last executing test programs: 1m45.542578645s ago: executing program 0 (id=159): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="a9050000004d00"/21, 0x15}, {&(0x7f0000000100)="17faffffff0fb2eedcccbb9d000000", 0xf}], 0x2}}], 0x1, 0x0) 1m45.035228761s ago: executing program 0 (id=163): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x200000d, 0x11, r0, 0xffffd000) 1m44.676580636s ago: executing program 0 (id=165): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(0x3) 1m44.205096124s ago: executing program 0 (id=170): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$eJzsmL+LE0EUx7+zu5kkIqLNFTYKHhjRSy57KNeE8wTBysYTtdLgrceZvYskK5iA4mFjo52FYGPhP2BxxdV2/gOCFioIFqawEEQOVt7O7GbiJpdltfN9iuE7M2/m/ZjNKwKGYf5bPn/68fHJucWVUwD2YxZFvf7VBoRQ2jLsPzy/e/JZ4/yL1+9fvdk8cH/nz/voSBjuhuZCaQ//DoDKso0g8RTGZ3+RmNWTFRQTfRkWTmh9BQJVrW/AKsT3evgZKoDbELim19tkX63eWve96s22v0pinoY6DS4NI/lSfIMtgVU9pxuFsd/t9VtN3/c6hnD03pitXCJx1ppJ1a8AicGyhYaOluKj+K8+frRFK3Ft5mEl9avDQl0nsbCblAmLKMa1USUx8j/sDPO3i4l7etpW0x+brb4V05Is+b5nd3uN7/+kWKY4NJfveIXSOatXHgDQWweRJwwMTy3B6xQw3LLpSx0xPpr55jKADJ9OJBzjdTDeeEm/aI4EL6aymCCeZor570WuLGIxM9h5m976op9SMeZ4KKa7ECPfj9zLuJQ15jik/BUro9+yclZMTv51A++2Vf8IXwocB2TcPxyjf9WCjTu1bq8/t77RXPPWvE3XXTgjgIen3VrUiNSY6nvD/lyO+tM+oz8XJthKS+JeMwg6dTVKIVFGEHTcaO4aP5tL2+1v1/WxABcAHFMTapsyudFO+RBS2ViRLalK2ohhGIZhGIZhGIZhGIZhGCYrI394HoFAOB1XWf8OAAD//5X0aKk=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) link(&(0x7f0000000040)='./file0/file0\x00', 0x0) 1m43.481695671s ago: executing program 0 (id=177): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m41.934768417s ago: executing program 0 (id=186): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000011}) 1m41.255505798s ago: executing program 32 (id=186): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000011}) 4.571562434s ago: executing program 2 (id=1078): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 3.653177801s ago: executing program 2 (id=1090): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) 3.539205305s ago: executing program 6 (id=1091): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.324157481s ago: executing program 6 (id=1094): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xe2c8) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf276, @loopback, 0xa, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="3000000000000000840000000100d8"], 0x30}}], 0x2, 0x20008000) 3.274550686s ago: executing program 2 (id=1095): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 2.987323221s ago: executing program 3 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2.643443041s ago: executing program 6 (id=1114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 2.64275958s ago: executing program 1 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 2.642495489s ago: executing program 3 (id=1104): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a00010000001200000000001c140000003a"], 0x30}}, 0x6084) 2.497232464s ago: executing program 4 (id=1105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.363108039s ago: executing program 6 (id=1106): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x4000, 0x8000) 2.362747803s ago: executing program 3 (id=1107): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8804004a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}, 0xffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @sdr}) 2.311642891s ago: executing program 1 (id=1108): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r0, 0x0, 0x2902a66e) 2.173452059s ago: executing program 3 (id=1109): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept(r0, 0x0, 0x0) 1.97209514s ago: executing program 4 (id=1112): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fac0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) 1.83766671s ago: executing program 5 (id=1113): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) 1.737741094s ago: executing program 6 (id=1115): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 1.655313032s ago: executing program 1 (id=1116): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x45) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001400)="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", 0x200}], 0x2) 1.654904648s ago: executing program 2 (id=1117): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/6, 0x6}}], 0x1, 0x0, 0x0) 1.507895963s ago: executing program 5 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r0, 0x40049409, r0) 1.487836301s ago: executing program 4 (id=1119): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.191878103s ago: executing program 4 (id=1120): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r0) 1.123265433s ago: executing program 5 (id=1121): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x0, 0x122) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wakeup_count', 0x20b42, 0x0) sendfile(r1, r0, 0x0, 0x8) 1.101377593s ago: executing program 1 (id=1122): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x10, 0x7, 0x7ffc1ff3}]}) r0 = socket(0x10, 0x2, 0x0) fchmod(r0, 0x8) 1.080195974s ago: executing program 3 (id=1123): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 1.079639352s ago: executing program 6 (id=1124): syz_mount_image$f2fs(&(0x7f0000006140), &(0x7f00000004c0)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x25, 0x5590, &(0x7f000000cf80)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 1.01536993s ago: executing program 2 (id=1125): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 931.300506ms ago: executing program 4 (id=1126): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x8aa00) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x7fff, 0xf, 0xe}) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 875.774444ms ago: executing program 5 (id=1127): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x14, r1, 0x615}, 0x14}, 0x5}, 0x0) 713.914775ms ago: executing program 3 (id=1128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {}, {}], {}, [], {0x10, 0x5}}, 0x4c, 0x2) 613.969087ms ago: executing program 4 (id=1129): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x4000, 0x8000) 613.089701ms ago: executing program 1 (id=1141): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa4) getdents(r0, 0xfffffffffffffffd, 0x58) 451.775929ms ago: executing program 5 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0xe8f9afe40794cca1, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 448.885254ms ago: executing program 2 (id=1143): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x10003000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.592713ms ago: executing program 5 (id=1131): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1145): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x188) open_by_handle_at(r0, &(0x7f0000000080)=@ceph_nfs_confh={0x10, 0x2, {0xe, 0x200000006}}, 0x248280) kernel console output (not intermixed with test programs): 5): using free-space-tree [ 121.722649][ T6538] loop1: detected capacity change from 0 to 256 [ 121.912865][ T6484] udevd[6484]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6548] terminated by signal 33 (Unknown signal 33) [ 121.987810][ T6490] BTRFS info (device loop5): rebuilding free space tree [ 121.988844][ T6553] loop2: detected capacity change from 0 to 1024 [ 122.158924][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.172564][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.180168][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.188965][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.235637][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.317411][ T49] bridge_slave_1: left allmulticast mode [ 122.327187][ T49] bridge_slave_1: left promiscuous mode [ 122.335142][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.459777][ T49] bridge_slave_0: left allmulticast mode [ 122.488248][ T6043] hfsplus: b-tree write err: -5, ino 4 [ 122.498873][ T49] bridge_slave_0: left promiscuous mode [ 122.534380][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.634243][ T5851] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.831968][ T6577] syz.2.206 uses obsolete (PF_INET,SOCK_PACKET) [ 123.124083][ T6043] wlan1: Trigger new scan to find an IBSS to join [ 123.452668][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.632920][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 123.673895][ T9] usb 2-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.714663][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.721364][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 123.768132][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.787228][ T6602] loop5: detected capacity change from 0 to 1024 [ 123.821526][ T9] usb 2-1: config 0 descriptor?? [ 124.106039][ T6579] loop4: detected capacity change from 0 to 32768 [ 124.145384][ T6579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.209 (6579) [ 124.218543][ T6579] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.265887][ T6579] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 124.291219][ T6602] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 124.298692][ T9] logitech 0003:046D:C219.0002: unknown main item tag 0x2 [ 124.315967][ T6579] BTRFS info (device loop4): using free-space-tree [ 124.322198][ T5844] Bluetooth: hci1: command tx timeout [ 124.372136][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.217'. [ 124.389664][ T9] logitech 0003:046D:C219.0002: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 124.472749][ T9] logitech 0003:046D:C219.0002: no inputs found [ 124.537051][ T9] usb 2-1: USB disconnect, device number 2 [ 124.547826][ T6579] BTRFS info (device loop4): rebuilding free space tree [ 124.797706][ T6629] fido_id[6629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.852558][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.930404][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.967164][ T5842] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.030838][ T49] bond0 (unregistering): Released all slaves [ 125.210004][ T30] audit: type=1800 audit(2000000013.150:17): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.223" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 126.082944][ T6613] wlan1: Trigger new scan to find an IBSS to join [ 126.361506][ T6670] loop2: detected capacity change from 0 to 512 [ 126.385777][ T6668] loop5: detected capacity change from 0 to 32768 [ 126.397401][ T6668] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/errors=withdrawSŠ9ÝÆ [ 126.408031][ T5844] Bluetooth: hci1: command tx timeout [ 126.418980][ T6670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.430875][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í" [ 126.449253][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1802)... [ 126.507059][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 1 extents in 0ms [ 126.516694][ T6670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.549954][ T972] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use [ 126.578931][ T972] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal... [ 126.627841][ T6670] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.798436][ T6670] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 126.879355][ T972] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 300ms [ 126.965758][ T972] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done [ 126.983274][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.002239][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount [ 127.015882][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr=18 ri_length=1 ri_data0=19 ri_data=524288 ri_bitbytes=515 start=0 len=515 offset=128 [ 127.033596][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 127.046719][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error - RG = 18, function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829 [ 127.065641][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G: s:UN n:3/12 f:an t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 127.079455][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system [ 127.100340][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount. [ 127.115005][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0 [ 127.115661][ T6668] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn [ 127.115683][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.5.230 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 127.115710][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.115724][ T6668] Call Trace: [ 127.115732][ T6668] [ 127.115741][ T6668] dump_stack_lvl+0x189/0x250 [ 127.115774][ T6668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.115800][ T6668] ? __pfx__printk+0x10/0x10 [ 127.115829][ T6668] ? kobject_uevent_env+0x36b/0x8c0 [ 127.115866][ T6668] gfs2_withdraw+0xb30/0x1430 [ 127.115914][ T6668] ? __pfx_gfs2_withdraw+0x10/0x10 [ 127.115949][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.115981][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116008][ T6668] ? do_raw_spin_unlock+0x122/0x240 [ 127.116043][ T6668] gfs2_consist_rgrpd_i+0x14b/0x1a0 [ 127.116084][ T6668] ? __pfx_gfs2_consist_rgrpd_i+0x10/0x10 [ 127.116148][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116175][ T6668] ? rcu_is_watching+0x15/0xb0 [ 127.116212][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116239][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116276][ T6668] gfs2_ri_update+0xba2/0x1650 [ 127.116335][ T6668] ? __pfx_gfs2_ri_update+0x10/0x10 [ 127.116365][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116403][ T6668] ? inode_go_held+0xf8/0x200 [ 127.116433][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116460][ T6668] ? gfs2_glock_wait+0x20f/0x2a0 [ 127.116494][ T6668] gfs2_rindex_update+0x2cd/0x370 [ 127.116529][ T6668] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 127.116562][ T6668] ? init_inodes+0x24e/0x320 [ 127.116594][ T6668] ? complete_all+0x7b/0x330 [ 127.116625][ T6668] init_inodes+0x24e/0x320 [ 127.116656][ T6668] gfs2_fill_super+0x1923/0x20d0 [ 127.116704][ T6668] ? __pfx_gfs2_fill_super+0x10/0x10 [ 127.116729][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116762][ T6668] ? init_locking+0xb8/0x210 [ 127.116786][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116813][ T6668] ? sb_set_blocksize+0x104/0x180 [ 127.116841][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116867][ T6668] ? setup_bdev_super+0x4c1/0x5b0 [ 127.116908][ T6668] get_tree_bdev_flags+0x40e/0x4d0 [ 127.116943][ T6668] ? __pfx_gfs2_fill_super+0x10/0x10 [ 127.116972][ T6668] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.117011][ T6668] ? rcu_is_watching+0x15/0xb0 [ 127.117066][ T6668] gfs2_get_tree+0x51/0x1e0 [ 127.117098][ T6668] vfs_get_tree+0x92/0x2b0 [ 127.117137][ T6668] do_new_mount+0x2a2/0x9e0 [ 127.117179][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117206][ T6668] ? ns_capable+0x8a/0xf0 [ 127.117241][ T6668] ? __pfx_do_new_mount+0x10/0x10 [ 127.117277][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117304][ T6668] ? path_mount+0x61c/0xfe0 [ 127.117339][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117380][ T6668] __se_sys_mount+0x317/0x410 [ 127.117411][ T6668] ? __pfx___se_sys_mount+0x10/0x10 [ 127.117432][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117466][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117493][ T6668] ? __x64_sys_mount+0x20/0xc0 [ 127.117519][ T6668] do_syscall_64+0xfa/0x3b0 [ 127.117556][ T6668] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.117591][ T6668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.117614][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.117642][ T6668] ? exc_page_fault+0x9f/0xf0 [ 127.117679][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.117703][ T6668] RIP: 0033:0x7f9105f9014a [ 127.117724][ T6668] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.117744][ T6668] RSP: 002b:00007f9106dafe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.117769][ T6668] RAX: ffffffffffffffda RBX: 00007f9106dafef0 RCX: 00007f9105f9014a [ 127.117787][ T6668] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f9106dafeb0 [ 127.117805][ T6668] RBP: 0000200000000000 R08: 00007f9106dafef0 R09: 0000000000000000 [ 127.117821][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 127.117837][ T6668] R13: 00007f9106dafeb0 R14: 00000000000125ce R15: 00002000000000c0 [ 127.117874][ T6668] [ 127.430215][ T49] hsr_slave_0: left promiscuous mode [ 127.434717][ T6698] loop2: detected capacity change from 0 to 512 [ 127.458593][ T49] hsr_slave_1: left promiscuous mode [ 127.459431][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.459466][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.474502][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.474526][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.490874][ T6698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.539659][ T6698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.539792][ T6698] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.575775][ T49] veth1_macvtap: left promiscuous mode [ 127.765426][ T30] audit: type=1800 audit(2000000015.680:18): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.239" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 128.071400][ T6704] loop5: detected capacity change from 0 to 32768 [ 128.106963][ T49] veth0_macvtap: left promiscuous mode [ 128.138355][ T49] veth1_vlan: left promiscuous mode [ 128.185284][ T49] veth0_vlan: left promiscuous mode [ 128.196864][ T6704] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 128.262899][ T6704] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 128.286068][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.483200][ T5844] Bluetooth: hci1: command tx timeout [ 128.509289][ T5851] ocfs2: Unmounting device (7,5) on (node local) [ 129.135831][ T76] wlan1: Creating new IBSS network, BSSID 92:76:51:1e:3b:a0 [ 129.458766][ T6719] loop2: detected capacity change from 0 to 32768 [ 129.491924][ T6719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.250 (6719) [ 129.549977][ T49] team0 (unregistering): Port device team_slave_1 removed [ 129.577462][ T6719] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.602953][ T6719] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 129.616195][ T6719] BTRFS info (device loop2): disk space caching is enabled [ 129.671725][ T6719] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 129.717573][ T49] team0 (unregistering): Port device team_slave_0 removed [ 129.764797][ T6721] loop5: detected capacity change from 0 to 32768 [ 129.792335][ T6721] [ 129.792335][ T6721] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.792335][ T6721] [ 129.819750][ T6721] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 129.819750][ T6721] [ 129.839838][ T6719] BTRFS info (device loop2): rebuilding free space tree [ 129.845876][ T6721] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 129.879531][ T6719] BTRFS info (device loop2): disabling free space tree [ 129.899042][ T6719] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.913462][ T6719] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.957199][ T5851] [ 129.957199][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.957199][ T5851] [ 129.976277][ T5851] [ 129.976277][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.976277][ T5851] [ 130.044369][ T5837] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.340428][ T6750] loop5: detected capacity change from 0 to 128 [ 130.393912][ T6730] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 130.562163][ T5844] Bluetooth: hci1: command tx timeout [ 130.824574][ T6731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.856764][ T6731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.891038][ T6731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.065188][ T6731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.148118][ T6731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.170841][ T6731] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 131.260254][ T6731] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 131.367679][ T6731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 131.416685][ T6731] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 131.460256][ T49] IPVS: stop unused estimator thread 0... [ 131.481589][ T6731] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 131.537929][ T6731] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 131.560165][ T6731] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 131.586564][ T6731] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 131.626768][ T6731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.644210][ T6731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.680859][ T6731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.087802][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.101817][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.819678][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 132.882149][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.204201][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.231676][ T6825] netlink: 84 bytes leftover after parsing attributes in process `syz.3.283'. [ 133.394738][ T6791] loop2: detected capacity change from 0 to 32768 [ 133.441906][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.579462][ T6791] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 133.601956][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 133.647461][ T6799] loop5: detected capacity change from 0 to 32768 [ 133.674109][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.287'. [ 133.684047][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.690273][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.697823][ T6839] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 133.701955][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.712901][ T6560] bridge_slave_0: entered allmulticast mode [ 133.720724][ T6560] bridge_slave_0: entered promiscuous mode [ 133.729428][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.736785][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.744109][ T6560] bridge_slave_1: entered allmulticast mode [ 133.752057][ T6560] bridge_slave_1: entered promiscuous mode [ 133.785952][ T6799] [ 133.785952][ T6799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.785952][ T6799] [ 133.871399][ T6799] read_mapping_page failed! [ 133.896274][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 133.906428][ T6799] ERROR: (device loop5): txCommit: [ 133.906428][ T6799] [ 133.959300][ T6844] jfs_rmdir: dtDelete returned -2 [ 134.205393][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.237728][ T49] ERROR: (device loop5): diWrite: ixpxd invalid [ 134.237728][ T49] [ 134.291858][ T49] ERROR: (device loop5): txCommit: [ 134.291858][ T49] [ 134.300661][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.344586][ T49] jfs_write_inode: jfs_commit_inode failed! [ 134.376718][ T5851] [ 134.376718][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.376718][ T5851] [ 134.445254][ T5851] [ 134.445254][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.445254][ T5851] [ 134.608510][ T6560] team0: Port device team_slave_0 added [ 134.611611][ T6560] team0: Port device team_slave_1 added [ 134.962008][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.981236][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.009985][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.069131][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.110749][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.152133][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.250174][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.282530][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.360692][ T6879] loop3: detected capacity change from 0 to 128 [ 135.465230][ T6879] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.504302][ T6879] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.521962][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.585247][ T6560] hsr_slave_0: entered promiscuous mode [ 135.616871][ T6560] hsr_slave_1: entered promiscuous mode [ 135.629957][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 135.675311][ T6560] Cannot create hsr debugfs directory [ 135.682650][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.762028][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.789285][ T6888] loop5: detected capacity change from 0 to 4096 [ 135.807198][ T5850] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.818006][ T6888] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 135.962173][ T6888] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 135.987866][ T6846] loop4: detected capacity change from 0 to 40427 [ 136.076016][ T6846] F2FS-fs (loop4): invalid crc value [ 136.150173][ T6852] loop1: detected capacity change from 0 to 32768 [ 136.240167][ T6852] XFS: ikeep mount option is deprecated. [ 136.386293][ T6852] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.582116][ T6846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.645246][ T6888] ntfs3: Cannot use different iocharset when remounting! [ 136.761847][ T6852] XFS (loop1): Ending clean mount [ 136.809852][ T6852] XFS (loop1): Quotacheck needed: Please wait. [ 136.827795][ T6907] loop3: detected capacity change from 0 to 4096 [ 136.933381][ T6852] XFS (loop1): Quotacheck: Done. [ 137.037045][ T6920] loop2: detected capacity change from 0 to 256 [ 137.042138][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.068894][ T30] audit: type=1800 audit(2000000025.000:19): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.293" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 137.164939][ T6907] ntfs3(loop3): ino=9, attr_set_size [ 137.307652][ T6920] FAT-fs (loop2): Directory bread(block 64) failed [ 137.317096][ T5838] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.325416][ T6920] FAT-fs (loop2): Directory bread(block 65) failed [ 137.333503][ T6920] FAT-fs (loop2): Directory bread(block 66) failed [ 137.340036][ T6920] FAT-fs (loop2): Directory bread(block 67) failed [ 137.347163][ T6920] FAT-fs (loop2): Directory bread(block 68) failed [ 137.353964][ T6920] FAT-fs (loop2): Directory bread(block 69) failed [ 137.366496][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.372686][ T6920] FAT-fs (loop2): Directory bread(block 70) failed [ 137.379222][ T6920] FAT-fs (loop2): Directory bread(block 71) failed [ 137.451987][ T6920] FAT-fs (loop2): Directory bread(block 72) failed [ 137.487642][ T6920] FAT-fs (loop2): Directory bread(block 73) failed [ 137.528107][ T6560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.586899][ T6560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.595348][ T6928] loop5: detected capacity change from 0 to 164 [ 137.603141][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.662348][ T6928] Unsupported NM flag settings (8) [ 137.685833][ T6560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.763096][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 137.826450][ T6560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.842396][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.331395][ T6940] loop3: detected capacity change from 0 to 4096 [ 138.466113][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.519065][ T6940] ntfs3(loop3): ino=1a, mi_enum_attr [ 138.519135][ T6940] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 138.571709][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.618394][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.618520][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.644002][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.644120][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.237813][ T6974] loop1: detected capacity change from 0 to 64 [ 139.242023][ T6971] program syz.5.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.288447][ T6974] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 139.735998][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 139.778944][ T6982] loop2: detected capacity change from 0 to 4096 [ 139.873487][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.043166][ T6993] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.056934][ T30] audit: type=1326 audit(2000000027.990:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.181962][ T30] audit: type=1326 audit(2000000027.990:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.320761][ T30] audit: type=1326 audit(2000000028.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.442935][ T30] audit: type=1326 audit(2000000028.010:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.465038][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.587798][ T30] audit: type=1326 audit(2000000028.010:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.658516][ T30] audit: type=1326 audit(2000000028.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.680548][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.702911][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.789607][ T30] audit: type=1326 audit(2000000028.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 140.941855][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 140.960645][ T30] audit: type=1326 audit(2000000028.010:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4818e9a9 code=0x7ffc0000 [ 141.003023][ T24] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 141.043899][ T24] usb 2-1: config 1 has no interface number 0 [ 141.067325][ T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.120238][ T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.171409][ T24] usb 2-1: config 1 interface 105 has no altsetting 0 [ 141.200836][ T24] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 141.241691][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.252198][ T7026] binder: 7025:7026 unknown command 24 [ 141.253572][ T24] usb 2-1: Product: syz [ 141.257663][ T7026] binder: 7025:7026 ioctl c0306201 200000000280 returned -22 [ 141.274416][ T7028] loop5: detected capacity change from 0 to 64 [ 141.286400][ T24] usb 2-1: Manufacturer: syz [ 141.290995][ T24] usb 2-1: SerialNumber: syz [ 141.346849][ T7028] hfs: unable to locate alternate MDB [ 141.375159][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.383252][ T7028] hfs: continuing without an alternate MDB [ 141.399988][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.446037][ T6560] veth0_vlan: entered promiscuous mode [ 141.508482][ T6560] veth1_vlan: entered promiscuous mode [ 141.674729][ T6560] veth0_macvtap: entered promiscuous mode [ 141.738181][ T6560] veth1_macvtap: entered promiscuous mode [ 141.856349][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.873433][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.902603][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.909313][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.964420][ T7035] netdevsim netdevsim5: Direct firmware load for @ failed with error -2 [ 141.999722][ T7035] netdevsim netdevsim5: Falling back to sysfs fallback for: @ [ 142.017940][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.063560][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.091102][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.134123][ T24] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 142.167181][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.174140][ T24] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 142.192938][ T7010] loop2: detected capacity change from 0 to 32768 [ 142.228465][ T24] usb 2-1: USB disconnect, device number 3 [ 142.521189][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.555915][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.737514][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.755722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.831937][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.080367][ T5820] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.109458][ T5820] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.176297][ T5820] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.197963][ T7058] loop1: detected capacity change from 0 to 256 [ 143.220373][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.257337][ T7061] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.187'. [ 143.284021][ T7043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.334046][ T7057] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.187'. [ 143.369522][ T5820] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.381433][ T7058] FAT-fs (loop1): Directory bread(block 64) failed [ 143.437566][ T7058] FAT-fs (loop1): Directory bread(block 65) failed [ 143.494313][ T7058] FAT-fs (loop1): Directory bread(block 66) failed [ 143.535094][ T7058] FAT-fs (loop1): Directory bread(block 67) failed [ 143.541714][ T7058] FAT-fs (loop1): Directory bread(block 68) failed [ 143.632657][ T7058] FAT-fs (loop1): Directory bread(block 69) failed [ 143.665705][ T7058] FAT-fs (loop1): Directory bread(block 70) failed [ 143.729532][ T7058] FAT-fs (loop1): Directory bread(block 71) failed [ 143.778173][ T7058] FAT-fs (loop1): Directory bread(block 72) failed [ 143.802250][ T5820] usb 3-1: USB disconnect, device number 2 [ 143.840229][ T7058] FAT-fs (loop1): Directory bread(block 73) failed [ 143.953534][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.340040][ T7087] loop5: detected capacity change from 0 to 256 [ 144.400714][ T7087] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.445152][ T7091] loop6: detected capacity change from 0 to 512 [ 144.455440][ T7087] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 144.470229][ T7091] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.513017][ T7091] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.567029][ T7087] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 144.706191][ T7096] loop2: detected capacity change from 0 to 256 [ 144.713733][ T7091] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.834968][ T7091] EXT4-fs (loop6): 1 truncate cleaned up [ 144.881304][ T7091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.010563][ T7096] FAT-fs (loop2): Directory bread(block 64) failed [ 145.010601][ T7096] FAT-fs (loop2): Directory bread(block 65) failed [ 145.010690][ T7096] FAT-fs (loop2): Directory bread(block 66) failed [ 145.010718][ T7096] FAT-fs (loop2): Directory bread(block 67) failed [ 145.010803][ T7096] FAT-fs (loop2): Directory bread(block 68) failed [ 145.010832][ T7096] FAT-fs (loop2): Directory bread(block 69) failed [ 145.010917][ T7096] FAT-fs (loop2): Directory bread(block 70) failed [ 145.010946][ T7096] FAT-fs (loop2): Directory bread(block 71) failed [ 145.011033][ T7096] FAT-fs (loop2): Directory bread(block 72) failed [ 145.011061][ T7096] FAT-fs (loop2): Directory bread(block 73) failed [ 145.176765][ T7111] cifs: Bad value for 'port' [ 145.605663][ T6560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.641503][ T7121] veth0_macvtap: left promiscuous mode [ 145.699305][ T7122] mkiss: ax0: crc mode is auto. [ 146.022137][ T7135] CUSE: DEVNAME unspecified [ 146.477198][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 146.509600][ T7153] loop2: detected capacity change from 0 to 128 [ 146.615760][ T7153] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.700044][ T7153] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.773209][ T7162] use of bytesused == 0 is deprecated and will be removed in the future, [ 146.827834][ T7162] use the actual size instead. [ 147.124944][ T5837] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.270852][ T7168] loop4: detected capacity change from 0 to 4096 [ 147.434176][ T7184] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.450310][ T7182] tipc: Started in network mode [ 147.477801][ T7182] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 147.523910][ T7182] tipc: Enabled bearer , priority 10 [ 147.692017][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.951823][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 147.999505][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 148.040590][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.074804][ T24] usb 3-1: Product: syz [ 148.109011][ T24] usb 3-1: Manufacturer: syz [ 148.131921][ T24] usb 3-1: SerialNumber: syz [ 148.196858][ T7144] loop6: detected capacity change from 0 to 32768 [ 148.217074][ T24] usb 3-1: config 0 descriptor?? [ 148.354404][ T7144] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.465074][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.512159][ T7206] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 148.582702][ T5960] tipc: Node number set to 10398378 [ 148.698712][ T7144] XFS (loop6): Ending clean mount [ 148.756735][ T7144] XFS (loop6): Quotacheck needed: Please wait. [ 148.882473][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 148.925103][ T7144] XFS (loop6): Quotacheck: Done. [ 148.951978][ T24] usb 3-1: USB disconnect, device number 3 [ 148.973611][ T7216] loop4: detected capacity change from 0 to 64 [ 149.024266][ T30] audit: type=1800 audit(2000000036.970:28): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.385" name="file0" dev="loop6" ino=9284 res=0 errno=0 [ 149.069968][ T7218] loop1: detected capacity change from 0 to 512 [ 149.109815][ T7218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.167954][ T7218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.238028][ T7218] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.411: bg 0: block 248: padding at end of block bitmap is not set [ 149.306802][ T7218] Quota error (device loop1): write_blk: dquota write failed [ 149.342099][ T7218] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 149.381937][ T6560] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.417627][ T7186] loop5: detected capacity change from 0 to 32768 [ 149.424548][ T7218] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.411: Failed to acquire dquot type 1 [ 149.517375][ T7218] EXT4-fs (loop1): 1 truncate cleaned up [ 149.579939][ T7218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.702594][ T7186] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 149.862369][ T7218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.999732][ T7199] loop3: detected capacity change from 0 to 32768 [ 150.007867][ T7229] loop2: detected capacity change from 0 to 32768 [ 150.043096][ T7218] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 150.070785][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í" [ 150.093716][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1802)... [ 150.139329][ T7218] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 150.139644][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 1 extents in 0ms [ 150.169450][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use [ 150.191816][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal... [ 150.210257][ T5851] ocfs2: Unmounting device (7,5) on (node local) [ 150.257469][ T7199] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.290055][ T7218] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 150.310194][ T7218] ext4 filesystem being remounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.463713][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.543481][ T7199] XFS (loop3): Ending clean mount [ 150.746181][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 554ms [ 150.815426][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done [ 150.863113][ T5850] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.863722][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount [ 150.891020][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr=18 ri_length=1 ri_data0=19 ri_data=524288 ri_bitbytes=515 start=0 len=515 offset=128 [ 150.911013][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 150.923331][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error - RG = 18, function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829 [ 150.942234][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G: s:UN n:3/12 f:an t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 150.955998][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system [ 150.976503][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount. [ 150.990151][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0 [ 151.002699][ T7229] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn [ 151.015577][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.2.414 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 151.015606][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.015621][ T7229] Call Trace: [ 151.015631][ T7229] [ 151.015641][ T7229] dump_stack_lvl+0x189/0x250 [ 151.015674][ T7229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.015699][ T7229] ? __pfx__printk+0x10/0x10 [ 151.015731][ T7229] ? kobject_uevent_env+0x36b/0x8c0 [ 151.015770][ T7229] gfs2_withdraw+0xb30/0x1430 [ 151.015819][ T7229] ? __pfx_gfs2_withdraw+0x10/0x10 [ 151.015856][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.015889][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.015916][ T7229] ? do_raw_spin_unlock+0x122/0x240 [ 151.015951][ T7229] gfs2_consist_rgrpd_i+0x14b/0x1a0 [ 151.015984][ T7229] ? __pfx_gfs2_consist_rgrpd_i+0x10/0x10 [ 151.016048][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016076][ T7229] ? rcu_is_watching+0x15/0xb0 [ 151.016113][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016140][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016177][ T7229] gfs2_ri_update+0xba2/0x1650 [ 151.016237][ T7229] ? __pfx_gfs2_ri_update+0x10/0x10 [ 151.016267][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016305][ T7229] ? inode_go_held+0xf8/0x200 [ 151.016335][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016376][ T7229] ? gfs2_glock_wait+0x20f/0x2a0 [ 151.016410][ T7229] gfs2_rindex_update+0x2cd/0x370 [ 151.016446][ T7229] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 151.016479][ T7229] ? init_inodes+0x24e/0x320 [ 151.016512][ T7229] ? complete_all+0x7b/0x330 [ 151.016543][ T7229] init_inodes+0x24e/0x320 [ 151.016575][ T7229] gfs2_fill_super+0x1923/0x20d0 [ 151.016623][ T7229] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.016648][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016681][ T7229] ? init_locking+0xb8/0x210 [ 151.016707][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016733][ T7229] ? sb_set_blocksize+0x104/0x180 [ 151.016761][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.016788][ T7229] ? setup_bdev_super+0x4c1/0x5b0 [ 151.016829][ T7229] get_tree_bdev_flags+0x40e/0x4d0 [ 151.016864][ T7229] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.016893][ T7229] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 151.016932][ T7229] ? rcu_is_watching+0x15/0xb0 [ 151.016977][ T7229] gfs2_get_tree+0x51/0x1e0 [ 151.017008][ T7229] vfs_get_tree+0x92/0x2b0 [ 151.017047][ T7229] do_new_mount+0x2a2/0x9e0 [ 151.017089][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017116][ T7229] ? ns_capable+0x8a/0xf0 [ 151.017152][ T7229] ? __pfx_do_new_mount+0x10/0x10 [ 151.017188][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017215][ T7229] ? path_mount+0x61c/0xfe0 [ 151.017250][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017290][ T7229] __se_sys_mount+0x317/0x410 [ 151.017321][ T7229] ? __pfx___se_sys_mount+0x10/0x10 [ 151.017351][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017387][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017414][ T7229] ? __x64_sys_mount+0x20/0xc0 [ 151.017440][ T7229] do_syscall_64+0xfa/0x3b0 [ 151.017475][ T7229] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.017509][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.017531][ T7229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.017558][ T7229] ? exc_page_fault+0x9f/0xf0 [ 151.017594][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.017618][ T7229] RIP: 0033:0x7f3afe59014a [ 151.017639][ T7229] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.017658][ T7229] RSP: 002b:00007f3aff376e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.017683][ T7229] RAX: ffffffffffffffda RBX: 00007f3aff376ef0 RCX: 00007f3afe59014a [ 151.017702][ T7229] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f3aff376eb0 [ 151.017719][ T7229] RBP: 0000200000000000 R08: 00007f3aff376ef0 R09: 0000000000000000 [ 151.017735][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 151.017751][ T7229] R13: 00007f3aff376eb0 R14: 00000000000125ce R15: 00002000000000c0 [ 151.017787][ T7229] [ 151.548935][ T7253] loop5: detected capacity change from 0 to 4096 [ 151.659106][ T7257] netlink: 'syz.4.420': attribute type 2 has an invalid length. [ 151.781870][ T7260] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.904389][ T7264] loop2: detected capacity change from 0 to 16 [ 151.934974][ T7264] erofs (device loop2): mounted with root inode @ nid 36. [ 151.963210][ T7252] loop1: detected capacity change from 0 to 32768 [ 151.970929][ T7262] loop6: detected capacity change from 0 to 1024 [ 152.058278][ T7252] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.417 (7252) [ 152.238573][ T7252] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 152.280872][ T7252] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.348643][ T7252] BTRFS info (device loop1): using free-space-tree [ 152.880269][ T7299] loop2: detected capacity change from 0 to 164 [ 152.890998][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.427'. [ 153.048097][ T972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.235710][ T5838] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 153.253741][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 153.312157][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.355752][ T972] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 153.418592][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.473024][ T972] usb 5-1: config 0 descriptor?? [ 153.514648][ T7308] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 153.587897][ T7308] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 153.669687][ T7308] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 153.923237][ T972] cherry 0003:046A:0023.0003: item fetching failed at offset 2/69 [ 153.972638][ T972] cherry 0003:046A:0023.0003: probe with driver cherry failed with error -22 [ 154.157361][ T9] usb 5-1: USB disconnect, device number 4 [ 154.319925][ T7320] loop2: detected capacity change from 0 to 4096 [ 154.448751][ T7320] ntfs3(loop2): ino=1a, mi_enum_attr [ 154.472118][ T7320] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 154.683951][ T972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.738413][ T972] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 154.847988][ T7296] loop5: detected capacity change from 0 to 40427 [ 154.891955][ T7296] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 154.923507][ T30] audit: type=1326 audit(2000000042.870:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 154.968057][ T7296] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 155.035488][ T7296] F2FS-fs (loop5): invalid crc value [ 155.079598][ T30] audit: type=1326 audit(2000000042.900:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 155.118371][ T7338] fido_id[7338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.232597][ T30] audit: type=1326 audit(2000000042.900:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 155.375338][ T30] audit: type=1326 audit(2000000042.900:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 155.523401][ T30] audit: type=1326 audit(2000000042.900:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 155.565538][ T7296] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 155.613990][ T7296] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.636775][ T30] audit: type=1326 audit(2000000042.900:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 155.729620][ T30] audit: type=1326 audit(2000000042.900:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 156.013084][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 156.380770][ T7347] loop4: detected capacity change from 0 to 32768 [ 156.419273][ T7347] JBD2: Ignoring recovery information on journal [ 156.578307][ T7347] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 156.627477][ T7393] loop3: detected capacity change from 0 to 128 [ 156.676829][ T7389] loop6: detected capacity change from 0 to 2048 [ 156.820155][ T7389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.900613][ T7389] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.998684][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 157.251427][ T76] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.279190][ T6560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.637035][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 157.677601][ T7418] loop2: detected capacity change from 0 to 2048 [ 157.776526][ T7418] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 157.810981][ T7418] UDF-fs: Scanning with blocksize 512 failed [ 157.912319][ T7418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.127727][ T7432] loop6: detected capacity change from 0 to 64 [ 158.254485][ T7394] loop1: detected capacity change from 0 to 32768 [ 158.401684][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 158.422117][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 158.592431][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 158.768412][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 158.838306][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.485'. [ 158.861938][ T972] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.051846][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 159.075783][ T972] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.124787][ T972] usb 3-1: config 0 has no interface number 0 [ 159.130916][ T972] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.185473][ T972] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.228440][ T972] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.269930][ T972] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.285229][ T7428] loop3: detected capacity change from 0 to 32768 [ 159.321834][ T972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.353028][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.383808][ T7459] loop6: detected capacity change from 0 to 4096 [ 159.406389][ T7428] JBD2: Ignoring recovery information on journal [ 159.468620][ T972] usb 3-1: config 0 descriptor?? [ 159.477358][ T7428] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 159.501920][ T7459] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 159.582474][ T972] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.671642][ T7459] ntfs3(loop6): ino=1a, mi_enum_attr [ 159.696706][ T7459] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 159.775734][ T5850] (syz-executor,5850,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 22 [ 159.859741][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 160.041382][ T7469] loop3: detected capacity change from 0 to 512 [ 160.160084][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.205970][ T7469] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.327478][ T7457] loop4: detected capacity change from 0 to 32768 [ 160.487038][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.514979][ T7457] JBD2: Ignoring recovery information on journal [ 160.606536][ T7479] netlink: 165 bytes leftover after parsing attributes in process `syz.6.498'. [ 160.643114][ T7456] loop5: detected capacity change from 0 to 32768 [ 160.710797][ T7457] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 161.103587][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 161.249179][ T7492] loop3: detected capacity change from 0 to 1024 [ 161.268153][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.501'. [ 161.421968][ T7490] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 161.455379][ T7488] loop6: detected capacity change from 0 to 4096 [ 161.512909][ T7488] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 161.612440][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.630688][ T24] usb 3-1: USB disconnect, device number 4 [ 161.637436][ T7490] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 161.683183][ T6043] hfsplus: b-tree write err: -5, ino 4 [ 161.711682][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 161.814012][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 161.886548][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.935162][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.001829][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 162.089699][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.116380][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 162.160664][ T9] usb 5-1: config 0 descriptor?? [ 162.238337][ T30] audit: type=1326 audit(2000000050.160:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.362048][ T30] audit: type=1326 audit(2000000050.160:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.480204][ T30] audit: type=1326 audit(2000000050.190:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.566432][ T7528] loop6: detected capacity change from 0 to 16 [ 162.589208][ T30] audit: type=1326 audit(2000000050.190:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.630268][ T7528] erofs (device loop6): mounted with root inode @ nid 36. [ 162.689813][ T7528] erofs (device loop6): bogus i_mode (0) @ nid 4294967296 [ 162.722200][ T30] audit: type=1326 audit(2000000050.190:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.839554][ T9] usb 5-1: USB disconnect, device number 5 [ 162.892001][ T30] audit: type=1326 audit(2000000050.210:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 162.892056][ T30] audit: type=1326 audit(2000000050.210:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689d8e9a9 code=0x7ffc0000 [ 163.005663][ T7538] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.204415][ T7588] loop2: detected capacity change from 0 to 512 [ 164.223542][ T7588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.292325][ T7588] EXT4-fs (loop2): 1 truncate cleaned up [ 164.363543][ T7588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.656574][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.702003][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.872397][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 164.901372][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.911851][ T972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.940318][ T5820] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 164.990052][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.051392][ T5820] usb 4-1: config 0 descriptor?? [ 165.093358][ T972] usb 7-1: Using ep0 maxpacket: 8 [ 165.120461][ T972] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.139625][ T972] usb 7-1: config 179 has no interface number 0 [ 165.182454][ T972] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 165.232846][ T972] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 165.272720][ T972] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.307791][ T972] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 165.352575][ T972] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.426383][ T972] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 165.463695][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.506007][ T5820] hkems 0003:2006:0118.0006: unknown main item tag 0x0 [ 165.523469][ T7605] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.550609][ T5820] hkems 0003:2006:0118.0006: hidraw0: USB HID vda.6f Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 165.596050][ T5820] hkems 0003:2006:0118.0006: no inputs found [ 165.651719][ T5820] hkems 0003:2006:0118.0006: force feedback init failed [ 165.737201][ T5820] usb 4-1: USB disconnect, device number 3 [ 165.936863][ T7636] fido_id[7636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 165.940593][ T7642] netlink: 666 bytes leftover after parsing attributes in process `syz.4.567'. [ 166.060701][ T972] usb 7-1: USB disconnect, device number 2 [ 166.060777][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 166.060868][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.170697][ T7646] loop5: detected capacity change from 0 to 256 [ 166.450919][ T7657] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 166.492418][ T7657] macvtap1: entered promiscuous mode [ 166.584928][ T7657] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 166.592902][ T972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.751868][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 166.779169][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.833550][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.901883][ T972] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 166.910829][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.579'. [ 166.933743][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.966086][ T7673] netlink: 152 bytes leftover after parsing attributes in process `syz.6.579'. [ 166.979363][ T972] usb 2-1: config 0 descriptor?? [ 167.093032][ T7679] loop5: detected capacity change from 0 to 256 [ 167.209019][ T7677] loop4: detected capacity change from 0 to 2048 [ 167.265113][ T7677] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.312214][ T7679] FAT-fs (loop5): Directory bread(block 64) failed [ 167.318856][ T7679] FAT-fs (loop5): Directory bread(block 65) failed [ 167.362050][ T7679] FAT-fs (loop5): Directory bread(block 66) failed [ 167.377523][ T7684] loop6: detected capacity change from 0 to 512 [ 167.395261][ T7686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.432382][ T7679] FAT-fs (loop5): Directory bread(block 67) failed [ 167.439055][ T7679] FAT-fs (loop5): Directory bread(block 68) failed [ 167.459280][ T972] thrustmaster 0003:044F:B323.0007: collection stack underflow [ 167.462873][ T7684] EXT4-fs: inline encryption not supported [ 167.515823][ T7679] FAT-fs (loop5): Directory bread(block 69) failed [ 167.518697][ T972] thrustmaster 0003:044F:B323.0007: item 0 1 0 12 parsing failed [ 167.551041][ T7684] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 167.565774][ T7679] FAT-fs (loop5): Directory bread(block 70) failed [ 167.589556][ T7679] FAT-fs (loop5): Directory bread(block 71) failed [ 167.600167][ T972] thrustmaster 0003:044F:B323.0007: parse failed [ 167.627709][ T972] thrustmaster 0003:044F:B323.0007: probe with driver thrustmaster failed with error -22 [ 167.642796][ T7679] FAT-fs (loop5): Directory bread(block 72) failed [ 167.675371][ T7684] EXT4-fs (loop6): 1 truncate cleaned up [ 167.680445][ T972] usb 2-1: USB disconnect, device number 4 [ 167.710957][ T7679] FAT-fs (loop5): Directory bread(block 73) failed [ 167.733221][ T7684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.944916][ T7679] syz.5.581: attempt to access beyond end of device [ 167.944916][ T7679] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 167.988504][ T6560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.013576][ T7679] syz.5.581: attempt to access beyond end of device [ 168.013576][ T7679] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 168.241064][ T7702] loop2: detected capacity change from 0 to 1024 [ 168.438296][ T7702] hfsplus: bad catalog entry type [ 168.467112][ T7706] 9pnet: Could not find request transport: f [ 168.506713][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 168.752725][ T7718] loop4: detected capacity change from 0 to 64 [ 168.761276][ T6613] hfsplus: b-tree write err: -5, ino 4 [ 168.949879][ T7723] loop1: detected capacity change from 0 to 512 [ 169.034681][ T7723] EXT4-fs: Ignoring removed orlov option [ 169.102731][ T7723] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 169.578188][ T7750] loop4: detected capacity change from 0 to 1764 [ 169.602358][ T7749] erofs: Unknown parameter 'acl r8 ' [ 169.602356][ T5960] kernel write not supported for file /vcsu (pid: 5960 comm: kworker/1:5) [ 170.261458][ T7765] loop2: detected capacity change from 0 to 32768 [ 170.320291][ T7765] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.332267][ T7784] loop3: detected capacity change from 0 to 128 [ 170.419348][ T7765] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 170.422628][ T7784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.438273][ T7765] XFS (loop2): Starting recovery (logdev: internal) [ 170.471071][ T7765] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 170.489800][ T7765] XFS (loop2): Metadata corruption detected at xfs_agf_verify+0x18b/0x8f0, xfs_agf block 0x1 [ 170.500128][ T7765] XFS (loop2): Unmount and run xfs_repair [ 170.505915][ T7765] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 170.513822][ T7765] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 170.523433][ T7765] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 170.532327][ T7765] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 170.541176][ T7765] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 170.550089][ T7765] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 170.559012][ T7765] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 170.570225][ T7765] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.579142][ T7765] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.580138][ T7784] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.588445][ T7765] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0x356/0xc10 (fs/xfs/xfs_buf.c:1463). Shutting down filesystem. [ 170.612877][ T7765] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 170.622056][ T7765] XFS (loop2): log mount/recovery failed: error -117 [ 170.636646][ T7765] XFS (loop2): log mount failed [ 170.670519][ T7784] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 170.782598][ T7784] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 171.160730][ T7802] loop6: detected capacity change from 0 to 64 [ 171.186400][ T5850] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.227861][ T7804] loop4: detected capacity change from 0 to 512 [ 171.243358][ T7806] program syz.2.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.317979][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.352362][ T7804] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.577877][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.578072][ T7809] IPVS: Scheduler module ip_vs_sip not found [ 171.902172][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.074824][ T5920] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 172.149992][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.210750][ T5920] usb 3-1: config 0 descriptor?? [ 172.684402][ T5920] usb 3-1: Cannot set MAC address [ 172.707988][ T5920] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 172.752654][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.786744][ T5920] usb 3-1: USB disconnect, device number 5 [ 172.922087][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 172.944676][ T9] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 172.999548][ T9] usb 4-1: config 150 has no interface number 0 [ 173.051983][ T9] usb 4-1: config 150 interface 204 has no altsetting 0 [ 173.090306][ T7861] loop1: detected capacity change from 0 to 736 [ 173.105268][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 173.132020][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.152043][ T9] usb 4-1: Product: syz [ 173.156291][ T9] usb 4-1: Manufacturer: syz [ 173.205898][ T9] usb 4-1: SerialNumber: syz [ 173.466718][ T7868] vivid-003: disconnect [ 173.480777][ T7867] vivid-003: reconnect [ 173.563473][ T5844] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 173.722849][ T5960] usb 4-1: USB disconnect, device number 4 [ 173.830197][ T7841] loop5: detected capacity change from 0 to 32768 [ 174.420377][ T7893] overlayfs: conflicting options: nfs_export=on,index=off [ 174.538030][ T7901] loop5: detected capacity change from 0 to 512 [ 174.596509][ T7901] EXT4-fs: Ignoring removed orlov option [ 174.640714][ T7901] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 174.751079][ T7901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 174.873063][ T7901] EXT4-fs error (device loop5): ext4_iget_extra_inode:5030: inode #15: comm syz.5.656: corrupted in-inode xattr: e_value size too large [ 174.998244][ T7901] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.656: couldn't read orphan inode 15 (err -117) [ 175.039045][ T7876] loop1: detected capacity change from 0 to 32768 [ 175.108023][ T7876] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.650 (7876) [ 175.128584][ T7901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.233006][ T7876] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 175.351949][ T7876] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 175.384708][ T7876] BTRFS info (device loop1): using free-space-tree [ 175.492541][ T7922] loop6: detected capacity change from 0 to 1764 [ 175.565184][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.862181][ T7946] loop5: detected capacity change from 0 to 128 [ 175.877381][ T30] audit: type=1800 audit(2000000063.820:43): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.650" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 175.919616][ T7948] loop4: detected capacity change from 0 to 164 [ 175.963179][ T7946] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.045967][ T7948] Unsupported NM flag settings (8) [ 176.075372][ T7946] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.118084][ T5838] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.414728][ T5851] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.752171][ T7963] tipc: Enabling of bearer rejected, failed to enable media [ 177.128080][ T7919] loop3: detected capacity change from 0 to 32768 [ 177.363847][ T7919] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 177.498428][ T7919] (syz.3.664,7919,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 177.532516][ T7919] (syz.3.664,7919,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 177.582059][ T7989] loop2: detected capacity change from 0 to 512 [ 177.588602][ T7919] (syz.3.664,7919,1):ocfs2_mknod:298 ERROR: status = -2 [ 177.605123][ T5844] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 177.613966][ T5844] Bluetooth: hci1: Injecting HCI hardware error event [ 177.622154][ T5859] Bluetooth: hci1: hardware error 0x00 [ 177.646510][ T7989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.658040][ T7989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.676689][ T7919] (syz.3.664,7919,1):ocfs2_mknod:502 ERROR: status = -2 [ 177.728735][ T7919] (syz.3.664,7919,0):ocfs2_create:675 ERROR: status = -2 [ 177.766913][ T7989] EXT4-fs (loop2): 1 truncate cleaned up [ 177.865405][ T7989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.970837][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 178.039899][ T7989] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 178.230048][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.745569][ T7973] loop5: detected capacity change from 0 to 32768 [ 178.920973][ T7973] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.176024][ T7980] loop1: detected capacity change from 0 to 40427 [ 179.200790][ T7980] F2FS-fs (loop1): build fault injection rate: 690 [ 179.212317][ T7980] F2FS-fs (loop1): Image doesn't support compression [ 179.305662][ T7980] F2FS-fs (loop1): invalid crc value [ 179.400154][ T7973] XFS (loop5): Ending clean mount [ 179.455728][ T7973] XFS (loop5): Quotacheck needed: Please wait. [ 179.659810][ T8046] loop3: detected capacity change from 0 to 2048 [ 179.693468][ T5859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 179.710691][ T7973] XFS (loop5): Quotacheck: Done. [ 179.843833][ T8046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.865371][ T7980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.902749][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 180.061467][ T5851] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.227136][ T8084] loop4: detected capacity change from 0 to 736 [ 181.320576][ T8089] loop3: detected capacity change from 0 to 256 [ 181.419504][ T8089] FAT-fs (loop3): Directory bread(block 64) failed [ 181.458480][ T8089] FAT-fs (loop3): Directory bread(block 65) failed [ 181.499317][ T8089] FAT-fs (loop3): Directory bread(block 66) failed [ 181.540188][ T8089] FAT-fs (loop3): Directory bread(block 67) failed [ 181.589313][ T8089] FAT-fs (loop3): Directory bread(block 68) failed [ 181.628109][ T8089] FAT-fs (loop3): Directory bread(block 69) failed [ 181.676100][ T8089] FAT-fs (loop3): Directory bread(block 70) failed [ 181.744122][ T8089] FAT-fs (loop3): Directory bread(block 71) failed [ 181.869453][ T8089] FAT-fs (loop3): Directory bread(block 72) failed [ 181.922098][ T8089] FAT-fs (loop3): Directory bread(block 73) failed [ 181.925446][ T8100] loop5: detected capacity change from 0 to 32768 [ 182.016968][ T8100] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.100768][ T8110] tipc: Enabling of bearer rejected, failed to enable media [ 182.244273][ T8100] XFS (loop5): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 182.256972][ T8100] XFS (loop5): Unmount and run xfs_repair [ 182.263362][ T8100] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 182.270792][ T8100] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 182.279728][ T8100] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.288647][ T8100] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.298730][ T8100] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.307644][ T8100] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.316574][ T8100] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.325909][ T8100] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00 ................ [ 182.337495][ T8100] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.347882][ T8100] XFS (loop5): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117 [ 182.359260][ T8100] XFS (loop5): Failed to read root inode 0x1140, error 117 [ 182.367094][ T8100] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 183.072199][ T8094] loop2: detected capacity change from 0 to 32768 [ 183.178531][ T8094] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.242812][ T8106] loop4: detected capacity change from 0 to 32768 [ 183.554129][ T8094] XFS (loop2): Ending clean mount [ 183.605560][ T8144] loop1: detected capacity change from 0 to 1024 [ 183.611278][ T8094] XFS (loop2): Quotacheck needed: Please wait. [ 183.684617][ T8144] EXT4-fs: Ignoring removed bh option [ 183.748293][ T8094] XFS (loop2): Quotacheck: Done. [ 183.754318][ T8092] loop6: detected capacity change from 0 to 32768 [ 183.815627][ T8144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.926304][ T8092] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 184.032310][ T30] audit: type=1800 audit(2000000071.970:44): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.729" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 184.209124][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.277621][ T8158] loop5: detected capacity change from 0 to 1024 [ 184.278436][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.383785][ T6560] ocfs2: Unmounting device (7,6) on (node local) [ 184.405377][ T8158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.583082][ T8158] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.974901][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.503956][ T8183] loop3: detected capacity change from 0 to 4096 [ 185.523529][ T8186] loop1: detected capacity change from 0 to 32768 [ 185.579263][ T8186] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.665369][ T8186] XFS (loop1): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 185.678987][ T8186] XFS (loop1): Unmount and run xfs_repair [ 185.685463][ T8186] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 185.692922][ T8186] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 185.701851][ T8186] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.710707][ T8186] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.721238][ T8186] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.730229][ T8186] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.739175][ T8186] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.748712][ T8186] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00 ................ [ 185.757650][ T8186] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 185.766809][ T8186] XFS (loop1): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117 [ 185.778888][ T8186] XFS (loop1): Failed to read root inode 0x1140, error 117 [ 185.786899][ T8186] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 185.988036][ T8210] loop5: detected capacity change from 0 to 256 [ 185.997129][ T8213] loop4: detected capacity change from 0 to 128 [ 186.038525][ T8183] ntfs3(loop3): ino=19, mi_enum_attr [ 186.069764][ T8183] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 186.167048][ T8213] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.202289][ T8210] FAT-fs (loop5): Directory bread(block 64) failed [ 186.208851][ T8210] FAT-fs (loop5): Directory bread(block 65) failed [ 186.216436][ T8213] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.282851][ T8210] FAT-fs (loop5): Directory bread(block 66) failed [ 186.324972][ T8210] FAT-fs (loop5): Directory bread(block 67) failed [ 186.382105][ T8210] FAT-fs (loop5): Directory bread(block 68) failed [ 186.447596][ T8210] FAT-fs (loop5): Directory bread(block 69) failed [ 186.501872][ T8210] FAT-fs (loop5): Directory bread(block 70) failed [ 186.508458][ T8210] FAT-fs (loop5): Directory bread(block 71) failed [ 186.523562][ T5842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.555589][ T8210] FAT-fs (loop5): Directory bread(block 72) failed [ 186.608470][ T8210] FAT-fs (loop5): Directory bread(block 73) failed [ 187.278827][ T8198] loop6: detected capacity change from 0 to 32768 [ 187.307525][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'. [ 187.505604][ T8243] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 187.725872][ T8247] loop1: detected capacity change from 0 to 512 [ 187.777639][ T8247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.819278][ T8247] EXT4-fs (loop1): 1 truncate cleaned up [ 187.905783][ T8247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.109133][ T8223] loop2: detected capacity change from 0 to 32768 [ 188.131336][ T8223] XFS: ikeep mount option is deprecated. [ 188.204918][ T8223] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 188.292791][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.446419][ T8223] XFS (loop2): Ending clean mount [ 188.526454][ T8223] XFS (loop2): Quotacheck needed: Please wait. [ 188.670352][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.734451][ T8223] XFS (loop2): Quotacheck: Done. [ 188.803552][ T8278] loop4: detected capacity change from 0 to 1024 [ 188.873132][ T8278] EXT4-fs: Ignoring removed nobh option [ 188.878755][ T8278] EXT4-fs: Ignoring removed bh option [ 189.023921][ T8278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.065120][ T5837] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.212455][ T8288] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.772: error while reading EA inode 32 err=-116 [ 189.235100][ T8288] EXT4-fs (loop4): Remounting filesystem read-only [ 189.246818][ T8288] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.772: cleanup dec ref error -30 [ 189.332549][ T8288] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.772: dec ref error=-30 [ 189.433455][ T8296] netlink: 'syz.5.780': attribute type 2 has an invalid length. [ 189.662939][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.701558][ T8272] loop6: detected capacity change from 0 to 32768 [ 189.772593][ T8272] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.767 (8272) [ 189.923570][ T8272] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 189.966617][ T8298] loop1: detected capacity change from 0 to 4096 [ 190.011893][ T8272] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.045078][ T8309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.084152][ T8272] BTRFS info (device loop6): using free-space-tree [ 190.129018][ T8311] loop3: detected capacity change from 0 to 512 [ 190.179009][ T8311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.372251][ T8311] EXT4-fs (loop3): 1 truncate cleaned up [ 190.475667][ T8311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.540078][ T8272] BTRFS info (device loop6): rebuilding free space tree [ 190.604569][ T8333] loop4: detected capacity change from 0 to 512 [ 190.625288][ T8333] EXT4-fs: Ignoring removed orlov option [ 190.671424][ T8333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.862594][ T8333] EXT4-fs (loop4): 1 orphan inode deleted [ 190.868377][ T8333] EXT4-fs (loop4): 1 truncate cleaned up [ 190.934900][ T8333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.968636][ T6560] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.064337][ T8333] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.4.787: path /144/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 191.147621][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.152335][ T8333] EXT4-fs (loop4): Remounting filesystem read-only [ 191.302160][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.400265][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.481883][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 191.529315][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 191.557877][ T9] usb 3-1: config 1 has no interface number 0 [ 191.593451][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 191.646607][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.688435][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 191.731036][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 191.741858][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.749849][ T9] usb 3-1: Product: syz [ 191.802147][ T9] usb 3-1: Manufacturer: syz [ 191.806755][ T9] usb 3-1: SerialNumber: syz [ 191.855691][ T8348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.882052][ T8348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.980747][ T8357] loop6: detected capacity change from 0 to 4096 [ 192.128558][ T8346] loop1: detected capacity change from 0 to 32768 [ 192.148064][ T8341] loop5: detected capacity change from 0 to 32768 [ 192.180921][ T8341] XFS: ikeep mount option is deprecated. [ 192.204658][ T8357] ntfs3(loop6): ino=1a, mi_enum_attr [ 192.211436][ T8346] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.221221][ T8341] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.241953][ T8357] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 192.342722][ T8348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.401701][ T8348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.490513][ T8341] XFS (loop5): Ending clean mount [ 192.530943][ T8341] XFS (loop5): Quotacheck needed: Please wait. [ 192.614805][ T8346] XFS (loop1): Ending clean mount [ 192.667184][ T8346] XFS (loop1): Quotacheck needed: Please wait. [ 192.688774][ T8341] XFS (loop5): Quotacheck: Done. [ 192.710343][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 192.765692][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 192.823160][ T9] usb 3-1: USB disconnect, device number 6 [ 192.895784][ T8346] XFS (loop1): Quotacheck: Done. [ 193.038426][ T5851] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.107086][ T5838] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.533255][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.539630][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.622100][ T8401] loop4: detected capacity change from 0 to 24 [ 193.851881][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 194.037309][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 194.066943][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 194.103716][ T8386] loop3: detected capacity change from 0 to 40427 [ 194.110251][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.132168][ T8386] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 194.159871][ T8386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 194.168968][ T24] usb 7-1: Product: syz [ 194.179105][ T24] usb 7-1: Manufacturer: syz [ 194.202186][ T24] usb 7-1: SerialNumber: syz [ 194.215258][ T8386] F2FS-fs (loop3): invalid crc value [ 194.250529][ T24] usb 7-1: config 0 descriptor?? [ 194.323711][ T30] audit: type=1326 audit(2000000082.270:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.418348][ T30] audit: type=1326 audit(2000000082.270:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.440520][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.508917][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.556223][ T8418] loop1: detected capacity change from 0 to 4096 [ 194.559774][ T30] audit: type=1326 audit(2000000082.270:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.653391][ T30] audit: type=1326 audit(2000000082.270:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.674435][ T8428] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.674721][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.713637][ T8427] loop4: detected capacity change from 0 to 1024 [ 194.744527][ T30] audit: type=1326 audit(2000000082.270:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.766588][ T8386] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 194.774315][ T8386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.865852][ T30] audit: type=1326 audit(2000000082.290:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 194.953809][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 194.989392][ T24] usb 7-1: USB disconnect, device number 3 [ 195.020719][ T8431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.042262][ T30] audit: type=1326 audit(2000000082.290:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 195.165291][ T30] audit: type=1326 audit(2000000082.290:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 195.243649][ T8437] loop1: detected capacity change from 0 to 8 [ 195.459142][ T8435] loop4: detected capacity change from 0 to 4096 [ 195.595635][ T8445] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.246617][ T8454] loop5: detected capacity change from 0 to 512 [ 196.281877][ T8450] loop1: detected capacity change from 0 to 65536 [ 196.298343][ T8454] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 196.363731][ T8450] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 196.385078][ T8450] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 196.401358][ T8454] EXT4-fs (loop5): 1 truncate cleaned up [ 196.419751][ T8464] loop4: detected capacity change from 0 to 47 [ 196.448764][ T8450] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 196.459636][ T8454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.478872][ T8450] XFS (loop1): Starting recovery (logdev: internal) [ 196.517142][ T8450] XFS (loop1): Ending recovery (logdev: internal) [ 196.532701][ T8450] XFS (loop1): Quotacheck needed: Please wait. [ 196.665852][ T8450] XFS (loop1): Quotacheck: Done. [ 196.708666][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 196.804719][ T5838] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 196.843463][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 197.021163][ T8474] loop4: detected capacity change from 0 to 16 [ 197.075862][ T8474] erofs (device loop4): mounted with root inode @ nid 36. [ 197.092583][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.234485][ T8504] loop1: detected capacity change from 0 to 1024 [ 198.565692][ T8513] loop4: detected capacity change from 0 to 256 [ 198.629188][ T30] audit: type=1326 audit(2000000086.570:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 198.692426][ T30] audit: type=1326 audit(2000000086.570:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 198.705134][ T8513] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 198.727979][ T8521] Bluetooth: MGMT ver 1.23 [ 198.766766][ T8519] loop1: detected capacity change from 0 to 2048 [ 198.950692][ T8519] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 198.961954][ T8479] loop2: detected capacity change from 0 to 32768 [ 198.991811][ T8519] UDF-fs: Scanning with blocksize 512 failed [ 199.055863][ T8519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.295173][ T8530] loop3: detected capacity change from 0 to 16 [ 199.370892][ T8530] erofs (device loop3): mounted with root inode @ nid 36. [ 199.423354][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 199.455740][ T8533] Zero length message leads to an empty skb [ 199.479556][ T8530] erofs (device loop3): bogus i_mode (0) @ nid 4294967296 [ 200.071957][ T8551] usb usb2: usbfs: process 8551 (syz.1.875) did not claim interface 0 before use [ 200.342511][ T5960] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.410030][ T8571] sch_fq: defrate 4294967295 ignored. [ 200.548290][ T5960] usb 3-1: Using ep0 maxpacket: 8 [ 200.589685][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.627962][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.637913][ T972] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.669054][ T5960] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 200.695054][ T8576] netlink: 104 bytes leftover after parsing attributes in process `syz.3.887'. [ 200.719754][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.751444][ T8573] loop4: detected capacity change from 0 to 4096 [ 200.760371][ T5960] usb 3-1: config 0 descriptor?? [ 200.792744][ T8573] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 200.811937][ T972] usb 6-1: Using ep0 maxpacket: 32 [ 200.853363][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.892361][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.921271][ T972] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 200.962173][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.019567][ T972] usb 6-1: config 0 descriptor?? [ 201.455511][ T5960] usb 3-1: USB disconnect, device number 7 [ 201.496693][ T972] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 201.533919][ T972] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 201.571205][ T972] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 201.598595][ T972] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 201.630305][ T972] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 201.653128][ T972] redragon 0003:0C45:760B.0009: hidraw0: USB HID v80.00 Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 201.733501][ T972] usb 6-1: USB disconnect, device number 2 [ 201.866117][ T8598] fido_id[8598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 201.891886][ T5920] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.948345][ T8579] loop6: detected capacity change from 0 to 32768 [ 202.073778][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.096295][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.148906][ T5920] usb 5-1: config 0 descriptor?? [ 202.183905][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 202.735860][ T8623] loop2: detected capacity change from 0 to 8 [ 202.743147][ T8619] loop5: detected capacity change from 0 to 2048 [ 202.780744][ T8619] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 202.799741][ T5920] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 202.829606][ T8619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.838606][ T5920] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 202.883893][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 202.917885][ T8619] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 0 [ 202.945366][ T5920] usb 5-1: USB disconnect, device number 6 [ 203.071514][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 203.071533][ T30] audit: type=1326 audit(2000000091.010:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.3.913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f319b18e9a9 code=0x0 [ 203.103216][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.123727][ T5920] cp210x 5-1:0.0: device disconnected [ 203.571576][ T8644] loop1: detected capacity change from 0 to 2048 [ 203.658375][ T8644] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 203.675973][ T8644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.867996][ T8654] loop5: detected capacity change from 0 to 1024 [ 203.903240][ T8654] hfsplus: walked past end of dir [ 204.230601][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.929'. [ 204.266979][ T8665] netlink: 152 bytes leftover after parsing attributes in process `syz.5.929'. [ 204.355883][ T8634] loop2: detected capacity change from 0 to 32768 [ 204.411422][ T8671] loop6: detected capacity change from 0 to 64 [ 204.445652][ T8634] JBD2: Ignoring recovery information on journal [ 204.669403][ T8634] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 204.759784][ T6560] hfs: node 4:3 still has 1 user(s)! [ 204.961638][ T8687] loop1: detected capacity change from 0 to 1024 [ 205.056942][ T5837] (syz-executor,5837,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 22 [ 205.109623][ T8687] hfsplus: bad catalog entry type [ 205.170443][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 205.333487][ T1144] hfsplus: b-tree write err: -5, ino 4 [ 205.461029][ T8694] 9pnet: Could not find request transport: f [ 205.576018][ T8704] loop4: detected capacity change from 0 to 128 [ 205.635388][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 205.644061][ T8704] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 205.729727][ T8704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.816559][ T8708] netlink: 666 bytes leftover after parsing attributes in process `syz.1.948'. [ 205.846159][ T9] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 205.861803][ T9] usb 3-1: config 0 has no interface number 0 [ 205.867907][ T9] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 205.939133][ T9] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.007866][ T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 206.027223][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.071691][ T9] usb 3-1: Product: syz [ 206.102716][ T9] usb 3-1: Manufacturer: syz [ 206.111113][ T9] usb 3-1: SerialNumber: syz [ 206.129111][ T8710] loop5: detected capacity change from 0 to 512 [ 206.164471][ T8710] EXT4-fs: Ignoring removed orlov option [ 206.182139][ T9] usb 3-1: config 0 descriptor?? [ 206.192458][ T8700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.208309][ T9] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 206.261607][ T9] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 206.281945][ T8710] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 206.378575][ T8683] loop3: detected capacity change from 0 to 32768 [ 206.470473][ T8683] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.620949][ T5920] usb 3-1: USB disconnect, device number 8 [ 206.634009][ T8683] XFS (loop3): Ending clean mount [ 206.658377][ T5920] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 206.743878][ T5920] cyberjack 3-1:0.69: device disconnected [ 206.755908][ T8683] XFS (loop3): Quotacheck needed: Please wait. [ 206.821322][ T5960] kernel write not supported for file /vcsu (pid: 5960 comm: kworker/1:5) [ 206.928449][ T8683] XFS (loop3): Quotacheck: Done. [ 207.037444][ T8739] loop6: detected capacity change from 0 to 2048 [ 207.070347][ T8739] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.136869][ T8743] loop1: detected capacity change from 0 to 512 [ 207.168903][ T5850] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.185671][ T5980] udevd[5980]: incorrect nilfs2 checksum on /dev/loop6 [ 207.198542][ T8744] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.262566][ T8743] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 207.270724][ T8743] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 207.361344][ T8750] loop2: detected capacity change from 0 to 256 [ 207.387592][ T8743] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.959: iget: bad i_size value: 12154757448730 [ 207.476663][ T8743] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.959: couldn't read orphan inode 13 (err -117) [ 207.478329][ T8750] FAT-fs (loop2): Directory bread(block 64) failed [ 207.538324][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.575552][ T8750] FAT-fs (loop2): Directory bread(block 65) failed [ 207.613852][ T8750] FAT-fs (loop2): Directory bread(block 66) failed [ 207.620377][ T8750] FAT-fs (loop2): Directory bread(block 67) failed [ 207.691339][ T8750] FAT-fs (loop2): Directory bread(block 68) failed [ 207.757680][ T8750] FAT-fs (loop2): Directory bread(block 69) failed [ 207.796995][ T8750] FAT-fs (loop2): Directory bread(block 70) failed [ 207.839855][ T8750] FAT-fs (loop2): Directory bread(block 71) failed [ 207.860713][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.874019][ T8750] FAT-fs (loop2): Directory bread(block 72) failed [ 207.889442][ T8758] loop4: detected capacity change from 0 to 256 [ 207.911879][ T8750] FAT-fs (loop2): Directory bread(block 73) failed [ 207.944232][ T8758] exfat: Deprecated parameter 'namecase' [ 207.949973][ T8758] exfat: Deprecated parameter 'utf8' [ 208.088433][ T8758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 208.118158][ T8764] loop1: detected capacity change from 0 to 256 [ 208.201419][ T8764] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.226780][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 208.281286][ T8764] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 208.416843][ T8764] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 208.513153][ T8773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.792672][ T8783] loop6: detected capacity change from 0 to 128 [ 208.812293][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.854414][ T8783] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.901079][ T8783] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.944346][ T8783] EXT4-fs warning (device loop6): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 208.971248][ T8783] EXT4-fs warning (device loop6): ext4_group_extend:1891: can't read last block, resize aborted [ 209.021913][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 209.029015][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.056929][ T5920] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 209.085771][ T30] audit: type=1326 audit(2000000097.030:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.118397][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.171195][ T5920] usb 3-1: config 0 descriptor?? [ 209.220423][ T30] audit: type=1326 audit(2000000097.030:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.325378][ T30] audit: type=1326 audit(2000000097.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.347404][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.445244][ T8799] loop3: detected capacity change from 0 to 256 [ 209.543430][ T8795] loop4: detected capacity change from 0 to 32768 [ 209.544704][ T8801] loop5: detected capacity change from 0 to 1024 [ 209.565223][ T30] audit: type=1326 audit(2000000097.080:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.585805][ T6560] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.588608][ T30] audit: type=1326 audit(2000000097.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.622999][ T30] audit: type=1326 audit(2000000097.080:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.645454][ T30] audit: type=1326 audit(2000000097.080:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.649511][ T5920] hkems 0003:2006:0118.000A: unknown main item tag 0x0 [ 209.708585][ T8795] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.719103][ T5920] hkems 0003:2006:0118.000A: hidraw0: USB HID vda.6f Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 209.738561][ T30] audit: type=1326 audit(2000000097.080:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9105f8e9a9 code=0x7ffc0000 [ 209.821834][ T5920] hkems 0003:2006:0118.000A: no inputs found [ 209.827845][ T5920] hkems 0003:2006:0118.000A: force feedback init failed [ 209.893169][ T5920] usb 3-1: USB disconnect, device number 9 [ 209.960411][ T8795] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 209.980613][ T8795] XFS (loop4): Starting recovery (logdev: internal) [ 209.983213][ T8811] loop1: detected capacity change from 0 to 1024 [ 210.059651][ T8795] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 210.074378][ T8795] XFS (loop4): Metadata corruption detected at xfs_agf_verify+0x18b/0x8f0, xfs_agf block 0x1 [ 210.085142][ T8795] XFS (loop4): Unmount and run xfs_repair [ 210.088156][ T8811] EXT4-fs: Ignoring removed oldalloc option [ 210.092016][ T8795] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 210.105177][ T8795] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 210.111545][ T1144] hfsplus: b-tree write err: -5, ino 4 [ 210.114394][ T8795] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 210.128670][ T8795] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 210.137559][ T8795] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 210.146842][ T8795] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 210.156368][ T8795] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 210.165798][ T8795] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 210.175022][ T8795] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 210.183976][ T8795] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0x356/0xc10 (fs/xfs/xfs_buf.c:1463). Shutting down filesystem. [ 210.199013][ T8795] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 210.212267][ T8795] XFS (loop4): log mount/recovery failed: error -117 [ 210.220305][ T8811] EXT4-fs: Ignoring removed bh option [ 210.258271][ T8795] XFS (loop4): log mount failed [ 210.273311][ T8811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.397085][ T8814] fido_id[8814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 210.811423][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.896878][ T8829] vivid-004: disconnect [ 210.956623][ T8828] vivid-004: reconnect [ 211.046049][ T8834] loop3: detected capacity change from 0 to 256 [ 211.208123][ T8834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 211.265085][ T8841] loop4: detected capacity change from 0 to 512 [ 211.273168][ T8841] EXT4-fs: Ignoring removed orlov option [ 211.308908][ T8841] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 211.388648][ T8841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 211.482255][ T8841] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #15: comm syz.4.1000: corrupted in-inode xattr: e_value size too large [ 211.556710][ T8841] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1000: couldn't read orphan inode 15 (err -117) [ 211.598961][ T8857] loop1: detected capacity change from 0 to 256 [ 211.644083][ T8841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.691025][ T8857] FAT-fs (loop1): Directory bread(block 64) failed [ 211.702390][ T5960] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 211.718489][ T8857] FAT-fs (loop1): Directory bread(block 65) failed [ 211.755824][ T8857] FAT-fs (loop1): Directory bread(block 66) failed [ 211.766901][ T8861] loop2: detected capacity change from 0 to 8 [ 211.801625][ T8857] FAT-fs (loop1): Directory bread(block 67) failed [ 211.843413][ T8857] FAT-fs (loop1): Directory bread(block 68) failed [ 211.884885][ T8857] FAT-fs (loop1): Directory bread(block 69) failed [ 211.907242][ T5960] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 211.922219][ T8857] FAT-fs (loop1): Directory bread(block 70) failed [ 211.928742][ T8857] FAT-fs (loop1): Directory bread(block 71) failed [ 211.951871][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.993763][ T5960] usb 6-1: config 0 descriptor?? [ 212.012006][ T8857] FAT-fs (loop1): Directory bread(block 72) failed [ 212.012726][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.018535][ T8857] FAT-fs (loop1): Directory bread(block 73) failed [ 212.134211][ T8865] netlink: 'syz.3.1013': attribute type 12 has an invalid length. [ 212.193974][ T8865] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1013'. [ 212.275024][ T8857] syz.1.1009: attempt to access beyond end of device [ 212.275024][ T8857] loop1: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 212.476330][ T5960] chicony 0003:04F2:1236.000B: unknown main item tag 0x0 [ 212.521846][ T5960] chicony 0003:04F2:1236.000B: unknown main item tag 0x0 [ 212.552295][ T5960] chicony 0003:04F2:1236.000B: unknown main item tag 0x0 [ 212.559384][ T5960] chicony 0003:04F2:1236.000B: unknown main item tag 0x0 [ 212.613840][ T5960] chicony 0003:04F2:1236.000B: unknown main item tag 0x0 [ 212.673958][ T8873] loop4: detected capacity change from 0 to 4096 [ 212.674671][ T5960] chicony 0003:04F2:1236.000B: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.5-1/input0 [ 212.772514][ T5960] usb 6-1: USB disconnect, device number 3 [ 212.786553][ T8873] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 212.848932][ T8873] ntfs3(loop4): Failed to load $Extend (-22). [ 212.895238][ T8873] ntfs3(loop4): Failed to initialize $Extend. [ 212.993422][ T8885] fido_id[8885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 213.087573][ T8889] Bluetooth: MGMT ver 1.23 [ 213.144364][ T8892] loop6: detected capacity change from 0 to 16 [ 213.183997][ T8893] netlink: 'syz.2.1025': attribute type 12 has an invalid length. [ 213.296034][ T8893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1025'. [ 213.565319][ T8901] loop6: detected capacity change from 0 to 512 [ 213.660177][ T8901] EXT4-fs (loop6): 1 truncate cleaned up [ 213.670043][ T8908] loop1: detected capacity change from 0 to 16 [ 213.706754][ T8901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.773496][ T8908] erofs (device loop1): too large lz4 pclusterblks 16832 [ 213.773512][ T8882] loop3: detected capacity change from 0 to 32768 [ 213.845004][ T8909] loop4: detected capacity change from 0 to 512 [ 213.887344][ T8882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 213.962389][ T8909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.127828][ T6560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.149380][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.149424][ T8917] loop5: detected capacity change from 0 to 128 [ 214.168640][ T8882] syz.3.1021 (8882) used greatest stack depth: 19496 bytes left [ 214.233271][ T8917] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.296075][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 214.333030][ T8917] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.542589][ T6613] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.722206][ T5946] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.913767][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 214.932223][ T5946] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 214.961919][ T5946] usb 3-1: config 0 has no interface number 0 [ 214.981843][ T5946] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 215.000582][ T8938] loop5: detected capacity change from 0 to 1024 [ 215.023249][ T5946] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 215.079662][ T5946] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 215.115219][ T8938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.146626][ T5946] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 215.156382][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.172461][ T5946] usb 3-1: Product: syz [ 215.177880][ T5946] usb 3-1: Manufacturer: syz [ 215.182964][ T5946] usb 3-1: SerialNumber: syz [ 215.190583][ T5946] usb 3-1: config 0 descriptor?? [ 215.197262][ T8924] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.276129][ T8949] loop6: detected capacity change from 0 to 2048 [ 215.327990][ T8950] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.407872][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.496301][ T5946] usb 3-1: USB disconnect, device number 10 [ 216.483565][ T8979] loop6: detected capacity change from 0 to 512 [ 216.558577][ T8947] loop3: detected capacity change from 0 to 32768 [ 216.636714][ T8984] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 216.660910][ T8984] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 216.689776][ T8984] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 216.724193][ T8984] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 216.771130][ T8984] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 216.827301][ T8984] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 216.866412][ T8984] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 216.901390][ T8984] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 216.951635][ T8984] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 217.046008][ T8984] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 217.101055][ T8984] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 217.945669][ T9014] loop3: detected capacity change from 0 to 4096 [ 218.854529][ T9049] loop4: detected capacity change from 0 to 1024 [ 219.015260][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.143032][ T9061] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 219.185588][ T9049] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.4.1097: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 219.239346][ T9049] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem [ 219.254027][ T9049] EXT4-fs warning (device loop4): ext4_rename_delete:3726: inode #2: comm syz.4.1097: Deleting old file: nlink 4, error=-117 [ 219.413232][ T6613] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.467983][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.658070][ T9071] loop6: detected capacity change from 0 to 1024 [ 219.693138][ T9071] EXT4-fs: Ignoring removed oldalloc option [ 219.699128][ T9071] EXT4-fs: Ignoring removed bh option [ 219.783891][ T9075] loop1: detected capacity change from 0 to 512 [ 219.882558][ T9053] loop2: detected capacity change from 0 to 32768 [ 219.890864][ T9071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.956905][ T9075] EXT4-fs (loop1): 1 orphan inode deleted [ 219.992254][ T9053] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 220.049703][ T9075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.068873][ T9075] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.138061][ T9053] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.249350][ T6560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.275809][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.478942][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 220.505246][ T9098] loop1: detected capacity change from 0 to 256 [ 220.605686][ T30] audit: type=1800 audit(2000000108.550:70): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1116" name="file1" dev="loop1" ino=1048785 res=0 errno=0 [ 220.613152][ T9098] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 220.686838][ T9098] FAT-fs (loop1): Filesystem has been set read-only [ 221.124129][ T30] audit: type=1326 audit(2000000109.050:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.260305][ T30] audit: type=1326 audit(2000000109.050:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.367699][ T30] audit: type=1326 audit(2000000109.100:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.390942][ T9122] loop3: detected capacity change from 0 to 1024 [ 221.424734][ T9122] EXT4-fs: Ignoring removed nobh option [ 221.461969][ T9122] EXT4-fs: Ignoring removed bh option [ 221.472905][ T9125] loop1: detected capacity change from 0 to 24 [ 221.487702][ T30] audit: type=1326 audit(2000000109.100:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.508802][ T9126] loop4: detected capacity change from 0 to 1024 [ 221.547553][ T9126] EXT4-fs: Ignoring removed oldalloc option [ 221.585401][ T30] audit: type=1326 audit(2000000109.100:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.587398][ T9122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.607576][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.608344][ T30] audit: type=1326 audit(2000000109.100:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.608397][ T30] audit: type=1326 audit(2000000109.100:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.608446][ T30] audit: type=1326 audit(2000000109.100:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ecb8e9a9 code=0x7ffc0000 [ 221.608558][ T9126] EXT4-fs: Ignoring removed bh option [ 221.794337][ T9126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.949973][ T9122] ================================================================== [ 221.958076][ T9122] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.965817][ T9122] Read of size 18446744073709551604 at addr ffff88807dc81030 by task syz.3.1128/9122 [ 221.975277][ T9122] [ 221.977600][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.3.1128 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 221.977632][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.977647][ T9122] Call Trace: [ 221.977656][ T9122] [ 221.977665][ T9122] dump_stack_lvl+0x189/0x250 [ 221.977693][ T9122] ? __kasan_check_byte+0x12/0x40 [ 221.977731][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.977755][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.977784][ T9122] ? lock_release+0x4b/0x3e0 [ 221.977821][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.977849][ T9122] ? __virt_addr_valid+0x4a5/0x5c0 [ 221.977880][ T9122] print_report+0xca/0x240 [ 221.977914][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.977949][ T9122] kasan_report+0x118/0x150 [ 221.977987][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.978024][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.978061][ T9122] kasan_check_range+0x2b0/0x2c0 [ 221.978082][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.978118][ T9122] __asan_memmove+0x29/0x70 [ 221.978149][ T9122] ext4_xattr_set_entry+0x8e9/0x1e20 [ 221.978199][ T9122] ext4_xattr_block_set+0x872/0x2ac0 [ 221.978242][ T9122] ? __pfx_ext4_free_in_core_inode+0x10/0x10 [ 221.978280][ T9122] ? __pfx_evict+0x10/0x10 [ 221.978310][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.978337][ T9122] ? do_raw_spin_unlock+0x122/0x240 [ 221.978367][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.978395][ T9122] ? _raw_spin_unlock+0x28/0x50 [ 221.978424][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.978458][ T9122] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 221.978494][ T9122] ? ext4_xattr_ibody_set+0x510/0x6a0 [ 221.978535][ T9122] ext4_xattr_set_handle+0x1350/0x1590 [ 221.978580][ T9122] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 221.978622][ T9122] ? __ext4_journal_start_sb+0x27e/0x5c0 [ 221.978648][ T9122] ext4_xattr_set+0x230/0x320 [ 221.978684][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.978717][ T9122] ? __pfx_ext4_xattr_set+0x10/0x10 [ 221.978751][ T9122] ? rcu_is_watching+0x15/0xb0 [ 221.978790][ T9122] ? __pfx_evm_protect_xattr+0x10/0x10 [ 221.978827][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.978856][ T9122] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 221.978879][ T9122] __vfs_setxattr+0x43c/0x480 [ 221.978924][ T9122] __vfs_setxattr_noperm+0x12d/0x660 [ 221.978967][ T9122] vfs_setxattr+0x16b/0x2f0 [ 221.978993][ T9122] ? __pfx_vfs_setxattr+0x10/0x10 [ 221.979013][ T9122] ? mnt_get_write_access+0x223/0x2a0 [ 221.979045][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.979075][ T9122] filename_setxattr+0x274/0x600 [ 221.979105][ T9122] ? __pfx_filename_setxattr+0x10/0x10 [ 221.979130][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.979157][ T9122] ? getname_flags+0x1e5/0x540 [ 221.979185][ T9122] path_setxattrat+0x364/0x3a0 [ 221.979225][ T9122] ? __pfx_path_setxattrat+0x10/0x10 [ 221.979253][ T9122] ? do_futex+0x395/0x420 [ 221.979301][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.979328][ T9122] ? rcu_is_watching+0x15/0xb0 [ 221.979368][ T9122] __x64_sys_lsetxattr+0xbf/0xe0 [ 221.979395][ T9122] do_syscall_64+0xfa/0x3b0 [ 221.979430][ T9122] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.979464][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.979486][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.979514][ T9122] ? exc_page_fault+0x9f/0xf0 [ 221.979549][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.979573][ T9122] RIP: 0033:0x7f319b18e9a9 [ 221.979592][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.979613][ T9122] RSP: 002b:00007f319bfac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 221.979639][ T9122] RAX: ffffffffffffffda RBX: 00007f319b3b5fa0 RCX: 00007f319b18e9a9 [ 221.979658][ T9122] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000001c0 [ 221.979675][ T9122] RBP: 00007f319b210d69 R08: 0000000000000000 R09: 0000000000000000 [ 221.979692][ T9122] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 221.979708][ T9122] R13: 0000000000000000 R14: 00007f319b3b5fa0 R15: 00007ffc1c005118 [ 221.979736][ T9122] [ 221.979745][ T9122] [ 222.144921][ T9139] loop1: detected capacity change from 0 to 4096 [ 222.147541][ T9122] Allocated by task 9122: [ 222.147558][ T9122] kasan_save_track+0x3e/0x80 [ 222.400895][ T9122] __kasan_kmalloc+0x93/0xb0 [ 222.405493][ T9122] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 222.411916][ T9122] kmemdup_noprof+0x2b/0x70 [ 222.416419][ T9122] ext4_xattr_block_set+0x781/0x2ac0 [ 222.421725][ T9122] ext4_xattr_set_handle+0x1350/0x1590 [ 222.427192][ T9122] ext4_xattr_set+0x230/0x320 [ 222.431873][ T9122] __vfs_setxattr+0x43c/0x480 [ 222.436556][ T9122] __vfs_setxattr_noperm+0x12d/0x660 [ 222.441843][ T9122] vfs_setxattr+0x16b/0x2f0 [ 222.446330][ T9122] filename_setxattr+0x274/0x600 [ 222.451255][ T9122] path_setxattrat+0x364/0x3a0 [ 222.456010][ T9122] __x64_sys_lsetxattr+0xbf/0xe0 [ 222.460935][ T9122] do_syscall_64+0xfa/0x3b0 [ 222.465434][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.471310][ T9122] [ 222.473619][ T9122] The buggy address belongs to the object at ffff88807dc81000 [ 222.473619][ T9122] which belongs to the cache kmalloc-1k of size 1024 [ 222.487661][ T9122] The buggy address is located 48 bytes inside of [ 222.487661][ T9122] 1024-byte region [ffff88807dc81000, ffff88807dc81400) [ 222.500921][ T9122] [ 222.503231][ T9122] The buggy address belongs to the physical page: [ 222.509619][ T9122] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dc80 [ 222.518363][ T9122] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.526844][ T9122] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 222.534411][ T9122] page_type: f5(slab) [ 222.538382][ T9122] raw: 00fff00000000040 ffff88801a441dc0 ffffea00009e1400 dead000000000002 [ 222.546951][ T9122] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 222.555521][ T9122] head: 00fff00000000040 ffff88801a441dc0 ffffea00009e1400 dead000000000002 [ 222.564178][ T9122] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 222.572838][ T9122] head: 00fff00000000003 ffffea0001f72001 00000000ffffffff 00000000ffffffff [ 222.581499][ T9122] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 222.590152][ T9122] page dumped because: kasan: bad access detected [ 222.596550][ T9122] page_owner tracks the page as allocated [ 222.602246][ T9122] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 104105565818, free_ts 104079225545 [ 222.621076][ T9122] post_alloc_hook+0x240/0x2a0 [ 222.625841][ T9122] get_page_from_freelist+0x21e4/0x22c0 [ 222.631381][ T9122] __alloc_frozen_pages_noprof+0x181/0x370 [ 222.637182][ T9122] alloc_pages_mpol+0x232/0x4a0 [ 222.642038][ T9122] allocate_slab+0x8a/0x370 [ 222.646531][ T9122] ___slab_alloc+0xbeb/0x1410 [ 222.651190][ T9122] __kmalloc_noprof+0x305/0x4f0 [ 222.656042][ T9122] ieee802_11_parse_elems_full+0x152/0x2aa0 [ 222.661931][ T9122] ieee80211_inform_bss+0x10c/0x10a0 [ 222.667213][ T9122] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 222.673447][ T9122] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 222.679069][ T9122] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 222.685129][ T9122] ieee80211_bss_info_update+0x746/0x9e0 [ 222.690761][ T9122] ieee80211_scan_rx+0x593/0xa20 [ 222.695698][ T9122] ieee80211_rx_list+0x201c/0x2a90 [ 222.700809][ T9122] ieee80211_rx_napi+0x1a8/0x3d0 [ 222.705756][ T9122] page last free pid 6072 tgid 6072 stack trace: [ 222.712101][ T9122] __free_frozen_pages+0xc71/0xe70 [ 222.717200][ T9122] __put_partials+0x156/0x1a0 [ 222.721869][ T9122] put_cpu_partial+0x17c/0x250 [ 222.726623][ T9122] __slab_free+0x2d5/0x3c0 [ 222.731026][ T9122] qlist_free_all+0x97/0x140 [ 222.735609][ T9122] kasan_quarantine_reduce+0x148/0x160 [ 222.741062][ T9122] __kasan_slab_alloc+0x22/0x80 [ 222.745909][ T9122] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 222.751371][ T9122] getname_flags+0xb8/0x540 [ 222.755860][ T9122] do_sys_openat2+0xbc/0x1c0 [ 222.760442][ T9122] __x64_sys_openat+0x138/0x170 [ 222.765284][ T9122] do_syscall_64+0xfa/0x3b0 [ 222.769784][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.775664][ T9122] [ 222.777969][ T9122] Memory state around the buggy address: [ 222.783580][ T9122] ffff88807dc80f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.791629][ T9122] ffff88807dc80f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.799682][ T9122] >ffff88807dc81000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.807728][ T9122] ^ [ 222.813345][ T9122] ffff88807dc81080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.821394][ T9122] ffff88807dc81100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 222.829440][ T9122] ================================================================== [ 222.873653][ T9139] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.881210][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.896616][ T9122] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 222.903832][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.3.1128 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 222.915497][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.925649][ T9122] Call Trace: [ 222.928958][ T9122] [ 222.931885][ T9122] dump_stack_lvl+0x99/0x250 [ 222.936481][ T9122] ? __asan_memcpy+0x40/0x70 [ 222.941078][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.946626][ T9122] ? __pfx__printk+0x10/0x10 [ 222.951229][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.956871][ T9122] panic+0x2db/0x790 [ 222.960769][ T9122] ? __pfx_panic+0x10/0x10 [ 222.965174][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.970812][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.976448][ T9122] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 222.982345][ T9122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.988674][ T9122] ? print_memory_metadata+0x314/0x400 [ 222.994140][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 222.999616][ T9122] check_panic_on_warn+0x89/0xb0 [ 223.004550][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 223.010009][ T9122] end_report+0x78/0x160 [ 223.014254][ T9122] kasan_report+0x129/0x150 [ 223.018759][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 223.024219][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 223.029681][ T9122] kasan_check_range+0x2b0/0x2c0 [ 223.034609][ T9122] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 223.040066][ T9122] __asan_memmove+0x29/0x70 [ 223.044564][ T9122] ext4_xattr_set_entry+0x8e9/0x1e20 [ 223.049915][ T9122] ext4_xattr_block_set+0x872/0x2ac0 [ 223.055208][ T9122] ? __pfx_ext4_free_in_core_inode+0x10/0x10 [ 223.061196][ T9122] ? __pfx_evict+0x10/0x10 [ 223.065608][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.071234][ T9122] ? do_raw_spin_unlock+0x122/0x240 [ 223.076426][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.082058][ T9122] ? _raw_spin_unlock+0x28/0x50 [ 223.086906][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.092536][ T9122] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 223.098291][ T9122] ? ext4_xattr_ibody_set+0x510/0x6a0 [ 223.103723][ T9122] ext4_xattr_set_handle+0x1350/0x1590 [ 223.109189][ T9122] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 223.115003][ T9122] ? __ext4_journal_start_sb+0x27e/0x5c0 [ 223.120628][ T9122] ext4_xattr_set+0x230/0x320 [ 223.125305][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.130933][ T9122] ? __pfx_ext4_xattr_set+0x10/0x10 [ 223.136131][ T9122] ? rcu_is_watching+0x15/0xb0 [ 223.140896][ T9122] ? __pfx_evm_protect_xattr+0x10/0x10 [ 223.146354][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.151990][ T9122] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 223.157875][ T9122] __vfs_setxattr+0x43c/0x480 [ 223.162564][ T9122] __vfs_setxattr_noperm+0x12d/0x660 [ 223.167856][ T9122] vfs_setxattr+0x16b/0x2f0 [ 223.172351][ T9122] ? __pfx_vfs_setxattr+0x10/0x10 [ 223.177368][ T9122] ? mnt_get_write_access+0x223/0x2a0 [ 223.182739][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.188370][ T9122] filename_setxattr+0x274/0x600 [ 223.193306][ T9122] ? __pfx_filename_setxattr+0x10/0x10 [ 223.198758][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.204385][ T9122] ? getname_flags+0x1e5/0x540 [ 223.209145][ T9122] path_setxattrat+0x364/0x3a0 [ 223.213908][ T9122] ? __pfx_path_setxattrat+0x10/0x10 [ 223.219187][ T9122] ? do_futex+0x395/0x420 [ 223.223526][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.229147][ T9122] ? rcu_is_watching+0x15/0xb0 [ 223.233914][ T9122] __x64_sys_lsetxattr+0xbf/0xe0 [ 223.238840][ T9122] do_syscall_64+0xfa/0x3b0 [ 223.243343][ T9122] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.248539][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.254592][ T9122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.260217][ T9122] ? exc_page_fault+0x9f/0xf0 [ 223.264897][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.270782][ T9122] RIP: 0033:0x7f319b18e9a9 [ 223.275183][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.294777][ T9122] RSP: 002b:00007f319bfac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 223.303182][ T9122] RAX: ffffffffffffffda RBX: 00007f319b3b5fa0 RCX: 00007f319b18e9a9 [ 223.311167][ T9122] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000001c0 [ 223.319128][ T9122] RBP: 00007f319b210d69 R08: 0000000000000000 R09: 0000000000000000 [ 223.327089][ T9122] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 223.335090][ T9122] R13: 0000000000000000 R14: 00007f319b3b5fa0 R15: 00007ffc1c005118 [ 223.343060][ T9122] [ 223.346165][ T9122] Kernel Offset: disabled [ 223.350472][ T9122] Rebooting in 86400 seconds..