last executing test programs: 1m34.174129634s ago: executing program 3 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 1m33.77171247s ago: executing program 3 (id=1213): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6}) 1m33.622020343s ago: executing program 3 (id=1215): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='R', 0x1}], 0x1) 1m33.392321167s ago: executing program 3 (id=1216): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 1m33.107806441s ago: executing program 3 (id=1220): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.494891811s ago: executing program 3 (id=1224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x886, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m32.074395927s ago: executing program 32 (id=1224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x886, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m4.876206221s ago: executing program 0 (id=1468): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x120, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) 1m4.663215905s ago: executing program 0 (id=1470): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) 1m4.551235626s ago: executing program 0 (id=1471): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 1m4.414949789s ago: executing program 0 (id=1472): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) 1m4.206995641s ago: executing program 0 (id=1473): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 1m4.045792874s ago: executing program 0 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 48.977145769s ago: executing program 33 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 5.048296092s ago: executing program 1 (id=1963): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 4.944910373s ago: executing program 1 (id=1964): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="1600000001000000"], 0x0) 4.51123852s ago: executing program 1 (id=1968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "8a81073d"}]}}, 0x0}, 0x0) 2.748478827s ago: executing program 4 (id=1978): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) 2.683770139s ago: executing program 2 (id=1979): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) waitid(0x1, r0, &(0x7f0000000100), 0x41000004, 0x0) 2.487819941s ago: executing program 4 (id=1980): sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x457) 2.487486192s ago: executing program 1 (id=1981): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x7) 1.93600921s ago: executing program 4 (id=1983): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 1.793975612s ago: executing program 4 (id=1984): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x30c, &(0x7f0000000100)="$eJzs3T9vE0kYx/HfrO3EuUQ5X5LTSdfcKXeR7proclAgGhByS0+FgNiRIqwgkiABDSaiRLwAet4CL4IGxBsAGio6mnSLZnZ2vbbH6xjF2SR8P1Ki3dmZnWfYf8+sRFYAfljXmh9eXfhsf4xUUUXSZSmSVJeqkn7Vb/UHO/vb+512q2hHFdfC/hglLc1Qnc2ddqipbedaeA27VtVCvgzTEcfx1Y9lB4HSuas/IJJm/XXottdPOK7j4gc3m653pT9KDKcU+QNsDnWoh1osMRwAwCngn/+Rf0wsuCKjKJLW/GP/TD//Bx2WHcDxutgZKooLG+Se/y67i409vj+7Tb35npvC2e1ROks8SjC1gfUZJWdWX4JpwrPKT3HCxxLNbW1Xtb75VK1IB7ri5RqsuN+t5NRNjYl2NTA3HcVmjCP3VtP1n5LR2IxybnBzGtLWdqftMs9A/MuhTif5156UeWPemZumrpdqZflfNf5qD5M7Uo2BIxXVbPz/jd7jvGtla9khm2ScUV+VX1wnv/sevDGjrIdnJPl9pi8IulkEgTgP0gXX95L6Xysko9sIdWB6O18OtWpka8NtXV8rfa0q/kxY37zXKXyVMh3pEM0Lc8Os6oteq5nL/yMb35pyV2bRrd64mv7MSMYzE65ZdTUbQ0+Obrb0ZxaBNzvx2CBN+Lbsue7okhb3Hj2+W+l02rt24XZg4f7CrvEltWdSsM70FyoqqKNur8Q9PJ7E8VH3HE8z+H+/o9XMyE32/pGV2Msn1NxeZVlJdNKH6fwtVBXa1HyrohNyqgtp6jJh83pwk020RrSayj0Kp8yeSQ+6LxhKYnHO2bzLJPM/l8n7rM7dZ+yvRkGeHphkdvvWcnvcyGZw/angUih3GTM3mB89g8v1+P+IOaObc/31j/R3rtCosMeGi/PcME291y3e/wMAAAAAAAAAAAAAAAAAAJw1J/E/FsoeIwAAAAAAAAAAAAAAAAAAAAAAZ93Rv/871/tSU+hvxLvv/zbGfv+37wPA/kNRfP8XKMe3AAAA//92FX0e") r0 = open(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x148) getdents(r0, 0x0, 0x0) 1.564610556s ago: executing program 4 (id=1985): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 1.457248318s ago: executing program 1 (id=1986): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./file0\x00') 1.453802348s ago: executing program 5 (id=1987): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)=""/4061, 0xfdd}], 0x1}, 0x40000000) 1.351132579s ago: executing program 4 (id=1988): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x15, 0x1, 0x76, "625f32a349b9c70dc83343062efb8b8e"}, 0x15, 0x2) 1.32121167s ago: executing program 2 (id=1989): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@barrier}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'macinuit'}}, {@force}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.168446652s ago: executing program 5 (id=1990): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) 919.127366ms ago: executing program 5 (id=1991): unshare(0x2040400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 917.796506ms ago: executing program 2 (id=1999): socket$inet6_sctp(0xa, 0x1, 0x84) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x7, 0xf, 0x3, 0x2, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0xfffffff9, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x400, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x4, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x9, 0x9, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x1f, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0xfffffffd, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffff7ff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x108, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x80000000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 850.995387ms ago: executing program 1 (id=1992): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fadvise64(r0, 0x3e, 0x7f, 0x0) 698.07645ms ago: executing program 2 (id=1993): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 507.218912ms ago: executing program 5 (id=1994): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) 495.647682ms ago: executing program 2 (id=1995): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x3, @mcast1, 0x9}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001940)="9fbf41b1aa4ed06dd5b1c5603ab14b7e1796617542e500c47686929ba9baebea887cc40bfbfc0b0ae51806d9bfe6400e8fcd9880a9e1a28437bf29e7c03f75f3152cb5dd2bbcfd4e72f26e0363bebf8dbbb457febd309cb530eb37daa0174ce6a2e2a92ced3d5983139f76d3de38a23f108f6839c099b0b67bb6a4e62cb51e56b1cf3b0c36efdb24e79fa3a5362375b5674e9bf27529a5b0683e01edbfe3c04569c41dead0272870527cc0e6f6ec5d62b27406e9753379594cee8844c24e859b1640afd9174eb27b062b76e25186872dadf5c3625d89db0b6214587bd2352d9602b05f0f65711b38be0a663a983224f7351721139caf73f6634aad088e2e4518607acc5fab4c270d8bb506c10984a7b7ce71b08d99d376a2fc54930397596303408b1431e46d2c5f956dc6c51beff247cef54cf1f1e2c26c42282453803fb16e7d79ddab4045c27fd43c8d2ab5fdfcd6f0aabd034d9a226b3a74ac483929a350dcf51c75efa69de884d707c801cb8c7600a103e6292f153e233080beb90988866a87730cf705d12ba70d9b8ecfa05032faadb1fb7a2097a8e49710fffc297cfb407aa087c019490bb4f56bea435cceac0ac8df805778a06583a33e47beadb3ea40553d1dc70a3d54ce2ff35a9aac403e1f62c5e2ac93b98707d0d5c46aee4d14eaa2126c2aec98f5597c74c929ec794168805cd555f5160e60da5474f0407b936191c578f656d2314f6b99caf4398c29f20dab4b45112405b32014786a1257184a247a319c490b8cb50fdbafecd5c07164eab92e6085653735913313554efb725c7e48d32b7da8fcd9121664d15290f823d034e535b1d131fec1bbb2d84b129c95315b67511e07f81dffd4e6fa85a8bae73e6b5f5aef6b146e1672b182edb614f3c4adffe2353afb562a093fa5f918185302071dee998909ebd1f55cce4494665eb08adcb7776e0a9a539b74bebcb637af98795db75dcf7af7eccf0c029043718eb4f4ccbeb0fbb304fa761d7f60ecc37aa98efdb677c1b90a72151f10b803f20d5b6efbd287b8a126aa760ce7e0a3b56285958796cf9d01335a6933adea32e306866a2cfc7d65688a20c14a614da32e08677a3aab6faf1f1fd8b05b1879d4a369a2e7c29af78d2b312a0366fef140040e0e86d7bb78556da00d8bade5196bc221c3f91f9f7cbd24419bcccc467a45318a7e92e5839f740b46861aa492176bf072ef30df325dbf5ce60483c4368002e00d46bff43bc7c0044db0036c405d88e846fc6f4fcc874f008135dc8da17434850940b69fe1a5a17c247b7d8a7e5767959130ae4862b0185e4579fbaa59cb1b84101bb4d877d9e3a97e469cd49d610d932dcc0d680455465352feb4d1d88e074312929a1efcd4ee1fe484b92f2708e7564beeb5850388a369c6a601e4c060eafea0bf56e81c6a2f9d3837aa723664dbe42f030c56a1e0db52f79e45ad8f7b963cabe607c1a59de2e90bc9687ff71438e38345854245e9c37e4f13324a0859b7f3052f859356537e94fc07ef6d544c062aa7207bb0c4546daeea15d7b4995e5ad4427d994f14b68a1dfe9610bc0cc10ea7c24ff6883b56d0c376e0510ede1f405efe1e3b75f15663737dfa7cedd78e994d0488775b3e46547614285fef4200ceedd2002acfd432be8492b54832dc9ce790035214e21d89a17a8e3adf4fdc0f4f8b65c616e4f933e11720012bd4f66b67b0b56c8305f67fd200a9522d965a451cf4d1992b68586f69b46ac4af37bf8ea3fa08c0917d5336d04549eec45e293f203a59520ba41f8d918f3abb02cf2954c649ae2b9c0d608a74caf0d3ab682eec9c8b7ca960c4b3705ad23fc7aa473dd3ec25f1a0b3c572a051e7e382e7e7e0e4d8b28d12433cb906a2cef1643343030b4cc54f732b571b0ff4a43f7214d74ef70269af3da811806255a1095448849fcb41605aacaa96cd7a1e153ebfe0710ab0f0160e3c8aa2f7eb76ef9b263b6988b2c2aa00e5e0d56d7e81959d80607bde1792a75b8b6032d393b4f5849fd64408aec2efb1cc1fca4c915700205f818eac", 0x5ad}], 0x1}, 0x0) 220.728717ms ago: executing program 2 (id=1996): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 215.584477ms ago: executing program 5 (id=2005): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 0s ago: executing program 5 (id=1997): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@usrquota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}], ['\x00']}) kernel console output (not intermixed with test programs): ] EXT4-fs: Ignoring removed orlov option [ 153.659718][ T8510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.770838][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.005989][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.017896][ T8527] loop3: detected capacity change from 0 to 256 [ 154.276368][ T27] tipc: Node number set to 1 [ 154.412742][ T8542] bridge0: port 3(syz_tun) entered blocking state [ 154.421033][ T8542] bridge0: port 3(syz_tun) entered disabled state [ 154.428314][ T8542] syz_tun: entered allmulticast mode [ 154.437297][ T8542] syz_tun: entered promiscuous mode [ 154.443512][ T8542] bridge0: port 3(syz_tun) entered blocking state [ 154.451423][ T8542] bridge0: port 3(syz_tun) entered forwarding state [ 154.660404][ T8550] loop1: detected capacity change from 0 to 1024 [ 154.940652][ T8560] loop2: detected capacity change from 0 to 512 [ 155.012961][ T8560] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 155.037519][ T8560] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.080358][ T8560] EXT4-fs (loop2): mount failed [ 155.389520][ T8577] loop3: detected capacity change from 0 to 1024 [ 155.403550][ T8577] EXT4-fs: Ignoring removed nobh option [ 155.422778][ T8577] EXT4-fs: Ignoring removed bh option [ 155.440346][ T8580] loop2: detected capacity change from 0 to 512 [ 155.447674][ T8577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.465413][ T8580] EXT4-fs: Ignoring removed nobh option [ 155.488038][ T8580] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1201: invalid indirect mapped block 256 (level 2) [ 155.510402][ T8577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.535151][ T8580] EXT4-fs (loop2): 2 truncates cleaned up [ 155.554812][ T8580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.649890][ T28] audit: type=1800 audit(1750189508.521:128): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1201" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 155.676854][ T8580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1201: bg 0: block 5: invalid block bitmap [ 155.721160][ T8580] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 155.735784][ T8580] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.735784][ T8580] [ 155.746297][ T8580] EXT4-fs (loop2): Total free blocks count 0 [ 155.752314][ T8580] EXT4-fs (loop2): Free/Dirty block details [ 155.758740][ T8580] EXT4-fs (loop2): free_blocks=0 [ 155.764283][ T8580] EXT4-fs (loop2): dirty_blocks=2 [ 155.769626][ T8580] EXT4-fs (loop2): Block reservation details [ 155.776163][ T8580] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 155.870035][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.962283][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.212837][ T8602] loop1: detected capacity change from 0 to 4096 [ 156.676716][ T8613] loop3: detected capacity change from 0 to 256 [ 156.872922][ T5764] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 156.933822][ T5764] FAT-fs (loop3): Filesystem has been set read-only [ 156.965740][ T5764] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 157.163955][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.163964][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.177717][ T8610] loop0: detected capacity change from 0 to 32768 [ 157.224009][ T8610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1214 (8610) [ 157.240803][ T8624] loop1: detected capacity change from 0 to 2048 [ 157.259053][ T8626] loop2: detected capacity change from 0 to 128 [ 157.273338][ T8624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.297277][ T8610] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.300827][ T8626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.313245][ T8610] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 157.350857][ T8610] BTRFS info (device loop0): force clearing of disk cache [ 157.353131][ T8626] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.363577][ T8610] BTRFS info (device loop0): turning on flush-on-commit [ 157.380007][ T8610] BTRFS info (device loop0): enabling ssd optimizations [ 157.387147][ T8610] BTRFS info (device loop0): using spread ssd allocation scheme [ 157.395029][ T8610] BTRFS info (device loop0): using free space tree [ 157.489195][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.643948][ T8610] BTRFS info (device loop0): auto enabling async discard [ 157.718900][ T8610] BTRFS info (device loop0): rebuilding free space tree [ 157.771346][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.785935][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.011216][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.096427][ T5763] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.211467][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.481502][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.589339][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 158.670500][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.680860][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.699268][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.712710][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.721938][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.729689][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.917158][ T28] audit: type=1326 audit(1750189511.771:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a98e929 code=0x7ffc0000 [ 159.016442][ T28] audit: type=1326 audit(1750189511.791:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f795a98e929 code=0x7ffc0000 [ 159.131726][ T28] audit: type=1326 audit(1750189511.791:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a98e929 code=0x7ffc0000 [ 159.209514][ T8652] loop2: detected capacity change from 0 to 32768 [ 159.242269][ T28] audit: type=1326 audit(1750189511.791:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795a98e929 code=0x7ffc0000 [ 159.624049][ T8691] IPVS: length: 24 != 984 [ 159.914834][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 159.986912][ T8699] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 159.986912][ T8699] program syz.2.1237 not setting count and/or reply_len properly [ 160.117782][ T8703] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 160.373215][ T8715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1244'. [ 160.550188][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.569476][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.578334][ T8659] bridge_slave_0: entered allmulticast mode [ 160.595509][ T8659] bridge_slave_0: entered promiscuous mode [ 160.633192][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.654786][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.662049][ T8659] bridge_slave_1: entered allmulticast mode [ 160.685172][ T8659] bridge_slave_1: entered promiscuous mode [ 160.759077][ T8729] loop1: detected capacity change from 0 to 164 [ 160.787920][ T8729] rock: directory entry would overflow storage [ 160.804023][ T8729] rock: sig=0x66, size=4, remaining=3 [ 160.826375][ T78] $Hÿ: (slave wlan1): Releasing backup interface [ 160.831981][ T8729] rock: directory entry would overflow storage [ 160.843348][ T78] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 160.862980][ T8729] rock: sig=0x66, size=4, remaining=3 [ 160.863882][ T50] Bluetooth: hci1: command tx timeout [ 161.038514][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.110450][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.404044][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.430800][ T8659] team0: Port device team_slave_0 added [ 161.445628][ T8659] team0: Port device team_slave_1 added [ 161.601182][ T78] hsr_slave_0: left promiscuous mode [ 161.607476][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 161.626297][ T27] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 161.634557][ T27] usb 3-1: config 0 has no interface number 0 [ 161.641183][ T78] hsr_slave_1: left promiscuous mode [ 161.648218][ T27] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 161.663908][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.672340][ T27] usb 3-1: Product: syz [ 161.678824][ T27] usb 3-1: Manufacturer: syz [ 161.684373][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.691857][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.708192][ T27] usb 3-1: SerialNumber: syz [ 161.723119][ T27] usb 3-1: config 0 descriptor?? [ 161.736540][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.748614][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.759084][ T78] bridge_slave_1: left allmulticast mode [ 161.771160][ T78] bridge_slave_1: left promiscuous mode [ 161.779188][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.799694][ T78] bridge_slave_0: left allmulticast mode [ 161.806012][ T78] bridge_slave_0: left promiscuous mode [ 161.811745][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.881838][ T78] veth1_macvtap: left promiscuous mode [ 161.889803][ T78] veth0_macvtap: left promiscuous mode [ 161.897745][ T78] veth1_vlan: left promiscuous mode [ 161.903322][ T78] veth0_vlan: left promiscuous mode [ 162.030512][ T8758] loop0: detected capacity change from 0 to 128 [ 162.050913][ T8758] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 162.103944][ T8758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.176759][ T78] bond0 (unregistering): Released all slaves [ 162.191388][ T8752] loop1: detected capacity change from 0 to 32768 [ 162.221858][ T8752] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1255 (8752) [ 162.261341][ T8752] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.271949][ T8752] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 162.308789][ T8752] BTRFS info (device loop1): turning on sync discard [ 162.315995][ T8752] BTRFS info (device loop1): doing ref verification [ 162.330135][ T8752] BTRFS info (device loop1): disabling tree log [ 162.358197][ T8752] BTRFS info (device loop1): enabling ssd optimizations [ 162.373906][ T8752] BTRFS info (device loop1): using spread ssd allocation scheme [ 162.397744][ T8752] BTRFS info (device loop1): not using ssd optimizations [ 162.418017][ T8752] BTRFS info (device loop1): not using spread ssd allocation scheme [ 162.444952][ T8752] BTRFS info (device loop1): using free space tree [ 162.904676][ T5765] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.926222][ T50] Bluetooth: hci1: command tx timeout [ 163.361565][ T78] team0 (unregistering): Port device team_slave_1 removed [ 163.443007][ T78] team0 (unregistering): Port device team_slave_0 removed [ 163.535087][ T78] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.553693][ T8790] loop1: detected capacity change from 0 to 2048 [ 163.572320][ T78] bond_slave_1 (unregistering): left promiscuous mode [ 163.615154][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 163.626870][ T8790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.672646][ T78] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.690977][ T78] bond_slave_0 (unregistering): left promiscuous mode [ 163.786880][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.989128][ T78] $Hÿ (unregistering): Released all slaves [ 165.008119][ T50] Bluetooth: hci1: command tx timeout [ 165.155821][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.166456][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.193118][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.249687][ T27] peak_usb 3-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 165.274510][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.281502][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.309708][ T27] peak_usb 3-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 165.333945][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.476026][ T27] peak_usb: probe of 3-1:0.56 failed with error -71 [ 165.528814][ T27] usb 3-1: USB disconnect, device number 3 [ 165.533031][ T8659] hsr_slave_0: entered promiscuous mode [ 165.558123][ T8659] hsr_slave_1: entered promiscuous mode [ 165.587950][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.597852][ T8659] Cannot create hsr debugfs directory [ 165.758385][ T8842] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.872573][ T8845] loop0: detected capacity change from 0 to 164 [ 166.112692][ T8853] loop2: detected capacity change from 0 to 256 [ 166.154873][ T8853] exfat: Deprecated parameter 'utf8' [ 166.160101][ T78] IPVS: stop unused estimator thread 0... [ 166.243869][ T8853] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 166.364566][ T8659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.394896][ T8659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.422347][ T8659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.486220][ T8659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.504898][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.693846][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 166.698899][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.714317][ T787] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 166.722539][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.742783][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.750022][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.753866][ T787] usb 1-1: config 0 has no interface number 0 [ 166.768960][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.776203][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.783993][ T787] usb 1-1: config 0 interface 184 has no altsetting 0 [ 166.800805][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.820238][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.836117][ T787] usb 1-1: Product: syz [ 166.845232][ T787] usb 1-1: Manufacturer: syz [ 166.858242][ T787] usb 1-1: SerialNumber: syz [ 166.878931][ T787] usb 1-1: config 0 descriptor?? [ 166.897910][ T787] smsc75xx v1.0.0 [ 166.946185][ T5099] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.085973][ T50] Bluetooth: hci1: command tx timeout [ 167.134311][ T5099] usb 3-1: Using ep0 maxpacket: 16 [ 167.141336][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.165328][ T5099] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 167.184743][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.218160][ T5099] usb 3-1: config 0 descriptor?? [ 167.255543][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.331509][ T8883] loop1: detected capacity change from 0 to 512 [ 167.383470][ T8883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.408396][ T8883] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.549730][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 167.572879][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 167.589265][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 167.615906][ T787] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 167.641245][ T787] usb 1-1: USB disconnect, device number 8 [ 167.645209][ T5099] appleir 0003:05AC:8241.0003: item fetching failed at offset 2/5 [ 167.664989][ T5099] appleir 0003:05AC:8241.0003: parse failed [ 167.698132][ T5099] appleir: probe of 0003:05AC:8241.0003 failed with error -22 [ 167.779554][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.851578][ T5099] usb 3-1: USB disconnect, device number 4 [ 167.988702][ T8659] veth0_vlan: entered promiscuous mode [ 168.020254][ T8659] veth1_vlan: entered promiscuous mode [ 168.111056][ T8659] veth0_macvtap: entered promiscuous mode [ 168.135494][ T8659] veth1_macvtap: entered promiscuous mode [ 168.175578][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.203872][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.243798][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.263800][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.283026][ T8912] loop1: detected capacity change from 0 to 64 [ 168.294167][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.313782][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.335992][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.443065][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.461351][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.508045][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.532089][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.544178][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.554810][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.566415][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.589178][ T8659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.618254][ T8659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.642138][ T8659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.651295][ T8659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.741179][ T8925] loop0: detected capacity change from 0 to 256 [ 168.758452][ T8925] exfat: Deprecated parameter 'namecase' [ 168.783424][ T8925] exfat: Deprecated parameter 'namecase' [ 168.846860][ T8925] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 168.939068][ T4800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.993872][ T4800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.073974][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.113849][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.548533][ T8952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.555863][ T8952] IPv6: NLM_F_CREATE should be set when creating new route [ 169.996906][ T8967] loop1: detected capacity change from 0 to 1024 [ 170.079529][ T28] audit: type=1800 audit(1750189522.951:133): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1319" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 170.669012][ T8957] loop2: detected capacity change from 0 to 32768 [ 170.722518][ T8957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1316 (8957) [ 170.794943][ T8957] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.836451][ T8957] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 170.878961][ T8957] BTRFS info (device loop2): use zlib compression, level 3 [ 170.918143][ T8957] BTRFS info (device loop2): turning on sync discard [ 171.003905][ T8957] BTRFS info (device loop2): doing ref verification [ 171.010583][ T8957] BTRFS info (device loop2): disabling tree log [ 171.064190][ T8957] BTRFS info (device loop2): enabling tree log [ 171.157878][ T8957] BTRFS info (device loop2): enabling ssd optimizations [ 171.224013][ T8957] BTRFS info (device loop2): using spread ssd allocation scheme [ 171.276616][ T8957] BTRFS info (device loop2): not using ssd optimizations [ 171.360708][ T8957] BTRFS info (device loop2): not using spread ssd allocation scheme [ 171.534587][ T8957] BTRFS info (device loop2): using free space tree [ 171.999894][ T9076] loop4: detected capacity change from 0 to 4096 [ 172.029805][ T9076] EXT4-fs: inline encryption not supported [ 172.055298][ T9076] EXT4-fs: Ignoring removed oldalloc option [ 172.073782][ T28] audit: type=1800 audit(1750189524.941:134): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1316" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 172.167870][ T9076] EXT4-fs (loop4): Test dummy encryption mode enabled [ 172.193870][ T5099] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.229581][ T9076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.364774][ T9076] Quota error (device loop4): do_check_range: Getting block 134217730 out of range 1-5 [ 172.377667][ T9076] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 172.394107][ T5099] usb 1-1: Using ep0 maxpacket: 8 [ 172.408357][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.414189][ T5099] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.442738][ T9076] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1332: Failed to acquire dquot type 1 [ 172.471204][ T5099] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.495525][ T5099] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 172.516880][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.569034][ T5099] usb 1-1: config 0 descriptor?? [ 172.715507][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.985804][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1335'. [ 173.038904][ T5099] uclogic 0003:5543:0042.0004: unbalanced delimiter at end of report description [ 173.074527][ T5099] uclogic 0003:5543:0042.0004: parse failed [ 173.088276][ T9079] loop1: detected capacity change from 0 to 32768 [ 173.104202][ T5099] uclogic: probe of 0003:5543:0042.0004 failed with error -22 [ 173.264346][ T9079] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 173.349786][ T787] usb 1-1: USB disconnect, device number 9 [ 173.702187][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 173.776981][ T9107] loop2: detected capacity change from 0 to 8192 [ 173.824081][ T9107] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.850759][ T9107] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 173.871629][ T9107] REISERFS (device loop2): using ordered data mode [ 173.891868][ T9107] reiserfs: using flush barriers [ 173.932562][ T9107] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.059267][ T9107] REISERFS (device loop2): checking transaction log (loop2) [ 174.173198][ T9121] sp0: Synchronizing with TNC [ 174.394389][ T9107] REISERFS (device loop2): Using tea hash to sort names [ 174.401789][ T9107] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 174.519353][ T9132] tipc: Started in network mode [ 174.534177][ T9132] tipc: Node identity 4, cluster identity 4711 [ 174.552560][ T9132] tipc: Node number set to 4 [ 174.765906][ T9134] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.080262][ T5772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.102128][ T5772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.126987][ T5772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.154339][ T5772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.174144][ T5772] rtc rtc0: __rtc_set_alarm: err=-22 [ 175.240482][ T9127] loop1: detected capacity change from 0 to 32768 [ 175.266439][ T9127] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.1341 (9127) [ 175.329688][ T9127] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 175.374286][ T9127] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.383573][ T9127] BTRFS info (device loop1): using free space tree [ 175.478528][ T9155] loop2: detected capacity change from 0 to 2048 [ 175.585979][ T9127] BTRFS info (device loop1): enabling ssd optimizations [ 175.649169][ T9127] BTRFS info (device loop1): auto enabling async discard [ 175.664550][ T9155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.697028][ T9130] loop0: detected capacity change from 0 to 40427 [ 175.731005][ T9180] loop4: detected capacity change from 0 to 1024 [ 175.738514][ T9180] EXT4-fs: Ignoring removed orlov option [ 175.747942][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.805103][ T9130] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.882500][ T9180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.941237][ T9035] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 175.960557][ T5765] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 176.001802][ T9035] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.064999][ T9035] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.064999][ T9035] [ 176.083962][ T9130] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.121549][ T9035] EXT4-fs (loop2): Total free blocks count 0 [ 176.180448][ T9035] EXT4-fs (loop2): Free/Dirty block details [ 176.191560][ T9035] EXT4-fs (loop2): free_blocks=2415919504 [ 176.192000][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.219541][ T9035] EXT4-fs (loop2): dirty_blocks=32 [ 176.243931][ T9035] EXT4-fs (loop2): Block reservation details [ 176.251637][ T5758] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop1 scanned by udevd (5758) [ 176.263739][ T9035] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 176.306936][ T9035] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 176.517892][ T5763] syz-executor: attempt to access beyond end of device [ 176.517892][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.578698][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.146889][ T9217] loop1: detected capacity change from 0 to 8 [ 177.224745][ T9219] netlink: 'syz.2.1366': attribute type 8 has an invalid length. [ 177.492752][ T9225] loop2: detected capacity change from 0 to 512 [ 177.524583][ T9225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.604466][ T9225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 177.612520][ T9225] System zones: 1-12 [ 177.645741][ T9225] EXT4-fs (loop2): 1 truncate cleaned up [ 177.690359][ T9232] loop0: detected capacity change from 0 to 512 [ 177.692477][ T9225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.749503][ T9232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.775191][ T9232] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.962688][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.029807][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.112741][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 178.584635][ T9260] loop4: detected capacity change from 0 to 256 [ 178.592928][ T9262] loop0: detected capacity change from 0 to 128 [ 178.609218][ T9260] exfat: Deprecated parameter 'namecase' [ 178.618795][ T9260] exfat: Deprecated parameter 'namecase' [ 178.648464][ T9262] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.688635][ T9262] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.701603][ T9260] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 178.719131][ T9262] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.1380: No space for directory leaf checksum. Please run e2fsck -D. [ 178.737827][ T9262] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #2: comm syz.0.1380: Directory block failed checksum [ 178.875412][ T5763] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.041002][ T9271] loop2: detected capacity change from 0 to 1024 [ 179.284418][ T9035] hfsplus: b-tree write err: -5, ino 4 [ 179.597144][ T9289] loop0: detected capacity change from 0 to 512 [ 179.620678][ T9289] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 179.632311][ T9293] loop1: detected capacity change from 0 to 128 [ 179.862017][ T9289] EXT4-fs (loop0): failed to open journal device unknown-block(11,127) -6 [ 180.570697][ T9318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 180.623839][ T9318] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 180.978619][ T9333] loop0: detected capacity change from 0 to 128 [ 180.985490][ T9336] loop1: detected capacity change from 0 to 256 [ 181.003022][ T9336] exfat: Deprecated parameter 'namecase' [ 181.019333][ T9336] exfat: Deprecated parameter 'namecase' [ 181.037587][ T9336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 181.610288][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1418'. [ 181.641249][ T9353] loop1: detected capacity change from 0 to 256 [ 181.694186][ T9353] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 181.839773][ T9359] loop4: detected capacity change from 0 to 512 [ 181.884077][ T9359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.989512][ T9359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1422: bg 0: block 5: invalid block bitmap [ 182.007160][ T9359] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 182.042423][ T9366] loop2: detected capacity change from 0 to 4096 [ 182.046887][ T9359] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1422: invalid indirect mapped block 3 (level 2) [ 182.141146][ T9373] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.153146][ T9359] EXT4-fs (loop4): 2 truncates cleaned up [ 182.174724][ T9359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.386315][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.424384][ T5772] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.614244][ T5772] usb 1-1: Using ep0 maxpacket: 16 [ 182.636233][ T5772] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 182.639294][ T9386] loop4: detected capacity change from 0 to 164 [ 182.665210][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 182.678080][ T9386] ISOFS: unable to read i-node block [ 182.683482][ T9386] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 182.688498][ T5772] usb 1-1: Product: syz [ 182.711598][ T5772] usb 1-1: Manufacturer: syz [ 182.720151][ T5772] usb 1-1: SerialNumber: syz [ 182.736456][ T5772] usb 1-1: config 0 descriptor?? [ 182.777331][ T28] audit: type=1326 audit(1750189535.651:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 182.799596][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.834594][ T9390] sd 0:0:1:0: device reset [ 182.858108][ T28] audit: type=1326 audit(1750189535.681:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 182.895316][ T28] audit: type=1326 audit(1750189535.701:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1650f8d290 code=0x7ffc0000 [ 182.917604][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.928987][ T28] audit: type=1326 audit(1750189535.701:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 182.951236][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.957534][ T28] audit: type=1326 audit(1750189535.711:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 183.053408][ T28] audit: type=1326 audit(1750189535.761:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 183.058498][ T9396] warning: `syz.4.1436' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.076938][ T28] audit: type=1326 audit(1750189535.761:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 183.216408][ T5804] usb 1-1: USB disconnect, device number 10 [ 183.366039][ T9403] loop4: detected capacity change from 0 to 1024 [ 183.407308][ T9403] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.425554][ T9403] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 183.459001][ T9403] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 183.470420][ T9403] EXT4-fs error (device loop4): ext4_get_journal_inode:5805: inode #5: comm syz.4.1439: unexpected bad inode w/o EXT4_IGET_BAD [ 183.487199][ T9408] loop1: detected capacity change from 0 to 512 [ 183.491761][ T9403] EXT4-fs (loop4): no journal found [ 183.500056][ T9408] ext4: Unknown parameter 'euid' [ 183.538087][ T9403] EXT4-fs (loop4): can't get journal size [ 183.557168][ T9403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.797013][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.061690][ T9430] loop4: detected capacity change from 0 to 512 [ 184.071482][ T9433] loop1: detected capacity change from 0 to 64 [ 184.079021][ T9430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.112699][ T9430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.168309][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.190756][ T9430] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.277912][ T28] audit: type=1800 audit(1750189537.141:142): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1450" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 184.298359][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.365579][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.543511][ T9446] mmap: syz.0.1457 (9446) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.918925][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'. [ 185.391868][ T9452] loop1: detected capacity change from 0 to 32768 [ 185.409640][ T9452] XFS: ikeep mount option is deprecated. [ 185.469444][ T9452] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.514065][ T5804] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.590205][ T9463] loop2: detected capacity change from 0 to 40427 [ 185.603306][ T9463] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 185.612759][ T9463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 185.632263][ T9463] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 185.677129][ T9463] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 185.714897][ T9463] F2FS-fs (loop2): invalid crc value [ 185.725073][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 185.745029][ T5804] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 185.772429][ T9452] XFS (loop1): Ending clean mount [ 185.772905][ T9463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.779684][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.818328][ T9452] XFS (loop1): Quotacheck needed: Please wait. [ 185.835294][ T5804] usb 5-1: Product: syz [ 185.844152][ T5804] usb 5-1: Manufacturer: syz [ 185.854105][ T5804] usb 5-1: SerialNumber: syz [ 185.865124][ T5804] usb 5-1: config 0 descriptor?? [ 185.900986][ T9452] XFS (loop1): Quotacheck: Done. [ 185.983833][ T9463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 186.008759][ T9463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.111346][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.294012][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 186.300094][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 186.306354][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.319225][ T5804] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 186.415048][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.430197][ T5804] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 186.440153][ T5804] usb 5-1: media controller created [ 186.466950][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.530735][ T5804] zl10353_read_register: readreg error (reg=127, ret==0) [ 186.546167][ T5804] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 186.566168][ T5804] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 186.610727][ T5804] usb 5-1: USB disconnect, device number 2 [ 186.750068][ T5804] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 187.036269][ T9514] loop2: detected capacity change from 0 to 256 [ 187.111269][ T9514] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 187.177621][ T9514] syz.2.1481: attempt to access beyond end of device [ 187.177621][ T9514] loop2: rw=0, sector=311, nr_sectors = 1 limit=256 [ 187.587520][ T9528] loop4: detected capacity change from 0 to 2048 [ 187.632705][ T9528] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.666460][ T9528] NILFS (loop4): mounting unchecked fs [ 187.685265][ T5758] udevd[5758]: incorrect nilfs2 checksum on /dev/loop4 [ 187.773027][ T9528] NILFS (loop4): recovery complete [ 187.789337][ T9532] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.894828][ T28] audit: type=1800 audit(1750189540.761:143): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1485" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 188.131581][ T9524] loop2: detected capacity change from 0 to 32768 [ 188.370050][ T9525] loop1: detected capacity change from 0 to 32768 [ 188.413918][ T9525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1483 (9525) [ 188.482489][ T9525] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.498232][ T9544] devpts: called with bogus options [ 188.520677][ T9525] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 188.553900][ T9525] BTRFS info (device loop1): turning off barriers [ 188.560552][ T9525] BTRFS info (device loop1): setting nodatasum [ 188.593360][ T9525] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.634741][ T9525] BTRFS info (device loop1): use zstd compression, level 3 [ 188.642011][ T9525] BTRFS info (device loop1): using free space tree [ 188.722139][ T9556] loop2: detected capacity change from 0 to 1024 [ 189.347426][ T9537] loop4: detected capacity change from 0 to 40427 [ 189.390593][ T9537] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 189.402757][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.428643][ T9537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.465028][ T9537] F2FS-fs (loop4): invalid crc value [ 189.534901][ T9537] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.791635][ T9537] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.828974][ T9537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.585810][ T9585] loop1: detected capacity change from 0 to 32768 [ 190.655848][ T9585] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 190.844113][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.894189][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 191.045743][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.073634][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.097834][ T23] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 191.114117][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.143641][ T23] usb 3-1: config 0 descriptor?? [ 191.471005][ T9610] loop4: detected capacity change from 0 to 32768 [ 191.595916][ T28] audit: type=1800 audit(1750189544.471:144): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1494" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 191.622503][ T23] elan 0003:04F3:0755.0005: unbalanced delimiter at end of report description [ 191.655702][ T23] elan 0003:04F3:0755.0005: Hid Parse failed [ 191.661831][ T23] elan: probe of 0003:04F3:0755.0005 failed with error -22 [ 191.893146][ T5099] usb 3-1: USB disconnect, device number 5 [ 192.457481][ T9653] loop4: detected capacity change from 0 to 64 [ 192.588914][ T9658] loop1: detected capacity change from 0 to 512 [ 192.611484][ T9658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.670005][ T9658] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1508: iget: bad extended attribute block 1 [ 192.727550][ T9658] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1508: couldn't read orphan inode 15 (err -117) [ 192.751875][ T9658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.856816][ T9658] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 13: comm syz.1.1508: lblock 0 mapped to illegal pblock 13 (length 1) [ 192.911360][ T9658] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.1.1508: error -117 reading directory block [ 192.987457][ T9670] tipc: Enabling of bearer rejected, failed to enable media [ 193.049084][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.551931][ T9695] loop1: detected capacity change from 0 to 512 [ 193.572834][ T9695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.694484][ T9695] EXT4-fs (loop1): 1 truncate cleaned up [ 193.712692][ T28] audit: type=1326 audit(1750189546.581:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 193.747576][ T9695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.846366][ T28] audit: type=1326 audit(1750189546.581:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 193.924344][ T28] audit: type=1326 audit(1750189546.581:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 193.939983][ T9706] loop2: detected capacity change from 0 to 512 [ 193.970764][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.990142][ T28] audit: type=1326 audit(1750189546.581:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 194.035460][ T9706] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.065995][ T9706] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 194.146142][ T9706] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 194.203688][ T9706] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 194.261298][ T9706] System zones: 0-2, 18-18, 34-35 [ 194.277721][ T9706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.451433][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.462655][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.555283][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.776432][ T9735] loop1: detected capacity change from 0 to 256 [ 194.870176][ T9738] loop4: detected capacity change from 0 to 512 [ 194.889942][ T9738] ext4: Unknown parameter 'noacl' [ 194.918603][ T9735] FAT-fs (loop1): Directory bread(block 64) failed [ 194.939742][ T9735] FAT-fs (loop1): Directory bread(block 65) failed [ 194.939849][ T9735] FAT-fs (loop1): Directory bread(block 66) failed [ 194.939874][ T9735] FAT-fs (loop1): Directory bread(block 67) failed [ 194.939967][ T9735] FAT-fs (loop1): Directory bread(block 68) failed [ 194.939992][ T9735] FAT-fs (loop1): Directory bread(block 69) failed [ 194.940082][ T9735] FAT-fs (loop1): Directory bread(block 70) failed [ 194.940106][ T9735] FAT-fs (loop1): Directory bread(block 71) failed [ 194.940191][ T9735] FAT-fs (loop1): Directory bread(block 72) failed [ 194.940215][ T9735] FAT-fs (loop1): Directory bread(block 73) failed [ 195.183570][ T9745] loop4: detected capacity change from 0 to 512 [ 195.212615][ T9745] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 195.212638][ T9745] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 195.212651][ T9745] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 195.214992][ T9745] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 195.215010][ T9745] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 195.215306][ T9745] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.246445][ T9745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1534: bg 0: block 34: padding at end of block bitmap is not set [ 195.264378][ T9745] Quota error (device loop4): write_blk: dquota write failed [ 195.264549][ T9745] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 195.264588][ T9745] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1534: Failed to acquire dquot type 1 [ 195.277037][ T9745] EXT4-fs (loop4): 1 truncate cleaned up [ 195.322034][ T9750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1535'. [ 195.378364][ T9745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.629576][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.939954][ T9766] loop1: detected capacity change from 0 to 4096 [ 195.959124][ T9769] loop4: detected capacity change from 0 to 512 [ 196.008291][ T9772] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.075587][ T9769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.126006][ T9773] loop2: detected capacity change from 0 to 4096 [ 196.137211][ T9773] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 196.147481][ T9769] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.372814][ T28] audit: type=1800 audit(1750189549.241:149): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1542" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 196.421178][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.730621][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 196.802461][ T9789] loop4: detected capacity change from 0 to 1024 [ 196.832875][ T9789] EXT4-fs: Ignoring removed bh option [ 196.863975][ T9789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.906601][ T9789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.034144][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.633854][ T5099] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 198.102048][ T9820] loop1: detected capacity change from 0 to 32768 [ 198.134020][ T9820] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.170650][ T5099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.183364][ T5099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.193602][ T5099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 198.205724][ T5804] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 198.215727][ T5099] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.230657][ T5099] usb 5-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 198.243350][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.262757][ T9820] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 198.276005][ T5099] usb 5-1: config 0 descriptor?? [ 198.281966][ T9806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.292172][ T9820] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 198.325480][ T9820] XFS (loop1): Starting recovery (logdev: internal) [ 198.346001][ T9820] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 198.356779][ T9820] XFS (loop1): Unmount and run xfs_repair [ 198.362598][ T9820] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 198.370318][ T9820] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 198.379270][ T9820] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 198.388237][ T9820] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 198.397205][ T9820] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 198.406151][ T9820] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 198.415117][ T9820] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 198.424076][ T9820] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.433355][ T9820] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.443863][ T9820] XFS (loop1): log mount/recovery failed: error -74 [ 198.465062][ T9820] XFS (loop1): log mount failed [ 198.492302][ T5804] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.501152][ T5804] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.523788][ T5804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.533546][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.545017][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.558317][ T5804] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.567543][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.713685][ T5804] usb 3-1: Product: syz [ 198.718001][ T5804] usb 3-1: Manufacturer: syz [ 198.728230][ T5804] cdc_wdm 3-1:1.0: skipping garbage [ 198.733515][ T5804] cdc_wdm 3-1:1.0: skipping garbage [ 198.778249][ T5804] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 198.793806][ T5804] cdc_wdm 3-1:1.0: Unknown control protocol [ 198.819651][ T5099] nzxt-smart2 0003:1E71:2011.0006: hidraw0: USB HID v0.07 Device [HID 1e71:2011] on usb-dummy_hcd.4-1/input0 [ 199.030231][ T5807] usb 5-1: USB disconnect, device number 3 [ 199.152378][ T9835] loop1: detected capacity change from 0 to 1024 [ 199.206956][ T9835] syz.1.1563: attempt to access beyond end of device [ 199.206956][ T9835] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 199.223202][ T9835] Buffer I/O error on dev loop1, logical block 458752, async page read [ 199.233878][ T9835] syz.1.1563: attempt to access beyond end of device [ 199.233878][ T9835] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 199.253841][ T9835] Buffer I/O error on dev loop1, logical block 458752, async page read [ 199.712544][ T9847] loop1: detected capacity change from 0 to 512 [ 199.751883][ T9847] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1568: invalid indirect mapped block 256 (level 2) [ 199.819058][ T9847] EXT4-fs (loop1): 2 truncates cleaned up [ 199.855798][ T9847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.048699][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.060000][ T9854] loop4: detected capacity change from 0 to 512 [ 200.140349][ T9854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.222351][ T9854] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.284068][ T9858] loop1: detected capacity change from 0 to 512 [ 200.312484][ T9854] EXT4-fs (loop4): shut down requested (1) [ 200.333329][ T9858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.349750][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.354244][ T9858] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.572796][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.630430][ T9] usb 3-1: USB disconnect, device number 6 [ 200.941818][ T9875] ubi31: attaching mtd0 [ 200.972736][ T9875] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 201.318030][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 201.554007][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.606625][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.617379][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.625524][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.633539][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.644414][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.653627][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.764081][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 201.778450][ T23] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 201.793859][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.801904][ T23] usb 2-1: Product: syz [ 201.814460][ T23] usb 2-1: Manufacturer: syz [ 201.819112][ T23] usb 2-1: SerialNumber: syz [ 202.263065][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 202.386695][ T9914] loop2: detected capacity change from 0 to 4096 [ 202.456167][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 202.478939][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.502430][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.506472][ T9914] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 202.512971][ T9896] bridge_slave_0: entered allmulticast mode [ 202.545175][ T9896] bridge_slave_0: entered promiscuous mode [ 202.568422][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.576655][ T23] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 202.584813][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.595294][ T23] usb 2-1: USB disconnect, device number 5 [ 202.598829][ T9914] ntfs3: loop2: Failed to load $Extend (-22). [ 202.606679][ T9896] bridge_slave_1: entered allmulticast mode [ 202.626964][ T9914] ntfs3: loop2: Failed to initialize $Extend. [ 202.641193][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.696477][ T9896] bridge_slave_1: entered promiscuous mode [ 202.866957][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.897356][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.022009][ T9896] team0: Port device team_slave_0 added [ 203.056534][ T9896] team0: Port device team_slave_1 added [ 203.128512][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.153822][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.181489][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.230838][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.273835][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.364371][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.377480][ T9927] loop1: detected capacity change from 0 to 1024 [ 203.399398][ T9927] EXT4-fs: Ignoring removed i_version option [ 203.467428][ T9927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.567570][ T9927] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 203.625880][ T9896] hsr_slave_0: entered promiscuous mode [ 203.631744][ T9925] loop4: detected capacity change from 0 to 40427 [ 203.638846][ T9896] hsr_slave_1: entered promiscuous mode [ 203.661713][ T9925] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 203.675425][ T9896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.693829][ T9925] F2FS-fs (loop4): Image doesn't support compression [ 203.704099][ T9896] Cannot create hsr debugfs directory [ 203.713606][ T9925] F2FS-fs (loop4): heap/no_heap options were deprecated [ 203.724856][ T5773] Bluetooth: hci4: command tx timeout [ 203.761541][ T9925] F2FS-fs (loop4): Image doesn't support compression [ 203.791948][ T9925] F2FS-fs (loop4): invalid crc value [ 203.807363][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.846895][ T9925] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.999053][ T9925] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.205307][ T8659] syz-executor: attempt to access beyond end of device [ 204.205307][ T8659] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.248346][ T8659] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.446112][ T9896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.466833][ T9896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.498220][ T9896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.524652][ T9896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.821852][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.881943][ T9942] loop2: detected capacity change from 0 to 32768 [ 204.889869][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.922435][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.929655][ T9024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.973268][ T9942] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.002681][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.009911][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.050008][ T9950] loop1: detected capacity change from 0 to 8192 [ 205.096369][ T9896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.130924][ T9950] loop1: p1 < > p2 < p5 > p3 p4 [ 205.141453][ T9896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.193020][ T9950] loop1: p3 start 83890176 is beyond EOD, truncated [ 205.213974][ T9942] XFS (loop2): Ending clean mount [ 205.260268][ T9950] loop1: p4 size 16776960 extends beyond EOD, truncated [ 205.269736][ T9942] XFS (loop2): Quotacheck needed: Please wait. [ 205.292673][ T9950] loop1: p5 size 16776960 extends beyond EOD, truncated [ 205.444062][ T9942] XFS (loop2): Quotacheck: Done. [ 205.722709][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.804527][ T5773] Bluetooth: hci4: command tx timeout [ 205.831222][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 205.841944][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 205.851004][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.866121][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 205.877452][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.556431][ T9896] veth0_vlan: entered promiscuous mode [ 206.580056][ T9992] loop2: detected capacity change from 0 to 4096 [ 206.600734][ T9896] veth1_vlan: entered promiscuous mode [ 206.602893][ T9992] EXT4-fs: Ignoring removed oldalloc option [ 206.670456][ T9992] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.738499][ T9992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.789491][ T9896] veth0_macvtap: entered promiscuous mode [ 206.802905][ T9896] veth1_macvtap: entered promiscuous mode [ 206.885502][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.906304][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.993948][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.023917][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.043807][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.068156][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.097897][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.114049][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.133882][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.164880][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.396402][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.436808][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.459206][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.494851][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.513999][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.537643][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.559906][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.581085][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.599513][T10013] loop2: detected capacity change from 0 to 512 [ 207.607603][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.632941][T10009] tipc: Started in network mode [ 207.650104][ T9997] loop4: detected capacity change from 0 to 40427 [ 207.663079][T10009] tipc: Node identity ac14140f, cluster identity 4711 [ 207.670675][ T9997] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 207.701261][ T9997] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 207.713565][T10013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 207.718676][T10009] tipc: New replicast peer: 255.255.255.255 [ 207.736795][T10009] tipc: Enabled bearer , priority 10 [ 207.767598][ T9997] F2FS-fs (loop4): invalid crc value [ 207.794570][T10013] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.822066][T10013] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 207.824011][ T9997] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.832950][T10013] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 207.849239][T10013] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1631: Failed to acquire dquot type 0 [ 207.885752][ T5773] Bluetooth: hci4: command tx timeout [ 207.968926][ T9032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.990011][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 207.997601][ T9997] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 208.006354][ T9997] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 208.055621][ T9896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.123991][ T9896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.149932][ T9896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.170629][ T9896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.186595][T10016] f2fs_ckpt-7:4: attempt to access beyond end of device [ 208.186595][T10016] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.251725][T10024] loop2: detected capacity change from 0 to 1024 [ 208.252358][T10016] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 208.271731][T10024] EXT4-fs: Ignoring removed orlov option [ 208.289337][T10024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.323155][ T9032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.345858][T10024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.538900][ T9032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.676585][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.712886][ T9032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.745383][ T5804] tipc: Node number set to 2886997007 [ 208.827813][ T9028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.861677][ T9028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.001848][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.030145][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.450314][T10045] usb usb8: usbfs: process 10045 (syz.5.1582) did not claim interface 0 before use [ 209.895124][T10038] loop2: detected capacity change from 0 to 32768 [ 209.941710][T10038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1640 (10038) [ 209.953965][T10059] binder: 10058:10059 ioctl c0306201 0 returned -14 [ 209.964027][ T5773] Bluetooth: hci4: command tx timeout [ 209.975322][T10059] binder: 10058:10059 ioctl c020f509 0 returned -22 [ 210.012023][T10040] loop1: detected capacity change from 0 to 32768 [ 210.022229][T10038] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.032887][ T5805] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.086544][T10038] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 210.101146][T10038] BTRFS info (device loop2): enabling auto defrag [ 210.147122][T10040] non-latin1 character 0x466c found in JFS file name [ 210.154348][T10038] BTRFS info (device loop2): use no compression [ 210.154371][T10038] BTRFS info (device loop2): force clearing of disk cache [ 210.154429][T10038] BTRFS info (device loop2): max_inline at 4096 [ 210.154450][T10038] BTRFS info (device loop2): disabling free space tree [ 210.227132][T10040] mount with iocharset=utf8 to access [ 210.250629][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.296666][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.308345][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.321565][ T5805] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.331594][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.349962][ T5805] usb 5-1: config 0 descriptor?? [ 210.398390][T10038] BTRFS info (device loop2): enabling ssd optimizations [ 210.433801][T10038] BTRFS info (device loop2): auto enabling async discard [ 210.469068][T10038] BTRFS info (device loop2): rebuilding free space tree [ 210.545839][T10038] BTRFS info (device loop2): disabling free space tree [ 210.552851][T10038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.604079][T10038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.810098][ T5805] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 210.897366][ T5805] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 210.916242][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'. [ 210.971565][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.162619][ T5805] usb 5-1: USB disconnect, device number 4 [ 211.383896][ T28] audit: type=1326 audit(1750189564.251:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 211.490469][ T28] audit: type=1326 audit(1750189564.251:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 211.560983][ T28] audit: type=1326 audit(1750189564.291:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 211.669971][ T28] audit: type=1326 audit(1750189564.321:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 211.833856][ T28] audit: type=1326 audit(1750189564.391:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 211.929654][ T28] audit: type=1326 audit(1750189564.391:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb69a9c11e5 code=0x7ffc0000 [ 212.022878][ T28] audit: type=1326 audit(1750189564.421:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 212.096781][ T9032] hsr_slave_0: left promiscuous mode [ 212.160217][ T28] audit: type=1326 audit(1750189564.471:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69a98e929 code=0x7ffc0000 [ 212.199795][ T9032] hsr_slave_1: left promiscuous mode [ 212.286641][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.364240][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.434815][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.442282][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.579188][ T9032] batman_adv: batadv0: Interface deactivated: vlan1 [ 212.639074][ T9032] batman_adv: batadv0: Removing interface: vlan1 [ 212.679539][ T9032] bridge_slave_1: left allmulticast mode [ 212.699589][ T9032] bridge_slave_1: left promiscuous mode [ 212.707913][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.730819][ T9032] bridge_slave_0: left allmulticast mode [ 212.752962][ T9032] bridge_slave_0: left promiscuous mode [ 212.772466][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.947973][ T9032] veth1_macvtap: left promiscuous mode [ 212.973982][ T9032] veth0_macvtap: left promiscuous mode [ 213.003925][ T9032] veth1_vlan: left promiscuous mode [ 213.009296][ T9032] veth0_vlan: left promiscuous mode [ 213.281452][T10171] loop4: detected capacity change from 0 to 512 [ 213.307799][T10171] EXT4-fs: Ignoring removed nobh option [ 213.388780][T10171] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1667: corrupted inode contents [ 213.461686][T10171] EXT4-fs (loop4): Remounting filesystem read-only [ 213.473937][T10171] __quota_error: 1 callbacks suppressed [ 213.473953][T10171] Quota error (device loop4): write_blk: dquota write failed [ 213.489540][T10171] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 213.505463][T10171] EXT4-fs (loop4): 1 truncate cleaned up [ 213.533102][T10171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.598967][T10171] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.751294][ T9032] pimreg (unregistering): left allmulticast mode [ 213.843843][ T5805] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 213.846097][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.051431][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.085029][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.097793][T10187] loop4: detected capacity change from 0 to 512 [ 214.118005][ T5805] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.120828][T10187] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.151007][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.165789][T10187] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.178189][T10187] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 214.191856][ T5805] usb 2-1: config 0 descriptor?? [ 214.225292][ T5805] hub 2-1:0.0: USB hub found [ 214.242956][T10187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 214.258020][T10187] System zones: 1-12 [ 214.313201][T10187] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.1672: corrupted in-inode xattr: e_value size too large [ 214.372472][T10187] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1672: couldn't read orphan inode 15 (err -117) [ 214.408711][T10187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.457480][ T5805] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 214.499762][ T5805] usbhid 2-1:0.0: can't add hid device: -71 [ 214.533593][ T5805] usbhid: probe of 2-1:0.0 failed with error -71 [ 214.571854][ T5805] usb 2-1: USB disconnect, device number 6 [ 214.587305][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.747464][T10190] loop4: detected capacity change from 0 to 256 [ 214.849700][T10190] FAT-fs (loop4): Directory bread(block 64) failed [ 214.860229][T10190] FAT-fs (loop4): Directory bread(block 65) failed [ 214.898635][T10190] FAT-fs (loop4): Directory bread(block 66) failed [ 214.905671][T10190] FAT-fs (loop4): Directory bread(block 67) failed [ 214.922709][T10190] FAT-fs (loop4): Directory bread(block 68) failed [ 214.930987][T10190] FAT-fs (loop4): Directory bread(block 69) failed [ 214.958938][T10190] FAT-fs (loop4): Directory bread(block 70) failed [ 214.987909][T10190] FAT-fs (loop4): Directory bread(block 71) failed [ 214.999484][T10190] FAT-fs (loop4): Directory bread(block 72) failed [ 215.019618][T10190] FAT-fs (loop4): Directory bread(block 73) failed [ 215.217401][ T9032] team0 (unregistering): Port device team_slave_1 removed [ 215.342851][T10192] loop1: detected capacity change from 0 to 2048 [ 215.444574][ T9032] team0 (unregistering): Port device team_slave_0 removed [ 215.444974][T10192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.639546][ T9032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.809762][ T9032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.914942][ T5099] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.138425][ T5099] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.153787][ T5099] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.173898][ T5099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.209108][ T5099] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.249689][ T5099] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.286499][ T5099] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.299817][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.336200][ T5099] usb 5-1: Product: syz [ 216.342830][ T5099] usb 5-1: Manufacturer: syz [ 216.372495][ T5099] cdc_wdm 5-1:1.0: skipping garbage [ 216.393783][ T5099] cdc_wdm 5-1:1.0: skipping garbage [ 216.407265][ T5099] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 216.427917][ T5099] cdc_wdm 5-1:1.0: Unknown control protocol [ 216.578632][T10211] loop1: detected capacity change from 0 to 512 [ 216.600427][T10211] EXT4-fs: Ignoring removed orlov option [ 216.622982][T10211] EXT4-fs: Ignoring removed oldalloc option [ 216.626515][T10209] loop2: detected capacity change from 0 to 1024 [ 216.634782][T10211] ext4: Unknown parameter 'defcontext' [ 216.675937][ T27] usb 5-1: USB disconnect, device number 5 [ 217.233069][T10226] loop2: detected capacity change from 0 to 1764 [ 217.487279][ T9032] bond0 (unregistering): Released all slaves [ 217.689797][T10229] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1690'. [ 218.144140][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.324076][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 218.351050][ T23] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 218.374851][ T23] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 218.398357][ T23] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 218.445187][ T23] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 218.451058][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1701'. [ 218.484671][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.489843][T10262] loop1: detected capacity change from 0 to 512 [ 218.511859][ T23] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.538496][ T23] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.557345][ T23] usb 6-1: Product: syz [ 218.567462][ T23] usb 6-1: Manufacturer: syz [ 218.577587][ T23] usb 6-1: SerialNumber: syz [ 218.580907][T10262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.592299][ T23] usb 6-1: config 0 descriptor?? [ 218.616439][ T23] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.658385][ T23] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.713200][T10262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.792977][T10262] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.954356][ T23] usb 6-1: USB disconnect, device number 2 [ 218.960287][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 218.995591][ T23] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 219.047341][T10286] loop4: detected capacity change from 0 to 256 [ 219.069101][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.096931][T10286] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.317255][T10292] loop1: detected capacity change from 0 to 512 [ 219.328037][T10294] loop2: detected capacity change from 0 to 1024 [ 219.387852][T10292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.402649][T10294] hfsplus: bad catalog entry type [ 219.448750][ T3418] hfsplus: b-tree write err: -5, ino 4 [ 219.454900][T10292] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.530905][T10292] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.1708: invalid size [ 219.545729][T10292] EXT4-fs (loop1): Remounting filesystem read-only [ 219.637164][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.656437][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 219.689453][ T4314] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.735629][ T4314] Quota error (device loop1): write_blk: dquota write failed [ 219.743062][ T4314] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 220.012930][T10316] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1718'. [ 220.223919][ T28] audit: type=1326 audit(1750189573.091:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 220.308052][ T28] audit: type=1326 audit(1750189573.091:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 220.428077][ T28] audit: type=1326 audit(1750189573.091:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f247c18d290 code=0x7ffc0000 [ 220.510207][ T28] audit: type=1326 audit(1750189573.091:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f247c18d290 code=0x7ffc0000 [ 220.567398][T10342] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.612698][ T28] audit: type=1326 audit(1750189573.091:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 220.710394][ T28] audit: type=1326 audit(1750189573.111:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 220.772815][ T28] audit: type=1326 audit(1750189573.111:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 220.859105][ T28] audit: type=1326 audit(1750189573.111:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18e929 code=0x7ffc0000 [ 221.152962][T10356] loop5: detected capacity change from 0 to 64 [ 221.345029][T10356] hfs: request for non-existent node 24 in B*Tree [ 221.373985][T10356] hfs: request for non-existent node 24 in B*Tree [ 221.762101][T10349] loop2: detected capacity change from 0 to 32768 [ 221.800726][T10344] loop4: detected capacity change from 0 to 40427 [ 221.840685][T10344] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 221.871114][T10344] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.880650][T10349] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.950704][T10344] F2FS-fs (loop4): invalid crc value [ 222.010987][T10344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.030123][T10384] loop5: detected capacity change from 0 to 128 [ 222.122064][T10384] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.131780][T10388] loop1: detected capacity change from 0 to 256 [ 222.148561][T10388] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.160932][T10388] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 222.207101][T10388] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 222.223011][T10384] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.224996][T10349] XFS (loop2): Ending clean mount [ 222.297265][T10349] XFS (loop2): Quotacheck needed: Please wait. [ 222.313058][T10344] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.344146][T10344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.416893][ T9896] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.424922][T10349] XFS (loop2): Quotacheck: Done. [ 222.844710][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.597529][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 223.818199][T10433] loop5: detected capacity change from 0 to 512 [ 223.841297][T10436] loop4: detected capacity change from 0 to 256 [ 223.882316][T10433] EXT4-fs error (device loop5): __ext4_iget:5047: inode #13: block 40192: comm syz.5.1752: invalid block [ 223.987607][T10436] FAT-fs (loop4): Directory bread(block 64) failed [ 224.019029][T10436] FAT-fs (loop4): Directory bread(block 65) failed [ 224.026100][T10433] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1752: couldn't read orphan inode 13 (err -117) [ 224.037332][T10443] loop2: detected capacity change from 0 to 128 [ 224.068619][T10436] FAT-fs (loop4): Directory bread(block 66) failed [ 224.076586][T10436] FAT-fs (loop4): Directory bread(block 67) failed [ 224.083236][T10436] FAT-fs (loop4): Directory bread(block 68) failed [ 224.105893][T10433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.115608][T10443] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.157162][T10446] loop1: detected capacity change from 0 to 128 [ 224.163581][T10436] FAT-fs (loop4): Directory bread(block 69) failed [ 224.173835][T10443] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.192291][T10436] FAT-fs (loop4): Directory bread(block 70) failed [ 224.221500][T10446] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.238518][T10436] FAT-fs (loop4): Directory bread(block 71) failed [ 224.253955][T10436] FAT-fs (loop4): Directory bread(block 72) failed [ 224.263377][T10433] EXT4-fs: Ignoring removed bh option [ 224.268933][T10436] FAT-fs (loop4): Directory bread(block 73) failed [ 224.307144][T10433] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.334157][T10446] ext4 filesystem being mounted at /471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.454969][T10436] syz.4.1754: attempt to access beyond end of device [ 224.454969][T10436] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 224.473256][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.487307][T10436] syz.4.1754: attempt to access beyond end of device [ 224.487307][T10436] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 224.594859][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.604739][ T9896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.861526][T10461] loop1: detected capacity change from 0 to 1024 [ 224.872057][T10457] loop5: detected capacity change from 0 to 2048 [ 224.891497][T10457] UDF-fs: bad mount option "uid=00000000004294967295" or missing value [ 225.087621][T10468] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1764'. [ 225.646668][T10489] loop2: detected capacity change from 0 to 256 [ 225.697549][T10493] loop1: detected capacity change from 0 to 128 [ 225.730249][T10489] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.781953][T10493] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.783790][T10489] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 225.843839][T10489] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 225.867982][T10493] ext4 filesystem being mounted at /475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.915546][T10502] loop4: detected capacity change from 0 to 256 [ 226.004425][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.030945][T10502] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 226.041270][T10489] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 226.068736][T10489] exFAT-fs (loop2): Filesystem has been set read-only [ 226.203194][T10508] loop5: detected capacity change from 0 to 512 [ 226.330777][T10508] EXT4-fs (loop5): 1 truncate cleaned up [ 226.353674][T10508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.565091][ T9896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.974787][T10530] loop2: detected capacity change from 0 to 256 [ 227.045464][T10530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 227.120277][T10506] loop1: detected capacity change from 0 to 40427 [ 227.169269][T10506] F2FS-fs (loop1): Invalid segment/section count (24 != 1 * 1) [ 227.190618][T10506] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 227.233048][T10506] F2FS-fs (loop1): invalid crc value [ 227.301111][T10506] F2FS-fs (loop1): Found nat_bits in checkpoint [ 227.494104][T10506] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.543810][T10506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 227.740386][T10556] loop4: detected capacity change from 0 to 1024 [ 227.856691][T10556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.186144][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.389847][T10575] loop4: detected capacity change from 0 to 512 [ 228.413245][T10554] loop2: detected capacity change from 0 to 32768 [ 228.480733][T10575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.524654][T10575] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.924046][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.616652][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 229.651868][T10617] loop5: detected capacity change from 0 to 4096 [ 229.728973][T10626] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.028002][T10634] dvmrp1: left allmulticast mode [ 230.080828][T10637] loop5: detected capacity change from 0 to 1024 [ 230.172699][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 230.810722][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1831'. [ 231.144821][T10663] loop2: detected capacity change from 0 to 64 [ 231.226971][T10660] loop4: detected capacity change from 0 to 4096 [ 231.314362][T10666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.823829][ T5804] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 231.933925][ T5807] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 232.021233][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.032250][ T5804] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 232.041562][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.051311][ T5804] usb 6-1: config 0 descriptor?? [ 232.116145][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 232.123224][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.137454][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.147296][ T5807] usb 5-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 232.156428][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.167026][ T5807] usb 5-1: config 0 descriptor?? [ 232.465283][ T5804] hid (null): report_id 0 is invalid [ 232.474325][ T5804] wacom 0003:056A:00ED.0008: report_id 0 is invalid [ 232.484542][ T5804] wacom 0003:056A:00ED.0008: item 0 0 1 8 parsing failed [ 232.492227][ T5804] wacom 0003:056A:00ED.0008: parse failed [ 232.498408][ T5804] wacom: probe of 0003:056A:00ED.0008 failed with error -22 [ 232.585483][ T5807] wacom 0003:056A:033D.0009: item fetching failed at offset 3/5 [ 232.593601][ T5807] wacom 0003:056A:033D.0009: parse failed [ 232.599517][ T5807] wacom: probe of 0003:056A:033D.0009 failed with error -22 [ 232.669060][ T5804] usb 6-1: USB disconnect, device number 3 [ 232.788252][ T5807] usb 5-1: USB disconnect, device number 6 [ 233.421429][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 233.549411][T10690] loop1: detected capacity change from 0 to 1024 [ 233.672386][T10696] loop4: detected capacity change from 0 to 512 [ 233.703682][T10699] loop2: detected capacity change from 0 to 256 [ 233.721889][ T9026] hfsplus: b-tree write err: -5, ino 4 [ 233.737272][T10699] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 233.875742][T10704] loop1: detected capacity change from 0 to 64 [ 233.912547][T10696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.995288][T10696] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.225971][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.321015][T10714] loop5: detected capacity change from 0 to 1024 [ 234.363369][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 236.693743][ C1] sched: RT throttling activated [ 236.783658][T10773] loop4: detected capacity change from 0 to 131072 [ 236.800063][T10773] F2FS-fs (loop4): build fault injection attr: rate: 7, type: 0x7ffff [ 236.808642][T10773] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x40004 [ 236.816943][T10773] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 236.828123][T10773] F2FS-fs (loop4): invalid crc value [ 236.849588][T10773] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 236.864189][T10773] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 236.879730][T10773] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 236.891444][T10773] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.925880][T10773] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 236.938472][T10773] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 236.943857][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 236.971294][T10773] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 236.991895][T10773] F2FS-fs (loop4): Failed to read root inode [ 237.187647][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.209678][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.250567][ T9] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 237.277427][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.298915][ T9] usb 2-1: config 0 descriptor?? [ 237.319092][T10811] loop5: detected capacity change from 0 to 1024 [ 237.347766][T10811] EXT4-fs: Ignoring removed orlov option [ 237.353468][T10811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.429310][T10811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c118, mo2=0002] [ 237.505059][T10811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.633989][T10799] loop2: detected capacity change from 0 to 32768 [ 237.647365][T10799] XFS: ikeep mount option is deprecated. [ 237.665200][ T9896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.688391][T10799] XFS: ikeep mount option is deprecated. [ 237.701024][T10799] XFS: noikeep mount option is deprecated. [ 237.740781][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.754313][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.761392][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.768870][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.776654][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.783582][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.791001][ T9] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 237.802845][ T9] hkems 0003:2006:0118.000A: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 237.814723][ T9] hkems 0003:2006:0118.000A: no inputs found [ 237.820743][ T9] hkems 0003:2006:0118.000A: force feedback init failed [ 237.826668][T10799] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.873996][T10828] loop5: detected capacity change from 0 to 256 [ 237.881208][T10828] exfat: Deprecated parameter 'utf8' [ 237.922650][T10828] exfat: Deprecated parameter 'namecase' [ 237.951074][ T9] usb 2-1: USB disconnect, device number 7 [ 237.980206][T10828] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 238.074189][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 238.074203][ T28] audit: type=1800 audit(1750189590.951:168): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1889" name="file2" dev="loop5" ino=1048678 res=0 errno=0 [ 238.151047][T10832] fido_id[10832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 238.206886][T10799] XFS (loop2): Ending clean mount [ 238.420631][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.703392][T10845] loop1: detected capacity change from 0 to 512 [ 238.771218][T10845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.862970][T10845] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1895: bg 0: block 5: invalid block bitmap [ 238.967447][T10845] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 239.021068][T10845] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1895: invalid indirect mapped block 3 (level 2) [ 239.080971][T10845] EXT4-fs (loop1): 2 truncates cleaned up [ 239.113492][T10845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.258097][T10859] loop5: detected capacity change from 0 to 4096 [ 239.340541][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.545722][T10865] loop2: detected capacity change from 0 to 1764 [ 239.589381][T10865] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 239.828657][T10872] loop1: detected capacity change from 0 to 256 [ 239.906870][T10851] loop4: detected capacity change from 0 to 32768 [ 239.991443][T10851] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 240.235228][T10851] XFS (loop4): Ending clean mount [ 240.262632][T10851] XFS (loop4): Quotacheck needed: Please wait. [ 240.329963][T10851] XFS (loop4): Quotacheck: Done. [ 240.363999][ T5825] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.478343][ T8659] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 240.585148][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 240.624627][ T5825] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 240.632855][ T5825] usb 3-1: config 0 has no interface number 0 [ 240.671103][ T5825] usb 3-1: config 0 interface 247 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.704227][ T5825] usb 3-1: config 0 interface 247 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.730421][ T5825] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 240.749757][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.795039][ T5825] usb 3-1: config 0 descriptor?? [ 241.211262][ T5825] kye 0003:0458:0153.000B: unbalanced collection at end of report description [ 241.234520][ T5825] kye 0003:0458:0153.000B: parse failed [ 241.240180][ T5825] kye: probe of 0003:0458:0153.000B failed with error -22 [ 241.434373][ T5825] usb 3-1: USB disconnect, device number 7 [ 241.478830][T10915] loop1: detected capacity change from 0 to 32768 [ 241.578291][T10915] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 241.604504][T10936] loop4: detected capacity change from 0 to 256 [ 241.723243][T10936] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.754365][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 241.924745][T10944] loop5: detected capacity change from 0 to 512 [ 241.931207][T10947] syz.1.1931: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 242.006785][T10944] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 242.015774][T10947] CPU: 1 PID: 10947 Comm: syz.1.1931 Not tainted 6.6.93-syzkaller #0 [ 242.023894][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.033970][T10947] Call Trace: [ 242.037264][T10947] [ 242.040207][T10947] dump_stack_lvl+0x16c/0x230 [ 242.044919][T10947] ? show_regs_print_info+0x20/0x20 [ 242.050145][T10947] ? load_image+0x3b0/0x3b0 [ 242.054681][T10947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 242.061124][T10947] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 242.067659][T10947] warn_alloc+0x210/0x300 [ 242.072017][T10947] ? stack_trace_save+0x9c/0xe0 [ 242.076889][T10947] ? zone_watermark_ok_safe+0x230/0x230 [ 242.082462][T10947] ? kasan_set_track+0x5f/0x70 [ 242.087245][T10947] ? kasan_set_track+0x4e/0x70 [ 242.092031][T10947] ? __kasan_kmalloc+0x8f/0xa0 [ 242.096823][T10947] ? xsk_init_queue+0xb0/0x110 [ 242.101605][T10947] ? xsk_setsockopt+0x43c/0x6f0 [ 242.106470][T10947] ? do_sock_setsockopt+0x254/0x3e0 [ 242.111688][T10947] ? __x64_sys_setsockopt+0x1be/0x250 [ 242.117081][T10947] __vmalloc_node_range+0x126/0x1320 [ 242.122421][T10947] ? free_vm_area+0x50/0x50 [ 242.126964][T10947] vmalloc_user+0x74/0x80 [ 242.131318][T10947] ? xskq_create+0xbf/0x170 [ 242.135833][T10947] xskq_create+0xbf/0x170 [ 242.140159][T10947] xsk_init_queue+0xb0/0x110 [ 242.144742][T10947] xsk_setsockopt+0x43c/0x6f0 [ 242.149412][T10947] ? xsk_poll+0x670/0x670 [ 242.153746][T10947] ? aa_sock_opt_perm+0x74/0x100 [ 242.158689][T10947] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 242.164234][T10947] ? security_socket_setsockopt+0x7e/0xa0 [ 242.169944][T10947] ? xsk_poll+0x670/0x670 [ 242.174268][T10947] do_sock_setsockopt+0x254/0x3e0 [ 242.179289][T10947] ? __ia32_sys_recv+0xb0/0xb0 [ 242.184050][T10947] ? __fdget+0x180/0x210 [ 242.188292][T10947] __x64_sys_setsockopt+0x1be/0x250 [ 242.193482][T10947] do_syscall_64+0x55/0xb0 [ 242.197890][T10947] ? clear_bhb_loop+0x40/0x90 [ 242.202558][T10947] ? clear_bhb_loop+0x40/0x90 [ 242.207224][T10947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.213114][T10947] RIP: 0033:0x7fb69a98e929 [ 242.217519][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.237123][T10947] RSP: 002b:00007fb69a7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.245528][T10947] RAX: ffffffffffffffda RBX: 00007fb69abb5fa0 RCX: 00007fb69a98e929 [ 242.253491][T10947] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 242.261452][T10947] RBP: 00007fb69aa10b39 R08: 0000000000000004 R09: 0000000000000000 [ 242.269414][T10947] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.277379][T10947] R13: 0000000000000000 R14: 00007fb69abb5fa0 R15: 00007ffe925f8c38 [ 242.285354][T10947] [ 242.347088][T10947] Mem-Info: [ 242.350330][T10947] active_anon:6767 inactive_anon:1 isolated_anon:0 [ 242.350330][T10947] active_file:10436 inactive_file:39985 isolated_file:0 [ 242.350330][T10947] unevictable:768 dirty:323 writeback:73 [ 242.350330][T10947] slab_reclaimable:6075 slab_unreclaimable:97632 [ 242.350330][T10947] mapped:24893 shmem:1448 pagetables:785 [ 242.350330][T10947] sec_pagetables:0 bounce:0 [ 242.350330][T10947] kernel_misc_reclaimable:0 [ 242.350330][T10947] free:1350630 free_pcp:12393 free_cma:0 [ 242.477707][T10947] Node 0 active_anon:27068kB inactive_anon:4kB active_file:41744kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99572kB dirty:992kB writeback:92kB shmem:4256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 242.534847][T10944] block device autoloading is deprecated and will be removed. [ 242.550798][T10944] EXT4-fs (loop5): external journal has bad superblock [ 242.623918][T10947] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.704459][T10947] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.798933][T10947] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 242.824569][T10947] Node 0 DMA32 free:1508492kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:28824kB inactive_anon:4kB active_file:41744kB inactive_file:158412kB unevictable:1536kB writepending:1084kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:5108kB local_pcp:4132kB free_cma:0kB [ 242.924863][T10947] lowmem_reserve[]: 0 0 1 1 1 [ 242.929655][T10947] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.015016][T10947] lowmem_reserve[]: 0 0 0 0 0 [ 243.019815][T10947] Node 1 Normal free:3897840kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23744kB local_pcp:11872kB free_cma:0kB [ 243.110933][T10947] lowmem_reserve[]: 0 0 0 0 0 [ 243.116637][T10947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.129981][ T28] audit: type=1326 audit(1750189596.001:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.134212][T10947] Node 0 DMA32: 226*4kB (UME) 1560*8kB (UME) 770*16kB (UME) 667*32kB (UME) 438*64kB (UME) 187*128kB (UME) 52*256kB (UME) 23*512kB (UME) 10*1024kB (UME) 2*2048kB (M) 334*4096kB (UM) = 1506504kB [ 243.174778][T10947] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 243.196545][T10947] Node 1 Normal: 288*4kB (UME) 64*8kB (UME) 51*16kB (UME) 70*32kB (UME) 28*64kB (UE) 11*128kB (UME) 1*256kB (U) 1*512kB (M) 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3897840kB [ 243.234359][ T28] audit: type=1326 audit(1750189596.031:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.268781][T10947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.293873][T10947] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 243.314211][ T28] audit: type=1326 audit(1750189596.061:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1650f8d290 code=0x7ffc0000 [ 243.337410][T10947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.363941][T10947] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 243.373282][T10947] 53367 total pagecache pages [ 243.404770][ T28] audit: type=1326 audit(1750189596.061:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.434440][T10947] 1 pages in swap cache [ 243.438662][T10947] Free swap = 124728kB [ 243.442828][T10947] Total swap = 124996kB [ 243.464789][T10947] 2097051 pages RAM [ 243.486478][T10947] 0 pages HighMem/MovableOnly [ 243.491212][T10947] 416120 pages reserved [ 243.534610][ T28] audit: type=1326 audit(1750189596.061:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.547026][T10947] 0 pages cma reserved [ 243.609578][ T28] audit: type=1326 audit(1750189596.071:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.674858][ T28] audit: type=1326 audit(1750189596.071:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.743807][ T28] audit: type=1326 audit(1750189596.071:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1650f8e929 code=0x7ffc0000 [ 243.879991][T10998] loop5: detected capacity change from 0 to 164 [ 243.910131][T10998] rock: directory entry would overflow storage [ 243.933899][T10998] rock: sig=0x66, size=4, remaining=3 [ 244.005420][T10962] loop4: detected capacity change from 0 to 32768 [ 244.033523][T10962] XFS: attr2 mount option is deprecated. [ 244.117919][T10962] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.467977][T11028] loop5: detected capacity change from 0 to 164 [ 244.490980][T10962] XFS (loop4): Ending clean mount [ 244.534666][T11028] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.543412][T11031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1957'. [ 244.568757][T10962] XFS (loop4): Quotacheck needed: Please wait. [ 244.569792][T11028] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.623968][T11028] Symlink component flag not implemented [ 244.656493][T10962] XFS (loop4): Quotacheck: Done. [ 244.694449][T11028] Symlink component flag not implemented [ 244.700222][T11028] Symlink component flag not implemented (7) [ 244.710707][T11028] Symlink component flag not implemented (116) [ 244.853538][T11038] loop2: detected capacity change from 0 to 1024 [ 244.874958][T11038] EXT4-fs: Ignoring removed orlov option [ 244.901908][ T8659] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.918350][T11038] EXT4-fs: Ignoring removed bh option [ 244.924864][T11038] EXT4-fs: Ignoring removed bh option [ 244.985151][T11038] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.243111][T11049] loop1: detected capacity change from 0 to 1764 [ 245.335764][ T5766] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 245.370835][T11049] ISOFS: unable to read i-node block [ 245.711739][T11065] loop4: detected capacity change from 0 to 1024 [ 245.794095][ T9032] hfsplus: b-tree write err: -5, ino 4 [ 245.904900][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 246.127243][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 246.145722][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.173783][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.212876][ T9] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 246.223972][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.252081][ T9] usb 2-1: config 0 descriptor?? [ 246.496059][T11082] loop4: detected capacity change from 0 to 256 [ 246.605828][T11082] FAT-fs (loop4): Directory bread(block 64) failed [ 246.645729][T11082] FAT-fs (loop4): Directory bread(block 65) failed [ 246.652445][T11082] FAT-fs (loop4): Directory bread(block 66) failed [ 246.691298][T11082] FAT-fs (loop4): Directory bread(block 67) failed [ 246.697447][ T9] hid-multitouch 0003:1FD2:6007.000C: report_id 1023902090 is invalid [ 246.723140][T11082] FAT-fs (loop4): Directory bread(block 68) failed [ 246.730306][ T9] hid-multitouch 0003:1FD2:6007.000C: item 0 4 1 8 parsing failed [ 246.740054][T11082] FAT-fs (loop4): Directory bread(block 69) failed [ 246.754686][ T9] hid-multitouch: probe of 0003:1FD2:6007.000C failed with error -22 [ 246.760452][T11082] FAT-fs (loop4): Directory bread(block 70) failed [ 246.787292][T11070] loop2: detected capacity change from 0 to 40427 [ 246.794338][T11082] FAT-fs (loop4): Directory bread(block 71) failed [ 246.800999][T11082] FAT-fs (loop4): Directory bread(block 72) failed [ 246.827144][T11070] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 246.840862][T11082] FAT-fs (loop4): Directory bread(block 73) failed [ 246.852920][T11070] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.893857][T11070] F2FS-fs (loop2): invalid crc value [ 246.903616][ T9] usb 2-1: USB disconnect, device number 8 [ 246.959483][T11070] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.126785][T11070] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.154958][T11070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.398259][T11104] loop5: detected capacity change from 0 to 8192 [ 247.450207][T11104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.489950][T11104] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 247.499713][T11104] REISERFS (device loop5): using ordered data mode [ 247.508686][T11104] reiserfs: using flush barriers [ 247.582032][T11104] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.614594][T11104] REISERFS (device loop5): checking transaction log (loop5) [ 247.858253][T11104] REISERFS (device loop5): Using tea hash to sort names [ 247.894205][T11104] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 248.306759][T11133] loop4: detected capacity change from 0 to 64 [ 248.392641][T11135] sp0: Synchronizing with TNC [ 248.724277][T11149] loop1: detected capacity change from 0 to 256 [ 248.746058][T11149] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.799088][T11149] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 248.809480][T11151] loop2: detected capacity change from 0 to 1024 [ 248.882953][T11149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 248.924041][T11151] hfsplus: bad catalog entry type [ 249.057794][ T9040] hfsplus: b-tree write err: -5, ino 4 [ 249.438235][T11163] loop1: detected capacity change from 0 to 8192 [ 249.546221][T11163] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.618388][T11163] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 249.656489][T11163] REISERFS (device loop1): using ordered data mode [ 249.663272][T11163] reiserfs: using flush barriers [ 249.671480][T11163] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.688714][T11145] loop4: detected capacity change from 0 to 32768 [ 249.710068][T11163] REISERFS (device loop1): checking transaction log (loop1) [ 249.752402][T11145] (syz.4.1988,11145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 249.837379][T11145] (syz.4.1988,11145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 249.911962][T11145] JBD2: Ignoring recovery information on journal [ 249.931922][T11185] sp0: Synchronizing with TNC [ 250.016605][T11145] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 250.026560][T11163] REISERFS (device loop1): Using tea hash to sort names [ 250.052344][T11163] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 250.160781][T11145] [ 250.163163][T11145] ====================================================== [ 250.170209][T11145] WARNING: possible circular locking dependency detected [ 250.170636][T11192] loop5: detected capacity change from 0 to 1024 [ 250.177223][T11145] 6.6.93-syzkaller #0 Not tainted [ 250.177234][T11145] ------------------------------------------------------ [ 250.177239][T11145] syz.4.1988/11145 is trying to acquire lock: [ 250.177249][T11145] ffff88805c8a89d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 250.177301][T11145] [ 250.177301][T11145] but task is already holding lock: [ 250.177307][T11145] ffff88805f20eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 250.177350][T11145] [ 250.177350][T11145] which lock already depends on the new lock. [ 250.177350][T11145] [ 250.177355][T11145] [ 250.177355][T11145] the existing dependency chain (in reverse order) is: [ 250.177360][T11145] [ 250.177360][T11145] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 250.258906][T11145] down_read+0x46/0x2e0 [ 250.263581][T11145] ocfs2_init_acl+0x2fa/0x720 [ 250.268763][T11145] ocfs2_mknod+0x12e5/0x20f0 [ 250.273860][T11145] ocfs2_mkdir+0x196/0x410 [ 250.278785][T11145] vfs_mkdir+0x296/0x440 [ 250.283535][T11145] do_mkdirat+0x1d4/0x440 [ 250.288373][T11145] __x64_sys_mkdirat+0x89/0xa0 [ 250.293644][T11145] do_syscall_64+0x55/0xb0 [ 250.298568][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.304972][T11145] [ 250.304972][T11145] -> #4 (jbd2_handle){++++}-{0:0}: [ 250.312253][T11145] start_this_handle+0x1e9d/0x20c0 [ 250.317877][T11145] jbd2__journal_start+0x2bb/0x5b0 [ 250.323497][T11145] jbd2_journal_start+0x2a/0x40 [ 250.328855][T11145] ocfs2_start_trans+0x376/0x6c0 [ 250.334297][T11145] ocfs2_modify_bh+0xe9/0x470 [ 250.339482][T11145] ocfs2_local_read_info+0x13fd/0x1770 [ 250.345448][T11145] dquot_load_quota_sb+0x757/0xb80 [ 250.351064][T11145] dquot_load_quota_inode+0x2dc/0x5d0 [ 250.356943][T11145] ocfs2_enable_quotas+0x1c7/0x440 [ 250.362559][T11145] ocfs2_fill_super+0x3f6d/0x4d90 [ 250.368089][T11145] mount_bdev+0x22b/0x2d0 [ 250.372944][T11145] legacy_get_tree+0xea/0x180 [ 250.378150][T11145] vfs_get_tree+0x8c/0x280 [ 250.383120][T11145] do_new_mount+0x24b/0xa40 [ 250.388139][T11145] __se_sys_mount+0x2da/0x3c0 [ 250.393327][T11145] do_syscall_64+0x55/0xb0 [ 250.398274][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.404690][T11145] [ 250.404690][T11145] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 250.413193][T11145] down_read+0x46/0x2e0 [ 250.417863][T11145] ocfs2_start_trans+0x36a/0x6c0 [ 250.423306][T11145] ocfs2_modify_bh+0xe9/0x470 [ 250.428496][T11145] ocfs2_local_read_info+0x13fd/0x1770 [ 250.434463][T11145] dquot_load_quota_sb+0x757/0xb80 [ 250.440077][T11145] dquot_load_quota_inode+0x2dc/0x5d0 [ 250.445952][T11145] ocfs2_enable_quotas+0x1c7/0x440 [ 250.451570][T11145] ocfs2_fill_super+0x3f6d/0x4d90 [ 250.457100][T11145] mount_bdev+0x22b/0x2d0 [ 250.461938][T11145] legacy_get_tree+0xea/0x180 [ 250.467123][T11145] vfs_get_tree+0x8c/0x280 [ 250.472046][T11145] do_new_mount+0x24b/0xa40 [ 250.477054][T11145] __se_sys_mount+0x2da/0x3c0 [ 250.482239][T11145] do_syscall_64+0x55/0xb0 [ 250.487169][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.493579][T11145] [ 250.493579][T11145] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 250.501039][T11145] ocfs2_start_trans+0x26b/0x6c0 [ 250.506484][T11145] ocfs2_mknod+0xe47/0x20f0 [ 250.511493][T11145] ocfs2_mkdir+0x196/0x410 [ 250.516413][T11145] vfs_mkdir+0x296/0x440 [ 250.521162][T11145] do_mkdirat+0x1d4/0x440 [ 250.525995][T11145] __x64_sys_mkdirat+0x89/0xa0 [ 250.531264][T11145] do_syscall_64+0x55/0xb0 [ 250.536191][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.542593][T11145] [ 250.542593][T11145] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 250.553093][T11145] down_write+0x97/0x1f0 [ 250.557847][T11145] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 250.564515][T11145] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 250.571347][T11145] ocfs2_mknod+0xdee/0x20f0 [ 250.576358][T11145] ocfs2_mkdir+0x196/0x410 [ 250.581279][T11145] vfs_mkdir+0x296/0x440 [ 250.586027][T11145] do_mkdirat+0x1d4/0x440 [ 250.590862][T11145] __x64_sys_mkdirat+0x89/0xa0 [ 250.596134][T11145] do_syscall_64+0x55/0xb0 [ 250.601064][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.607491][T11145] [ 250.607491][T11145] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 250.618019][T11145] __lock_acquire+0x2ddb/0x7c80 [ 250.623402][T11145] lock_acquire+0x197/0x410 [ 250.628412][T11145] down_write+0x97/0x1f0 [ 250.633165][T11145] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 250.639564][T11145] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 250.646395][T11145] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 250.652535][T11145] ocfs2_xattr_set+0xb6d/0x11f0 [ 250.657897][T11145] __vfs_setxattr+0x431/0x470 [ 250.663082][T11145] __vfs_setxattr_noperm+0x12d/0x5e0 [ 250.668876][T11145] vfs_setxattr+0x16c/0x2f0 [ 250.673889][T11145] path_setxattr+0x362/0x550 [ 250.678982][T11145] __x64_sys_setxattr+0xbb/0xd0 [ 250.684340][T11145] do_syscall_64+0x55/0xb0 [ 250.689266][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.695669][T11145] [ 250.695669][T11145] other info that might help us debug this: [ 250.695669][T11145] [ 250.705877][T11145] Chain exists of: [ 250.705877][T11145] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 250.705877][T11145] [ 250.721856][T11145] Possible unsafe locking scenario: [ 250.721856][T11145] [ 250.729288][T11145] CPU0 CPU1 [ 250.734632][T11145] ---- ---- [ 250.739979][T11145] lock(&oi->ip_xattr_sem); [ 250.744554][T11145] lock(jbd2_handle); [ 250.751124][T11145] lock(&oi->ip_xattr_sem); [ 250.758229][T11145] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 250.765504][T11145] [ 250.765504][T11145] *** DEADLOCK *** [ 250.765504][T11145] [ 250.773627][T11145] 3 locks held by syz.4.1988/11145: [ 250.778806][T11145] #0: ffff88806a49a418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 250.788020][T11145] #1: ffff88805f20ed98 (&type->i_mutex_dir_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0 [ 250.798276][T11145] #2: ffff88805f20eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 250.808178][T11145] [ 250.808178][T11145] stack backtrace: [ 250.814046][T11145] CPU: 0 PID: 11145 Comm: syz.4.1988 Not tainted 6.6.93-syzkaller #0 [ 250.822091][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.832131][T11145] Call Trace: [ 250.835399][T11145] [ 250.838318][T11145] dump_stack_lvl+0x16c/0x230 [ 250.842987][T11145] ? load_image+0x3b0/0x3b0 [ 250.847474][T11145] ? show_regs_print_info+0x20/0x20 [ 250.852662][T11145] ? print_circular_bug+0x12b/0x1a0 [ 250.857852][T11145] check_noncircular+0x2bd/0x3c0 [ 250.862789][T11145] ? look_up_lock_class+0x75/0x140 [ 250.867890][T11145] ? print_deadlock_bug+0x5d0/0x5d0 [ 250.873078][T11145] ? lockdep_lock+0xe0/0x220 [ 250.877655][T11145] ? _find_first_zero_bit+0xd3/0x100 [ 250.882927][T11145] __lock_acquire+0x2ddb/0x7c80 [ 250.887770][T11145] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 250.893745][T11145] ? __lock_acquire+0x7c80/0x7c80 [ 250.898753][T11145] ? verify_lock_unused+0x140/0x140 [ 250.903940][T11145] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 250.909558][T11145] ? do_raw_spin_lock+0x121/0x2c0 [ 250.914568][T11145] ? mutex_unlock+0x10/0x10 [ 250.919060][T11145] lock_acquire+0x197/0x410 [ 250.923548][T11145] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 250.929609][T11145] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 250.935581][T11145] ? __might_sleep+0xe0/0xe0 [ 250.940162][T11145] ? read_lock_is_recursive+0x20/0x20 [ 250.945522][T11145] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 250.951665][T11145] ? verify_lock_unused+0x140/0x140 [ 250.956849][T11145] ? check_noncircular+0x175/0x3c0 [ 250.961950][T11145] down_write+0x97/0x1f0 [ 250.966185][T11145] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 250.972237][T11145] ? down_read_killable+0x340/0x340 [ 250.977433][T11145] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 250.983315][T11145] ? mark_lock+0x94/0x320 [ 250.987629][T11145] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 250.993593][T11145] ? lock_chain_count+0x20/0x20 [ 250.998430][T11145] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 251.004315][T11145] ? ocfs2_block_group_search+0x470/0x470 [ 251.010020][T11145] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 251.015905][T11145] ? _raw_spin_unlock+0x40/0x40 [ 251.020745][T11145] ? stack_trace_save+0x9c/0xe0 [ 251.025589][T11145] ? stack_trace_snprint+0xf0/0xf0 [ 251.030686][T11145] ? __stack_depot_save+0x560/0x630 [ 251.035876][T11145] ? kasan_set_track+0x5f/0x70 [ 251.040630][T11145] ? kasan_set_track+0x4e/0x70 [ 251.045381][T11145] ? __kasan_kmalloc+0x8f/0xa0 [ 251.050133][T11145] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 251.056619][T11145] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 251.062411][T11145] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 251.067424][T11145] ? __vfs_setxattr+0x431/0x470 [ 251.072266][T11145] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 251.077716][T11145] ? vfs_setxattr+0x16c/0x2f0 [ 251.082382][T11145] ? path_setxattr+0x362/0x550 [ 251.087132][T11145] ? __x64_sys_setxattr+0xbb/0xd0 [ 251.092143][T11145] ? do_syscall_64+0x55/0xb0 [ 251.096719][T11145] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.102790][T11145] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 251.109111][T11145] ? ocfs2_init_steal_slots+0x160/0x160 [ 251.114638][T11145] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 251.120264][T11145] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 251.125885][T11145] ? ocfs2_xattr_set+0xb33/0x11f0 [ 251.130898][T11145] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 251.136954][T11145] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 251.143187][T11145] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 251.149094][T11145] ? down_write+0x162/0x1f0 [ 251.153617][T11145] ? down_read_killable+0x340/0x340 [ 251.158802][T11145] ? up_write+0x1c3/0x410 [ 251.163122][T11145] ocfs2_xattr_set+0xb6d/0x11f0 [ 251.167969][T11145] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 251.173679][T11145] ? __lock_acquire+0x1334/0x7c80 [ 251.178692][T11145] ? verify_lock_unused+0x140/0x140 [ 251.183883][T11145] ? aa_get_newest_label+0xf8/0x5c0 [ 251.189076][T11145] ? end_current_label_crit_section+0x170/0x170 [ 251.195308][T11145] ? posix_xattr_acl+0x93/0xb0 [ 251.200054][T11145] ? evm_protect_xattr+0x36d/0x7a0 [ 251.205152][T11145] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 251.210601][T11145] __vfs_setxattr+0x431/0x470 [ 251.215276][T11145] __vfs_setxattr_noperm+0x12d/0x5e0 [ 251.220554][T11145] vfs_setxattr+0x16c/0x2f0 [ 251.225046][T11145] ? xattr_permission+0x470/0x470 [ 251.230058][T11145] ? __mnt_want_write+0x223/0x2a0 [ 251.235068][T11145] ? path_setxattr+0x314/0x550 [ 251.239817][T11145] path_setxattr+0x362/0x550 [ 251.244392][T11145] ? simple_xattrs_free+0x150/0x150 [ 251.249582][T11145] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 251.255548][T11145] ? lock_chain_count+0x20/0x20 [ 251.260389][T11145] __x64_sys_setxattr+0xbb/0xd0 [ 251.265228][T11145] do_syscall_64+0x55/0xb0 [ 251.269636][T11145] ? clear_bhb_loop+0x40/0x90 [ 251.274298][T11145] ? clear_bhb_loop+0x40/0x90 [ 251.278958][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.284840][T11145] RIP: 0033:0x7f247c18e929 [ 251.289241][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.308830][T11145] RSP: 002b:00007f247cf53038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 251.317230][T11145] RAX: ffffffffffffffda RBX: 00007f247c3b5fa0 RCX: 00007f247c18e929 [ 251.325194][T11145] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 251.333149][T11145] RBP: 00007f247c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 251.341107][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.349066][T11145] R13: 0000000000000000 R14: 00007f247c3b5fa0 R15: 00007fff91b11618 [ 251.357030][T11145] [ 251.360144][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.426952][T11192] EXT4-fs: Ignoring removed nobh option [ 251.432556][T11192] EXT4-fs: Ignoring removed bh option [ 251.499568][ T8659] ocfs2: Unmounting device (7,4) on (node local) [ 251.512717][T11192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.596380][ T9896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.896530][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.902838][ T1287] ieee802154 phy1 wpan1: encryption failed: -22