last executing test programs: 4.971066792s ago: executing program 1 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}, 0x1, 0x7}, 0x0) 4.134457709s ago: executing program 0 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 3.850620056s ago: executing program 0 (id=1432): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) truncate(&(0x7f0000000200)='./file1\x00', 0x87e) 3.6926605s ago: executing program 1 (id=1433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001ec0)=[@hopopts_2292={{0x12, 0x29, 0x36, {0x3c}}}], 0x18}, 0x0) 3.118553683s ago: executing program 1 (id=1435): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0", 0x5}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) 2.989111875s ago: executing program 1 (id=1436): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x49}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911", 0x30}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3}}], 0x1, 0x0) 2.877532985s ago: executing program 0 (id=1438): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) 2.808274921s ago: executing program 1 (id=1439): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.405006159s ago: executing program 3 (id=1446): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x7, '\x00', @c}) 2.370852812s ago: executing program 0 (id=1447): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 2.106329836s ago: executing program 4 (id=1451): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) 2.022792744s ago: executing program 1 (id=1452): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) 2.021991134s ago: executing program 0 (id=1453): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 1.96001529s ago: executing program 4 (id=1454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000029000000b7080000000008007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.881719707s ago: executing program 3 (id=1456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.711891653s ago: executing program 2 (id=1457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.663543267s ago: executing program 4 (id=1458): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.545422438s ago: executing program 2 (id=1459): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) 1.434669358s ago: executing program 4 (id=1460): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003000)=@delchain={0x3b8, 0x65, 0x200, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x378, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x56}, @TCA_ROUTE4_ACT={0x36c, 0x6, [@m_ct={0x6c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x41, 0x6, "1c773b00e1bf9333d46fe05b0a2e548aed2284a49285e15974d3796b6f36f0149490955125c0c2d44b3874fe895b9c2fac6f96925bd9f86741e6585633"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x138, 0x13, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xac, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x7d, 0x6, "1c1163447bdae1824f941efcf3a506ae66bb1ef8bf7ac19ca726e3fe834add1e051b4f72d65e4b06b1a55d4ad74b1c82e50760605f6e1d35c0ef306c4f7727335271942d0f513f20c00cb1b37a1b54f86147712ecf2d23b2addc828111f53d0151b5457e3e427af7b4a0a2cc93cf779b3279638b1c30460752"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_ct={0x118, 0x14, 0x0, 0x0, {{0x7}, {0x4}, {0xee, 0x6, "9c6e17a152f1e8692d468e757d74655b0099d2c88d1c04c555eb21305359787c5d1cfa89426e70334550d46b8ff4aeca61354a145cddac1fc6e8f460ff682d355bb720b1ce40c9a97bc88f7de68c8efb234dffd7f51b49d34ecdae3d076a382fb05aafa585a88c78e0c1371367dec16a6abb89fe1786f0725b6b975272f2067fba66ab92b57424094a0ad080625ccfa6eccf794505c2bd8e130bb5e1eea66ccb6ea4f3557b932c08093cc59cd705d0c3480f2d95672b13f289f54a3b5052f39d8414db6ead422090face378d3a4e97e13675147e40b0b2f281433af45062a36172ef4989edf823785f70"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x3b8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x132}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.249743785s ago: executing program 4 (id=1461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 630.030873ms ago: executing program 3 (id=1462): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 600.108705ms ago: executing program 2 (id=1463): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}}, 0x0) 460.472368ms ago: executing program 3 (id=1464): r0 = socket$inet(0x2, 0x801, 0x0) listen(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 428.431491ms ago: executing program 2 (id=1465): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x321002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 289.340164ms ago: executing program 3 (id=1466): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 215.94307ms ago: executing program 2 (id=1467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0x3, 0x20003}]}, @func_proto]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x20) 195.530562ms ago: executing program 0 (id=1468): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) 51.413435ms ago: executing program 4 (id=1469): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "750a65a3c93199cd485a10497ead5ac3e112baf740f0853a3660ea0ca01c5078a94a0bb37a8dbd611d75f7d309540c18a222bcb970c5d34d2369ea9659f976", 0x1}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 943.4µs ago: executing program 3 (id=1470): unshare(0x60400) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000a80)={[{@noinit_itable}, {@grpquota}, {@resgid}, {@oldalloc}, {@lazytime}, {@jqfmt_vfsv1}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fadvise64(r0, 0x7bfd, 0x29, 0x1) 0s ago: executing program 2 (id=1471): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f0000001200)={[{@noacl}, {@notreelog}, {@usebackuproot}, {@notreelog}, {@nodatacow}, {@enospc_debug}, {@space_cache_v2}, {@ssd_spread}, {@skip_balance}, {@noacl}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4) symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000340)='./control\x00') kernel console output (not intermixed with test programs): ommand tx timeout [ 146.369399][ T6424] syz.1.884 uses obsolete (PF_INET,SOCK_PACKET) [ 146.388449][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 146.403246][ T6426] loop2: detected capacity change from 0 to 512 [ 146.479515][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.490326][ T6093] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.500359][ T6426] ext4 filesystem being mounted at /175/bus supports timestamps until 2038 (0x7fffffff) [ 146.700937][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 146.731054][ T6093] usb 5-1: Using ep0 maxpacket: 16 [ 146.837433][ T6248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.850306][ T6093] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 146.869782][ T6446] loop2: detected capacity change from 0 to 512 [ 146.878762][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.916694][ T6093] usb 5-1: config 0 descriptor?? [ 146.924296][ T6446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.888: inode #1: comm syz.2.888: iget: illegal inode # [ 146.924362][ T6248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.966570][ T6442] loop3: detected capacity change from 0 to 4096 [ 146.978876][ T6446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.888: error while reading EA inode 1 err=-117 [ 146.984409][ T6248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.001891][ T6093] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 147.009400][ T6248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.052795][ T6453] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.103425][ T6446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.888: inode #1: comm syz.2.888: iget: illegal inode # [ 147.125196][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.145006][ T6446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.888: error while reading EA inode 1 err=-117 [ 147.162862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.164344][ T6446] EXT4-fs (loop2): 1 orphan inode deleted [ 147.182379][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.200424][ T6446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.213649][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.241233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.258699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.278447][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.285580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.320822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.329705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.344815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.358471][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.365635][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.380409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.391254][ T3644] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 147.395471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.441497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.466952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.467966][ T3644] EXT4-fs error (device loop2): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 147.482925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.507469][ T3644] EXT4-fs error (device loop2): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 147.521663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.531897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.550643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.564095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.658732][ T6248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.675313][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.689620][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.699027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.858051][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 147.917219][ T3688] usb 5-1: USB disconnect, device number 6 [ 148.025865][ T6460] loop3: detected capacity change from 0 to 32768 [ 148.057469][ T6460] XFS: attr2 mount option is deprecated. [ 148.088803][ T6460] XFS: ikeep mount option is deprecated. [ 148.096281][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.112675][ T6460] XFS: noikeep mount option is deprecated. [ 148.176171][ T6460] XFS (loop3): Mounting V5 Filesystem [ 148.242103][ T3818] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.264752][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.291290][ T3652] Bluetooth: hci3: command tx timeout [ 148.297676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.314221][ T6460] XFS (loop3): Ending clean mount [ 148.336131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.344391][ T6460] XFS (loop3): Quotacheck needed: Please wait. [ 148.361877][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.421545][ T6460] XFS (loop3): Quotacheck: Done. [ 148.421584][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.489986][ T3818] usb 2-1: Using ep0 maxpacket: 8 [ 148.495214][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.504617][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.583466][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.595461][ T3636] XFS (loop3): Unmounting Filesystem [ 148.637483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.668978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.688646][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 148.784743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.800142][ T3818] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 148.803659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.809174][ T3818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.809196][ T3818] usb 2-1: Product: syz [ 148.809211][ T3818] usb 2-1: Manufacturer: syz [ 148.809226][ T3818] usb 2-1: SerialNumber: syz [ 148.891169][ T6248] device veth0_vlan entered promiscuous mode [ 148.923415][ T6248] device veth1_vlan entered promiscuous mode [ 148.945995][ T3818] usb 2-1: config 0 descriptor?? [ 149.021965][ T3818] gspca_main: se401-2.14.0 probing 047d:5003 [ 149.045703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.067164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.104702][ T6248] device veth0_macvtap entered promiscuous mode [ 149.138227][ T6248] device veth1_macvtap entered promiscuous mode [ 149.174192][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.184657][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.192880][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.232269][ T3654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.239834][ T3654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.247331][ T3654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.332071][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.367652][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.386398][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.397064][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.406388][ T6515] loop4: detected capacity change from 0 to 1024 [ 149.422548][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.433527][ T6515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.442294][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.442342][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.442357][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.448696][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.484514][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.496182][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.506200][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.532777][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.543832][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.556132][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.566184][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.576903][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.588323][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.611978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.621036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.638332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.677940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.686909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.702835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.719718][ T6248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.728995][ T6248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.737998][ T6248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.748449][ T6248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.758797][ T6520] loop4: detected capacity change from 0 to 1024 [ 149.792661][ T6520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.932893][ T3818] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 150.300354][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.308471][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.416575][ T6502] chnl_net:caif_netlink_parms(): no params data found [ 150.443907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.465305][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.489450][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.516171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.679892][ T6544] loop0: detected capacity change from 0 to 512 [ 150.800274][ T3818] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 150.812392][ T6535] loop3: detected capacity change from 0 to 32768 [ 150.818939][ T3818] se401: probe of 2-1:0.0 failed with error -71 [ 150.827568][ T3818] usb 2-1: USB disconnect, device number 9 [ 150.946955][ T6535] XFS (loop3): Mounting V5 Filesystem [ 150.957152][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.971598][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.023408][ T6502] device bridge_slave_0 entered promiscuous mode [ 151.036925][ T6529] loop4: detected capacity change from 0 to 40427 [ 151.055877][ T6529] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 151.064442][ T6529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 151.113954][ T6529] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.121015][ T6535] XFS (loop3): Ending clean mount [ 151.168219][ T6544] EXT4-fs: test_dummy_encryption requires encrypt feature [ 151.177796][ T6535] XFS (loop3): Quotacheck needed: Please wait. [ 151.186141][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.196425][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.203544][ T6529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.216691][ T6529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 151.237011][ T6502] device bridge_slave_1 entered promiscuous mode [ 151.239301][ T6535] XFS (loop3): Quotacheck: Done. [ 151.332693][ T3654] Bluetooth: hci4: command tx timeout [ 151.384374][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.397529][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.444979][ T6544] loop0: detected capacity change from 0 to 1024 [ 151.446208][ T6568] bio_check_eod: 3 callbacks suppressed [ 151.446222][ T6568] syz.4.901: attempt to access beyond end of device [ 151.446222][ T6568] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 151.484208][ T6535] XFS (loop3): User initiated shutdown received. [ 151.500812][ T6535] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 151.555868][ T6535] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 151.621593][ T6502] team0: Port device team_slave_0 added [ 151.654576][ T3636] XFS (loop3): Unmounting Filesystem [ 151.673660][ T3635] syz-executor: attempt to access beyond end of device [ 151.673660][ T3635] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 151.691211][ T3698] hfsplus: b-tree write err: -5, ino 4 [ 151.730197][ T11] device hsr_slave_0 left promiscuous mode [ 151.763495][ T11] device hsr_slave_1 left promiscuous mode [ 151.776925][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.816580][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.845534][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.846971][ T6578] loop0: detected capacity change from 0 to 512 [ 151.870065][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.916303][ T6578] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 151.970850][ T6578] UDF-fs: Scanning with blocksize 512 failed [ 151.993038][ T6578] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 151.999086][ T11] device bridge_slave_1 left promiscuous mode [ 152.006685][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.009972][ T6578] UDF-fs: Scanning with blocksize 1024 failed [ 152.035975][ T6578] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 152.044603][ T11] device bridge_slave_0 left promiscuous mode [ 152.061486][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.070674][ T6578] UDF-fs: Scanning with blocksize 2048 failed [ 152.115547][ T6578] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 152.156044][ T6578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.175544][ T11] device veth1_macvtap left promiscuous mode [ 152.190099][ T11] device veth0_macvtap left promiscuous mode [ 152.229462][ T11] device veth1_vlan left promiscuous mode [ 152.266570][ T11] device veth0_vlan left promiscuous mode [ 152.350298][ T6583] loop3: detected capacity change from 0 to 512 [ 152.380659][ T6583] EXT4-fs: Ignoring removed orlov option [ 152.411785][ T6583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.515368][ T6583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.605833][ T6583] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.904: casefold flag without casefold feature [ 152.660585][ T6583] EXT4-fs (loop3): Remounting filesystem read-only [ 152.667223][ T6583] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.904: couldn't read orphan inode 15 (err -117) [ 152.740141][ T6583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.876877][ T6574] loop1: detected capacity change from 0 to 40427 [ 152.886162][ T6583] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #2: comm syz.3.904: directory missing '.' [ 152.923405][ T6574] F2FS-fs (loop1): invalid crc value [ 152.927695][ T6597] loop4: detected capacity change from 0 to 512 [ 152.956912][ T6574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.977440][ T6597] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.997167][ T6597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.038309][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 153.040685][ T6597] EXT4-fs (loop4): 1 truncate cleaned up [ 153.100004][ T6597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.177875][ T6574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.320243][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 153.382581][ T6588] loop0: detected capacity change from 0 to 32768 [ 153.410125][ T3654] Bluetooth: hci4: command tx timeout [ 153.431017][ T6588] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.908 (6588) [ 153.520326][ T6588] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.537389][ T3637] syz-executor: attempt to access beyond end of device [ 153.537389][ T3637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.550105][ T6588] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 153.603492][ T6588] BTRFS info (device loop0): setting nodatacow, compression disabled [ 153.653483][ T6588] BTRFS info (device loop0): max_inline at 0 [ 153.688822][ T6588] BTRFS info (device loop0): turning off barriers [ 153.711196][ T6588] BTRFS info (device loop0): enabling ssd optimizations [ 153.746626][ T6588] BTRFS info (device loop0): using spread ssd allocation scheme [ 153.768728][ T6588] BTRFS info (device loop0): not using ssd optimizations [ 153.784748][ T6588] BTRFS info (device loop0): not using spread ssd allocation scheme [ 153.799780][ T6588] BTRFS info (device loop0): using free space tree [ 154.146498][ T6588] BTRFS info (device loop0): space_info DATA+METADATA has 32768 free, is not full [ 154.156204][ T6588] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3178496, readonly=0 zone_unusable=0 [ 154.170326][ T6588] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 154.179626][ T6588] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 154.187403][ T6588] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 154.195071][ T6588] BTRFS info (device loop0): delayed_block_rsv: size 98304 reserved 98304 [ 154.203613][ T6588] BTRFS info (device loop0): delayed_refs_rsv: size 786432 reserved 708608 [ 154.261296][ T11] team0 (unregistering): Port device team_slave_1 removed [ 154.390677][ T11] team0 (unregistering): Port device team_slave_0 removed [ 154.446193][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.528083][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.528102][ T6248] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.037538][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 155.437921][ T11] bond0 (unregistering): Released all slaves [ 155.490076][ T3654] Bluetooth: hci4: command tx timeout [ 155.525449][ T6502] team0: Port device team_slave_1 added [ 155.578508][ T6656] loop1: detected capacity change from 0 to 32768 [ 155.594232][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 155.701536][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.742817][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.780912][ T6656] XFS (loop1): Mounting V5 Filesystem [ 155.869490][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.871338][ T6656] XFS (loop1): Ending clean mount [ 155.957543][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.980505][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.017438][ T3637] XFS (loop1): Unmounting Filesystem [ 156.053919][ T6675] loop3: detected capacity change from 0 to 512 [ 156.067997][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.117779][ T6675] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.145070][ T6675] UDF-fs: Scanning with blocksize 512 failed [ 156.169560][ T6675] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.196073][ T6675] UDF-fs: Scanning with blocksize 1024 failed [ 156.221422][ T6675] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.242906][ T6502] device hsr_slave_0 entered promiscuous mode [ 156.256007][ T6675] UDF-fs: Scanning with blocksize 2048 failed [ 156.270848][ T6502] device hsr_slave_1 entered promiscuous mode [ 156.313035][ T6675] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 156.326658][ T6502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.360022][ T6502] Cannot create hsr debugfs directory [ 156.369265][ T6675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.836896][ T6691] loop4: detected capacity change from 0 to 2048 [ 156.898715][ T6697] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.916855][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 157.057454][ T6697] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 157.064418][ T6670] loop0: detected capacity change from 0 to 40427 [ 157.099669][ T6702] loop3: detected capacity change from 0 to 16 [ 157.112893][ T6670] F2FS-fs (loop0): invalid crc value [ 157.123734][ T6697] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 157.141972][ T6670] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.180431][ T6697] Remounting filesystem read-only [ 157.185628][ T4022] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 157.202651][ T4022] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 157.239532][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.252515][ T6702] erofs: (device loop3): mounted with root inode @ nid 36. [ 157.280181][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.287604][ T6670] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 157.306159][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.348250][ T6670] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.351362][ T4022] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 157.390138][ T4022] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 157.397451][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.408560][ T6502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.456250][ T6502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.463495][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.497088][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.501200][ T6502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.529002][ T4022] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 157.548128][ T4022] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 157.563027][ T6716] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.570710][ T3654] Bluetooth: hci4: command tx timeout [ 157.570802][ T4022] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 157.583957][ T6248] syz-executor: attempt to access beyond end of device [ 157.583957][ T6248] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.592465][ T6502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.618954][ T6718] PKCS7: Unknown OID: [5] 0.0 [ 157.628972][ T4022] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 157.647388][ T6718] PKCS7: Only support pkcs7_signedData type [ 157.666094][ T4022] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.690739][ T3635] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 157.708039][ T3635] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.733527][ T3635] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.778923][ T3635] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 157.791844][ T6716] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 157.829950][ T3635] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 157.854541][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.906759][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.957057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.985763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.036942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.061895][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.098893][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.106067][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.225532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.270731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.310378][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.317478][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.374744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.399685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.444465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.486220][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.514294][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.540713][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.557534][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.567303][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.582757][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.598484][ T6502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.610721][ T6502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.619405][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.628188][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.637094][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.690565][ T3108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.740094][ T4533] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.898074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.917002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.947183][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.960114][ T3108] usb 2-1: Using ep0 maxpacket: 16 [ 158.994448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.010748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.051704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.070443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.089032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.098408][ T3108] usb 2-1: config 0 has no interfaces? [ 159.132331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.154321][ T6502] device veth0_vlan entered promiscuous mode [ 159.170228][ T4533] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.171707][ T6502] device veth1_vlan entered promiscuous mode [ 159.194264][ T4533] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 159.210050][ T4533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.219392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.238281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.243217][ T4533] usb 4-1: config 0 descriptor?? [ 159.257510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.270190][ T3108] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 159.279233][ T3108] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.280776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.309577][ T3108] usb 2-1: Product: syz [ 159.318997][ T6502] device veth0_macvtap entered promiscuous mode [ 159.324768][ T4533] comedi comedi0: Wrong number of endpoints [ 159.340890][ T3108] usb 2-1: Manufacturer: syz [ 159.343764][ T6502] device veth1_macvtap entered promiscuous mode [ 159.351870][ T4533] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 159.369213][ T3108] r8152-cfgselector 2-1: config 0 descriptor?? [ 159.387412][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.414322][ T6765] loop4: detected capacity change from 0 to 8192 [ 159.426340][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.439332][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.456399][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.467371][ T6765] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.486027][ T6765] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 159.496600][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.504986][ T6763] loop0: detected capacity change from 0 to 32768 [ 159.524287][ T6765] REISERFS (device loop4): using journaled data mode [ 159.531725][ T6765] reiserfs: using flush barriers [ 159.542267][ T6765] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.558951][ T6765] REISERFS (device loop4): checking transaction log (loop4) [ 159.559451][ T6093] usb 4-1: USB disconnect, device number 12 [ 159.566656][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.583316][ T6765] REISERFS (device loop4): Using r5 hash to sort names [ 159.595558][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.606508][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.606617][ T6765] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 159.631643][ T6765] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 159.637064][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.649876][ T6763] XFS (loop0): Mounting V5 Filesystem [ 159.674043][ T3108] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 159.687971][ T6765] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.689746][ T11] usb 2-1: config 0 descriptor?? [ 159.706327][ T6765] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.708894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.722696][ T6765] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.737597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.760121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.786712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.800615][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.812519][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.822484][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.833183][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.836285][ T6763] XFS (loop0): Ending clean mount [ 159.843106][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.843123][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.843137][ T6502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.843149][ T6502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.844247][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.905840][ T5931] usb 2-1: USB disconnect, device number 10 [ 159.906515][ T6763] XFS (loop0): Quotacheck needed: Please wait. [ 159.912259][ T11] usb 2-1: can't set config #0, error -71 [ 159.940791][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.949607][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.963983][ T6502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.999991][ T6502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.014353][ T6502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.037881][ T6763] XFS (loop0): Quotacheck: Done. [ 160.057847][ T6502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.149779][ T6763] XFS (loop0): User initiated shutdown received. [ 160.165345][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.177521][ T6763] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 160.198337][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.221029][ T6763] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 160.252511][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.299659][ T6780] netlink: 144 bytes leftover after parsing attributes in process `syz.3.956'. [ 160.305848][ T6248] XFS (loop0): Unmounting Filesystem [ 160.315715][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.331527][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.376095][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.596421][ T6787] netlink: 888 bytes leftover after parsing attributes in process `syz.2.905'. [ 160.896574][ T6795] device vlan2 entered promiscuous mode [ 160.905496][ T6795] device virt_wifi0 entered promiscuous mode [ 160.920899][ T6795] team0: Port device vlan2 added [ 161.061537][ T6803] loop2: detected capacity change from 0 to 1024 [ 161.116759][ T6803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.137629][ T6803] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 161.373400][ T6502] EXT4-fs (loop2): unmounting filesystem. [ 161.605732][ T6831] loop1: detected capacity change from 0 to 128 [ 161.673810][ T26] audit: type=1800 audit(1727927557.235:22): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.979" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 161.706396][ T6831] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 161.731182][ T26] audit: type=1800 audit(1727927557.255:23): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.979" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 161.753889][ T6831] FAT-fs (loop1): Filesystem has been set read-only [ 161.788435][ T6831] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 161.797857][ T6783] loop4: detected capacity change from 0 to 40427 [ 161.828443][ T6783] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.828467][ T6783] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.833199][ T6783] F2FS-fs (loop4): invalid crc value [ 161.873392][ T6783] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.982771][ T6783] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.982796][ T6783] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.024331][ T26] audit: type=1804 audit(1727927557.585:24): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.960" name="/newroot/211/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 162.334444][ T6828] loop2: detected capacity change from 0 to 32768 [ 162.452895][ T6828] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.465856][ T6855] netem: incorrect ge model size [ 162.520979][ T6828] (syz.2.977,6828,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 162.678077][ T6502] ocfs2: Unmounting device (7,2) on (node local) [ 162.768163][ T6861] netlink: 68 bytes leftover after parsing attributes in process `syz.4.983'. [ 162.848484][ T6863] loop1: detected capacity change from 0 to 2048 [ 162.908058][ T6863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.048904][ T6867] loop3: detected capacity change from 0 to 8192 [ 163.071251][ T6867] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.109052][ T6867] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 163.121878][ T6867] REISERFS (device loop3): using journaled data mode [ 163.128574][ T6867] reiserfs: using flush barriers [ 163.186383][ T6867] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.203058][ T3108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.211590][ T6867] REISERFS (device loop3): checking transaction log (loop3) [ 163.237322][ T6867] REISERFS (device loop3): Using r5 hash to sort names [ 163.251456][ T6867] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 163.271422][ T6867] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 163.329495][ T6867] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 163.353096][ T6867] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 163.369221][ T6881] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 163.385380][ T6867] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 163.610748][ T3108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.630350][ T6885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.635687][ T3108] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.647647][ T6885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.654594][ T3108] usb 5-1: config 1 interface 0 has no altsetting 0 [ 163.678876][ T6885] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 163.693536][ T6885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.705092][ T6885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 163.711180][ T6885] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 163.760176][ T3108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.782401][ T3108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.816196][ T3108] usb 5-1: SerialNumber: syz [ 163.886660][ T3108] cdc_ether 5-1:1.0: skipping garbage [ 163.906854][ T3108] usb 5-1: bad CDC descriptors [ 163.999824][ T6903] tun0: tun_chr_ioctl cmd 1074025677 [ 164.009819][ T6903] tun0: linktype set to 778 [ 164.130991][ T4533] usb 5-1: USB disconnect, device number 7 [ 164.318701][ T6893] loop3: detected capacity change from 0 to 32768 [ 164.352995][ T5937] kernel write not supported for file /media0 (pid: 5937 comm: kworker/0:12) [ 164.386385][ T6893] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.476979][ T6893] (syz.3.1001,6893,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 164.611763][ T3636] ocfs2: Unmounting device (7,3) on (node local) [ 164.773080][ T6927] loop4: detected capacity change from 0 to 16 [ 164.819827][ T6927] erofs: (device loop4): mounted with root inode @ nid 36. [ 164.840513][ T6929] loop2: detected capacity change from 0 to 128 [ 164.854843][ T6927] overlayfs: failed to get metacopy (-117) [ 164.898387][ T6929] CUSE: unknown device info "40tCwحVΉ`uH~ " [ 164.923203][ T6929] CUSE: unknown device info ")ʝiV~޵~wz3_ޓH4l?D5NVѢ~y3˿j-o.]" [ 164.971215][ T6929] CUSE: unknown device info "пM;W" [ 165.014075][ T6929] CUSE: unknown device info "@iSzz" [ 165.047563][ T6911] loop1: detected capacity change from 0 to 32768 [ 165.057530][ T6929] CUSE: DEVNAME unspecified [ 165.072678][ T6911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1012 (6911) [ 165.085644][ T6911] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.085716][ T6911] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.085783][ T6911] BTRFS info (device loop1): using free space tree [ 165.433809][ T6911] BTRFS info (device loop1): enabling ssd optimizations [ 165.536185][ T3637] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.570201][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.602157][ T6919] loop0: detected capacity change from 0 to 32768 [ 165.732324][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.810399][ T6966] find_entry called with index = 0 [ 165.873372][ T6966] find_entry called with index = 0 [ 166.762277][ T6971] loop2: detected capacity change from 0 to 40427 [ 166.810225][ T6971] F2FS-fs (loop2): invalid crc value [ 166.829836][ T6971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.000250][ T6971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.120257][ T6502] syz-executor: attempt to access beyond end of device [ 167.120257][ T6502] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.237895][ T26] audit: type=1326 audit(1727927562.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f860f37dff9 code=0x0 [ 167.478496][ T6981] loop1: detected capacity change from 0 to 32768 [ 167.567122][ T6997] loop3: detected capacity change from 0 to 32768 [ 167.570731][ T6981] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.592500][ T6997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1038 (6997) [ 167.627394][ T6997] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.643270][ T6997] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 167.652117][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.658327][ T6997] BTRFS info (device loop3): using free space tree [ 167.708294][ T6981] (syz.1.1029,6981,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 167.811741][ T3654] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.846104][ T3637] ocfs2: Unmounting device (7,1) on (node local) [ 167.941270][ T6997] BTRFS info (device loop3): enabling ssd optimizations [ 168.086834][ T3636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.005057][ T7032] loop2: detected capacity change from 0 to 32768 [ 169.021249][ T7032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1046 (7032) [ 169.051830][ T7066] sctp: [Deprecated]: syz.0.1057 (pid 7066) Use of int in maxseg socket option. [ 169.051830][ T7066] Use struct sctp_assoc_value instead [ 169.079210][ T7032] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.119040][ T7032] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 169.144754][ T7032] BTRFS info (device loop2): using free space tree [ 169.308281][ T7032] BTRFS info (device loop2): enabling ssd optimizations [ 169.458383][ T6502] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.877856][ T7069] loop4: detected capacity change from 0 to 40427 [ 169.937166][ T7069] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 169.946900][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 169.970350][ T7069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.984681][ T7063] loop3: detected capacity change from 0 to 32768 [ 170.009138][ T7069] F2FS-fs (loop4): invalid crc value [ 170.030894][ T7063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.048926][ T7063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.078692][ T7069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.141969][ T7063] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 170.242654][ T7063] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 170.256101][ T7069] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.276736][ T7108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.302396][ T7069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.393017][ T7110] loop2: detected capacity change from 0 to 16 [ 170.462679][ T7110] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.504113][ T7110] overlayfs: failed to get metacopy (-117) [ 170.615543][ T7114] loop0: detected capacity change from 0 to 256 [ 170.684637][ T7117] loop3: detected capacity change from 0 to 128 [ 170.749878][ T7117] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 170.780571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.799180][ T7117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.878323][ T7112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.890750][ T7112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.932688][ T7112] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 170.948765][ T7112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.960492][ T7112] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.974467][ T7112] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 171.117926][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1079'. [ 171.132806][ T7130] loop1: detected capacity change from 0 to 256 [ 171.168975][ T7130] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 171.298332][ T7130] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 171.298332][ T7130] [ 171.339980][ T7130] exFAT-fs (loop1): error, failed to bmap (inode : ffff888058ac94e0 iblock : 0, err : -5) [ 171.359986][ T41] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.398958][ T7138] loop2: detected capacity change from 0 to 256 [ 171.615047][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 171.750124][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.792204][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.831870][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.860004][ T41] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 171.869692][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.980160][ T41] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.009939][ T41] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.009964][ T41] usb 1-1: Manufacturer: syz [ 172.010794][ T7134] loop4: detected capacity change from 0 to 32768 [ 172.022427][ T41] usb 1-1: config 0 descriptor?? [ 172.046605][ T7134] XFS: ikeep mount option is deprecated. [ 172.089059][ T7134] XFS (loop4): Mounting V5 Filesystem [ 172.176983][ T7134] XFS (loop4): Ending clean mount [ 172.178725][ T7134] XFS (loop4): Quotacheck needed: Please wait. [ 172.260877][ T7134] XFS (loop4): Quotacheck: Done. [ 172.422338][ T41] rc_core: IR keymap rc-hauppauge not found [ 172.422357][ T41] Registered IR keymap rc-empty [ 172.428095][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.462813][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.510996][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 172.512626][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 172.532855][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.569995][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.606193][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.630001][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.670069][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.696751][ T7134] syz.4.1074 (7134): drop_caches: 2 [ 172.702180][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.735194][ T3635] XFS (loop4): Unmounting Filesystem [ 172.750041][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.770086][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.780394][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.813097][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.850685][ T41] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.891252][ T41] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 172.891274][ T41] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.010185][ T3654] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.013167][ T6078] usb 1-1: USB disconnect, device number 10 [ 173.618585][ T7043] kernel write not supported for file /sequencer2 (pid: 7043 comm: kworker/0:17) [ 174.075791][ T7213] loop0: detected capacity change from 0 to 512 [ 174.085702][ T7212] loop4: detected capacity change from 0 to 16 [ 174.114762][ T7212] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.148337][ T7215] loop3: detected capacity change from 0 to 512 [ 174.191165][ T7215] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 174.205616][ T7213] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 174.266924][ T7215] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 174.294237][ T7213] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1113: invalid indirect mapped block 1 (level 1) [ 174.318151][ T7213] EXT4-fs (loop0): 1 truncate cleaned up [ 174.335783][ T7213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.367544][ T7215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1114: bg 0: block 18: invalid block bitmap [ 174.387692][ T7215] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 174.425975][ T7215] EXT4-fs (loop3): 1 truncate cleaned up [ 174.437768][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.454780][ T7224] loop1: detected capacity change from 0 to 128 [ 174.466395][ T7215] ext2 filesystem being mounted at /220/file0 supports timestamps until 2038 (0x7fffffff) [ 174.509713][ T7224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.534621][ T7229] loop2: detected capacity change from 0 to 64 [ 174.550595][ T7224] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038 (0x7fffffff) [ 174.573244][ T7215] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 3: comm syz.3.1114: lblock 0 mapped to illegal pblock 3 (length 1) [ 174.603731][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.649098][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.692550][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 174.706187][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.715155][ T7233] loop4: detected capacity change from 0 to 128 [ 174.751628][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.772831][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.776199][ T7233] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 174.824918][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 174.827187][ T7235] loop1: detected capacity change from 0 to 512 [ 174.836647][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.854218][ T3654] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.887311][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.902490][ T7233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.938014][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.969641][ T7235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.974872][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 174.991701][ T7235] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038 (0x7fffffff) [ 175.061240][ T7241] loop3: detected capacity change from 0 to 4096 [ 175.072364][ T6248] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 175.090029][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.114971][ T7235] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.1122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 175.233600][ T26] audit: type=1800 audit(1727927570.795:26): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1125" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 175.349486][ T7241] ntfs3: loop3: ino=1f, "file2" attr_set_size [ 175.373804][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 175.651692][ T7262] loop1: detected capacity change from 0 to 256 [ 175.823757][ T6248] EXT4-fs (loop0): unmounting filesystem. [ 175.937790][ T7270] loop2: detected capacity change from 0 to 1024 [ 175.971334][ T7270] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 175.981137][ T7270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.008052][ T7270] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.1139: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.074305][ T7270] EXT4-fs (loop2): Remounting filesystem read-only [ 176.094364][ T7270] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1139: couldn't read orphan inode 11 (err -117) [ 176.114808][ T7270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.248043][ T6502] EXT4-fs (loop2): unmounting filesystem. [ 176.419013][ T7256] loop4: detected capacity change from 0 to 40427 [ 176.442467][ T7256] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 176.459200][ T7256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 176.485002][ T7256] F2FS-fs (loop4): invalid crc value [ 176.543313][ T7256] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 176.658751][ T7256] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 176.686186][ T7256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.751768][ T3652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.784349][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.792798][ T26] audit: type=1326 audit(1727927572.355:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.2.1148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac2b7dff9 code=0x0 [ 176.821068][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.828893][ T3652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.840596][ T3652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.859331][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.989841][ T7296] mmap: syz.3.1149 (7296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.068745][ T7277] loop1: detected capacity change from 0 to 32768 [ 177.133217][ T7277] JBD2: Ignoring recovery information on journal [ 177.184615][ T7277] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.216392][ T26] audit: type=1800 audit(1727927572.775:28): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1144" name="file1" dev="loop1" ino=16946 res=0 errno=0 [ 177.260691][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 177.297219][ T3637] ocfs2: Unmounting device (7,1) on (node local) [ 177.513680][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.540301][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.578907][ T7288] device bridge_slave_0 entered promiscuous mode [ 177.604524][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.625874][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.641063][ T7288] device bridge_slave_1 entered promiscuous mode [ 177.722949][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.757632][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.859103][ T7288] team0: Port device team_slave_0 added [ 177.903157][ T7288] team0: Port device team_slave_1 added [ 177.957471][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.982228][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.087218][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.156396][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.180038][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.225679][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.290978][ T7334] input: syz0 as /devices/virtual/input/input18 [ 178.298141][ T7332] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1162'. [ 178.346265][ T7288] device hsr_slave_0 entered promiscuous mode [ 178.391572][ T7288] device hsr_slave_1 entered promiscuous mode [ 178.409962][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.417532][ T7288] Cannot create hsr debugfs directory [ 178.458277][ T7337] loop1: detected capacity change from 0 to 8 [ 178.531065][ T7341] loop3: detected capacity change from 0 to 256 [ 178.663901][ T7341] FAT-fs (loop3): Directory bread(block 64) failed [ 178.673974][ T7341] FAT-fs (loop3): Directory bread(block 65) failed [ 178.701502][ T7342] loop4: detected capacity change from 0 to 4096 [ 178.708499][ T7341] FAT-fs (loop3): Directory bread(block 66) failed [ 178.717810][ T7345] loop2: detected capacity change from 0 to 512 [ 178.724166][ T7341] FAT-fs (loop3): Directory bread(block 67) failed [ 178.732136][ T7341] FAT-fs (loop3): Directory bread(block 68) failed [ 178.760989][ T7345] ext4: Unknown parameter 'nouser_xattr' [ 178.779700][ T7341] FAT-fs (loop3): Directory bread(block 69) failed [ 178.792573][ T7341] FAT-fs (loop3): Directory bread(block 70) failed [ 178.820900][ T7341] FAT-fs (loop3): Directory bread(block 71) failed [ 178.853223][ T7341] FAT-fs (loop3): Directory bread(block 72) failed [ 178.883839][ T7341] FAT-fs (loop3): Directory bread(block 73) failed [ 178.926102][ T7342] ntfs3: loop4: ino=1f, "file2" attr_set_size [ 178.930650][ T26] audit: type=1800 audit(1727927574.475:29): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1167" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 178.958386][ T3654] Bluetooth: hci3: command tx timeout [ 179.052940][ T7288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.155441][ T7351] loop2: detected capacity change from 0 to 512 [ 179.217045][ T7351] EXT4-fs: Ignoring removed oldalloc option [ 179.356686][ T7288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.410203][ T7351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.439494][ T7351] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 179.591054][ T7351] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.1172: corrupted inode contents [ 179.628144][ T7288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.653354][ T7351] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.1172: mark_inode_dirty error [ 179.686964][ T7351] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.1172: corrupted inode contents [ 179.705608][ T7363] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.1172: corrupted inode contents [ 179.815863][ T6502] EXT4-fs (loop2): unmounting filesystem. [ 180.442061][ T7288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.714762][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.764505][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.797327][ T7371] loop3: detected capacity change from 0 to 2048 [ 180.811025][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.846119][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.891438][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.907534][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.916831][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.925216][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 180.933929][ T7376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.991544][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 181.010763][ T3654] Bluetooth: hci3: command tx timeout [ 181.020520][ T7376] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 181.039766][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 181.048167][ T3813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 181.057478][ T7376] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 181.084978][ T7376] Remounting filesystem read-only [ 181.111999][ T3813] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.122623][ T4022] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 181.130675][ T4022] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 181.138588][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.226601][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.285567][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.343991][ T4022] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 181.365875][ T4022] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 181.391941][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.424787][ T7288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.432201][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.443465][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.457423][ T7288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.465642][ T4022] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 181.478157][ T7288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.492085][ T4022] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 181.501992][ T7288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.509803][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.551928][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.587524][ T4022] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.613142][ T7371] NILFS (loop3): mounting fs with errors [ 181.645100][ T7371] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 181.698228][ T7371] Remounting filesystem read-only [ 181.716754][ T7371] NILFS (loop3): error -5 reading inode: ino=18 [ 181.754122][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.824738][ T7371] NILFS (loop3): cannot mark inode dirty (ino=18): error -5 loading inode block [ 181.921086][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.951117][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.959104][ T7379] loop2: detected capacity change from 0 to 4096 [ 181.962076][ T3636] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 182.024394][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.037889][ T3636] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 182.051420][ T3636] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 182.070357][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.088114][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.097425][ T26] audit: type=1800 audit(1727927577.665:30): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1181" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 182.101400][ T3636] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 182.129193][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.136338][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.149656][ T7379] ntfs3: loop2: ino=1f, "file2" attr_set_size [ 182.207738][ T3636] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 182.224934][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.226411][ T3636] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 182.240995][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.241500][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.273161][ T3636] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 182.283497][ T3636] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 182.302118][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.319739][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.358738][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.368988][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.376127][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.409569][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.426714][ T3636] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 182.450502][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.459267][ T3636] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 182.464909][ T7389] loop1: detected capacity change from 0 to 512 [ 182.467905][ T3636] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 182.489742][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.497951][ T3636] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 182.514077][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.538200][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.560796][ T7389] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 182.570500][ T3636] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 182.578154][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.595308][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.606070][ T7389] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 182.624366][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.637589][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.645910][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.653135][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.665771][ T3636] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 182.666541][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.688850][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.688908][ T7389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1187: bg 0: block 18: invalid block bitmap [ 182.697876][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.719734][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.744353][ T3636] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.810978][ T7389] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 182.840422][ T7389] EXT4-fs (loop1): 1 truncate cleaned up [ 182.846092][ T7389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 182.868592][ T7389] ext2 filesystem being mounted at /265/file0 supports timestamps until 2038 (0x7fffffff) [ 182.936786][ T7389] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 3: comm syz.1.1187: lblock 0 mapped to illegal pblock 3 (length 1) [ 182.998853][ T7401] loop3: detected capacity change from 0 to 512 [ 183.071082][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 183.094317][ T3654] Bluetooth: hci3: command tx timeout [ 183.117270][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.135420][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.197197][ T7380] loop4: detected capacity change from 0 to 32768 [ 183.209289][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.256933][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.299096][ T7380] XFS (loop4): Mounting V5 Filesystem [ 183.316064][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.328604][ T7405] loop1: detected capacity change from 0 to 2048 [ 183.394544][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.436725][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.477625][ T7380] XFS (loop4): Ending clean mount [ 183.488415][ T7288] device veth0_vlan entered promiscuous mode [ 183.508671][ T7405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.521494][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.530775][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.567179][ T7288] device veth1_vlan entered promiscuous mode [ 183.574956][ T7405] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038 (0x7fffffff) [ 183.619464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.647408][ T3635] XFS (loop4): Unmounting Filesystem [ 183.653698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.700149][ T7405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1190: bg 0: block 288: padding at end of block bitmap is not set [ 183.720923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.737761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.749366][ T7288] device veth0_macvtap entered promiscuous mode [ 183.842879][ T7288] device veth1_macvtap entered promiscuous mode [ 183.900159][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.924862][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 183.930059][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.941780][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.954983][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.965866][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.979973][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.998774][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.019152][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.030307][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.050615][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.117084][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.141973][ T7428] loop1: detected capacity change from 0 to 1024 [ 184.153710][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.186950][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.220038][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.257897][ T7428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.308758][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.370124][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.418320][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.429360][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.443097][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.454468][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.466136][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.479160][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.489305][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.490770][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 184.505158][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.523397][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.536467][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.548746][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.593940][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.614353][ T7437] pim6reg0: tun_chr_ioctl cmd 35108 [ 184.645883][ T7439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.656760][ T7439] bridge0: port 3(bond1) entered blocking state [ 184.663445][ T7439] bridge0: port 3(bond1) entered disabled state [ 184.671444][ T7439] device bond1 entered promiscuous mode [ 184.677740][ T7439] bridge0: port 3(bond1) entered blocking state [ 184.684590][ T7439] bridge0: port 3(bond1) entered forwarding state [ 184.703698][ T4022] bridge0: port 3(bond1) entered disabled state [ 184.713862][ T7288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.733846][ T7288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.756609][ T7288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.765448][ T7288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.820050][ T7447] loop4: detected capacity change from 0 to 256 [ 184.908069][ T7447] FAT-fs (loop4): Directory bread(block 64) failed [ 184.950110][ T7447] FAT-fs (loop4): Directory bread(block 65) failed [ 184.956772][ T7447] FAT-fs (loop4): Directory bread(block 66) failed [ 184.993656][ T7447] FAT-fs (loop4): Directory bread(block 67) failed [ 185.040101][ T7447] FAT-fs (loop4): Directory bread(block 68) failed [ 185.046670][ T7447] FAT-fs (loop4): Directory bread(block 69) failed [ 185.078839][ T7447] FAT-fs (loop4): Directory bread(block 70) failed [ 185.085944][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.119957][ T7447] FAT-fs (loop4): Directory bread(block 71) failed [ 185.127100][ T7447] FAT-fs (loop4): Directory bread(block 72) failed [ 185.160090][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.170186][ T3654] Bluetooth: hci3: command tx timeout [ 185.201571][ T7447] FAT-fs (loop4): Directory bread(block 73) failed [ 185.202774][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.217265][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.224620][ T7452] loop3: detected capacity change from 0 to 2048 [ 185.234110][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.267276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.355002][ T7460] loop1: detected capacity change from 0 to 1024 [ 185.399701][ T7452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.418803][ T7452] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038 (0x7fffffff) [ 185.436410][ T7468] loop2: detected capacity change from 0 to 128 [ 185.551154][ T3698] hfsplus: b-tree write err: -5, ino 4 [ 185.598891][ T7451] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1205: bg 0: block 288: padding at end of block bitmap is not set [ 185.640255][ T7451] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 185.854237][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 185.887916][ T7481] input: syz0 as /devices/virtual/input/input19 [ 186.192470][ T7490] input: syz1 as /devices/virtual/input/input20 [ 186.524906][ T7496] loop4: detected capacity change from 0 to 1764 [ 186.557596][ T7503] virtio-fs: tag <(null)> not found [ 186.902800][ T7507] loop1: detected capacity change from 0 to 2048 [ 186.999977][ T7515] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.066987][ T7515] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 187.089433][ T7519] loop3: detected capacity change from 0 to 256 [ 187.098818][ T7515] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 187.156618][ T7515] Remounting filesystem read-only [ 187.162218][ T7518] NILFS (loop1): mounting fs with errors [ 187.194316][ T7519] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 187.212524][ T7515] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 187.240408][ T7515] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 187.249294][ T7519] FAT-fs (loop3): Filesystem has been set read-only [ 187.289812][ T7515] Remounting filesystem read-only [ 187.359748][ T7523] mkiss: ax0: crc mode is auto. [ 187.372574][ T3637] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 187.373738][ T7488] loop0: detected capacity change from 0 to 32768 [ 187.390124][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 187.421341][ T3637] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 187.449400][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.480303][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.504833][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.527579][ T7524] mkiss: ax0: crc mode is auto. [ 187.569778][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 187.600125][ T3637] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 187.612565][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.673823][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.710064][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.731911][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 187.739116][ T3637] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 187.790887][ T3637] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 187.798758][ T3637] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 187.830011][ T3637] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 187.837890][ T3637] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 187.880268][ T3637] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 187.887954][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.951628][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 187.980151][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.009334][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 188.028648][ T3637] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 188.038342][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.058199][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.085766][ T7513] loop2: detected capacity change from 0 to 32768 [ 188.100339][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.138702][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 188.154634][ T3637] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 188.170674][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.200820][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.237788][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.250692][ T7513] XFS (loop2): Mounting V5 Filesystem [ 188.266135][ T3637] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 188.290208][ T3637] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 188.298063][ T3637] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 188.309558][ T3637] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 188.317684][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.339992][ T3637] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 188.348656][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.359331][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.368370][ T3637] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 188.424117][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.433197][ T3637] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 188.440974][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.450808][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.459788][ T3637] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 188.468133][ T3637] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 188.571851][ T7513] XFS (loop2): Ending clean mount [ 188.762724][ T6502] XFS (loop2): Unmounting Filesystem [ 189.040282][ T6082] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.300030][ T6082] usb 4-1: Using ep0 maxpacket: 16 [ 189.432829][ T7561] loop4: detected capacity change from 0 to 8192 [ 189.450521][ T6082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.469985][ T6082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.510298][ T6082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.528250][ T7561] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.603018][ T6082] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 189.612166][ T7556] loop0: detected capacity change from 0 to 32768 [ 189.615612][ T7561] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 189.695421][ T6082] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.700203][ T7561] REISERFS (device loop4): using ordered data mode [ 189.723868][ T7582] loop1: detected capacity change from 0 to 512 [ 189.734377][ T7556] XFS (loop0): Mounting V5 Filesystem [ 189.742040][ T7582] EXT4-fs: Ignoring removed oldalloc option [ 189.753804][ T7561] reiserfs: using flush barriers [ 189.768668][ T7561] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.789740][ T7561] REISERFS (device loop4): checking transaction log (loop4) [ 189.800468][ T6082] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.834967][ T7582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.840709][ T6082] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.878070][ T6082] usb 4-1: Manufacturer: syz [ 189.893675][ T7582] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038 (0x7fffffff) [ 189.901628][ T6082] usb 4-1: config 0 descriptor?? [ 189.954385][ T7556] XFS (loop0): Ending clean mount [ 189.978982][ T7590] loop2: detected capacity change from 0 to 256 [ 189.979012][ T7556] XFS (loop0): Quotacheck needed: Please wait. [ 189.994136][ T7582] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.1255: corrupted inode contents [ 190.021397][ T7582] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.1255: mark_inode_dirty error [ 190.044466][ T7582] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.1255: corrupted inode contents [ 190.050828][ T7590] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 190.083726][ T7561] REISERFS (device loop4): Using tea hash to sort names [ 190.086198][ T7556] XFS (loop0): Quotacheck: Done. [ 190.098554][ T7561] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 190.121993][ T7591] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.1255: corrupted inode contents [ 190.231967][ T7288] XFS (loop0): Unmounting Filesystem [ 190.264117][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 190.360419][ T6082] rc_core: IR keymap rc-hauppauge not found [ 190.366775][ T6082] Registered IR keymap rc-empty [ 190.381088][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.426836][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.510839][ T6082] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 190.539007][ T6082] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 190.568031][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.600037][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.650413][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.680503][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.720524][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.740113][ T7041] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.750419][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.790132][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.820040][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.861400][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.900126][ T6082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.951747][ T6082] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 190.970608][ T6082] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 191.004848][ T6082] usb 4-1: USB disconnect, device number 13 [ 191.120192][ T7041] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.142962][ T7041] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.153234][ T7043] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 191.186432][ T7041] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.198783][ T7041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.230623][ T7594] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.492082][ T6082] usb 2-1: USB disconnect, device number 11 [ 191.532293][ T7043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.579335][ T7043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.619850][ T7043] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.640997][ T7043] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 191.680040][ T7043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.714438][ T7043] usb 3-1: config 0 descriptor?? [ 191.889523][ T7610] loop0: detected capacity change from 0 to 32768 [ 191.965031][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.046825][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.170213][ T7043] usbhid 3-1:0.0: can't add hid device: -71 [ 192.176673][ T7043] usbhid: probe of 3-1:0.0 failed with error -71 [ 192.216526][ T7043] usb 3-1: USB disconnect, device number 9 [ 192.394584][ T7630] loop0: detected capacity change from 0 to 512 [ 192.420681][ T7630] EXT4-fs: Ignoring removed oldalloc option [ 192.494180][ T7630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.503337][ T7630] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 192.529795][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 192.561381][ T7630] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.1270: corrupted inode contents [ 192.564273][ T7634] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.590651][ T7630] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #2: comm syz.0.1270: mark_inode_dirty error [ 192.604762][ T7630] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.1270: corrupted inode contents [ 192.643690][ T7630] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.1270: corrupted inode contents [ 192.660208][ T7043] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.687318][ T7288] EXT4-fs (loop0): unmounting filesystem. [ 192.914639][ T7621] loop4: detected capacity change from 0 to 32768 [ 192.918209][ T7043] usb 3-1: Using ep0 maxpacket: 8 [ 193.023592][ T7621] XFS (loop4): Mounting V5 Filesystem [ 193.070513][ T7043] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.098224][ T7043] usb 3-1: config 0 has no interface number 0 [ 193.108325][ T7043] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 193.134810][ T7043] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 193.153246][ T7043] usb 3-1: config 0 interface 1 has no altsetting 0 [ 193.165038][ T7043] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 193.182553][ T7656] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1279'. [ 193.184010][ T7043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.210927][ T7656] netlink: 'syz.0.1279': attribute type 7 has an invalid length. [ 193.216840][ T7043] usb 3-1: config 0 descriptor?? [ 193.232720][ T7656] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1279'. [ 193.256322][ T7621] XFS (loop4): Starting recovery (logdev: internal) [ 193.276916][ T7043] hso 3-1:0.1: Failed to find BULK OUT ep [ 193.290289][ T41] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.314253][ T3629] udevd[3629]: setting owner of /dev/ttyHS0 to uid=0, gid=18 failed: No such file or directory [ 193.366501][ T7621] XFS (loop4): Ending recovery (logdev: internal) [ 193.480049][ T7043] usb 3-1: USB disconnect, device number 10 [ 193.539775][ T3635] XFS (loop4): Unmounting Filesystem [ 193.561447][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 193.710285][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.736497][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.777482][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.798294][ T41] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.829689][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.930161][ T41] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.960166][ T41] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.989142][ T41] usb 2-1: Manufacturer: syz [ 194.013813][ T41] usb 2-1: config 0 descriptor?? [ 194.063143][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.069970][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.347029][ T7658] loop0: detected capacity change from 0 to 32768 [ 194.381344][ T7658] XFS: ikeep mount option is deprecated. [ 194.450187][ T41] rc_core: IR keymap rc-hauppauge not found [ 194.456605][ T41] Registered IR keymap rc-empty [ 194.520390][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.560698][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.600795][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 194.631983][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 194.640107][ T7658] XFS (loop0): Mounting V5 Filesystem [ 194.700203][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.731022][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.762332][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.839275][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.880219][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.912565][ T7666] loop3: detected capacity change from 0 to 32768 [ 194.950048][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.973961][ T7658] XFS (loop0): Ending clean mount [ 195.000282][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.014305][ T7666] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.037204][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.070379][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.091405][ T7658] XFS (loop0): Quotacheck needed: Please wait. [ 195.130438][ T41] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.164428][ T41] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 195.175697][ T41] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.224168][ T7658] XFS (loop0): Quotacheck: Done. [ 195.237139][ T41] usb 2-1: USB disconnect, device number 12 [ 195.841084][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 195.892599][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1299'. [ 196.006963][ T7658] syz.0.1280 (7658): drop_caches: 2 [ 196.020196][ T3636] ocfs2: Unmounting device (7,3) on (node local) [ 196.149350][ T7288] XFS (loop0): Unmounting Filesystem [ 196.654644][ T7719] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 196.694815][ T7719] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 196.728860][ T7723] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 196.810088][ T7719] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 196.994616][ T7703] loop4: detected capacity change from 0 to 32768 [ 197.133605][ T7703] XFS (loop4): Mounting V5 Filesystem [ 197.311940][ T7703] XFS (loop4): Ending clean mount [ 197.446849][ T7703] XFS (loop4): User initiated shutdown received. [ 197.474127][ T7703] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 197.569798][ T7703] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 197.765993][ T3635] XFS (loop4): Unmounting Filesystem [ 198.511437][ C1] hrtimer: interrupt took 1318899 ns [ 198.983897][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1328'. [ 199.016724][ T7783] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 199.443305][ T7799] ALSA: mixer_oss: invalid OSS volume 'H8LAoQn' [ 199.644183][ T7772] loop0: detected capacity change from 0 to 40427 [ 199.669346][ T7772] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 199.689448][ T7772] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.708043][ T7802] loop3: detected capacity change from 0 to 2048 [ 199.764625][ T7772] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.806002][ T7809] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.919981][ T7041] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.928203][ T7772] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.938391][ T7772] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.035881][ T7772] syz.0.1323: attempt to access beyond end of device [ 200.035881][ T7772] loop0: rw=34817, sector=77824, nr_sectors = 880 limit=40427 [ 200.155386][ T7288] syz-executor: attempt to access beyond end of device [ 200.155386][ T7288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.170167][ T7041] usb 3-1: Using ep0 maxpacket: 8 [ 200.290198][ T7041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.324112][ T7041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.395120][ T7041] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 200.403473][ T7819] trusted_key: encrypted_key: keyword 'u{date' not recognized [ 200.421800][ T7041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.465888][ T7041] usb 3-1: config 0 descriptor?? [ 200.994963][ T7835] loop0: detected capacity change from 0 to 256 [ 201.006000][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.035255][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.043514][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.057185][ T7835] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 201.070338][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.096908][ T6093] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 201.116001][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.124051][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.132041][ T7041] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 201.148848][ T7041] playstation 0003:054C:0CE6.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 201.275650][ T7041] playstation 0003:054C:0CE6.0007: Invalid byte count transferred, expected 20 got 0 [ 201.300044][ T7041] playstation 0003:054C:0CE6.0007: Failed to retrieve DualSense pairing info: -22 [ 201.329645][ T7041] playstation 0003:054C:0CE6.0007: Failed to get MAC address from DualSense [ 201.345780][ T7041] playstation 0003:054C:0CE6.0007: Failed to create dualsense. [ 201.356778][ T7041] playstation: probe of 0003:054C:0CE6.0007 failed with error -22 [ 201.369926][ T6093] usb 2-1: Using ep0 maxpacket: 8 [ 201.500134][ T6093] usb 2-1: config 0 has no interfaces? [ 201.520481][ T7043] usb 3-1: USB disconnect, device number 11 [ 201.580231][ T7041] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.660167][ T6093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.679961][ T6093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.687961][ T6093] usb 2-1: Product: syz [ 201.709966][ T6093] usb 2-1: Manufacturer: syz [ 201.714651][ T6093] usb 2-1: SerialNumber: syz [ 201.728703][ T7834] loop3: detected capacity change from 0 to 32768 [ 201.743971][ T6093] usb 2-1: config 0 descriptor?? [ 201.820056][ T7041] usb 5-1: Using ep0 maxpacket: 16 [ 201.940414][ T7041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.977202][ T7041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.994382][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.005312][ T7041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.025518][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.026656][ T7041] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 202.111413][ T6082] usb 2-1: USB disconnect, device number 13 [ 202.133428][ T7041] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.203924][ T7849] loop2: detected capacity change from 0 to 512 [ 202.270370][ T7041] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.281052][ T7041] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.289079][ T7041] usb 5-1: Manufacturer: syz [ 202.348429][ T7041] usb 5-1: config 0 descriptor?? [ 202.362079][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1357: corrupted inode contents [ 202.405915][ T7849] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #3: comm syz.2.1357: mark_inode_dirty error [ 202.445931][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1357: corrupted inode contents [ 202.498464][ T7849] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1357: mark_inode_dirty error [ 202.512165][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1363'. [ 202.534179][ T7849] Quota error (device loop2): write_blk: dquota write failed [ 202.558745][ T7849] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 202.584041][ T7849] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1357: Failed to acquire dquot type 0 [ 202.629807][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1357: corrupted inode contents [ 202.645785][ T7849] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #16: comm syz.2.1357: mark_inode_dirty error [ 202.667887][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1357: corrupted inode contents [ 202.700839][ T7849] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1357: mark_inode_dirty error [ 202.727489][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1357: corrupted inode contents [ 202.788938][ T7849] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 202.799183][ T7849] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1357: corrupted inode contents [ 202.856596][ T7849] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.1357: mark_inode_dirty error [ 202.876293][ T7041] rc_core: IR keymap rc-hauppauge not found [ 202.890337][ T7041] Registered IR keymap rc-empty [ 202.896169][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.900855][ T7849] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 202.932716][ T7849] EXT4-fs (loop2): 1 truncate cleaned up [ 202.939318][ T7849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.970157][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.001533][ T7849] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff) [ 203.010586][ T7041] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 203.068131][ T7041] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 203.146667][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.189980][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.195453][ T6502] EXT4-fs (loop2): unmounting filesystem. [ 203.230025][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.274468][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.313372][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.353037][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.393059][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.440185][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.480093][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.506358][ T7881] loop2: detected capacity change from 0 to 64 [ 203.510101][ T7041] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 203.569001][ T7041] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 203.589110][ T7041] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.635695][ T7041] usb 5-1: USB disconnect, device number 8 [ 203.801183][ T7883] ubi0: attaching mtd0 [ 203.821811][ T7883] ubi0: scanning is finished [ 203.830003][ T7883] ubi0: empty MTD device detected [ 203.906904][ T7888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1371'. [ 203.931992][ T7883] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 203.939632][ T7883] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 203.962960][ T7883] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 203.977356][ T7883] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 203.987819][ T7883] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 204.000120][ T7883] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 204.034462][ T7883] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2663890395 [ 204.066302][ T7883] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 204.086577][ T7889] ubi0: background thread "ubi_bgt0d" started, PID 7889 [ 204.107202][ T7886] ubi0: detaching mtd0 [ 204.128125][ T7886] ubi0: mtd0 is detached [ 204.197435][ T7895] loop1: detected capacity change from 0 to 1024 [ 204.389982][ T6082] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.670377][ T6082] usb 1-1: Using ep0 maxpacket: 32 [ 204.810254][ T6082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.843754][ T6082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.865814][ T6082] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 204.896965][ T6082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.922304][ T6082] usb 1-1: config 0 descriptor?? [ 205.016091][ T7903] loop3: detected capacity change from 0 to 32768 [ 205.026509][ T7903] XFS: noikeep mount option is deprecated. [ 205.087821][ T7903] XFS (loop3): Mounting V5 Filesystem [ 205.090209][ T7899] loop4: detected capacity change from 0 to 32768 [ 205.115536][ T7899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1376 (7899) [ 205.179659][ T7899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.196045][ T7903] XFS (loop3): Ending clean mount [ 205.248837][ T7903] XFS (loop3): Quotacheck needed: Please wait. [ 205.283685][ T7899] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 205.313374][ T7899] BTRFS info (device loop4): using free space tree [ 205.404340][ T6082] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 205.434319][ T7903] XFS (loop3): Quotacheck: Done. [ 205.456765][ T6082] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 205.608805][ T7919] loop2: detected capacity change from 0 to 8192 [ 205.627549][ T3636] XFS (loop3): Unmounting Filesystem [ 205.634776][ T6082] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 205.696436][ T7899] BTRFS info (device loop4): enabling ssd optimizations [ 205.840808][ T6082] ft260 0003:0403:6030.0008: failed to retrieve system status [ 205.892271][ T3635] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.937261][ T6082] ft260: probe of 0003:0403:6030.0008 failed with error -71 [ 206.009185][ T6082] usb 1-1: USB disconnect, device number 11 [ 206.772747][ T7956] syz.2.1390 sent an empty control message without MSG_MORE. [ 207.019818][ T7959] loop0: detected capacity change from 0 to 2048 [ 207.087118][ T7959] loop0: p1 < > p4 [ 207.114638][ T7959] loop0: p4 size 8388608 extends beyond EOD, truncated [ 207.500104][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 207.509292][ T7972] loop0: detected capacity change from 0 to 512 [ 207.520545][ T5586] udevd[5586]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 207.645675][ T7972] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1397: casefold flag without casefold feature [ 207.780081][ T7972] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1397: couldn't read orphan inode 15 (err -117) [ 207.792395][ T3717] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.820461][ T7972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 207.836490][ T3698] device hsr_slave_0 left promiscuous mode [ 207.871895][ T3698] device hsr_slave_1 left promiscuous mode [ 207.922050][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.951047][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.960968][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.969558][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.040407][ T3698] device bridge_slave_1 left promiscuous mode [ 208.048863][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.082211][ T3698] device bridge_slave_0 left promiscuous mode [ 208.089404][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.186405][ T7288] EXT4-fs (loop0): unmounting filesystem. [ 208.295512][ T3698] device veth1_macvtap left promiscuous mode [ 208.320338][ T3717] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 208.335721][ T3698] device veth0_macvtap left promiscuous mode [ 208.350977][ T3717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.379579][ T3698] device veth1_vlan left promiscuous mode [ 208.385417][ T3717] usb 5-1: Product: syz [ 208.389808][ T3698] device veth0_vlan left promiscuous mode [ 208.399976][ T3717] usb 5-1: Manufacturer: syz [ 208.404664][ T3717] usb 5-1: SerialNumber: syz [ 208.430686][ T3717] usb 5-1: config 0 descriptor?? [ 208.593502][ T7953] loop3: detected capacity change from 0 to 32768 [ 208.654266][ T7953] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 208.674712][ T7953] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 208.691960][ T3717] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 208.784218][ T7953] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 208.818044][ T41] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 208.833103][ T41] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 208.943661][ T7980] loop2: detected capacity change from 0 to 32768 [ 208.984487][ T7980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1400 (7980) [ 209.034568][ T41] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms [ 209.053842][ T41] gfs2: fsid=syz:syz.0: jid=0: Done [ 209.063086][ T7953] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 209.113532][ T7980] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.126648][ T7980] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 209.130244][ T3717] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 209.137982][ T7980] BTRFS info (device loop2): using free space tree [ 209.428904][ T3692] usb 5-1: USB disconnect, device number 9 [ 209.442682][ T7980] BTRFS info (device loop2): enabling ssd optimizations [ 209.750652][ T6502] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.496211][ T3647] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.776343][ T3647] usb 3-1: Using ep0 maxpacket: 32 [ 210.789477][ T8027] loop1: detected capacity change from 0 to 32768 [ 210.820389][ T8027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1412 (8027) [ 210.878743][ T8027] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.902264][ T8027] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 210.918763][ T8027] BTRFS info (device loop1): using free space tree [ 210.964332][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 211.060359][ T3647] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 211.072084][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 211.077228][ T3647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.125138][ T3647] usb 3-1: Product: syz [ 211.146914][ T3647] usb 3-1: Manufacturer: syz [ 211.152576][ T8027] BTRFS info (device loop1): enabling ssd optimizations [ 211.159414][ T3647] usb 3-1: SerialNumber: syz [ 211.181931][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.198102][ T3647] usb 3-1: config 0 descriptor?? [ 211.254961][ T3647] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 211.353635][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.385133][ T56] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 211.636664][ T3637] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.807534][ T8051] loop4: detected capacity change from 0 to 32768 [ 211.910911][ T8051] XFS (loop4): Mounting V5 Filesystem [ 211.945690][ T8051] XFS (loop4): Starting recovery (logdev: internal) [ 211.999749][ T8051] XFS (loop4): Ending recovery (logdev: internal) [ 212.136718][ T3647] gspca_ov534_9: reg_w failed -71 [ 212.157038][ T8071] loop1: detected capacity change from 0 to 1024 [ 212.286471][ T3635] XFS (loop4): Unmounting Filesystem [ 212.376801][ T8071] hfsplus: invalid extended attribute record [ 212.465137][ T46] hfsplus: b-tree write err: -5, ino 8 [ 212.539975][ T3647] gspca_ov534_9: Unknown sensor 0000 [ 212.540036][ T3647] ov534_9: probe of 3-1:0.0 failed with error -22 [ 212.598438][ T3647] usb 3-1: USB disconnect, device number 12 [ 212.811095][ T3698] bond0 (unregistering): Released all slaves [ 213.041752][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 213.131278][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.400450][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 213.532383][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.543003][ T22] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.563693][ T22] usb 5-1: config 1 has no interface number 1 [ 213.571579][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 213.598112][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.684682][ T8131] ubi0: attaching mtd0 [ 213.691363][ T8131] ubi0: scanning is finished [ 213.810655][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.891115][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.905001][ T22] usb 5-1: Product: syz [ 213.909858][ T22] usb 5-1: Manufacturer: syz [ 213.916597][ T22] usb 5-1: SerialNumber: syz [ 213.992837][ T8131] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 214.028203][ T8153] loop0: detected capacity change from 0 to 512 [ 214.078216][ T8131] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 214.172185][ T8131] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 214.250771][ T8131] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 214.259347][ T8131] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 214.259793][ T8153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 214.285589][ T22] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 214.294674][ T8153] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 214.356547][ T22] usb 5-1: USB disconnect, device number 10 [ 214.370754][ T8131] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 214.450439][ T8131] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2663890395 [ 214.489972][ T8131] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 214.523275][ T8133] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 214.541271][ T8152] ubi0: background thread "ubi_bgt0d" started, PID 8152 [ 214.559421][ T8148] ubi0: detaching mtd0 [ 214.576217][ T8148] ubi0: mtd0 is detached [ 214.594961][ T8133] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 214.638914][ T8133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 214.638914][ T8133] [ 214.690134][ T8133] EXT4-fs (loop0): Total free blocks count 0 [ 214.697859][ T8168] loop1: detected capacity change from 0 to 512 [ 214.718001][ T8133] EXT4-fs (loop0): Free/Dirty block details [ 214.730576][ T8168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.742924][ T8133] EXT4-fs (loop0): free_blocks=65280 [ 214.748384][ T8133] EXT4-fs (loop0): dirty_blocks=1 [ 214.765742][ T8133] EXT4-fs (loop0): Block reservation details [ 214.796310][ T8133] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 214.810733][ T7288] EXT4-fs (loop0): unmounting filesystem. [ 214.894098][ T8168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.957240][ T8168] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038 (0x7fffffff) [ 215.075801][ T8168] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 215.116517][ T8185] loop3: detected capacity change from 0 to 128 [ 215.175018][ T8185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.255345][ T8185] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038 (0x7fffffff) [ 215.408251][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 215.521999][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 215.833233][ T6093] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 215.929047][ T26] audit: type=1326 audit(1727927611.485:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.2.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2b7dff9 code=0x0 [ 216.093116][ T6093] usb 2-1: Using ep0 maxpacket: 32 [ 216.216008][ T6093] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 216.305202][ T8199] loop0: detected capacity change from 0 to 32768 [ 216.323397][ T8199] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1453 (8199) [ 216.390799][ T6093] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 216.409541][ T6093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.438117][ T6093] usb 2-1: Product: syz [ 216.457097][ T6093] usb 2-1: Manufacturer: syz [ 216.474907][ T6093] usb 2-1: SerialNumber: syz [ 216.494987][ T8199] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 216.508499][ T6093] usb 2-1: config 0 descriptor?? [ 216.527614][ T8199] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 216.540437][ T8205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.555992][ T8199] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 216.561534][ T6093] hub 2-1:0.0: bad descriptor, ignoring hub [ 216.586200][ T6093] hub: probe of 2-1:0.0 failed with error -5 [ 216.619916][ T8199] BTRFS info (device loop0): use lzo compression, level 0 [ 216.625942][ T6093] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 216.648592][ T8199] BTRFS info (device loop0): using free space tree [ 216.810599][ T3692] usb 2-1: USB disconnect, device number 14 [ 217.066580][ T8199] BTRFS info (device loop0): enabling ssd optimizations [ 217.305589][ T7288] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 217.372510][ T7288] assertion failed: list_empty(&fs_info->delayed_iputs), in fs/btrfs/disk-io.c:4707 [ 217.425647][ T7288] ------------[ cut here ]------------ [ 217.432658][ T7288] kernel BUG at fs/btrfs/ctree.h:3717! [ 217.479986][ T7288] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 217.486090][ T7288] CPU: 1 PID: 7288 Comm: syz-executor Not tainted 6.1.112-syzkaller #0 [ 217.494335][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.504387][ T7288] RIP: 0010:assertfail+0x18/0x1a [ 217.506904][ T8254] loop3: detected capacity change from 0 to 512 [ 217.509319][ T7288] Code: 80 b5 4d 8b 48 c7 c2 a0 b2 4d 8b e8 17 e4 ff ff 0f 0b 89 f1 48 89 fe 48 c7 c7 00 e6 4d 8b 48 c7 c2 70 b7 4d 8b e8 fd e3 ff ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec [ 217.509337][ T7288] RSP: 0018:ffffc900030cfb38 EFLAGS: 00010246 [ 217.541217][ T7288] RAX: 0000000000000051 RBX: ffff88806289cd58 RCX: b86bc34e35f66f00 [ 217.549191][ T7288] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 217.557163][ T7288] RBP: ffffc900030cfce0 R08: ffffffff816e4eac R09: fffff52000619f09 [ 217.565139][ T7288] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806289c010 [ 217.573110][ T7288] R13: ffff88806289c000 R14: dffffc0000000000 R15: 0000000000000000 [ 217.581069][ T7288] FS: 000055557b7bb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 217.589982][ T7288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.596548][ T7288] CR2: 00007fd320600000 CR3: 000000007b171000 CR4: 00000000003506e0 [ 217.604501][ T7288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.612453][ T7288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.620404][ T7288] Call Trace: [ 217.623662][ T7288] [ 217.626575][ T7288] ? __die_body+0x5e/0xa0 [ 217.630897][ T7288] ? die+0x83/0xb0 [ 217.634604][ T7288] ? do_trap+0x11e/0x350 [ 217.638831][ T7288] ? assertfail+0x18/0x1a [ 217.643141][ T7288] ? assertfail+0x18/0x1a [ 217.647453][ T7288] ? do_error_trap+0x13d/0x1e0 [ 217.652200][ T7288] ? assertfail+0x18/0x1a [ 217.656511][ T7288] ? do_int3+0x30/0x30 [ 217.660564][ T7288] ? rcu_is_watching+0x11/0xb0 [ 217.665312][ T7288] ? handle_invalid_op+0x2c/0x40 [ 217.670240][ T7288] ? assertfail+0x18/0x1a [ 217.674555][ T7288] ? exc_invalid_op+0x2f/0x40 [ 217.679212][ T7288] ? asm_exc_invalid_op+0x16/0x20 [ 217.684226][ T7288] ? __wake_up_klogd+0xcc/0x100 [ 217.689061][ T7288] ? assertfail+0x18/0x1a [ 217.693374][ T7288] ? assertfail+0x18/0x1a [ 217.697682][ T7288] close_ctree+0x830/0xc35 [ 217.702083][ T7288] ? hook_sb_delete+0xa5a/0xb80 [ 217.706916][ T7288] ? hook_sb_delete+0x842/0xb80 [ 217.711748][ T7288] ? init_tree_roots+0x1d92/0x1d92 [ 217.716841][ T7288] ? hook_sb_delete+0x19f/0xb80 [ 217.721675][ T7288] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 217.727378][ T7288] ? clear_inode+0x150/0x150 [ 217.731954][ T7288] ? btrfs_attach_transaction_barrier+0x30/0x90 [ 217.738176][ T7288] ? btrfs_sync_fs+0x1c1/0x700 [ 217.742918][ T7288] ? fscrypt_destroy_keyring+0x282/0x2a0 [ 217.748534][ T7288] ? btrfs_fill_super+0x2d0/0x2d0 [ 217.753540][ T7288] generic_shutdown_super+0x130/0x340 [ 217.758897][ T7288] kill_anon_super+0x37/0x60 [ 217.763471][ T7288] btrfs_kill_super+0x3d/0x50 [ 217.768130][ T7288] deactivate_locked_super+0xa0/0x110 [ 217.773487][ T7288] cleanup_mnt+0x490/0x520 [ 217.777888][ T7288] ? lockdep_hardirqs_on+0x94/0x130 [ 217.783068][ T7288] task_work_run+0x246/0x300 [ 217.787644][ T7288] ? task_work_cancel+0x2e0/0x2e0 [ 217.792651][ T7288] ? exit_to_user_mode_loop+0x39/0x100 [ 217.798091][ T7288] exit_to_user_mode_loop+0xde/0x100 [ 217.803356][ T7288] exit_to_user_mode_prepare+0xb1/0x140 [ 217.808885][ T7288] syscall_exit_to_user_mode+0x60/0x270 [ 217.814413][ T7288] do_syscall_64+0x47/0xb0 [ 217.818810][ T7288] ? clear_bhb_loop+0x45/0xa0 [ 217.823471][ T7288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.829346][ T7288] RIP: 0033:0x7fef4417f327 [ 217.833753][ T7288] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 217.853339][ T7288] RSP: 002b:00007ffc9fdc7638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 217.861733][ T7288] RAX: 0000000000000000 RBX: 00007fef441f0134 RCX: 00007fef4417f327 [ 217.869686][ T7288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9fdc76f0 [ 217.877637][ T7288] RBP: 00007ffc9fdc76f0 R08: 0000000000000000 R09: 0000000000000000 [ 217.885587][ T7288] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9fdc8770 [ 217.893537][ T7288] R13: 00007fef441f0134 R14: 0000000000034950 R15: 00007ffc9fdc87b0 [ 217.901494][ T7288] [ 217.904492][ T7288] Modules linked in: [ 217.966134][ T8254] EXT4-fs: Ignoring removed oldalloc option [ 217.980022][ T7288] ---[ end trace 0000000000000000 ]--- [ 217.986726][ T7288] RIP: 0010:assertfail+0x18/0x1a [ 217.986918][ T8254] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.991877][ T7288] Code: 80 b5 4d 8b 48 c7 c2 a0 b2 4d 8b e8 17 e4 ff ff 0f 0b 89 f1 48 89 fe 48 c7 c7 00 e6 4d 8b 48 c7 c2 70 b7 4d 8b e8 fd e3 ff ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec [ 217.991895][ T7288] RSP: 0018:ffffc900030cfb38 EFLAGS: 00010246 [ 217.991912][ T7288] RAX: 0000000000000051 RBX: ffff88806289cd58 RCX: b86bc34e35f66f00 [ 217.991926][ T7288] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 217.991937][ T7288] RBP: ffffc900030cfce0 R08: ffffffff816e4eac R09: fffff52000619f09 [ 217.991949][ T7288] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806289c010 [ 217.991961][ T7288] R13: ffff88806289c000 R14: dffffc0000000000 R15: 0000000000000000 [ 217.991973][ T7288] FS: 000055557b7bb500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 217.991993][ T7288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.992005][ T7288] CR2: 00007f4ab90d7000 CR3: 000000007b171000 CR4: 00000000003506f0 [ 217.992020][ T7288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.992030][ T7288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.992043][ T7288] Kernel panic - not syncing: Fatal exception [ 217.992272][ T7288] Kernel Offset: disabled [ 218.115760][ T7288] Rebooting in 86400 seconds..