 196.333694][ T9097] loop3: detected capacity change from 0 to 1024 [ 196.347787][ T7455] Bluetooth: hci4: command 0x0406 tx timeout [ 196.395574][ T9097] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.412658][ T9086] loop1: detected capacity change from 0 to 4096 [ 196.488791][ T9086] ntfs: volume version 3.1. [ 196.506746][ T9097] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 196.552950][ T9105] loop4: detected capacity change from 0 to 512 [ 196.602487][ T9097] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.669067][ T9105] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.685627][ T9107] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 196.693392][ T9107] netlink: 'syz.2.1760': attribute type 2 has an invalid length. [ 196.718217][ T9097] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.1757: inode has both inline data and extents flags [ 196.764179][ T9097] EXT4-fs (loop3): Remounting filesystem read-only [ 196.800408][ T9105] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.853173][ T9105] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 196.899760][ T9118] netlink: 'syz.2.1767': attribute type 3 has an invalid length. [ 197.162974][ T9128] loop3: detected capacity change from 0 to 2048 [ 197.172732][ T9136] loop1: detected capacity change from 0 to 256 [ 197.227370][ T9138] loop2: detected capacity change from 0 to 128 [ 197.257518][ T9144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.285934][ T9128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.298958][ T9136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 197.574836][ T9158] loop4: detected capacity change from 0 to 8 [ 197.609559][ T9160] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1786'. [ 197.688148][ T9152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.965508][ T7455] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.054785][ T9181] loop5: detected capacity change from 0 to 512 [ 198.158031][ T9181] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 198.226903][ T9181] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.280915][ T9181] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.1796: invalid size [ 198.327515][ T7455] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 198.350567][ T7455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.370806][ T9181] EXT4-fs (loop5): Remounting filesystem read-only [ 198.386418][ T7455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.401427][ T7455] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 198.461464][ T7455] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 198.492754][ T7455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.519214][ T7455] usb 2-1: config 0 descriptor?? [ 198.809252][ T9212] loop2: detected capacity change from 0 to 40427 [ 198.887351][ T9212] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 198.894860][ T9212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.904241][ T9212] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 198.916176][ T9212] F2FS-fs (loop2): invalid crc value [ 198.924143][ T9212] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 198.995617][ T9212] F2FS-fs (loop2): recover fsync data on readonly fs [ 199.004214][ T9212] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 199.009732][ T7455] holtek_kbd 0003:04D9:A055.0020: item fetching failed at offset 0/1 [ 199.011618][ T9212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.081919][ T7455] holtek_kbd: probe of 0003:04D9:A055.0020 failed with error -22 [ 199.095225][ T9224] loop5: detected capacity change from 0 to 8192 [ 199.160008][ T9216] loop3: detected capacity change from 0 to 32768 [ 199.181700][ T9224] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 199.203025][ T9224] REISERFS (device loop5): using ordered data mode [ 199.209741][ T9224] reiserfs: using flush barriers [ 199.212217][ T7455] usb 2-1: USB disconnect, device number 14 [ 199.216860][ T9224] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.237519][ T9224] REISERFS (device loop5): checking transaction log (loop5) [ 199.271869][ T9224] REISERFS (device loop5): Using r5 hash to sort names [ 199.421245][ T9224] reiserfs: enabling write barrier flush mode [ 199.467241][ T9224] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 199.536131][ T9224] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 199.571358][ T9224] REISERFS (device loop5): Remounting filesystem read-only [ 199.610872][ T9224] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 199.647307][ T9224] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 199.691451][ T9224] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 199.719896][ T9224] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 199.745485][ T9224] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 199.807235][ T9224] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 199.854181][ T9224] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 199.903780][ T9224] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 199.936907][ T9242] loop1: detected capacity change from 0 to 8 [ 199.975217][ T9224] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 200.079572][ T4676] ------------[ cut here ]------------ [ 200.090213][ T9242] SQUASHFS error: Unable to read directory block [1d0:0] [ 200.103546][ T4676] kernel BUG at fs/reiserfs/journal.c:1913! [ 200.117648][ T4676] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 200.123835][ T4676] CPU: 0 PID: 4676 Comm: syz-executor Not tainted syzkaller #0 [ 200.131391][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.141446][ T4676] RIP: 0010:do_journal_release+0x536/0x540 [ 200.147400][ T4676] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 34 46 be ff e9 ac fc ff ff e8 1a de 79 ff <0f> 0b e8 13 de 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 200.167270][ T4676] RSP: 0018:ffffc9000136fb80 EFLAGS: 00010293 [ 200.173393][ T4676] RAX: ffffffff81fdedf6 RBX: ffff88805b070000 RCX: ffff888074530000 [ 200.181376][ T4676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.189356][ T4676] RBP: ffffc9000136fc78 R08: dffffc0000000000 R09: ffffc9000136fbc0 [ 200.197337][ T4676] R10: fffff5200026df7f R11: 1ffff9200026df78 R12: ffffc90003681000 [ 200.205919][ T4676] R13: 1ffff9200026df74 R14: ffff88805b070678 R15: 0000000000000000 [ 200.213891][ T4676] FS: 000055558d09f500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 200.222817][ T4676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.229400][ T4676] CR2: 000000110c38f249 CR3: 0000000058e26000 CR4: 00000000003506f0 [ 200.237415][ T4676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.245403][ T4676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.253380][ T4676] Call Trace: [ 200.256668][ T4676] [ 200.259594][ T4676] ? journal_release+0x30/0x30 [ 200.264364][ T4676] ? do_raw_spin_unlock+0x11d/0x230 [ 200.269656][ T4676] journal_release+0x1b/0x30 [ 200.274249][ T4676] reiserfs_put_super+0x21e/0x480 [ 200.279312][ T4676] ? hook_inode_free_security+0xa0/0xa0 [ 200.284948][ T4676] ? reiserfs_dirty_inode+0x240/0x240 [ 200.290315][ T4676] ? reiserfs_dirty_inode+0x240/0x240 [ 200.295697][ T4676] generic_shutdown_super+0x130/0x300 [ 200.301075][ T4676] kill_block_super+0x7c/0xe0 [ 200.305854][ T4676] deactivate_locked_super+0x93/0xf0 [ 200.311146][ T4676] cleanup_mnt+0x418/0x4d0 [ 200.315660][ T4676] ? lockdep_hardirqs_on+0x94/0x140 [ 200.320859][ T4676] task_work_run+0x125/0x1a0 [ 200.325449][ T4676] exit_to_user_mode_loop+0x10f/0x130 [ 200.331082][ T4676] exit_to_user_mode_prepare+0xee/0x180 [ 200.336637][ T4676] syscall_exit_to_user_mode+0x16/0x40 [ 200.340303][ T9258] loop3: detected capacity change from 0 to 512 [ 200.342107][ T4676] do_syscall_64+0x58/0xa0 [ 200.342128][ T4676] ? clear_bhb_loop+0x30/0x80 [ 200.357492][ T4676] ? clear_bhb_loop+0x30/0x80 [ 200.362189][ T4676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.368075][ T4676] RIP: 0033:0x7ff5c32352f7 [ 200.372572][ T4676] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 200.392420][ T4676] RSP: 002b:00007fffb91ed198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 200.400913][ T4676] RAX: 0000000000000000 RBX: 00007ff5c32b6d7d RCX: 00007ff5c32352f7 [ 200.408867][ T4676] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb91ed250 [ 200.416819][ T4676] RBP: 00007fffb91ed250 R08: 0000000000000000 R09: 0000000000000000 [ 200.424773][ T4676] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb91ee2e0 [ 200.432727][ T4676] R13: 00007ff5c32b6d7d R14: 0000000000030d42 R15: 00007fffb91ee320 [ 200.440688][ T4676] [ 200.443700][ T4676] Modules linked in: [ 200.452942][ T9258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.464284][ T4676] ---[ end trace 3c6f98297952b626 ]--- [ 200.470652][ T4676] RIP: 0010:do_journal_release+0x536/0x540 [ 200.477093][ T4676] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 34 46 be ff e9 ac fc ff ff e8 1a de 79 ff <0f> 0b e8 13 de 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 200.485932][ T9258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 200.518401][ T9258] System zones: 1-12 [ 200.522584][ T4676] RSP: 0018:ffffc9000136fb80 EFLAGS: 00010293 [ 200.528881][ T4676] RAX: ffffffff81fdedf6 RBX: ffff88805b070000 RCX: ffff888074530000 [ 200.537689][ T4676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.546550][ T4676] RBP: ffffc9000136fc78 R08: dffffc0000000000 R09: ffffc9000136fbc0 [ 200.548887][ T9262] loop1: detected capacity change from 0 to 1764 [ 200.554536][ T4676] R10: fffff5200026df7f R11: 1ffff9200026df78 R12: ffffc90003681000 [ 200.554560][ T4676] R13: 1ffff9200026df74 R14: ffff88805b070678 R15: 0000000000000000 [ 200.554572][ T4676] FS: 000055558d09f500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 200.565628][ T9258] EXT4-fs (loop3): ext4_process_orphan: truncating inode 15 to 10 bytes [ 200.570464][ T4676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.601733][ T4676] CR2: 00007f0f48d816c0 CR3: 0000000058e26000 CR4: 00000000003506e0 [ 200.609809][ T4676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.617914][ T4676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.623045][ T9258] EXT4-fs (loop3): 1 truncate cleaned up [ 200.626040][ T4676] Kernel panic - not syncing: Fatal exception [ 200.626382][ T4676] Kernel Offset: disabled [ 200.642407][ T4676] Rebooting in 86400 seconds..