last executing test programs: 5m15.201255238s ago: executing program 0 (id=631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) 5m14.929386372s ago: executing program 0 (id=627): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x8) listen(r0, 0x0) 5m14.877722453s ago: executing program 0 (id=630): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a0, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x145442, 0x187) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 5m14.630095426s ago: executing program 0 (id=634): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5m14.38028045s ago: executing program 0 (id=638): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000200)='./file1\x00', 0x300000a, &(0x7f0000000280)={[{@enospc_debug}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@discard_sync}, {@ref_verify}, {@space_cache_v2}, {@notreelog}, {@thread_pool={'thread_pool', 0x3d, 0x5}}, {@skip_balance}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0xff, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 5m12.759757255s ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x0) 4m56.83126576s ago: executing program 32 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x0) 52.008847272s ago: executing program 3 (id=2909): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r0) 51.885695074s ago: executing program 3 (id=2910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 51.871572484s ago: executing program 3 (id=2911): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) 51.733293086s ago: executing program 3 (id=2913): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$eJzs3T9rJGUYAPBnNrN//AO7hZUIDmhhdVyutdlD7kBM5bGFWmjw7kCyi3AHAUUcrxI7v4CfQBD8DrY2dpaCH8DyhIORmZ3ZP8nsJpFsxMvv1+TJvO8z7zMzL8mkyLOfvDY7up/Fwydf/RGDQRKdcYzjaRKj6ETjm1gz/j4AgP+zp0URfxVzLcO/f7chL4mIwY5rAwB244zf/7V0Gf58JWUBADt074MP37t9cHDn/SwbxN3Zt8eT8i/78ut8/PbD+Cym8SBuxjCeRVQvCt2o3hbK8G5RFHmalUbx5iw/npSZs49/rc//y8t1sB/DGFXR4m2jyn/34M5+NreSn5d1vFivPy7XvxXDeGWRvJZ/qyU/Jr14642V+m/EMH77ND6Padyviljmf72fZe+UrzgfleWV+Ul+POlX85aKvWbx/AqfDwAAAAAAAAAAAAAAAAAAAAAAz6cbde+cflT9e8pDdf+dvWflN93IGqP1/jzz/KQ50Wp/oKIo8iJ+aPrr3MyyrKgnLvPTeDVdbSwIAAAAAAAAAAAAAAAAAAAA19fjL748OpxOHzy6lKDpBpBGxN/3Iv7tecYrR16P7ZP79ZqH02mnDtfnpKtHYq+Zk0RsLSPSRTODS7s/G4IXTtVcBz/+1JbVW39waazMGZy9aLd9rcsMmt11dJhE65z+oubBfJNUjSCWc3pxzrV6m4aKuMj267UODbdllXv99HleqoJ8w50vg0i2Ffb2n/M7Vx9JTl5Fr7qrrendOoi2wqq90f4sTgQxmKef/lmR6NYBAAAAAAAAAAAAAAAAAAA7tfzv35bBJ1tTO0V/Z2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJVafv7/BYK8Tj7H5F48evwfXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXwD8BAAD//2T0YAU=") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 51.437402101s ago: executing program 3 (id=2917): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 50.915700469s ago: executing program 3 (id=2922): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) 50.549942164s ago: executing program 33 (id=2922): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) 3.096792912s ago: executing program 5 (id=3291): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.157559307s ago: executing program 5 (id=3300): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 1.977594049s ago: executing program 1 (id=3302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.93739142s ago: executing program 5 (id=3304): r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 1.692482364s ago: executing program 1 (id=3307): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) getdents64(r0, 0x0, 0x0) 1.676342994s ago: executing program 5 (id=3308): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r0, 0x333, 0x0, 0xfffffffe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8880) 1.556903526s ago: executing program 5 (id=3309): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@keep_last_dots}, {@errors_continue}, {@gid}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@keep_last_dots}, {}]}, 0x1, 0x152f, &(0x7f0000000280)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) 1.28953811s ago: executing program 1 (id=3311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.196604501s ago: executing program 5 (id=3313): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x83) 1.179052852s ago: executing program 4 (id=3314): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="00000000140005"], 0x44}}, 0x0) 1.027623714s ago: executing program 4 (id=3315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) 996.018544ms ago: executing program 2 (id=3316): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) 947.071115ms ago: executing program 2 (id=3317): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x110) 836.919627ms ago: executing program 2 (id=3318): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) 784.262168ms ago: executing program 2 (id=3320): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004}) 706.311989ms ago: executing program 2 (id=3321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x20000000) 682.840819ms ago: executing program 1 (id=3322): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 660.69883ms ago: executing program 4 (id=3323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, 0x0) 457.288233ms ago: executing program 4 (id=3324): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000100), 0xfdef) 389.059994ms ago: executing program 2 (id=3325): r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 364.523564ms ago: executing program 1 (id=3326): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 257.569416ms ago: executing program 4 (id=3327): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 137.443518ms ago: executing program 1 (id=3328): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 0s ago: executing program 4 (id=3329): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000000000), 0x10) kernel console output (not intermixed with test programs): fc-10d8-4eed-a562-11a831b3f791 [ 345.825385][ T9] kye 0003:0458:5015.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 345.846724][T12274] loop3: detected capacity change from 0 to 128 [ 345.885201][ T9] kye 0003:0458:5015.0030: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 345.910486][ T9] kye 0003:0458:5015.0030: tablet-enabling feature report not found [ 345.923023][T12274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.959236][ T9] kye 0003:0458:5015.0030: tablet enabling failed [ 346.014778][T12274] ext4 filesystem being mounted at /625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.033286][ T9] usb 3-1: USB disconnect, device number 28 [ 346.069618][T12278] fido_id[12278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 346.152545][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.216710][T12281] loop1: detected capacity change from 0 to 164 [ 346.266129][T12281] Unable to read rock-ridge attributes [ 346.300064][T12285] loop4: detected capacity change from 0 to 512 [ 346.328585][T12285] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2448: casefold flag without casefold feature [ 346.359270][T12281] Unable to read rock-ridge attributes [ 346.377675][T12285] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2448: couldn't read orphan inode 15 (err -117) [ 346.422854][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.492906][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.898761][T12296] loop4: detected capacity change from 0 to 1024 [ 346.939492][T12296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.962812][T12283] loop3: detected capacity change from 0 to 32768 [ 346.988016][T12296] autofs4:pid:12296:autofs_fill_super: called with bogus options [ 347.025941][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.089602][T12283] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 347.101100][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 347.101115][ T27] audit: type=1326 audit(1750255830.142:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.131448][ T27] audit: type=1326 audit(1750255830.142:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.155291][ T27] audit: type=1326 audit(1750255830.162:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.195609][ T27] audit: type=1326 audit(1750255830.162:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.223827][ T27] audit: type=1326 audit(1750255830.162:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.309249][ T27] audit: type=1326 audit(1750255830.162:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.362166][ T27] audit: type=1800 audit(1750255830.162:211): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2460" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 347.383625][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 347.398329][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 347.444434][ T27] audit: type=1326 audit(1750255830.162:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.501058][ T27] audit: type=1326 audit(1750255830.162:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 347.550677][T12311] loop3: detected capacity change from 0 to 1024 [ 347.558586][T12311] EXT4-fs: Ignoring removed nobh option [ 347.565298][T12311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.579193][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.590633][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.601023][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.617857][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 347.643668][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.662110][T12311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.677111][ T9] usb 3-1: config 0 descriptor?? [ 347.760794][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.911883][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2468'. [ 348.056813][T12323] loop3: detected capacity change from 0 to 1024 [ 348.075969][T12323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.130956][T12323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.150992][ T9] kye 0003:0458:5011.0031: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 348.173820][T12323] ext4 filesystem being mounted at /628/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.204324][ T9] kye 0003:0458:5011.0031: unbalanced collection at end of report description [ 348.274230][ T9] kye 0003:0458:5011.0031: parse failed [ 348.281920][ T9] kye: probe of 0003:0458:5011.0031 failed with error -22 [ 348.402172][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.423125][ T786] usb 3-1: USB disconnect, device number 29 [ 349.080184][T12346] loop3: detected capacity change from 0 to 1764 [ 349.131517][T12346] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 349.303294][T12352] loop2: detected capacity change from 0 to 1024 [ 349.318949][T12352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 349.373963][T12352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.399282][T12352] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.480082][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.587250][T12343] loop4: detected capacity change from 0 to 40427 [ 349.600651][T12343] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 349.609113][T12343] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 349.621492][T12343] F2FS-fs (loop4): invalid crc value [ 349.630141][T12343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 349.681737][T12343] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 349.690667][T12343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 349.950240][T12368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.100489][T12375] pim6reg: entered allmulticast mode [ 350.120212][T12375] pim6reg: left allmulticast mode [ 350.195120][T12377] devpts: called with bogus options [ 350.531685][T12383] loop4: detected capacity change from 0 to 4096 [ 350.555135][T12383] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 351.147199][T12381] loop1: detected capacity change from 0 to 32768 [ 351.191412][T12381] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 351.260085][T12397] loop2: detected capacity change from 0 to 4096 [ 351.261516][T12381] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 351.308732][T12381] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 351.319428][T12381] OCFS2: File system is now read-only. [ 351.325228][T12381] (syz.1.2499,12381,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 351.333103][T12381] (syz.1.2499,12381,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 351.342225][T12381] (syz.1.2499,12381,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 351.352406][T12381] (syz.1.2499,12381,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 351.364145][T12381] (syz.1.2499,12381,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 351.388141][T12381] (syz.1.2499,12381,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 351.459430][T12405] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2502'. [ 351.496783][T12407] loop4: detected capacity change from 0 to 1024 [ 351.522956][T12407] EXT4-fs: Ignoring removed nobh option [ 351.551452][T12407] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.584863][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 351.716898][T12407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.733792][T12411] loop3: detected capacity change from 0 to 1024 [ 351.741764][T12411] EXT4-fs: Ignoring removed orlov option [ 351.770375][T12411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.881726][T12411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.967967][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.170237][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.518131][T12418] loop2: detected capacity change from 0 to 32768 [ 352.580056][ T27] audit: type=1800 audit(1750255835.632:214): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2506" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 352.581967][T12418] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 352.581967][T12418] [ 352.623803][ T5791] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 352.629077][T12418] ERROR: (device loop2): remounting filesystem as read-only [ 352.642578][T12418] xtLookup: xtSearch returned -5 [ 352.837372][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.857299][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.877667][ T5791] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 352.897716][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.924921][ T5791] usb 4-1: config 0 descriptor?? [ 353.203791][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.348658][ T5791] usbhid 4-1:0.0: can't add hid device: -71 [ 353.366320][ T5791] usbhid: probe of 4-1:0.0 failed with error -71 [ 353.376124][T12428] loop4: detected capacity change from 0 to 40427 [ 353.383863][ T5791] usb 4-1: USB disconnect, device number 23 [ 353.412985][T12428] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 353.467737][T12428] F2FS-fs (loop4): invalid crc value [ 353.495463][T12428] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.613663][T12428] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.653602][T12446] loop1: detected capacity change from 0 to 1764 [ 353.747956][T12446] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 354.031590][T12440] loop2: detected capacity change from 0 to 40427 [ 354.057919][T12440] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 354.086924][T12440] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 354.141747][T12440] F2FS-fs (loop2): invalid crc value [ 354.168001][T12440] F2FS-fs (loop2): Found nat_bits in checkpoint [ 354.314339][T12440] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 354.321434][T12440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 354.580467][T12470] devpts: called with bogus options [ 354.982488][T12478] loop4: detected capacity change from 0 to 4096 [ 355.241316][T12483] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 355.340297][T12471] loop1: detected capacity change from 0 to 40427 [ 355.382623][T12471] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 355.421375][T12471] F2FS-fs (loop1): invalid crc value [ 355.459748][T12471] F2FS-fs (loop1): Found nat_bits in checkpoint [ 355.481013][T12485] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2536'. [ 355.586015][T12471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 355.692589][T12498] loop4: detected capacity change from 0 to 128 [ 355.733781][T12498] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.777433][T12498] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.920569][ T7645] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.983857][ T5815] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 356.174227][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 356.182242][ T5815] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 356.183465][T12508] loop2: detected capacity change from 0 to 1024 [ 356.193825][ T5815] usb 4-1: config 0 has no interface number 0 [ 356.214143][ T5815] usb 4-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 356.228190][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.254447][ T5815] usb 4-1: Product: syz [ 356.259220][ T5815] usb 4-1: Manufacturer: syz [ 356.277966][ T5815] usb 4-1: SerialNumber: syz [ 356.282540][T12508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.328626][ T5815] usb 4-1: config 0 descriptor?? [ 356.346030][ T5815] option 4-1:0.211: GSM modem (1-port) converter detected [ 356.474738][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.568148][ T5815] usb 4-1: USB disconnect, device number 24 [ 356.577590][ T5815] option 4-1:0.211: device disconnected [ 356.606989][T12524] loop4: detected capacity change from 0 to 1024 [ 356.628401][T12524] EXT4-fs: Ignoring removed orlov option [ 356.664955][T12524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.744641][T12524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.837779][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.271225][T12547] loop1: detected capacity change from 0 to 1024 [ 357.359683][T12547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.433980][T12528] loop2: detected capacity change from 0 to 40427 [ 357.453654][T12528] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 357.493824][T12528] F2FS-fs (loop2): invalid crc value [ 357.532133][T12528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 357.659260][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.663800][T12528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 357.893937][T12561] loop1: detected capacity change from 0 to 2048 [ 357.931179][T12561] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 357.956570][T12561] NILFS (loop1): mounting unchecked fs [ 358.004179][ T8015] udevd[8015]: incorrect nilfs2 checksum on /dev/loop1 [ 358.030875][T12548] loop4: detected capacity change from 0 to 32768 [ 358.049018][T12561] NILFS (loop1): recovery complete [ 358.081727][T12564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.121426][T12548] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 358.414479][ T7645] ocfs2: Unmounting device (7,4) on (node local) [ 358.552905][T12577] loop2: detected capacity change from 0 to 1024 [ 358.595211][T12577] EXT4-fs: Ignoring removed orlov option [ 358.698430][T12577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.814605][T12576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.561223][T12588] loop3: detected capacity change from 0 to 40427 [ 359.571651][T12591] loop2: detected capacity change from 0 to 32768 [ 359.579631][T12588] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 359.618096][T12588] F2FS-fs (loop3): invalid crc value [ 359.635302][T12591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 359.667081][T12588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 359.674639][T12591] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 359.703705][T12591] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 359.751693][T12591] OCFS2: File system is now read-only. [ 359.773533][T12591] (syz.2.2576,12591,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 359.813837][T12591] (syz.2.2576,12591,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 359.832696][T12591] (syz.2.2576,12591,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 359.832743][T12588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 359.870185][T12591] (syz.2.2576,12591,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 359.899912][T12591] (syz.2.2576,12591,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 359.933865][T12591] (syz.2.2576,12591,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 360.060341][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 360.452029][T12617] loop1: detected capacity change from 0 to 256 [ 360.678994][T12625] loop1: detected capacity change from 0 to 512 [ 360.721642][T12625] EXT4-fs (loop1): 1 orphan inode deleted [ 360.735592][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 360.760584][T12625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.799313][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 360.841864][T12625] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.001411][T12634] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2589'. [ 361.099638][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.114072][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.125385][T12623] loop3: detected capacity change from 0 to 32768 [ 361.146039][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 361.184421][T12623] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.420595][T12623] XFS (loop3): Ending clean mount [ 361.587465][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.781222][T12637] loop4: detected capacity change from 0 to 32768 [ 361.877939][T12637] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 362.031728][T12637] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 362.083467][T12637] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 362.119098][T12637] OCFS2: File system is now read-only. [ 362.127968][T12637] (syz.4.2591,12637,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 362.138488][T12637] (syz.4.2591,12637,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 362.141729][T12666] loop1: detected capacity change from 0 to 1024 [ 362.167179][T12666] EXT4-fs: Ignoring removed nobh option [ 362.178486][T12666] EXT4-fs: Ignoring removed bh option [ 362.204074][T12666] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.226257][T12637] (syz.4.2591,12637,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 362.270802][T12637] (syz.4.2591,12637,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 362.290248][T12666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.340350][T12637] (syz.4.2591,12637,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 362.397094][T12637] (syz.4.2591,12637,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 362.509469][T12673] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2603'. [ 362.515368][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.560407][ T7645] ocfs2: Unmounting device (7,4) on (node local) [ 362.882491][T12682] loop4: detected capacity change from 0 to 1024 [ 362.896207][T12682] EXT4-fs: Ignoring removed orlov option [ 362.951245][T12682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.003610][ T5833] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 363.148976][T12682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.208942][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.232736][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.283539][ T5833] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 363.320554][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.371739][ T5833] usb 2-1: config 0 descriptor?? [ 363.667044][T12705] loop4: detected capacity change from 0 to 4096 [ 363.723559][T12707] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.754347][ T27] audit: type=1800 audit(1750255846.812:215): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2617" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 363.810987][ T5833] usbhid 2-1:0.0: can't add hid device: -71 [ 363.827176][ T27] audit: type=1800 audit(1750255846.822:216): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2617" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 363.829082][ T5833] usbhid: probe of 2-1:0.0 failed with error -71 [ 363.942353][ T5833] usb 2-1: USB disconnect, device number 26 [ 364.192041][T12699] loop3: detected capacity change from 0 to 32768 [ 364.271196][T12699] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 364.546205][ T5775] (syz-executor,5775,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 364.610196][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 364.666673][T12731] loop4: detected capacity change from 0 to 2048 [ 364.687380][T12735] loop2: detected capacity change from 0 to 256 [ 364.726743][T12731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.880200][T12740] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.193942][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2632'. [ 365.467561][T12737] loop3: detected capacity change from 0 to 32768 [ 365.524008][ T5812] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 365.562523][T12737] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 365.699114][ T5775] (syz-executor,5775,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 365.736878][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 365.803605][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.834275][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.854025][ T5812] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 365.863173][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.915143][ T5812] usb 5-1: config 0 descriptor?? [ 366.103885][T12770] binder: 12769:12770 ioctl c0306201 2000000001c0 returned -22 [ 366.339686][ T5812] thrustmaster 0003:044F:B324.0032: item fetching failed at offset 4/5 [ 366.367600][ T5812] thrustmaster 0003:044F:B324.0032: parse failed [ 366.377600][ T5812] thrustmaster: probe of 0003:044F:B324.0032 failed with error -22 [ 366.394684][T12759] orangefs_mount: mount request failed with -4 [ 366.572218][ T5812] usb 5-1: USB disconnect, device number 20 [ 366.698822][T12790] loop1: detected capacity change from 0 to 16 [ 366.711969][T12790] erofs: (device loop1): mounted with root inode @ nid 36. [ 366.762398][T12790] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 366.796983][T12790] syz.1.2654: attempt to access beyond end of device [ 366.796983][T12790] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 366.837334][T12790] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 366.847344][T12790] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 367.287202][T12796] loop2: detected capacity change from 0 to 32768 [ 367.368371][T12796] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.591779][T12796] XFS (loop2): Ending clean mount [ 367.620711][T12796] XFS (loop2): Quotacheck needed: Please wait. [ 367.761701][T12796] XFS (loop2): Quotacheck: Done. [ 368.076100][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 368.235466][T12840] loop4: detected capacity change from 0 to 164 [ 369.147986][T12865] loop4: detected capacity change from 0 to 4096 [ 369.175395][T12865] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 369.200442][T12845] loop3: detected capacity change from 0 to 32768 [ 369.255875][T12845] JBD2: Ignoring recovery information on journal [ 369.377516][T12845] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 369.522849][ T6620] ntfs3: loop4: ino=1e, ntfs3_write_inode failed, -22. [ 369.552126][T12877] loop2: detected capacity change from 0 to 8 [ 369.629600][T12877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2690'. [ 369.650060][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 370.113976][T12894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2699'. [ 370.173574][ T5812] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 370.213654][ T5791] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 370.369291][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.405688][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.407987][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.427423][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 370.441854][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.457252][ T5791] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 370.478114][ T5812] usb 3-1: config 0 descriptor?? [ 370.487098][ T5791] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.512888][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.550106][ T5791] usb 5-1: config 0 descriptor?? [ 370.572694][ T5791] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 370.591673][ T5791] dvb-usb: bulk message failed: -22 (3/0) [ 370.621565][ T5791] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 370.639824][ T5791] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 370.654111][ T5791] usb 5-1: media controller created [ 370.670040][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.702222][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 370.734369][ T5791] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 370.755622][ T5791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 370.811849][ T5791] dvb-usb: schedule remote query interval to 150 msecs. [ 370.841245][ T5791] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 370.874140][ T5791] usb 5-1: USB disconnect, device number 21 [ 370.945245][ T5791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 371.169585][ T5812] usb 3-1: USB disconnect, device number 30 [ 371.355354][T12929] loop3: detected capacity change from 0 to 8192 [ 371.390805][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2718'. [ 371.406262][T12929] loop3: p1 < > p2 < p5 > p3 p4 [ 371.423203][T12929] loop3: p3 start 83890176 is beyond EOD, truncated [ 371.448467][T12929] loop3: p4 size 16776960 extends beyond EOD, truncated [ 371.465446][T12929] loop3: p5 size 16776960 extends beyond EOD, truncated [ 371.787747][ T7656] udevd[7656]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 371.801326][ T8626] udevd[8626]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 371.803268][T12938] loop1: detected capacity change from 0 to 4096 [ 371.816581][ T8015] udevd[8015]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 371.835306][ T8627] udevd[8627]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 371.871737][T12938] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 372.107391][T12952] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2727'. [ 372.173999][ T6620] ntfs3: loop1: ino=1e, ntfs3_write_inode failed, -22. [ 372.532083][T12966] loop3: detected capacity change from 0 to 164 [ 372.948284][T12954] loop2: detected capacity change from 0 to 32768 [ 372.969120][T12954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2728 (12954) [ 372.998524][T12954] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.019650][T12954] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 373.041426][T12954] BTRFS info (device loop2): setting nodatasum [ 373.062768][T12954] BTRFS info (device loop2): force zlib compression, level 3 [ 373.075037][T12954] BTRFS info (device loop2): metadata ratio 1 [ 373.081532][T12954] BTRFS info (device loop2): enabling ssd optimizations [ 373.092823][T12954] BTRFS info (device loop2): allowing degraded mounts [ 373.100125][T12954] BTRFS info (device loop2): using free space tree [ 373.438460][T12995] loop3: detected capacity change from 0 to 4096 [ 373.457784][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.490636][T12976] loop1: detected capacity change from 0 to 32768 [ 373.518547][T12995] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 373.641560][T12976] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 373.744034][ T8015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (8015) [ 373.938083][ T5783] (syz-executor,5783,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 373.983933][ T2929] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 374.012844][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 374.510046][T13013] loop3: detected capacity change from 0 to 512 [ 374.589532][T13000] loop4: detected capacity change from 0 to 40427 [ 374.621078][T13000] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 374.636475][T13013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.639599][T13000] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 374.649561][T13013] ext4 filesystem being mounted at /689/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.732146][T13013] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2746: corrupted xattr block 32: invalid header [ 374.783561][ T5815] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 374.848476][T13000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 374.954354][T13000] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 374.970301][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.984163][T13000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 374.994264][ T5815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.020135][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.039587][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 375.051809][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 375.054253][T13000] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 375.066416][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.082152][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.090672][ T5815] usb 3-1: Product: syz [ 375.103054][ T5815] usb 3-1: Manufacturer: syz [ 375.107971][T13009] loop1: detected capacity change from 0 to 32768 [ 375.117472][T13000] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 375.120929][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 375.132691][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 375.147501][T13009] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2743 (13009) [ 375.150776][ T5815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 375.177318][ T5815] cdc_wdm 3-1:1.0: Unknown control protocol [ 375.189423][T13009] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 375.224673][T13009] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 375.243675][T13009] BTRFS info (device loop1): using free space tree [ 375.277504][T13000] F2FS-fs (loop4): f2fs_new_node_page: inconsistent nat entry, ino:4, nid:4, blkaddr:4098, ver:0, flag:0 [ 375.333753][T13023] F2FS-fs (loop4): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 375.349803][ T5815] usb 3-1: USB disconnect, device number 31 [ 375.403829][T13009] BTRFS info (device loop1): enabling ssd optimizations [ 375.418127][T13009] BTRFS info (device loop1): auto enabling async discard [ 375.418367][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.633995][T13041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2749'. [ 375.649087][ T5783] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 376.567689][ T5791] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 376.669037][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'. [ 376.776060][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.807812][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.826118][ T5791] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 376.848625][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.875092][ T5791] usb 2-1: config 0 descriptor?? [ 377.152311][T13066] loop2: detected capacity change from 0 to 32768 [ 377.199552][T13085] loop4: detected capacity change from 0 to 64 [ 377.217089][T13066] JBD2: Ignoring recovery information on journal [ 377.318141][ T5791] thrustmaster 0003:044F:B324.0034: item fetching failed at offset 4/5 [ 377.327216][T13066] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 377.355262][ T5791] thrustmaster 0003:044F:B324.0034: parse failed [ 377.379461][ T5791] thrustmaster: probe of 0003:044F:B324.0034 failed with error -22 [ 377.532376][ T5791] usb 2-1: USB disconnect, device number 27 [ 377.689135][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 378.228602][T13110] loop4: detected capacity change from 0 to 1024 [ 378.275068][T13096] loop3: detected capacity change from 0 to 32768 [ 378.283227][T13110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.295854][T13108] loop1: detected capacity change from 0 to 2048 [ 378.300651][T13108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.347902][T13108] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 378.378570][T13096] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 378.403467][ T5791] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 378.539880][T13096] XFS (loop3): Ending clean mount [ 378.555177][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.610948][T13096] XFS (loop3): Quotacheck needed: Please wait. [ 378.617425][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.655654][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.669301][ T5791] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 378.679255][T13122] loop1: detected capacity change from 0 to 1764 [ 378.693795][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.726592][ T5791] usb 3-1: config 0 descriptor?? [ 378.744783][T13122] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 378.762282][T13096] XFS (loop3): Quotacheck: Done. [ 378.919904][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 379.146960][ T5791] cm6533_jd 0003:0D8C:0022.0035: unknown main item tag 0x3 [ 379.173647][ T5791] cm6533_jd 0003:0D8C:0022.0035: item fetching failed at offset 4/5 [ 379.204624][ T5791] cm6533_jd 0003:0D8C:0022.0035: parse failed [ 379.221406][ T5791] cm6533_jd: probe of 0003:0D8C:0022.0035 failed with error -22 [ 379.371217][ T5791] usb 3-1: USB disconnect, device number 32 [ 379.519225][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.533603][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.598277][T13127] loop1: detected capacity change from 0 to 32768 [ 379.646779][T13127] JBD2: Ignoring recovery information on journal [ 379.732553][T13127] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 379.842985][T13133] loop3: detected capacity change from 0 to 32768 [ 379.912316][T13133] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 379.939035][T13133] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 379.991687][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 380.125406][T13133] XFS (loop3): Ending clean mount [ 380.148150][T13133] XFS (loop3): Quotacheck needed: Please wait. [ 380.233964][T13133] XFS (loop3): Quotacheck: Done. [ 380.403854][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 380.438801][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 380.607670][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.662529][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.673922][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 380.683000][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.722603][ T9] usb 3-1: config 0 descriptor?? [ 380.752835][T13155] loop1: detected capacity change from 0 to 32768 [ 381.164858][ T9] thrustmaster 0003:044F:B324.0036: item fetching failed at offset 4/5 [ 381.195624][ T9] thrustmaster 0003:044F:B324.0036: parse failed [ 381.208903][ T9] thrustmaster: probe of 0003:044F:B324.0036 failed with error -22 [ 381.246987][T13161] loop4: detected capacity change from 0 to 32768 [ 381.281499][T13161] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 381.314216][T13161] XFS (loop4): Ending clean mount [ 381.321400][T13161] XFS (loop4): Quotacheck needed: Please wait. [ 381.370182][T13161] XFS (loop4): Quotacheck: Done. [ 381.412934][ T5791] usb 3-1: USB disconnect, device number 33 [ 381.466547][ T7645] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.372410][T13191] loop2: detected capacity change from 0 to 1024 [ 382.405803][T13191] EXT4-fs: Ignoring removed nobh option [ 382.413830][T13191] EXT4-fs: Ignoring removed bh option [ 382.424156][T13191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.454047][T13191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.495754][T13179] loop4: detected capacity change from 0 to 32768 [ 382.549042][T13179] JBD2: Ignoring recovery information on journal [ 382.590291][T13179] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 382.613534][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 382.633620][ T786] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 382.642370][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.780926][ T7645] ocfs2: Unmounting device (7,4) on (node local) [ 382.803665][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 382.826889][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.835107][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.848104][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.863518][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.873315][ T786] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 382.879660][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 382.903494][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.923851][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 382.928942][ T786] usb 4-1: config 0 descriptor?? [ 382.945630][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.963711][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.003281][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 383.019862][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 383.038661][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 383.053663][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 383.078142][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 383.109499][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 383.287941][T13200] loop2: detected capacity change from 0 to 32768 [ 383.323757][ T9] usb 2-1: USB disconnect, device number 28 [ 383.383130][T13200] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.477785][T13200] XFS (loop2): Ending clean mount [ 383.500527][T13200] XFS (loop2): Quotacheck needed: Please wait. [ 383.510643][T13202] loop4: detected capacity change from 0 to 32768 [ 383.538798][T13202] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 383.608178][T13200] XFS (loop2): Quotacheck: Done. [ 383.643796][ T9] usb 4-1: USB disconnect, device number 25 [ 383.706650][ T8627] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 383.880421][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.906517][T13214] loop4: detected capacity change from 0 to 128 [ 383.939037][T13214] EXT4-fs: Ignoring removed mblk_io_submit option [ 383.986747][T13216] loop1: detected capacity change from 0 to 128 [ 384.009681][T13214] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.050694][T13214] ext4 filesystem being mounted at /548/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.081475][T13216] syz.1.2814: attempt to access beyond end of device [ 384.081475][T13216] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 384.094731][T13214] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.2812: No space for directory leaf checksum. Please run e2fsck -D. [ 384.121562][T13214] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.2812: checksumming directory block 0 [ 384.221244][ T7645] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.355866][T13224] loop1: detected capacity change from 0 to 64 [ 384.581490][T13231] loop3: detected capacity change from 0 to 2048 [ 384.636133][T13231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.762837][T13238] loop4: detected capacity change from 0 to 2048 [ 384.794214][ T27] audit: type=1800 audit(1750255867.842:217): pid=13231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2820" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 384.833602][T13238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.949998][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.013889][T13238] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 385.345081][T13246] ax25_connect(): syz.3.2828 uses autobind, please contact jreuter@yaina.de [ 386.239366][T13248] loop4: detected capacity change from 0 to 32768 [ 386.290492][T13248] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2826 (13248) [ 386.348744][T13248] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 386.406054][T13248] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 386.444228][T13248] BTRFS info (device loop4): using free space tree [ 386.646166][T13248] BTRFS info (device loop4): enabling ssd optimizations [ 386.653189][T13248] BTRFS info (device loop4): auto enabling async discard [ 386.800709][ T7645] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 386.973807][ T5812] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 386.986546][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 387.057594][ T5833] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 387.196081][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 387.204554][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.216528][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.227274][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.227440][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.251648][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.261352][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.270339][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.281412][ T9] usb 3-1: config 0 descriptor?? [ 387.288959][ T5833] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.298896][ T5833] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 387.309707][ T5812] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 387.321798][ T5833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.330975][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.339236][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 387.351225][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 387.364447][ T5812] usb 4-1: config 0 descriptor?? [ 387.376467][ T5833] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.386016][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.394514][ T5833] usb 2-1: Product: syz [ 387.398810][ T5833] usb 2-1: Manufacturer: syz [ 387.414088][ T5833] cdc_wdm 2-1:1.0: skipping garbage [ 387.419367][ T5833] cdc_wdm 2-1:1.0: skipping garbage [ 387.427182][ T5833] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 387.433162][ T5833] cdc_wdm 2-1:1.0: Unknown control protocol [ 387.642868][ T786] usb 2-1: USB disconnect, device number 29 [ 387.716284][ T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0xe [ 387.725871][ T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 387.734997][ T9] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 387.750110][ T9] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 387.787296][ T5812] konepure 0003:1E7D:2DB4.0039: unknown main item tag 0x0 [ 387.801819][ T5812] konepure 0003:1E7D:2DB4.0039: unknown main item tag 0x0 [ 387.829415][ T5812] konepure 0003:1E7D:2DB4.0039: unknown main item tag 0x0 [ 387.843876][ T5812] konepure 0003:1E7D:2DB4.0039: unknown main item tag 0x0 [ 387.870601][ T5812] konepure 0003:1E7D:2DB4.0039: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 387.926206][ T5833] usb 3-1: USB disconnect, device number 34 [ 387.936815][T13309] loop4: detected capacity change from 0 to 2048 [ 387.986085][T13309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.023605][T13309] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.110059][ T5812] usb 4-1: USB disconnect, device number 26 [ 388.125708][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.565023][T13325] loop1: detected capacity change from 0 to 1024 [ 388.588916][T13327] loop2: detected capacity change from 0 to 64 [ 388.600416][T13327] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 388.914631][T13333] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2856'. [ 388.971043][T13319] loop4: detected capacity change from 0 to 32768 [ 388.973987][T13333] netlink: 'syz.1.2856': attribute type 9 has an invalid length. [ 389.021494][T13319] JBD2: Ignoring recovery information on journal [ 389.167745][T13319] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 389.328056][ T7645] ocfs2: Unmounting device (7,4) on (node local) [ 389.423486][ T5815] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 389.444168][ T786] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 389.520569][T13336] loop1: detected capacity change from 0 to 32768 [ 389.593764][T13336] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 389.646767][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.659095][ T786] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.667083][T13336] XFS (loop1): Ending clean mount [ 389.681196][T13336] XFS (loop1): Quotacheck needed: Please wait. [ 389.698240][ T786] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 389.716680][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 389.767640][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.790830][ T5815] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 389.801205][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 389.819337][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.828080][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 389.848966][T13336] XFS (loop1): Quotacheck: Done. [ 389.856439][ T5815] usb 3-1: config 0 descriptor?? [ 389.880668][ T786] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.902977][ T786] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.931538][ T786] usb 4-1: Product: syz [ 389.941193][ T786] usb 4-1: Manufacturer: syz [ 389.989725][ T786] cdc_wdm 4-1:1.0: skipping garbage [ 390.023570][ T786] cdc_wdm 4-1:1.0: skipping garbage [ 390.047969][ T786] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 390.063568][ T786] cdc_wdm 4-1:1.0: Unknown control protocol [ 390.076489][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 390.215544][ T5812] usb 4-1: USB disconnect, device number 27 [ 390.299327][ T5815] lenovo 0003:17EF:60EE.003A: unknown main item tag 0x1 [ 390.309593][ T5815] lenovo 0003:17EF:60EE.003A: item fetching failed at offset 3/7 [ 390.330573][T13363] netlink: 'syz.4.2868': attribute type 27 has an invalid length. [ 390.331146][ T5815] lenovo 0003:17EF:60EE.003A: hid_parse failed [ 390.360301][ T5815] lenovo: probe of 0003:17EF:60EE.003A failed with error -22 [ 390.536188][ T5812] usb 3-1: USB disconnect, device number 35 [ 391.021914][T13377] loop4: detected capacity change from 0 to 32768 [ 391.047695][T13377] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.138537][T13391] loop2: detected capacity change from 0 to 2048 [ 391.165010][T13377] XFS (loop4): Ending clean mount [ 391.206868][T13391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.236749][T13377] XFS (loop4): Quotacheck needed: Please wait. [ 391.310878][ T27] audit: type=1800 audit(1750255874.362:218): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2878" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 391.389864][T13377] XFS (loop4): Quotacheck: Done. [ 391.456694][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.588854][ T7645] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.715416][T13381] orangefs_mount: mount request failed with -4 [ 391.968685][T13396] loop1: detected capacity change from 0 to 32768 [ 391.994541][T13396] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 392.064018][ T5783] (syz-executor,5783,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 392.094013][ T5815] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 392.127430][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 392.293335][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.324901][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.341700][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.357527][ T5815] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 392.367504][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.384880][ T5815] usb 4-1: config 0 descriptor?? [ 392.464014][T13416] loop2: detected capacity change from 0 to 1024 [ 392.828544][ T5815] dragonrise 0003:0079:0011.003B: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 393.012000][ T5812] usb 4-1: USB disconnect, device number 28 [ 393.335272][T13431] loop1: detected capacity change from 0 to 64 [ 393.345204][T13429] loop4: detected capacity change from 0 to 2048 [ 393.363077][T13429] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 393.376552][T13429] NILFS (loop4): mounting unchecked fs [ 393.385437][T13431] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 393.394242][T13429] NILFS (loop4): recovery complete [ 393.402549][T13432] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.513244][T13422] orangefs_mount: mount request failed with -4 [ 394.679029][T13475] loop3: detected capacity change from 0 to 256 [ 394.710787][T13477] loop1: detected capacity change from 0 to 512 [ 394.736997][T13479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2915'. [ 394.761703][T13477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.856780][T13477] ext4 filesystem being mounted at /712/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.875775][ T5775] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 394.904472][T13477] EXT4-fs (loop1): shut down requested (1) [ 394.909099][T13483] loop2: detected capacity change from 0 to 1024 [ 394.913960][ T5775] FAT-fs (loop3): Filesystem has been set read-only [ 394.956369][ T5775] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 394.977246][T13457] orangefs_mount: mount request failed with -4 [ 394.982966][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.048760][T13482] hfsplus: invalid extended attribute record [ 395.189469][T11616] bridge0: port 3(syz_tun) entered disabled state [ 395.204171][ T48] hfsplus: b-tree write err: -5, ino 4 [ 395.287262][T11616] syz_tun (unregistering): left allmulticast mode [ 395.298907][T11616] syz_tun (unregistering): left promiscuous mode [ 395.298998][T11616] bridge0: port 3(syz_tun) entered disabled state [ 395.566470][ T2929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.667416][ T2929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.786286][ T2929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.909624][ T2929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.061336][T13503] loop4: detected capacity change from 0 to 4096 [ 396.172121][T13503] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 396.265660][T13503] ntfs3: loop4: Failed to load $Extend (-22). [ 396.297339][T13503] ntfs3: loop4: Failed to initialize $Extend. [ 396.363850][ T2929] tipc: Disabling bearer [ 396.413999][ T2929] tipc: Left network mode [ 396.580740][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.605810][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.620966][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.635003][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.644983][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 396.656209][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.744631][T13504] loop1: detected capacity change from 0 to 32768 [ 396.856439][T13504] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 396.909961][ T12] (kworker/u4:1,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 396.970559][T13504] (syz.1.2927,13504,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 397.240990][T13529] loop4: detected capacity change from 0 to 1024 [ 397.282741][T13529] EXT4-fs: Ignoring removed bh option [ 397.297809][T13529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 397.306283][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 397.416274][T13529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.598178][T13529] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.2934: Allocating blocks 497-513 which overlap fs metadata [ 397.679631][T13529] EXT4-fs (loop4): pa ffff88807864f000: logic 624, phys. 113, len 25 [ 397.688850][T13529] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5377: group 0, free 24, pa_free 25 [ 397.886253][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.094315][T13541] loop2: detected capacity change from 0 to 32768 [ 398.110678][T13511] chnl_net:caif_netlink_parms(): no params data found [ 398.127325][T13541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2936 (13541) [ 398.178023][T13541] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 398.197552][T13541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 398.207678][T13541] BTRFS info (device loop2): turning on sync discard [ 398.217342][T13541] BTRFS info (device loop2): doing ref verification [ 398.227304][T13541] BTRFS info (device loop2): disabling tree log [ 398.243235][T13541] BTRFS info (device loop2): metadata ratio 129 [ 398.250154][T13541] BTRFS info (device loop2): using free space tree [ 398.298231][T13552] loop1: detected capacity change from 0 to 2048 [ 398.360802][T13552] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 398.439466][T13571] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.585146][T13541] BTRFS info (device loop2): checking UUID tree [ 398.713659][ T5784] Bluetooth: hci0: command tx timeout [ 399.086733][ T5779] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 399.147911][T13593] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2945'. [ 399.345000][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.389287][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.413896][T13511] bridge_slave_0: entered allmulticast mode [ 399.455845][T13511] bridge_slave_0: entered promiscuous mode [ 399.502668][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.552752][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.593816][T13511] bridge_slave_1: entered allmulticast mode [ 399.634874][T13511] bridge_slave_1: entered promiscuous mode [ 399.693879][ T2929] hsr_slave_0: left promiscuous mode [ 399.763646][ T2929] hsr_slave_1: left promiscuous mode [ 399.869853][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.922761][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.972796][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.019462][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.077297][ T2929] bridge_slave_1: left allmulticast mode [ 400.083155][ T2929] bridge_slave_1: left promiscuous mode [ 400.090987][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.194336][ T2929] bridge_slave_0: left allmulticast mode [ 400.200626][ T2929] bridge_slave_0: left promiscuous mode [ 400.250086][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.339261][ T2929] veth1_macvtap: left promiscuous mode [ 400.361592][ T2929] veth0_macvtap: left promiscuous mode [ 400.374006][ T2929] veth1_vlan: left promiscuous mode [ 400.380007][ T2929] veth0_vlan: left promiscuous mode [ 400.484473][T13625] loop1: detected capacity change from 0 to 1024 [ 400.581103][T13628] loop4: detected capacity change from 0 to 512 [ 400.618054][T13628] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 400.650371][T13623] hfsplus: invalid extended attribute record [ 400.659498][T13628] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 400.746604][T13628] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 400.755249][ T6618] hfsplus: b-tree write err: -5, ino 4 [ 400.788949][T13628] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 400.808730][ T5784] Bluetooth: hci0: command tx timeout [ 400.831767][T13628] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0080] [ 400.862009][T13628] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.2958: inode #0: comm syz.4.2958: iget: illegal inode # [ 400.913121][T13628] EXT4-fs (loop4): get orphan inode failed [ 400.944214][T13628] EXT4-fs (loop4): mount failed [ 401.419180][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 401.522735][T13648] loop2: detected capacity change from 0 to 1024 [ 401.535521][T13648] EXT4-fs: Ignoring removed orlov option [ 401.541259][T13648] EXT4-fs: Ignoring removed bh option [ 401.580909][T13648] EXT4-fs: Ignoring removed bh option [ 401.650828][T13648] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.742361][ T27] audit: type=1800 audit(1750255884.792:219): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2967" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 401.751567][T13648] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.2967: Allocating blocks 481-513 which overlap fs metadata [ 401.787020][T13648] EXT4-fs (loop2): Remounting filesystem read-only [ 401.829579][T13647] EXT4-fs (loop2): pa ffff88807864f2b8: logic 256, phys. 369, len 9 [ 401.885661][ T5779] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 401.897470][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 401.992698][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 402.047957][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.057103][ T2929] bond_slave_1 (unregistering): left allmulticast mode [ 402.141693][T13656] loop2: detected capacity change from 0 to 64 [ 402.158012][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.167216][ T2929] bond_slave_0 (unregistering): left allmulticast mode [ 402.448812][T13658] loop2: detected capacity change from 0 to 4096 [ 402.537549][T13658] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 402.606526][T13658] ntfs3: loop2: Failed to load $Extend (-22). [ 402.612712][T13658] ntfs3: loop2: Failed to initialize $Extend. [ 402.873687][ T5784] Bluetooth: hci0: command tx timeout [ 403.021195][ T2929] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 403.029968][ T2929] bridge0 (unregistering): left allmulticast mode [ 403.036808][ T2929] bond0 (unregistering): Released all slaves [ 403.162593][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 403.250986][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.282106][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.550852][T13511] team0: Port device team_slave_0 added [ 403.655164][T13511] team0: Port device team_slave_1 added [ 403.844485][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.889283][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.955489][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.011866][T13690] loop2: detected capacity change from 0 to 512 [ 404.036378][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.053076][T13690] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.056291][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.074859][T13690] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.127419][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.135486][T13690] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 404.141582][T13689] loop1: detected capacity change from 0 to 4096 [ 404.198472][ T2929] IPVS: stop unused estimator thread 0... [ 404.204259][T13690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec11c, mo2=0002] [ 404.226173][T13690] System zones: 1-12 [ 404.257247][T13690] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.2979: corrupted in-inode xattr: e_value size too large [ 404.291474][T13511] hsr_slave_0: entered promiscuous mode [ 404.310762][T13689] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 404.323092][T13511] hsr_slave_1: entered promiscuous mode [ 404.330529][T13511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.349712][T13511] Cannot create hsr debugfs directory [ 404.357336][T13690] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2979: couldn't read orphan inode 15 (err -117) [ 404.362894][T13689] ntfs3: loop1: Failed to load $Extend (-22). [ 404.392408][T13690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.436667][T13689] ntfs3: loop1: Failed to initialize $Extend. [ 404.745278][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.955480][ T5784] Bluetooth: hci0: command tx timeout [ 405.197088][T13511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.266818][T13511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.296691][T13511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.325645][T13511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.417757][T13719] loop1: detected capacity change from 0 to 2048 [ 405.488368][T13719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.636462][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.698375][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.784885][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.792073][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.829938][T13712] loop4: detected capacity change from 0 to 32768 [ 405.861126][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.861378][T13729] loop1: detected capacity change from 0 to 1024 [ 405.868668][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.869084][T13712] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2987 (13712) [ 405.952370][ T6614] hfsplus: b-tree write err: -5, ino 4 [ 405.961430][T13712] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 405.988560][T13712] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 406.009132][T13712] BTRFS info (device loop4): using free space tree [ 406.103780][ T786] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 406.258586][T13755] loop1: detected capacity change from 0 to 1024 [ 406.267383][T13755] EXT4-fs: Ignoring removed orlov option [ 406.273082][T13755] EXT4-fs: Ignoring removed bh option [ 406.285520][T13755] EXT4-fs: Ignoring removed bh option [ 406.285551][T13712] BTRFS info (device loop4): enabling ssd optimizations [ 406.301378][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 406.310192][T13712] BTRFS info (device loop4): auto enabling async discard [ 406.330239][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.362217][ T786] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 406.384845][T13755] EXT4-fs (loop1): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.446065][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.514859][ T786] usb 3-1: config 0 descriptor?? [ 406.597313][ T27] audit: type=1800 audit(1750255889.652:220): pid=13755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2994" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 406.607955][T13755] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.2994: Allocating blocks 481-513 which overlap fs metadata [ 406.641086][T13755] EXT4-fs (loop1): Remounting filesystem read-only [ 406.709559][T13754] EXT4-fs (loop1): pa ffff88807864f658: logic 256, phys. 369, len 9 [ 406.720039][ T7645] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 406.832207][ T5783] EXT4-fs (loop1): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 406.845250][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.014117][ T786] cypress 0003:04B4:0001.003C: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 407.243893][ T5833] usb 3-1: USB disconnect, device number 36 [ 407.782378][T13511] veth0_vlan: entered promiscuous mode [ 407.833916][T13511] veth1_vlan: entered promiscuous mode [ 407.920145][T13511] veth0_macvtap: entered promiscuous mode [ 407.930888][T13511] veth1_macvtap: entered promiscuous mode [ 407.980489][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.016642][T13805] loop1: detected capacity change from 0 to 1024 [ 408.033416][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.053922][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.082992][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.099071][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.110166][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.139091][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.207948][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.245519][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.261757][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.272486][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.284362][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.301879][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.315992][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.323823][ T2990] hfsplus: b-tree write err: -5, ino 4 [ 408.357012][T13511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.374491][T13511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.383318][T13511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.406623][T13511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.613275][T13817] loop4: detected capacity change from 0 to 256 [ 408.661716][ T6618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.687292][T13817] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 408.689600][ T6618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.721044][ T27] audit: type=1326 audit(1750255891.772:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.2.3012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5da38e929 code=0x0 [ 408.828033][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.841093][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.922844][T13827] loop1: detected capacity change from 0 to 764 [ 408.965326][T13827] rock: directory entry would overflow storage [ 408.973042][T13827] rock: sig=0x4654, size=5, remaining=4 [ 410.233464][T13839] loop1: detected capacity change from 0 to 32768 [ 410.358866][T13839] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.607036][T13839] XFS (loop1): Ending clean mount [ 410.645359][T13839] XFS (loop1): Quotacheck needed: Please wait. [ 410.805706][T13839] XFS (loop1): Quotacheck: Done. [ 411.056288][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.091564][T13873] loop4: detected capacity change from 0 to 32768 [ 411.106619][T13873] XFS: ikeep mount option is deprecated. [ 411.132243][T13860] loop2: detected capacity change from 0 to 32768 [ 411.229482][T13873] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.285354][T13860] JBD2: Ignoring recovery information on journal [ 411.377193][T13860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 411.399914][T13898] loop5: detected capacity change from 0 to 512 [ 411.554387][T13873] XFS (loop4): Ending clean mount [ 411.597357][T13873] XFS (loop4): Quotacheck needed: Please wait. [ 411.611831][T13898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 411.693480][ T27] audit: type=1800 audit(1750255894.742:222): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3022" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 411.737433][T13898] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.747506][T13873] XFS (loop4): Quotacheck: Done. [ 411.907813][T13898] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 411.958304][T13898] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 412.009666][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 412.091226][T13898] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3029: Failed to acquire dquot type 0 [ 412.096063][ T7645] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.426215][T13511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 412.687888][ T27] audit: type=1326 audit(1750255895.732:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3d38e929 code=0x7ffc0000 [ 412.711994][T13926] loop4: detected capacity change from 0 to 512 [ 412.763806][ T27] audit: type=1326 audit(1750255895.732:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3d38e929 code=0x7ffc0000 [ 412.848834][T13926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.866528][ T27] audit: type=1326 audit(1750255895.742:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fca3d38e929 code=0x7ffc0000 [ 412.975881][T13926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 412.998195][ T27] audit: type=1326 audit(1750255895.742:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca3d38e963 code=0x7ffc0000 [ 413.043946][T13926] System zones: 0-2, 18-18, 34-34 [ 413.084783][T13926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.097820][T13926] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.165914][ T27] audit: type=1326 audit(1750255895.742:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca3d38d3df code=0x7ffc0000 [ 413.250243][ T27] audit: type=1326 audit(1750255895.762:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fca3d38e9b7 code=0x7ffc0000 [ 413.407883][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.633816][T13951] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3040'. [ 413.656389][T13948] loop2: detected capacity change from 0 to 2048 [ 413.731058][T13948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.827696][T13948] ext4 filesystem being mounted at /754/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.867440][T13933] loop5: detected capacity change from 0 to 32768 [ 413.895850][T13933] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3037 (13933) [ 413.988255][T13933] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 414.019020][T13933] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 414.042799][T13933] BTRFS info (device loop5): enabling auto defrag [ 414.062279][T13933] BTRFS info (device loop5): doing ref verification [ 414.070590][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.090680][T13933] BTRFS info (device loop5): max_inline at 0 [ 414.125979][T13933] BTRFS info (device loop5): force clearing of disk cache [ 414.136239][T13933] BTRFS info (device loop5): turning on sync discard [ 414.143127][T13933] BTRFS info (device loop5): disabling free space tree [ 414.330065][T13933] BTRFS info (device loop5): enabling ssd optimizations [ 414.424895][T13933] BTRFS info (device loop5): rebuilding free space tree [ 414.503708][T13933] BTRFS info (device loop5): disabling free space tree [ 414.533573][T13933] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 414.560452][T13992] loop4: detected capacity change from 0 to 512 [ 414.581689][T13933] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 414.642813][T13992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 414.734768][T13992] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 414.771901][T13992] EXT4-fs (loop4): 1 truncate cleaned up [ 414.779089][T13992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.939181][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.976405][T13511] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.193426][ T5833] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 415.401708][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 415.430946][T14017] loop2: detected capacity change from 0 to 4096 [ 415.439574][ T5833] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 415.441861][T14017] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 415.458791][ T5833] usb 2-1: config 0 has no interface number 0 [ 415.492707][ T5833] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.543530][ T5833] usb 2-1: config 0 interface 85 has no altsetting 0 [ 415.569056][T14017] ntfs3: loop2: Failed to load $Extend (-22). [ 415.575781][ T5833] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 415.588430][T14017] ntfs3: loop2: Failed to initialize $Extend. [ 415.599109][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.648486][ T5833] usb 2-1: Product: syz [ 415.673079][ T5833] usb 2-1: Manufacturer: syz [ 415.688294][ T5833] usb 2-1: SerialNumber: syz [ 415.700656][ T5833] usb 2-1: config 0 descriptor?? [ 416.188149][ T5833] appletouch 2-1:0.85: Geyser mode initialized. [ 416.204300][ T5833] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input43 [ 416.323596][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 416.344156][ T787] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 416.429663][ T786] usb 2-1: USB disconnect, device number 30 [ 416.459600][ T786] appletouch 2-1:0.85: input: appletouch disconnected [ 416.535533][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 416.543450][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 416.553952][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 416.559924][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.569521][ T787] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 416.583122][ T787] usb 3-1: config 0 has no interface number 0 [ 416.594186][ T9] usb 6-1: config 0 descriptor?? [ 416.611556][ T787] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 416.622577][ T787] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 416.638698][ T787] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 416.639918][T14047] loop4: detected capacity change from 0 to 128 [ 416.648786][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.663211][ T787] usb 3-1: Product: syz [ 416.667728][ T787] usb 3-1: Manufacturer: syz [ 416.672401][ T787] usb 3-1: SerialNumber: syz [ 416.680350][ T787] usb 3-1: config 0 descriptor?? [ 416.686438][T14033] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 416.700449][T14033] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 416.929841][T14033] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 416.939654][T14033] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 417.216409][ T9] video4linux radio48: keene_cmd_set failed (-71) [ 417.233843][ T9] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 417.252697][ T9] usb 6-1: USB disconnect, device number 2 [ 417.365408][ T787] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 417.394195][ T787] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 417.429743][ T787] asix: probe of 3-1:0.251 failed with error -71 [ 417.442131][T14067] loop4: detected capacity change from 0 to 4096 [ 417.456806][ T787] usb 3-1: USB disconnect, device number 37 [ 417.463975][T14067] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 417.565438][T14067] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 417.572029][T14067] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 417.672617][T14067] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 417.697445][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 417.697461][ T27] audit: type=1800 audit(1750255900.752:245): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3078" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 417.724777][T14067] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 417.771949][ T2929] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 417.787105][ T7645] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 417.796505][ T7645] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 417.807173][ T7645] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 417.816024][ T6614] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 418.003030][T14065] loop1: detected capacity change from 0 to 40427 [ 418.041656][T14065] F2FS-fs (loop1): invalid crc value [ 418.090214][T14065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 418.193926][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'. [ 418.226697][T14065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 418.254334][T14080] loop5: detected capacity change from 0 to 128 [ 418.291631][T14082] loop4: detected capacity change from 0 to 512 [ 418.299768][T14080] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 418.367874][T14080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.381972][T14082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 418.420935][T14082] ext4 filesystem being mounted at /634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.479535][ T5783] syz-executor: attempt to access beyond end of device [ 418.479535][ T5783] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 418.501895][T14082] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 418.507312][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.521734][T14082] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 418.570306][T14082] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3082: Failed to acquire dquot type 0 [ 418.770908][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 418.817693][T14088] loop5: detected capacity change from 0 to 2048 [ 418.858874][T14088] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 418.938128][T14088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.345783][T14107] loop1: detected capacity change from 0 to 1764 [ 419.570403][T14111] loop5: detected capacity change from 0 to 256 [ 419.619243][T14111] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.644664][T14111] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 419.680301][T14111] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 419.952386][T14097] loop4: detected capacity change from 0 to 32768 [ 419.969953][T14120] loop1: detected capacity change from 0 to 4096 [ 419.976987][ T786] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 419.988423][T14097] XFS: attr2 mount option is deprecated. [ 420.004497][T14120] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 420.036208][T14120] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 420.085742][T14097] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.089534][T14129] loop5: detected capacity change from 0 to 128 [ 420.104176][T14131] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.130601][T14129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.174176][T14129] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.206810][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 420.230255][ T786] usb 3-1: config 0 has no interfaces? [ 420.243488][ T786] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 420.292053][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.347325][ T786] usb 3-1: config 0 descriptor?? [ 420.436388][T13511] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.511588][T14097] XFS (loop4): Ending clean mount [ 420.536614][T14097] XFS (loop4): Quotacheck needed: Please wait. [ 420.584682][ T786] usb 3-1: USB disconnect, device number 38 [ 420.648726][T14097] XFS (loop4): Quotacheck: Done. [ 420.848324][ T7645] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 421.004964][T14140] loop1: detected capacity change from 0 to 32768 [ 421.046632][T14140] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3099 (14140) [ 421.147245][T14140] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.170351][T14140] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 421.206222][T14140] BTRFS info (device loop1): enabling auto defrag [ 421.213417][T14140] BTRFS info (device loop1): use no compression [ 421.220230][T14140] BTRFS info (device loop1): force clearing of disk cache [ 421.274346][T14140] BTRFS info (device loop1): max_inline at 4096 [ 421.280726][T14140] BTRFS info (device loop1): disabling free space tree [ 421.642052][T14140] BTRFS info (device loop1): enabling ssd optimizations [ 421.683815][T14140] BTRFS info (device loop1): auto enabling async discard [ 421.722053][T14140] BTRFS info (device loop1): rebuilding free space tree [ 421.768878][T14140] BTRFS info (device loop1): disabling free space tree [ 421.793877][T14140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 421.798747][T14180] ALSA: seq fatal error: cannot create timer (-19) [ 421.828792][T14140] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 422.057158][ T5783] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.283651][ T787] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 422.379389][ T27] audit: type=1326 audit(1750255905.402:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 422.443601][ T27] audit: type=1326 audit(1750255905.432:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 422.467711][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.523485][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 422.528599][ T27] audit: type=1326 audit(1750255905.432:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f003b58d290 code=0x7ffc0000 [ 422.528705][ T27] audit: type=1326 audit(1750255905.432:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 422.528743][ T27] audit: type=1326 audit(1750255905.432:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003b58e929 code=0x7ffc0000 [ 422.601782][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.666848][ T787] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 422.676699][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.689584][ T787] usb 3-1: Product: syz [ 422.694125][ T787] usb 3-1: Manufacturer: syz [ 422.698851][ T787] usb 3-1: SerialNumber: syz [ 422.719067][ T787] usb 3-1: config 0 descriptor?? [ 422.772642][ T787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 422.791161][ T787] usb 3-1: setting power ON [ 422.799879][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 422.824422][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 422.857229][ T787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 422.883698][ T787] usb 3-1: media controller created [ 422.917721][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.949926][ T787] usb 3-1: selecting invalid altsetting 6 [ 422.956457][ T787] usb 3-1: digital interface selection failed (-22) [ 422.976038][ T787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 422.994436][T14191] dvb-usb: bulk message failed: -22 (3/0) [ 423.004163][ T787] usb 3-1: setting power OFF [ 423.039139][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 423.073708][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 423.083188][ T787] (NULL device *): no alternate interface [ 423.144436][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 423.182443][ T787] usb 3-1: USB disconnect, device number 39 [ 423.286034][T14222] loop1: detected capacity change from 0 to 512 [ 423.370005][T14222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 423.405410][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3128'. [ 423.426222][T14222] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.539309][T14222] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 423.556784][T14222] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 423.569188][T14222] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3125: Failed to acquire dquot type 0 [ 423.651063][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 423.851579][T14240] loop2: detected capacity change from 0 to 512 [ 423.901328][T14240] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 423.963794][ T27] audit: type=1326 audit(1750255907.002:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d918e929 code=0x7ffc0000 [ 423.986504][T14240] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 424.011664][ T27] audit: type=1326 audit(1750255907.002:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d918e929 code=0x7ffc0000 [ 424.019554][T14244] loop5: detected capacity change from 0 to 1024 [ 424.043885][ T27] audit: type=1326 audit(1750255907.022:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb7d918e929 code=0x7ffc0000 [ 424.061250][T14240] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 424.067656][ T27] audit: type=1326 audit(1750255907.022:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7d918e963 code=0x7ffc0000 [ 424.098913][ T27] audit: type=1326 audit(1750255907.022:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb7d918d3df code=0x7ffc0000 [ 424.121619][ T27] audit: type=1326 audit(1750255907.062:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb7d918e9b7 code=0x7ffc0000 [ 424.144934][ T27] audit: type=1326 audit(1750255907.062:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7d918d290 code=0x7ffc0000 [ 424.169408][T14244] EXT4-fs: Ignoring removed nobh option [ 424.193573][ T27] audit: type=1326 audit(1750255907.062:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d918e52b code=0x7ffc0000 [ 424.203687][T14244] EXT4-fs: Ignoring removed bh option [ 424.222329][T14240] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 424.262196][T14240] System zones: 0-2, 18-18, 34-35 [ 424.312792][T14240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.341608][T14244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.430992][T14244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.573800][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.636860][T14261] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.689610][T14264] loop2: detected capacity change from 0 to 512 [ 424.726631][T14264] EXT4-fs error (device loop2): __ext4_iget:5047: inode #13: block 40192: comm syz.2.3139: invalid block [ 424.740647][T13511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.832170][T14264] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3139: couldn't read orphan inode 13 (err -117) [ 424.894969][T14264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.011580][T14274] loop5: detected capacity change from 0 to 256 [ 425.076971][T14264] EXT4-fs: Ignoring removed bh option [ 425.131580][T14264] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 425.229398][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.530673][T14285] loop5: detected capacity change from 0 to 1024 [ 425.591717][T14283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.620702][T14285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.648843][ T5812] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 425.658530][T14283] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 425.782313][T14283] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 425.818037][T14283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.839942][T14283] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 425.861409][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.880575][T14283] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 425.896016][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 425.899307][T13511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.942882][ T5812] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 425.961672][T14283] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.963042][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.987863][ T5812] usb 3-1: config 0 descriptor?? [ 426.002301][T14283] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 426.018378][ T5812] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 426.038083][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 426.099334][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 426.135838][T14283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.160105][ T5812] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 426.177859][T14283] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 426.193661][ T5812] usb 3-1: media controller created [ 426.199405][T14302] loop5: detected capacity change from 0 to 512 [ 426.228268][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.249663][T14283] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 426.258780][T14302] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 426.286730][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 426.286754][T14306] loop1: detected capacity change from 0 to 128 [ 426.313445][ T5812] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 426.314612][T14302] EXT4-fs (loop5): invalid journal inode [ 426.345009][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 426.375116][T14302] EXT4-fs (loop5): can't get journal size [ 426.396569][T14302] EXT4-fs (loop5): 1 truncate cleaned up [ 426.405102][T14302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.419047][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 426.467357][T14306] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.498341][ T5812] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 426.584815][T14306] ext4 filesystem being mounted at /776/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 426.584926][ T5812] usb 3-1: USB disconnect, device number 40 [ 426.616712][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.674201][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 426.682304][ T9] dvb-usb: error while querying for an remote control event. [ 426.739476][T13511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.790214][ T5812] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 426.850364][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.250026][T14332] loop4: detected capacity change from 0 to 64 [ 427.593676][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 427.652081][T14349] loop2: detected capacity change from 0 to 128 [ 427.694937][T14349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.716469][T14349] ext4 filesystem being mounted at /775/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.833588][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 427.993946][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 428.002334][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.153702][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 428.478957][T14384] loop4: detected capacity change from 0 to 764 [ 428.487617][T14386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 428.507507][T14384] rock: directory entry would overflow storage [ 428.518996][T14384] rock: sig=0x4654, size=5, remaining=4 [ 428.924017][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 429.128157][T14409] loop4: detected capacity change from 0 to 16 [ 429.169566][T14409] erofs: (device loop4): mounted with root inode @ nid 36. [ 429.250240][T14412] loop2: detected capacity change from 0 to 764 [ 429.343124][T14412] rock: directory entry would overflow storage [ 429.369170][T14412] rock: sig=0x4654, size=5, remaining=4 [ 429.409284][T14412] rock: directory entry would overflow storage [ 429.430193][T14412] rock: sig=0x4f50, size=4, remaining=3 [ 429.443497][T14412] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 429.519611][T14418] loop1: detected capacity change from 0 to 4096 [ 429.538110][T14418] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 429.673882][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 429.913544][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 429.975760][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3191'. [ 429.982477][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3189'. [ 430.074552][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 430.213610][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 430.233684][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.403813][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 430.444750][ T787] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 430.473926][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.488287][ T787] usb 6-1: Product: syz [ 430.503466][ T787] usb 6-1: Manufacturer: syz [ 430.508210][ T787] usb 6-1: SerialNumber: syz [ 430.534581][ T787] usb 6-1: config 0 descriptor?? [ 430.560603][ T787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 430.583519][ T787] usb 6-1: setting power ON [ 430.588182][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 430.627027][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.655971][ T787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 430.676505][ T787] usb 6-1: media controller created [ 430.752877][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.758743][T14437] dvb-usb: bulk message failed: -22 (3/0) [ 430.814685][ T787] usb 6-1: selecting invalid altsetting 6 [ 430.820476][ T787] usb 6-1: digital interface selection failed (-22) [ 430.858568][T14468] loop2: detected capacity change from 0 to 256 [ 430.873161][ T787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 430.903869][T14468] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.906080][ T787] usb 6-1: setting power OFF [ 430.939668][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 430.960294][T14468] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 430.963381][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 430.998551][ T787] (NULL device *): no alternate interface [ 431.027826][T14468] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 431.074070][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 431.140313][ T787] usb 6-1: USB disconnect, device number 3 [ 431.322047][T14476] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3202'. [ 431.549843][T14483] loop4: detected capacity change from 0 to 2048 [ 431.640871][T14483] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 431.682327][ T8015] udevd[8015]: incorrect nilfs2 checksum on /dev/loop4 [ 431.683400][T14483] NILFS (loop4): mounting unchecked fs [ 431.726570][T14483] NILFS (loop4): recovery required for readonly filesystem [ 431.739384][T14491] loop5: detected capacity change from 0 to 64 [ 431.753662][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 431.766603][T14483] NILFS (loop4): write access will be enabled during recovery [ 431.790481][T14483] NILFS (loop4): recovery complete [ 431.841140][ T8015] udevd[8015]: incorrect nilfs2 checksum on /dev/loop4 [ 432.003670][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 432.314519][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 432.440741][T14512] loop2: detected capacity change from 0 to 128 [ 432.461078][T14512] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.509107][T14512] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.012706][T14507] loop5: detected capacity change from 0 to 40427 [ 433.049802][T14507] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 433.075412][T14507] F2FS-fs (loop5): Image doesn't support compression [ 433.095363][T14507] F2FS-fs (loop5): heap/no_heap options were deprecated [ 433.102440][T14507] F2FS-fs (loop5): Image doesn't support compression [ 433.151989][T14507] F2FS-fs (loop5): invalid crc value [ 433.198025][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3216'. [ 433.220479][T14507] F2FS-fs (loop5): Found nat_bits in checkpoint [ 433.297630][T14534] loop1: detected capacity change from 0 to 764 [ 433.442527][T14534] rock: directory entry would overflow storage [ 433.449028][T14507] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 433.465368][T14534] rock: sig=0x4654, size=5, remaining=4 [ 433.630072][T14542] loop4: detected capacity change from 0 to 8 [ 433.694670][T13511] syz-executor: attempt to access beyond end of device [ 433.694670][T13511] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.749842][T13511] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 433.774746][ T8626] udevd[8626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.819573][ T8626] udevd[8626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.971986][T14519] loop2: detected capacity change from 0 to 32768 [ 434.013838][T14519] XFS: attr2 mount option is deprecated. [ 434.108370][T14519] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.233105][T14563] loop4: detected capacity change from 0 to 512 [ 434.271433][T14563] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 434.460212][T14519] XFS (loop2): Ending clean mount [ 434.494753][T14563] block device autoloading is deprecated and will be removed. [ 434.515010][T14519] XFS (loop2): Quotacheck needed: Please wait. [ 434.539387][T14563] EXT4-fs (loop4): external journal has bad superblock [ 434.698280][T14519] XFS (loop2): Quotacheck: Done. [ 434.985606][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.271595][T14586] loop4: detected capacity change from 0 to 1764 [ 435.340852][T14577] loop1: detected capacity change from 0 to 32768 [ 435.479451][T14577] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 435.716997][ T5783] (syz-executor,5783,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 435.796205][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 436.489162][T14625] loop4: detected capacity change from 0 to 2048 [ 436.584951][T14625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.680075][T14625] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 436.699264][T14635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.745386][T14639] loop5: detected capacity change from 0 to 256 [ 436.757732][T14635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.792199][T14639] FAT-fs (loop5): Directory bread(block 64) failed [ 436.807796][T14639] FAT-fs (loop5): Directory bread(block 65) failed [ 436.809500][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.817257][T14639] FAT-fs (loop5): Directory bread(block 66) failed [ 436.853724][T14639] FAT-fs (loop5): Directory bread(block 67) failed [ 436.860875][T14639] FAT-fs (loop5): Directory bread(block 68) failed [ 436.869269][T14635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 436.880539][T14639] FAT-fs (loop5): Directory bread(block 69) failed [ 436.889589][T14639] FAT-fs (loop5): Directory bread(block 70) failed [ 436.916546][T14639] FAT-fs (loop5): Directory bread(block 71) failed [ 436.923321][T14639] FAT-fs (loop5): Directory bread(block 72) failed [ 436.927268][T14635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.945488][T14639] FAT-fs (loop5): Directory bread(block 73) failed [ 437.808571][T14655] loop2: detected capacity change from 0 to 128 [ 437.923749][T14655] FAT-fs (loop2): Directory bread(block 32) failed [ 437.930373][T14655] FAT-fs (loop2): Directory bread(block 33) failed [ 437.993552][T14655] FAT-fs (loop2): Directory bread(block 34) failed [ 438.000159][T14655] FAT-fs (loop2): Directory bread(block 35) failed [ 438.059224][T14655] FAT-fs (loop2): Directory bread(block 36) failed [ 438.066608][T14655] FAT-fs (loop2): Directory bread(block 37) failed [ 438.083597][T14655] FAT-fs (loop2): Directory bread(block 38) failed [ 438.100595][T14655] FAT-fs (loop2): Directory bread(block 39) failed [ 438.107460][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3256'. [ 438.147851][T14655] FAT-fs (loop2): Directory bread(block 40) failed [ 438.167611][T14655] FAT-fs (loop2): Directory bread(block 41) failed [ 438.299358][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 438.387208][T14655] syz.2.3254: attempt to access beyond end of device [ 438.387208][T14655] loop2: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 438.488303][T14655] syz.2.3254: attempt to access beyond end of device [ 438.488303][T14655] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 438.536229][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 438.536245][ T27] audit: type=1800 audit(1750255921.582:280): pid=14655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3254" name="file1" dev="loop2" ino=1048710 res=0 errno=0 [ 438.547398][T14655] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 438.589143][T14655] FAT-fs (loop2): Filesystem has been set read-only [ 438.713907][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 438.794464][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 438.873533][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 438.955170][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.508033][T14699] loop2: detected capacity change from 0 to 4096 [ 439.583648][T14706] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 440.031157][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3278'. [ 440.070224][T14714] loop5: detected capacity change from 0 to 512 [ 440.116312][T14714] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 440.167060][T14714] EXT4-fs (loop5): external journal has bad superblock [ 440.310920][T14721] loop4: detected capacity change from 0 to 1024 [ 440.660114][T14728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.689345][T14728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.707714][T14728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.721054][T14728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.817662][T14735] loop4: detected capacity change from 0 to 512 [ 440.851300][T14735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 440.880230][T14735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 440.892406][T14735] System zones: 1-12 [ 440.897619][T14735] EXT4-fs (loop4): 1 truncate cleaned up [ 440.925435][T14735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.935129][T14717] loop1: detected capacity change from 0 to 32768 [ 440.945656][T14717] XFS: attr2 mount option is deprecated. [ 440.963649][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.972024][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.003444][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 441.032995][T14717] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.057520][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.175385][T14717] XFS (loop1): Ending clean mount [ 441.194404][T14717] XFS (loop1): Quotacheck needed: Please wait. [ 441.241858][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 441.243249][T14717] XFS (loop1): Quotacheck: Done. [ 441.250766][ T23] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 441.269436][ T23] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.303553][ T23] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.327243][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.340151][ T23] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 441.351786][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.360828][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.376547][ T23] usb 6-1: config 0 descriptor?? [ 441.817412][ T23] zeroplus 0003:0C12:0030.003D: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 441.829017][ T23] zeroplus 0003:0C12:0030.003D: no inputs found [ 442.032434][ T23] usb 6-1: USB disconnect, device number 4 [ 442.643603][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 442.709667][T14751] loop4: detected capacity change from 0 to 512 [ 442.718164][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 442.718176][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 442.793754][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.864179][T14751] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3288: iget: bad extended attribute block 1 [ 442.936417][T14751] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3288: couldn't read orphan inode 15 (err -117) [ 442.979855][T14751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.228038][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.413765][T14770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.543558][T14770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.573568][T14770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 443.580116][T14770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.737254][T14783] loop1: detected capacity change from 0 to 1024 [ 443.838568][T14783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.913013][T14784] loop2: detected capacity change from 0 to 4096 [ 444.020034][T14783] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 444.072611][T14783] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 444.092062][T14783] EXT4-fs (loop1): This should not happen!! Data will be lost [ 444.092062][T14783] [ 444.128026][T14783] EXT4-fs (loop1): Total free blocks count 0 [ 444.146714][T14783] EXT4-fs (loop1): Free/Dirty block details [ 444.168330][T14783] EXT4-fs (loop1): free_blocks=68451041280 [ 444.202907][T14783] EXT4-fs (loop1): dirty_blocks=16 [ 444.230438][T14783] EXT4-fs (loop1): Block reservation details [ 444.245535][T14783] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 444.315772][T14796] loop4: detected capacity change from 0 to 1024 [ 444.359994][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.381636][T14796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.599867][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.700252][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3305'. [ 444.803736][T14811] loop1: detected capacity change from 0 to 2048 [ 444.872890][T14811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.900830][T14818] loop5: detected capacity change from 0 to 256 [ 444.923163][T14811] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.3307: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 444.958386][T14811] EXT4-fs (loop1): Remounting filesystem read-only [ 444.963013][T14818] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 445.037769][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.283659][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 445.300969][T14826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3311'. [ 445.450905][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 445.593682][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 445.599931][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 445.607156][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 445.715784][ T8015] udevd[8015]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 445.810662][ T8015] udevd[8015]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 446.220481][T14828] loop5: detected capacity change from 0 to 32768 [ 446.264152][T14828] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 446.321926][T14828] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 446.424884][T14828] [ 446.427280][T14828] ====================================================== [ 446.434441][T14828] WARNING: possible circular locking dependency detected [ 446.441520][T14828] 6.6.93-syzkaller #0 Not tainted [ 446.446563][T14828] ------------------------------------------------------ [ 446.453604][T14828] syz.5.3313/14828 is trying to acquire lock: [ 446.460019][T14828] ffff88805eb014a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 446.471729][T14828] [ 446.471729][T14828] but task is already holding lock: [ 446.479096][T14828] ffff88805eb01538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 446.489896][T14828] [ 446.489896][T14828] which lock already depends on the new lock. [ 446.489896][T14828] [ 446.500331][T14828] [ 446.500331][T14828] the existing dependency chain (in reverse order) is: [ 446.509352][T14828] [ 446.509352][T14828] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 446.517193][T14828] down_read+0x46/0x2e0 [ 446.521887][T14828] ocfs2_init_acl+0x2fa/0x720 [ 446.527077][T14828] ocfs2_mknod+0x12e5/0x20f0 [ 446.532211][T14828] ocfs2_create+0x196/0x410 [ 446.537327][T14828] path_openat+0x1277/0x3190 [ 446.542516][T14828] do_filp_open+0x1c5/0x3d0 [ 446.547546][T14828] do_sys_openat2+0x12c/0x1c0 [ 446.552861][T14828] __x64_sys_openat+0x139/0x160 [ 446.558269][T14828] do_syscall_64+0x55/0xb0 [ 446.563213][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.569759][T14828] [ 446.569759][T14828] -> #3 (jbd2_handle){++++}-{0:0}: [ 446.577163][T14828] start_this_handle+0x1e9d/0x20c0 [ 446.582810][T14828] jbd2__journal_start+0x2bb/0x5b0 [ 446.588713][T14828] jbd2_journal_start+0x2a/0x40 [ 446.594107][T14828] ocfs2_start_trans+0x376/0x6c0 [ 446.599592][T14828] ocfs2_mknod+0xe47/0x20f0 [ 446.604622][T14828] ocfs2_create+0x196/0x410 [ 446.609652][T14828] path_openat+0x1277/0x3190 [ 446.614767][T14828] do_filp_open+0x1c5/0x3d0 [ 446.619775][T14828] do_sys_openat2+0x12c/0x1c0 [ 446.625160][T14828] __x64_sys_openat+0x139/0x160 [ 446.630528][T14828] do_syscall_64+0x55/0xb0 [ 446.635557][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.641974][T14828] [ 446.641974][T14828] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 446.650569][T14828] down_read+0x46/0x2e0 [ 446.655249][T14828] ocfs2_start_trans+0x36a/0x6c0 [ 446.660699][T14828] ocfs2_mknod+0xe47/0x20f0 [ 446.665859][T14828] ocfs2_create+0x196/0x410 [ 446.670872][T14828] path_openat+0x1277/0x3190 [ 446.675970][T14828] do_filp_open+0x1c5/0x3d0 [ 446.680989][T14828] do_sys_openat2+0x12c/0x1c0 [ 446.686205][T14828] __x64_sys_openat+0x139/0x160 [ 446.691568][T14828] do_syscall_64+0x55/0xb0 [ 446.696498][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.702912][T14828] [ 446.702912][T14828] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 446.710470][T14828] ocfs2_start_trans+0x26b/0x6c0 [ 446.715922][T14828] ocfs2_truncate_file+0x611/0x13a0 [ 446.721719][T14828] ocfs2_setattr+0x150d/0x1b20 [ 446.726990][T14828] notify_change+0xb0d/0xe10 [ 446.732090][T14828] do_truncate+0x19b/0x220 [ 446.737119][T14828] path_openat+0x298c/0x3190 [ 446.742221][T14828] do_filp_open+0x1c5/0x3d0 [ 446.747321][T14828] do_sys_openat2+0x12c/0x1c0 [ 446.752516][T14828] __x64_sys_creat+0x90/0xb0 [ 446.757615][T14828] do_syscall_64+0x55/0xb0 [ 446.762629][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.769150][T14828] [ 446.769150][T14828] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 446.777946][T14828] __lock_acquire+0x2ddb/0x7c80 [ 446.783336][T14828] lock_acquire+0x197/0x410 [ 446.788354][T14828] down_write+0x97/0x1f0 [ 446.793483][T14828] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 446.800109][T14828] ocfs2_truncate_file+0xd84/0x13a0 [ 446.805836][T14828] ocfs2_setattr+0x150d/0x1b20 [ 446.811114][T14828] notify_change+0xb0d/0xe10 [ 446.816322][T14828] do_truncate+0x19b/0x220 [ 446.821254][T14828] path_openat+0x298c/0x3190 [ 446.826377][T14828] do_filp_open+0x1c5/0x3d0 [ 446.831496][T14828] do_sys_openat2+0x12c/0x1c0 [ 446.836707][T14828] __x64_sys_creat+0x90/0xb0 [ 446.841952][T14828] do_syscall_64+0x55/0xb0 [ 446.846928][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.853352][T14828] [ 446.853352][T14828] other info that might help us debug this: [ 446.853352][T14828] [ 446.864842][T14828] Chain exists of: [ 446.864842][T14828] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 446.864842][T14828] [ 446.879284][T14828] Possible unsafe locking scenario: [ 446.879284][T14828] [ 446.886827][T14828] CPU0 CPU1 [ 446.892213][T14828] ---- ---- [ 446.897578][T14828] lock(&oi->ip_xattr_sem); [ 446.902192][T14828] lock(jbd2_handle); [ 446.909033][T14828] lock(&oi->ip_xattr_sem); [ 446.916235][T14828] lock(&ocfs2_file_ip_alloc_sem_key); [ 446.921768][T14828] [ 446.921768][T14828] *** DEADLOCK *** [ 446.921768][T14828] [ 446.929979][T14828] 3 locks held by syz.5.3313/14828: [ 446.935159][T14828] #0: ffff8880257aa418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 446.944380][T14828] #1: ffff88805eb01818 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 446.954906][T14828] #2: ffff88805eb01538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 446.965946][T14828] [ 446.965946][T14828] stack backtrace: [ 446.971820][T14828] CPU: 0 PID: 14828 Comm: syz.5.3313 Not tainted 6.6.93-syzkaller #0 [ 446.979867][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.989910][T14828] Call Trace: [ 446.993188][T14828] [ 446.996115][T14828] dump_stack_lvl+0x16c/0x230 [ 447.000975][T14828] ? load_image+0x3b0/0x3b0 [ 447.005470][T14828] ? show_regs_print_info+0x20/0x20 [ 447.010663][T14828] ? print_circular_bug+0x12b/0x1a0 [ 447.015862][T14828] check_noncircular+0x2bd/0x3c0 [ 447.020792][T14828] ? print_deadlock_bug+0x5d0/0x5d0 [ 447.026012][T14828] ? lockdep_lock+0xe0/0x220 [ 447.030587][T14828] ? lockdep_unlock+0x137/0x2d0 [ 447.035430][T14828] ? _find_first_zero_bit+0xd3/0x100 [ 447.040707][T14828] __lock_acquire+0x2ddb/0x7c80 [ 447.045650][T14828] ? verify_lock_unused+0x140/0x140 [ 447.050843][T14828] lock_acquire+0x197/0x410 [ 447.055330][T14828] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 447.061476][T14828] ? __might_sleep+0xe0/0xe0 [ 447.066054][T14828] ? read_lock_is_recursive+0x20/0x20 [ 447.071418][T14828] down_write+0x97/0x1f0 [ 447.075662][T14828] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 447.082008][T14828] ? down_read_killable+0x340/0x340 [ 447.087288][T14828] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 447.092649][T14828] ? __lock_acquire+0x7c80/0x7c80 [ 447.097688][T14828] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 447.103759][T14828] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 447.110087][T14828] ? up_write+0x1c3/0x410 [ 447.114590][T14828] ocfs2_truncate_file+0xd84/0x13a0 [ 447.120073][T14828] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 447.125871][T14828] ? ocfs2_simple_size_update+0x470/0x470 [ 447.131579][T14828] ? do_raw_spin_unlock+0x121/0x230 [ 447.136768][T14828] ? _raw_spin_unlock+0x28/0x40 [ 447.141708][T14828] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 447.147524][T14828] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 447.153140][T14828] ? ocfs2_rw_lock+0x138/0x240 [ 447.157912][T14828] ? dquot_initialize+0x20/0x20 [ 447.162764][T14828] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 447.168836][T14828] ? setattr_prepare+0x1e6/0xac0 [ 447.173787][T14828] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 447.180399][T14828] ocfs2_setattr+0x150d/0x1b20 [ 447.185171][T14828] ? ocfs2_extend_allocation+0x1760/0x1760 [ 447.190967][T14828] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 447.196851][T14828] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 447.203096][T14828] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 447.208981][T14828] ? current_time+0x18e/0x270 [ 447.213666][T14828] ? inode_set_ctime_current+0x2d0/0x2d0 [ 447.219319][T14828] ? evm_inode_setattr+0x94/0x6a0 [ 447.224334][T14828] ? bpf_lsm_inode_setattr+0x9/0x10 [ 447.229529][T14828] ? try_break_deleg+0x79/0x120 [ 447.234460][T14828] ? ocfs2_extend_allocation+0x1760/0x1760 [ 447.240266][T14828] notify_change+0xb0d/0xe10 [ 447.244855][T14828] do_truncate+0x19b/0x220 [ 447.249264][T14828] ? put_page_bootmem+0x2c0/0x2c0 [ 447.254287][T14828] ? apparmor_file_truncate+0x23f/0x2d0 [ 447.259823][T14828] ? ima_bprm_check+0x1f0/0x1f0 [ 447.264666][T14828] path_openat+0x298c/0x3190 [ 447.269256][T14828] ? do_filp_open+0x3d0/0x3d0 [ 447.273925][T14828] do_filp_open+0x1c5/0x3d0 [ 447.278432][T14828] ? vfs_tmpfile+0x490/0x490 [ 447.283262][T14828] ? _raw_spin_unlock+0x28/0x40 [ 447.288125][T14828] ? alloc_fd+0x58f/0x630 [ 447.292464][T14828] do_sys_openat2+0x12c/0x1c0 [ 447.297140][T14828] ? do_sys_open+0xe0/0xe0 [ 447.301634][T14828] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 447.307700][T14828] ? lock_chain_count+0x20/0x20 [ 447.312561][T14828] __x64_sys_creat+0x90/0xb0 [ 447.317155][T14828] do_syscall_64+0x55/0xb0 [ 447.321568][T14828] ? clear_bhb_loop+0x40/0x90 [ 447.326235][T14828] ? clear_bhb_loop+0x40/0x90 [ 447.330925][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.336957][T14828] RIP: 0033:0x7fb7d918e929 [ 447.341379][T14828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.361000][T14828] RSP: 002b:00007fb7da043038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 447.369411][T14828] RAX: ffffffffffffffda RBX: 00007fb7d93b5fa0 RCX: 00007fb7d918e929 [ 447.377376][T14828] RDX: 0000000000000000 RSI: 0000000000000083 RDI: 0000200000000100 [ 447.385334][T14828] RBP: 00007fb7d9210b39 R08: 0000000000000000 R09: 0000000000000000 [ 447.393649][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.401607][T14828] R13: 0000000000000000 R14: 00007fb7d93b5fa0 R15: 00007ffcc77a93e8 [ 447.409684][T14828] [ 447.590931][T13511] ocfs2: Unmounting device (7,5) on (node local)