last executing test programs: 1m21.045737182s ago: executing program 3 (id=2192): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m20.809788535s ago: executing program 3 (id=2193): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1000840, &(0x7f0000001180)={[{@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x353, &(0x7f00000002c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 1m19.948332538s ago: executing program 3 (id=2201): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2202, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0xc, 0x6, @SEQ_NOTEON=@note=0x6, 0x7, 0x4, 0x69}) 1m19.606237924s ago: executing program 3 (id=2206): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m19.058214633s ago: executing program 3 (id=2214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 1m18.406585692s ago: executing program 3 (id=2226): setreuid(0xee00, 0x0) setpriority(0x1, 0x1, 0x860f418) 1m18.042351938s ago: executing program 32 (id=2226): setreuid(0xee00, 0x0) setpriority(0x1, 0x1, 0x860f418) 1m15.135839013s ago: executing program 0 (id=2252): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1m14.04416802s ago: executing program 0 (id=2263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) 1m13.840374672s ago: executing program 0 (id=2267): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m11.243013532s ago: executing program 0 (id=2281): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m10.777347809s ago: executing program 0 (id=2286): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m10.06327491s ago: executing program 0 (id=2295): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1m9.501204759s ago: executing program 33 (id=2295): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.407278093s ago: executing program 4 (id=3093): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xfffffffd}, 0x80, 0x0}, 0x0) 2.059953098s ago: executing program 4 (id=3096): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 1.882748171s ago: executing program 4 (id=3101): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4d) 1.706892424s ago: executing program 4 (id=3104): r0 = socket(0x22, 0x2, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000000c0)) 1.524177427s ago: executing program 4 (id=3108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x4, 0x400}, [@RTA_PRIORITY={0x8, 0x1e, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x976fcf97e101ad0b, 0x6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20044050) 1.374595839s ago: executing program 2 (id=3112): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000001c0)={0x18}) 1.368823519s ago: executing program 4 (id=3113): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) 1.32000876s ago: executing program 5 (id=3114): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_getnexthop={0x20, 0x6a, 0xe0d, 0x70bd28, 0x7fff, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.241048241s ago: executing program 1 (id=3115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.202039732s ago: executing program 2 (id=3116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="44010000210001"], 0x144}}, 0x0) 1.110912923s ago: executing program 5 (id=3117): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0xfc3a, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1409, 0x4, 0x70bd25, 0x1000}, 0x10}}, 0x20008000) 1.060737564s ago: executing program 1 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.050203244s ago: executing program 2 (id=3119): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.008264335s ago: executing program 5 (id=3120): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 869.534287ms ago: executing program 5 (id=3121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 745.124429ms ago: executing program 2 (id=3122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) 638.95485ms ago: executing program 1 (id=3123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 547.850892ms ago: executing program 5 (id=3124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 523.792113ms ago: executing program 1 (id=3125): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0) 375.844185ms ago: executing program 2 (id=3126): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) 347.053945ms ago: executing program 5 (id=3127): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000380)={[{@allow_utime={'allow_utime', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x2}}, {}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x491a}}, {@fmask={'fmask', 0x3d, 0x5}}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") mount$bind(0x0, &(0x7f0000000a00)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x80000, 0x0) 193.434368ms ago: executing program 1 (id=3128): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) 124.420759ms ago: executing program 2 (id=3129): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x2000, 0x0) pread64(r0, 0x0, 0x0, 0x9) 0s ago: executing program 1 (id=3130): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@gqnoenforce}, {@noquota}, {@discard}, {@inode64}, {@gqnoenforce}]}, 0x1, 0xb8e6, &(0x7f0000017140)="$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") rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 193.473400][ T27] audit: type=1326 audit(1750346330.911:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 193.495741][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.842489][T10150] netlink: 'syz.0.1953': attribute type 5 has an invalid length. [ 193.860546][T10150] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1953'. [ 193.875334][T10153] loop3: detected capacity change from 0 to 256 [ 194.041578][T10153] FAT-fs (loop3): Directory bread(block 64) failed [ 194.060525][T10153] FAT-fs (loop3): Directory bread(block 65) failed [ 194.092424][T10153] FAT-fs (loop3): Directory bread(block 66) failed [ 194.098985][T10153] FAT-fs (loop3): Directory bread(block 67) failed [ 194.119857][T10153] FAT-fs (loop3): Directory bread(block 68) failed [ 194.133685][T10153] FAT-fs (loop3): Directory bread(block 69) failed [ 194.140319][T10153] FAT-fs (loop3): Directory bread(block 70) failed [ 194.150528][T10153] FAT-fs (loop3): Directory bread(block 71) failed [ 194.158593][T10153] FAT-fs (loop3): Directory bread(block 72) failed [ 194.192344][T10153] FAT-fs (loop3): Directory bread(block 73) failed [ 194.380058][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391602][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.426993][T10146] loop1: detected capacity change from 0 to 32768 [ 194.513321][T10146] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.682791][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 194.804776][T10180] loop2: detected capacity change from 0 to 64 [ 194.973652][T10188] x_tables: unsorted underflow at hook 3 [ 195.078315][T10190] loop3: detected capacity change from 0 to 256 [ 195.107390][T10190] exfat: Deprecated parameter 'namecase' [ 195.166262][T10190] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 195.201443][T10196] loop0: detected capacity change from 0 to 128 [ 195.374562][ T27] audit: type=1326 audit(1750346333.051:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 195.396913][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.492617][ T27] audit: type=1326 audit(1750346333.051:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 195.514962][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.543764][T10207] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 195.571935][T10207] syz.2.1981: attempt to access beyond end of device [ 195.571935][T10207] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 195.589817][ T27] audit: type=1326 audit(1750346333.051:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 195.612096][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.669905][ T27] audit: type=1326 audit(1750346333.051:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 195.735723][T10214] loop0: detected capacity change from 0 to 512 [ 195.755765][T10214] EXT4-fs: Ignoring removed i_version option [ 195.776041][T10214] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 195.811099][T10214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 195.825329][T10216] loop2: detected capacity change from 0 to 256 [ 195.826374][T10214] System zones: 1-12 [ 195.837153][T10214] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.848178][T10214] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1984: invalid indirect mapped block 12 (level 1) [ 195.870537][T10214] EXT4-fs (loop0): Remounting filesystem read-only [ 195.877795][T10214] EXT4-fs (loop0): 1 truncate cleaned up [ 195.885122][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 195.947874][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 196.052883][T10216] FAT-fs (loop2): Directory bread(block 64) failed [ 196.066646][T10216] FAT-fs (loop2): Directory bread(block 65) failed [ 196.093699][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 196.095070][T10216] FAT-fs (loop2): Directory bread(block 66) failed [ 196.109362][T10216] FAT-fs (loop2): Directory bread(block 67) failed [ 196.120352][T10216] FAT-fs (loop2): Directory bread(block 68) failed [ 196.127122][T10216] FAT-fs (loop2): Directory bread(block 69) failed [ 196.138575][T10216] FAT-fs (loop2): Directory bread(block 70) failed [ 196.145240][T10216] FAT-fs (loop2): Directory bread(block 71) failed [ 196.159573][T10216] FAT-fs (loop2): Directory bread(block 72) failed [ 196.176457][T10216] FAT-fs (loop2): Directory bread(block 73) failed [ 196.198524][T10221] loop3: detected capacity change from 0 to 4096 [ 196.353476][ T27] audit: type=1800 audit(1750346334.031:132): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1985" name="file2" dev="loop2" ino=1048626 res=0 errno=0 [ 196.492175][T10225] loop0: detected capacity change from 0 to 64 [ 196.560270][T10212] loop1: detected capacity change from 0 to 32768 [ 196.575827][T10227] loop3: detected capacity change from 0 to 256 [ 196.593582][T10227] exfat: Deprecated parameter 'utf8' [ 196.598991][T10227] exfat: Deprecated parameter 'namecase' [ 196.605737][T10212] XFS: ikeep mount option is deprecated. [ 196.629721][T10227] exfat: Deprecated parameter 'utf8' [ 196.669826][T10212] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.710176][T10227] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 196.791381][T10212] XFS (loop1): Ending clean mount [ 196.819607][T10212] XFS (loop1): Quotacheck needed: Please wait. [ 196.970178][T10212] XFS (loop1): Quotacheck: Done. [ 197.117178][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.058714][T10253] loop3: detected capacity change from 0 to 32768 [ 198.114308][T10253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2000 (10253) [ 198.183855][T10253] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.200085][T10277] loop2: detected capacity change from 0 to 64 [ 198.222378][T10253] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.245522][T10253] BTRFS info (device loop3): disabling free space tree [ 198.252783][T10253] BTRFS info (device loop3): force zlib compression, level 3 [ 198.263615][T10253] BTRFS info (device loop3): enabling auto defrag [ 198.277339][T10253] BTRFS info (device loop3): enabling disk space caching [ 198.292286][T10253] BTRFS info (device loop3): metadata ratio 257 [ 198.322313][T10253] BTRFS error (device loop3): cannot disable free space tree [ 198.345708][T10253] BTRFS error (device loop3): open_ctree failed: -22 [ 198.577915][T10269] loop0: detected capacity change from 0 to 32768 [ 198.590693][T10269] XFS: ikeep mount option is deprecated. [ 198.595668][T10280] loop1: detected capacity change from 0 to 4096 [ 198.679910][T10269] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.721556][T10280] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 198.843884][T10269] XFS (loop0): Ending clean mount [ 198.897981][T10269] XFS (loop0): Quotacheck needed: Please wait. [ 199.079944][T10269] XFS (loop0): Quotacheck: Done. [ 199.268207][T10284] loop3: detected capacity change from 0 to 32768 [ 199.269222][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.365000][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'. [ 199.430362][T10284] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 199.630899][T10284] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #419009 [ 199.682447][T10284] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 199.723099][T10284] OCFS2: Returning error to the calling process. [ 199.729485][T10284] (syz.3.2013,10284,1):ocfs2_search_chain:1761 ERROR: status = -5 [ 199.803199][T10284] (syz.3.2013,10284,0):ocfs2_search_chain:1871 ERROR: status = -5 [ 199.811112][T10284] (syz.3.2013,10284,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 199.840088][T10284] (syz.3.2013,10284,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 199.872627][T10284] (syz.3.2013,10284,0):ocfs2_claim_new_inode:2216 ERROR: status = -5 [ 199.891020][T10284] (syz.3.2013,10284,0):ocfs2_claim_new_inode:2231 ERROR: status = -5 [ 199.921374][T10284] (syz.3.2013,10284,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 199.941595][T10284] (syz.3.2013,10284,0):ocfs2_mknod:385 ERROR: status = -5 [ 199.951878][T10284] (syz.3.2013,10284,0):ocfs2_mknod:502 ERROR: status = -5 [ 199.972110][T10284] (syz.3.2013,10284,0):ocfs2_create:676 ERROR: status = -5 [ 200.026012][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 200.072553][ T5770] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.252375][ T5770] usb 2-1: Using ep0 maxpacket: 8 [ 200.264123][ T5770] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.285414][ T5770] usb 2-1: config 0 has no interfaces? [ 200.307918][ T5770] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 200.327295][ T5770] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 200.356143][ T5770] usb 2-1: Product: syz [ 200.360352][ T5770] usb 2-1: Manufacturer: syz [ 200.385450][ T5770] usb 2-1: SerialNumber: syz [ 200.396651][ T5770] usb 2-1: config 0 descriptor?? [ 200.660608][T10331] loop0: detected capacity change from 0 to 1024 [ 200.961651][T10339] loop3: detected capacity change from 0 to 512 [ 200.990694][T10321] loop2: detected capacity change from 0 to 32768 [ 200.998463][T10321] XFS: ikeep mount option is deprecated. [ 201.017608][T10342] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 201.030631][T10342] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2036'. [ 201.040049][T10321] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.046913][T10342] team0: entered promiscuous mode [ 201.059481][T10339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.078091][T10342] C: entered promiscuous mode [ 201.083722][T10342] team_slave_1: entered promiscuous mode [ 201.090095][T10342] bridge0: port 4(team0) entered blocking state [ 201.103022][T10342] bridge0: port 4(team0) entered disabled state [ 201.105242][T10339] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.110181][T10342] team0: entered allmulticast mode [ 201.173661][ T5770] usb 2-1: USB disconnect, device number 6 [ 201.202413][T10342] C: entered allmulticast mode [ 201.211145][T10321] XFS (loop2): Ending clean mount [ 201.216156][T10342] team_slave_1: entered allmulticast mode [ 201.231464][T10342] bridge0: port 4(team0) entered blocking state [ 201.237965][T10342] bridge0: port 4(team0) entered forwarding state [ 201.266251][T10321] XFS (loop2): Quotacheck needed: Please wait. [ 201.323656][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.330885][T10321] XFS (loop2): Quotacheck: Done. [ 201.390360][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.855534][ T27] audit: type=1326 audit(1750346339.531:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 201.907035][ T27] audit: type=1326 audit(1750346339.531:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 201.983042][ T27] audit: type=1326 audit(1750346339.561:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 202.062116][ T27] audit: type=1326 audit(1750346339.561:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 202.127075][ T27] audit: type=1326 audit(1750346339.561:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 202.825105][ T27] audit: type=1326 audit(1750346340.501:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 202.882459][ T27] audit: type=1326 audit(1750346340.531:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 202.963253][ T27] audit: type=1326 audit(1750346340.531:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 203.002641][ T27] audit: type=1326 audit(1750346340.531:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 203.050123][ T27] audit: type=1326 audit(1750346340.531:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 203.207400][T10423] loop1: detected capacity change from 0 to 256 [ 203.291514][T10423] FAT-fs (loop1): Directory bread(block 64) failed [ 203.329225][T10423] FAT-fs (loop1): Directory bread(block 65) failed [ 203.353799][T10423] FAT-fs (loop1): Directory bread(block 66) failed [ 203.373510][T10423] FAT-fs (loop1): Directory bread(block 67) failed [ 203.402680][T10423] FAT-fs (loop1): Directory bread(block 68) failed [ 203.409252][T10423] FAT-fs (loop1): Directory bread(block 69) failed [ 203.444518][T10423] FAT-fs (loop1): Directory bread(block 70) failed [ 203.452697][T10423] FAT-fs (loop1): Directory bread(block 71) failed [ 203.471212][T10423] FAT-fs (loop1): Directory bread(block 72) failed [ 203.480170][T10410] loop3: detected capacity change from 0 to 32768 [ 203.486711][T10423] FAT-fs (loop1): Directory bread(block 73) failed [ 203.526623][T10412] loop2: detected capacity change from 0 to 32768 [ 203.602421][T10412] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 203.631588][T10410] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 203.672576][T10412] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.753084][T10412] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #419009 [ 203.786112][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 203.801392][T10412] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 203.852475][T10412] OCFS2: Returning error to the calling process. [ 203.868814][T10412] (syz.2.2066,10412,0):ocfs2_search_chain:1761 ERROR: status = -5 [ 203.890050][T10412] (syz.2.2066,10412,0):ocfs2_search_chain:1871 ERROR: status = -5 [ 203.933241][T10412] (syz.2.2066,10412,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 203.941743][T10412] (syz.2.2066,10412,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 203.985778][T10412] (syz.2.2066,10412,0):ocfs2_claim_new_inode:2216 ERROR: status = -5 [ 204.031137][T10412] (syz.2.2066,10412,0):ocfs2_claim_new_inode:2231 ERROR: status = -5 [ 204.039943][T10412] (syz.2.2066,10412,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 204.080168][T10412] (syz.2.2066,10412,0):ocfs2_mknod:385 ERROR: status = -5 [ 204.111956][T10412] (syz.2.2066,10412,0):ocfs2_mknod:502 ERROR: status = -5 [ 204.132377][T10412] (syz.2.2066,10412,0):ocfs2_create:676 ERROR: status = -5 [ 204.152849][T10446] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2079'. [ 204.281583][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 204.467430][T10452] ALSA: mixer_oss: invalid OSS volume '¸' [ 204.635930][T10458] loop3: detected capacity change from 0 to 2048 [ 204.678135][T10458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.699086][T10462] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.761302][T10466] loop1: detected capacity change from 0 to 64 [ 205.149530][T10479] loop3: detected capacity change from 0 to 512 [ 205.197209][T10479] EXT4-fs: Ignoring removed nobh option [ 205.224999][T10479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.987137][T10510] loop2: detected capacity change from 0 to 512 [ 206.028238][T10510] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.045345][T10510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.083804][T10510] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.112417][T10510] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.154590][T10494] loop1: detected capacity change from 0 to 32768 [ 206.159231][T10510] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.2110: Allocating blocks 41-42 which overlap fs metadata [ 206.254048][T10510] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.2110: Allocating blocks 41-42 which overlap fs metadata [ 206.272624][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.367973][T10510] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2110: Failed to acquire dquot type 1 [ 206.396878][T10510] EXT4-fs error (device loop2): mb_free_blocks:1943: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 206.426552][T10510] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #12: comm syz.2.2110: corrupted inode contents [ 206.443778][T10510] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #12: comm syz.2.2110: mark_inode_dirty error [ 206.468925][T10510] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #12: comm syz.2.2110: corrupted inode contents [ 206.492594][T10510] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.2110: mark_inode_dirty error [ 206.551583][T10510] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #12: comm syz.2.2110: corrupted inode contents [ 206.600692][T10510] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 206.648257][T10510] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #12: comm syz.2.2110: corrupted inode contents [ 206.699875][T10510] EXT4-fs error (device loop2): ext4_truncate:4283: inode #12: comm syz.2.2110: mark_inode_dirty error [ 206.720623][T10510] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 206.752384][T10510] EXT4-fs (loop2): 1 truncate cleaned up [ 206.759352][T10510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.817563][T10510] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2110: Failed to acquire dquot type 1 [ 206.946711][T10536] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2122'. [ 206.956650][T10538] loop1: detected capacity change from 0 to 512 [ 206.958666][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.008165][T10538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 207.052724][T10538] System zones: 1-12 [ 207.057085][T10538] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2123: Directory hole found for htree index block 0 [ 207.103927][T10538] EXT4-fs (loop1): Remounting filesystem read-only [ 207.112569][T10538] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 207.120905][T10538] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 207.174572][T10538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.225017][T10547] loop0: detected capacity change from 0 to 64 [ 207.293554][T10547] hfs: unable to locate alternate MDB [ 207.320227][T10547] hfs: continuing without an alternate MDB [ 207.366697][T10551] syz_tun: entered allmulticast mode [ 207.378037][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.594224][T10554] loop2: detected capacity change from 0 to 2048 [ 207.626887][T10554] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 207.669529][T10554] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 207.718881][T10554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.080857][T10576] loop3: detected capacity change from 0 to 512 [ 208.090494][T10576] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 208.090566][T10576] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 208.091795][T10576] EXT4-fs (loop3): 1 truncate cleaned up [ 208.093894][T10576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.147827][T10576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.375786][T10585] xt_hashlimit: max too large, truncated to 1048576 [ 208.545223][T10593] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 208.717655][T10597] loop2: detected capacity change from 0 to 256 [ 208.787615][T10597] FAT-fs (loop2): Directory bread(block 64) failed [ 208.787652][T10597] FAT-fs (loop2): Directory bread(block 65) failed [ 208.787751][T10597] FAT-fs (loop2): Directory bread(block 66) failed [ 208.787782][T10597] FAT-fs (loop2): Directory bread(block 67) failed [ 208.787870][T10597] FAT-fs (loop2): Directory bread(block 68) failed [ 208.787894][T10597] FAT-fs (loop2): Directory bread(block 69) failed [ 208.787980][T10597] FAT-fs (loop2): Directory bread(block 70) failed [ 208.788006][T10597] FAT-fs (loop2): Directory bread(block 71) failed [ 208.788090][T10597] FAT-fs (loop2): Directory bread(block 72) failed [ 208.788115][T10597] FAT-fs (loop2): Directory bread(block 73) failed [ 208.965832][T10601] loop1: detected capacity change from 0 to 512 [ 209.012073][T10601] EXT4-fs: Ignoring removed nobh option [ 209.042108][T10601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.145806][T10594] loop3: detected capacity change from 0 to 32768 [ 209.180421][T10594] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2150 (10594) [ 209.205360][T10594] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 209.205448][T10594] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.205481][T10594] BTRFS info (device loop3): force zlib compression, level 3 [ 209.205501][T10594] BTRFS info (device loop3): force clearing of disk cache [ 209.205519][T10594] BTRFS info (device loop3): setting nodatasum [ 209.205539][T10594] BTRFS info (device loop3): disabling free space tree [ 209.205557][T10594] BTRFS info (device loop3): enabling disk space caching [ 209.205572][T10594] BTRFS info (device loop3): disk space caching is enabled [ 209.349858][T10594] BTRFS info (device loop3): auto enabling async discard [ 209.350877][T10594] BTRFS info (device loop3): rebuilding free space tree [ 209.416657][T10594] BTRFS info (device loop3): disabling free space tree [ 209.416813][T10594] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.416867][T10594] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.649758][T10594] BTRFS info (device loop3): balance: start -susage=21474836484,drange=18446744073709550593..526336,limit=512..4 [ 209.650477][T10594] BTRFS info (device loop3): balance: ended with status: 0 [ 209.869399][T10627] x_tables: unsorted entry at hook 3 [ 209.885188][ T5766] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 209.969282][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 209.969296][ T27] audit: type=1800 audit(1750346347.641:144): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2153" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 210.029905][T10630] binder: 10629:10630 ioctl c018620c 200000000040 returned -1 [ 210.185348][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.444019][T10642] binder: 10640:10642 ioctl c018620c 200000000100 returned -1 [ 210.673990][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 210.771660][T10656] loop2: detected capacity change from 0 to 8 [ 211.002948][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'. [ 211.264804][T10669] loop2: detected capacity change from 0 to 4096 [ 211.300387][T10669] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 211.389688][T10669] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 211.401023][ T27] audit: type=1326 audit(1750346349.071:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 211.465327][ T27] audit: type=1326 audit(1750346349.071:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 211.521846][T10669] ntfs3: loop2: failed to convert "c46c" to iso8859-7 [ 211.542347][ T27] audit: type=1326 audit(1750346349.111:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 211.618444][ T27] audit: type=1326 audit(1750346349.111:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 211.700679][ T27] audit: type=1326 audit(1750346349.111:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10678 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 211.988443][T10674] loop0: detected capacity change from 0 to 32768 [ 212.001483][T10674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2180 (10674) [ 212.069883][T10674] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.096516][T10697] loop1: detected capacity change from 0 to 512 [ 212.103389][T10674] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 212.122502][T10674] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.137380][T10697] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.153643][T10674] BTRFS info (device loop0): trying to use backup root at mount time [ 212.178889][T10697] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 212.187916][T10674] BTRFS info (device loop0): enabling auto defrag [ 212.203137][T10674] BTRFS info (device loop0): turning on sync discard [ 212.232359][T10674] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.243886][T10697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 212.251920][T10697] System zones: 1-12 [ 212.269965][T10697] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.2191: corrupted in-inode xattr: e_value size too large [ 212.304132][T10674] BTRFS info (device loop0): trying to use backup root at mount time [ 212.336441][T10674] BTRFS info (device loop0): using free space tree [ 212.356236][T10697] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2191: couldn't read orphan inode 15 (err -117) [ 212.399799][T10697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.467592][T10695] loop2: detected capacity change from 0 to 32768 [ 212.621487][T10719] loop3: detected capacity change from 0 to 256 [ 212.672953][T10674] BTRFS warning (device loop0: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.692136][T10674] BTRFS info (device loop0: state M): trying to use backup root at mount time [ 212.712021][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.721088][T10674] BTRFS warning (device loop0: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.752382][T10674] BTRFS info (device loop0: state M): trying to use backup root at mount time [ 212.790066][T10719] FAT-fs (loop3): Directory bread(block 64) failed [ 212.832726][T10719] FAT-fs (loop3): Directory bread(block 65) failed [ 212.882432][T10719] FAT-fs (loop3): Directory bread(block 66) failed [ 212.889393][T10719] FAT-fs (loop3): Directory bread(block 67) failed [ 212.942720][T10719] FAT-fs (loop3): Directory bread(block 68) failed [ 212.949296][T10719] FAT-fs (loop3): Directory bread(block 69) failed [ 212.958548][T10723] loop1: detected capacity change from 0 to 64 [ 212.992042][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.002566][T10719] FAT-fs (loop3): Directory bread(block 70) failed [ 213.002600][T10719] FAT-fs (loop3): Directory bread(block 71) failed [ 213.002689][T10719] FAT-fs (loop3): Directory bread(block 72) failed [ 213.002712][T10719] FAT-fs (loop3): Directory bread(block 73) failed [ 213.657180][T10740] loop1: detected capacity change from 0 to 2048 [ 213.701013][T10740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.788507][T10745] loop3: detected capacity change from 0 to 1024 [ 213.801147][T10746] loop0: detected capacity change from 0 to 1024 [ 213.869669][T10745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.894139][T10746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.972819][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.336854][ T5766] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 214.356620][ T5766] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 214.445313][T10770] loop2: detected capacity change from 0 to 64 [ 214.776628][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.782647][T10778] loop1: detected capacity change from 0 to 1024 [ 215.003062][ T3435] hfsplus: b-tree write err: -5, ino 4 [ 215.015883][ T1084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.143743][ T1084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.227684][ T1084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.337643][ T1084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.348920][ T27] audit: type=1326 audit(1750346353.031:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.0.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba38e929 code=0x7ffc0000 [ 215.392665][ T27] audit: type=1326 audit(1750346353.031:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.0.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba38e929 code=0x7ffc0000 [ 215.435417][ T27] audit: type=1326 audit(1750346353.051:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.0.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f8bba38e929 code=0x7ffc0000 [ 215.479048][ T27] audit: type=1326 audit(1750346353.051:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.0.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba38e929 code=0x7ffc0000 [ 215.582678][ T27] audit: type=1326 audit(1750346353.051:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.0.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba38e929 code=0x7ffc0000 [ 215.899512][ T50] Bluetooth: hci1: unexpected event for opcode 0x080d [ 215.927780][T10808] loop1: detected capacity change from 0 to 764 [ 216.000076][T10808] Symlink component flag not implemented [ 216.041571][T10808] Symlink component flag not implemented (101) [ 216.081733][T10814] loop2: detected capacity change from 0 to 64 [ 216.104260][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.114178][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.128712][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.151959][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.161162][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.169371][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.629330][T10831] loop1: detected capacity change from 0 to 512 [ 216.645270][T10831] EXT4-fs: Ignoring removed orlov option [ 216.666435][T10831] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.689197][T10831] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.2243: inode has invalid extent depth: 7 [ 216.791433][T10831] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 216.843308][T10831] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.875290][T10831] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 216.904554][T10831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.013714][T10831] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.2243: 'file0' linked to parent dir [ 217.229960][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.412866][T10843] loop2: detected capacity change from 0 to 32768 [ 217.450025][T10843] JBD2: Ignoring recovery information on journal [ 217.484548][T10824] loop0: detected capacity change from 0 to 32768 [ 217.568858][T10843] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 217.613977][T10824] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.614474][T10854] loop1: detected capacity change from 0 to 4096 [ 217.810648][ T27] audit: type=1800 audit(1750346355.481:155): pid=10843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2247" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 217.844127][T10824] XFS (loop0): Ending clean mount [ 217.884215][T10824] XFS (loop0): Quotacheck needed: Please wait. [ 217.975685][T10824] XFS (loop0): Quotacheck: Done. [ 218.001168][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 218.178420][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.206214][ T50] Bluetooth: hci0: command tx timeout [ 218.288472][ T27] audit: type=1326 audit(1750346355.961:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 218.318234][T10813] chnl_net:caif_netlink_parms(): no params data found [ 218.419085][ T27] audit: type=1326 audit(1750346355.991:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 218.502890][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 218.516386][ T27] audit: type=1326 audit(1750346355.991:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 219.074307][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.085336][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.097866][T10813] bridge_slave_0: entered allmulticast mode [ 219.119384][T10813] bridge_slave_0: entered promiscuous mode [ 219.134535][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.141767][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.150280][T10813] bridge_slave_1: entered allmulticast mode [ 219.158112][T10813] bridge_slave_1: entered promiscuous mode [ 219.270036][ T1084] hsr_slave_0: left promiscuous mode [ 219.316802][ T1084] hsr_slave_1: left promiscuous mode [ 219.333109][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.340815][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.411568][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.432890][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.463080][ T1084] team0: left allmulticast mode [ 219.467992][ T1084] C: left allmulticast mode [ 219.484959][ T1084] team_slave_1: left allmulticast mode [ 219.490945][ T1084] dummy0: left allmulticast mode [ 219.502850][ T1084] bridge0: port 3(team0) entered disabled state [ 219.531468][ T1084] bridge_slave_1: left allmulticast mode [ 219.563261][ T1084] bridge_slave_1: left promiscuous mode [ 219.569279][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.576987][T10916] No such timeout policy "syz0" [ 219.589519][ T1084] bridge_slave_0: left allmulticast mode [ 219.597400][ T1084] bridge_slave_0: left promiscuous mode [ 219.607435][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.688071][ T1084] veth1_macvtap: left promiscuous mode [ 219.702915][ T1084] veth0_macvtap: left promiscuous mode [ 219.708594][ T1084] veth1_vlan: left promiscuous mode [ 219.722774][ T1084] veth0_vlan: left promiscuous mode [ 219.963307][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 219.972187][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 219.983112][ T5780] Bluetooth: hci1: hardware error 0x00 [ 220.066019][T10912] loop1: detected capacity change from 0 to 32768 [ 220.083818][T10912] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2265 (10912) [ 220.111968][T10912] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 220.174944][T10912] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 220.220027][T10912] BTRFS info (device loop1): force zlib compression, level 3 [ 220.234043][T10912] BTRFS info (device loop1): force clearing of disk cache [ 220.251398][T10912] BTRFS info (device loop1): setting nodatasum [ 220.261513][T10912] BTRFS info (device loop1): disabling free space tree [ 220.274990][T10912] BTRFS info (device loop1): enabling disk space caching [ 220.282737][ T50] Bluetooth: hci0: command tx timeout [ 220.310789][T10912] BTRFS info (device loop1): disk space caching is enabled [ 220.476448][T10912] BTRFS info (device loop1): auto enabling async discard [ 220.510878][T10912] BTRFS info (device loop1): rebuilding free space tree [ 220.531044][T10912] BTRFS info (device loop1): disabling free space tree [ 220.541570][T10912] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.551877][T10912] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.653203][T10912] BTRFS info (device loop1): balance: start -susage=21474836484,drange=18446744073709550593..526336,limit=512..4 [ 220.686999][T10912] BTRFS info (device loop1): balance: ended with status: 0 [ 220.752502][ T5757] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 220.791933][ T5765] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 220.956305][ T5757] usb 3-1: config 0 has no interfaces? [ 220.961843][ T5757] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 221.006470][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.050133][ T5757] usb 3-1: config 0 descriptor?? [ 221.213972][ T1084] team_slave_1 (unregistering): left promiscuous mode [ 221.226644][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 221.265763][ T1084] C (unregistering): left promiscuous mode [ 221.277873][ T1084] team0 (unregistering): Port device C removed [ 221.285849][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 221.294396][ T5757] usb 3-1: USB disconnect, device number 10 [ 221.333777][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.374419][ T1084] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 221.573731][ T1084] dummy0 (unregistering): left promiscuous mode [ 221.580612][ T1084] team0 (unregistering): Port device dummy0 removed [ 221.801752][ T1084] bond0 (unregistering): Released all slaves [ 221.942207][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2267'. [ 221.971527][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.993986][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.042509][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 222.083589][T10959] loop0: detected capacity change from 0 to 1024 [ 222.115883][T10813] team0: Port device team_slave_0 added [ 222.157237][T10813] team0: Port device team_slave_1 added [ 222.178541][T10959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.315881][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.344127][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.362458][ T5780] Bluetooth: hci0: command tx timeout [ 222.375637][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.422506][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.429481][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.528761][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.584778][T10976] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.604951][ T5767] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 222.654112][ T5767] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 222.788050][T10813] hsr_slave_0: entered promiscuous mode [ 222.811261][T10813] hsr_slave_1: entered promiscuous mode [ 222.826421][T10813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.834191][T10813] Cannot create hsr debugfs directory [ 223.090495][T10995] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 223.123616][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.445494][ T1084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.592587][ T1084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.724688][ T1084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.879605][ T1084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.987176][T10813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.039766][T10813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.041703][T10997] loop2: detected capacity change from 0 to 32768 [ 224.118001][T10813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.167970][T10813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.442852][ T5780] Bluetooth: hci0: command tx timeout [ 224.682939][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.696509][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.708309][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.722416][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.733369][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.743376][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.796629][T11000] syz.1.2294 (11000): drop_caches: 2 [ 224.900292][T10997] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.920024][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.143541][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 225.329329][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.501700][ T1084] bridge0: port 3(gretap0) entered disabled state [ 225.559743][ T1084] gretap0 (unregistering): left allmulticast mode [ 225.573829][ T1084] gretap0 (unregistering): left promiscuous mode [ 225.580283][ T1084] bridge0: port 3(gretap0) entered disabled state [ 225.601932][T11042] loop1: detected capacity change from 0 to 1024 [ 225.612188][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.619386][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.738987][ T11] hfsplus: b-tree write err: -5, ino 4 [ 225.773771][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.780931][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.968942][T11051] loop2: detected capacity change from 0 to 4096 [ 226.002086][ T1084] bond0: (slave wlan1): Releasing backup interface [ 226.131665][T11019] chnl_net:caif_netlink_parms(): no params data found [ 226.261570][T10813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.313917][T10813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.467073][T11063] $Hÿ: renamed from bond0 (while UP) [ 226.544614][T11063] $Hÿ: entered promiscuous mode [ 226.562327][T11063] bond_slave_0: entered promiscuous mode [ 226.579425][T11063] bond_slave_1: entered promiscuous mode [ 226.592657][T11063] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 226.719863][ T1084] hsr_slave_0: left promiscuous mode [ 226.739168][ T1084] hsr_slave_1: left promiscuous mode [ 226.751808][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.788704][T11077] loop2: detected capacity change from 0 to 512 [ 226.797990][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.820295][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.842430][ T50] Bluetooth: hci3: command tx timeout [ 226.848872][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.857474][ T1084] team0: left allmulticast mode [ 226.875335][ T1084] C: left allmulticast mode [ 226.879884][ T1084] team_slave_1: left allmulticast mode [ 226.908511][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 226.909716][T11077] __quota_error: 6 callbacks suppressed [ 226.909729][T11077] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 226.918055][ T1084] bridge0: port 4(team0) entered disabled state [ 226.957700][T11077] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 226.986705][T11077] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2312: Failed to acquire dquot type 1 [ 227.003051][ T1084] bridge_slave_1: left allmulticast mode [ 227.015138][ T1084] bridge_slave_1: left promiscuous mode [ 227.016923][T11077] EXT4-fs (loop2): 1 truncate cleaned up [ 227.020858][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.027715][T11077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.046457][T11077] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.090913][ T1084] bridge_slave_0: left allmulticast mode [ 227.091735][T11077] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 227.102594][ T1084] bridge_slave_0: left promiscuous mode [ 227.122517][T11077] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 227.132692][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.142363][T11077] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2312: Failed to acquire dquot type 1 [ 227.195165][ T1084] veth1_macvtap: left promiscuous mode [ 227.200749][ T1084] veth0_macvtap: left promiscuous mode [ 227.226183][ T1084] veth1_vlan: left allmulticast mode [ 227.231703][ T1084] veth1_vlan: left promiscuous mode [ 227.241949][ T1084] veth0_vlan: left promiscuous mode [ 227.254544][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.335299][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.532931][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 227.537769][ T1084] bond2 (unregistering): Released all slaves [ 227.557760][ T1084] bond1 (unregistering): Released all slaves [ 227.558617][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 227.598997][ T8] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 227.615011][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.625522][ T8] usb 2-1: Product: syz [ 227.629706][ T8] usb 2-1: Manufacturer: syz [ 227.651934][ T8] usb 2-1: SerialNumber: syz [ 227.673343][ T8] usb 2-1: config 0 descriptor?? [ 227.700033][ T8] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 227.946915][ T8] usb 2-1: USB disconnect, device number 7 [ 228.343448][ T1084] team_slave_1 (unregistering): left promiscuous mode [ 228.358950][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 228.399226][T11111] loop2: detected capacity change from 0 to 32768 [ 228.415405][ T1084] C (unregistering): left promiscuous mode [ 228.421533][T11111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2324 (11111) [ 228.436096][ T1084] team0 (unregistering): Port device C removed [ 228.459525][T11111] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.503571][T11111] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 228.537050][T11111] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.548945][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.580506][T11111] BTRFS info (device loop2): trying to use backup root at mount time [ 228.602340][T11111] BTRFS info (device loop2): enabling auto defrag [ 228.623797][T11111] BTRFS info (device loop2): turning on sync discard [ 228.630564][T11111] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.648756][T11111] BTRFS info (device loop2): trying to use backup root at mount time [ 228.657338][T11111] BTRFS info (device loop2): using free space tree [ 228.699686][ T1084] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 228.721675][T11125] loop1: detected capacity change from 0 to 164 [ 228.827417][T11125] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 228.898072][T11111] BTRFS warning (device loop2: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.923857][ T50] Bluetooth: hci3: command tx timeout [ 228.934726][T11111] BTRFS info (device loop2: state M): trying to use backup root at mount time [ 228.964611][T11111] BTRFS warning (device loop2: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.976134][T11111] BTRFS info (device loop2: state M): trying to use backup root at mount time [ 229.048489][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.785537][ T1084] bond0 (unregistering): Released all slaves [ 229.970011][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.992387][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.028982][T11019] bridge_slave_0: entered allmulticast mode [ 230.041127][T11019] bridge_slave_0: entered promiscuous mode [ 230.062174][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.092000][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.100031][T11019] bridge_slave_1: entered allmulticast mode [ 230.114038][T11019] bridge_slave_1: entered promiscuous mode [ 230.225976][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.279079][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.420625][T11019] team0: Port device team_slave_0 added [ 230.456811][T11019] team0: Port device team_slave_1 added [ 230.481166][T11164] loop1: detected capacity change from 0 to 64 [ 230.506672][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.639579][T11019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.663443][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.723344][T11019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.744491][T11019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.751459][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.803741][T11019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.977505][T11176] loop1: detected capacity change from 0 to 4096 [ 230.999606][T11176] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 231.009201][ T50] Bluetooth: hci3: command tx timeout [ 231.132613][T11019] hsr_slave_0: entered promiscuous mode [ 231.162518][T11019] hsr_slave_1: entered promiscuous mode [ 231.196365][T11019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.219146][T11019] Cannot create hsr debugfs directory [ 231.691943][T10813] veth0_vlan: entered promiscuous mode [ 231.729290][T10813] veth1_vlan: entered promiscuous mode [ 231.909494][T11019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.948322][T11019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.975577][T11019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.011224][T11019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.098149][T10813] veth0_macvtap: entered promiscuous mode [ 232.141285][T10813] veth1_macvtap: entered promiscuous mode [ 232.228675][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.254318][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.275590][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.294530][T11196] loop1: detected capacity change from 0 to 32768 [ 232.302345][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.330791][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.358583][T11196] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.395479][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.425481][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.436007][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.449063][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.463054][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.476527][T10813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.483542][T11196] XFS (loop1): Ending clean mount [ 232.485473][T10813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.499559][T10813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.512307][T10813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.555801][T11232] netlink: 'syz.2.2354': attribute type 6 has an invalid length. [ 232.644361][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.762167][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.821332][T11236] $Hÿ: renamed from bond0 (while UP) [ 232.874868][T11236] $Hÿ: entered promiscuous mode [ 232.897963][T11236] bond_slave_0: entered promiscuous mode [ 232.908350][T11236] bond_slave_1: entered promiscuous mode [ 232.942720][T11236] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 233.031989][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.064536][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.078798][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.087938][ T50] Bluetooth: hci3: command tx timeout [ 233.140532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.147726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.158231][T11243] SET target dimension over the limit! [ 233.250779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.257968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.279110][T11248] dummy0: entered promiscuous mode [ 233.282962][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.285950][T11248] dummy0: entered allmulticast mode [ 233.310574][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.373062][T11019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.414984][T11019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.526948][T11256] loop1: detected capacity change from 0 to 128 [ 233.574446][T11256] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.649969][T11256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.122046][T11019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.311003][T11287] kAFS: unable to lookup cell '.,' [ 234.630008][T11295] loop1: detected capacity change from 0 to 2048 [ 235.043966][T11019] veth0_vlan: entered promiscuous mode [ 235.081419][T11019] veth1_vlan: entered promiscuous mode [ 235.160752][T11019] veth0_macvtap: entered promiscuous mode [ 235.201387][T11019] veth1_macvtap: entered promiscuous mode [ 235.240162][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.263873][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.294439][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.320279][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.333011][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.362319][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.384659][T11019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.409141][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.430227][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.456378][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.477033][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.500197][T11281] syz.4.2366 (11281): drop_caches: 2 [ 235.502529][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.530197][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.563463][T11295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.593986][T11019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.712707][T11019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.762941][T11019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.793382][T11019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.802119][T11019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.825270][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.850480][T11303] loop2: detected capacity change from 0 to 40427 [ 235.870679][T11303] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 235.913931][T11303] F2FS-fs (loop2): Image doesn't support compression [ 235.920699][T11303] F2FS-fs (loop2): Image doesn't support compression [ 235.981466][T11303] F2FS-fs (loop2): invalid crc value [ 236.066231][T11303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.119827][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.141275][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.232655][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.253173][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.285667][T11303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.551808][T11345] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2296'. [ 236.562350][ T5768] syz-executor: attempt to access beyond end of device [ 236.562350][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.585912][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2296'. [ 236.601698][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 236.616442][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 236.854363][T11359] (null): rxe_set_mtu: Set mtu to 4096 [ 236.874330][T11359] lo speed is unknown, defaulting to 1000 [ 236.896153][T11359] lo speed is unknown, defaulting to 1000 [ 236.915571][T11359] lo speed is unknown, defaulting to 1000 [ 237.197109][T11370] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 237.542134][T11359] infiniband sz1: set active [ 237.548972][ T966] lo speed is unknown, defaulting to 1000 [ 237.582312][T11359] infiniband sz1: added lo [ 237.597404][T11379] loop2: detected capacity change from 0 to 512 [ 237.630934][T11379] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.775492][T11379] EXT4-fs (loop2): 1 truncate cleaned up [ 237.802115][T11379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.820839][T11359] RDS/IB: sz1: added [ 237.865310][T11359] smc: adding ib device sz1 with port count 1 [ 237.871699][T11359] smc: ib device sz1 port 1 has pnetid [ 237.882141][ T8] lo speed is unknown, defaulting to 1000 [ 237.930894][T11359] lo speed is unknown, defaulting to 1000 [ 238.141516][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.394452][T11411] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 238.452634][T11411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2398'. [ 238.502741][T11411] batman_adv: batadv0: Adding interface: vlan1 [ 238.529913][T11411] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.548139][T11417] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2400'. [ 238.571157][T11411] batman_adv: batadv0: Interface activated: vlan1 [ 238.589738][T11359] lo speed is unknown, defaulting to 1000 [ 239.046735][T11433] loop1: detected capacity change from 0 to 256 [ 239.172072][T11436] xt_socket: unknown flags 0x58 [ 239.192186][T11359] lo speed is unknown, defaulting to 1000 [ 239.640608][T11454] loop1: detected capacity change from 0 to 764 [ 239.716876][T11454] rock: directory entry would overflow storage [ 239.750208][T11454] rock: sig=0x5850, size=36, remaining=7 [ 239.847048][T11359] lo speed is unknown, defaulting to 1000 [ 240.998014][T11510] loop5: detected capacity change from 0 to 256 [ 241.436583][T11527] (null): rxe_set_mtu: Set mtu to 4096 [ 241.457712][T11527] rdma_rxe: rxe_newlink: failed to add lo [ 241.467256][T11529] binder: 11528:11529 ioctl c018620c 0 returned -14 [ 242.198217][T11507] loop4: detected capacity change from 0 to 40427 [ 242.255299][T11507] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 242.266873][T11507] F2FS-fs (loop4): Image doesn't support compression [ 242.276753][T11507] F2FS-fs (loop4): Image doesn't support compression [ 242.358727][T11507] F2FS-fs (loop4): invalid crc value [ 242.400663][T11563] (null): rxe_set_mtu: Set mtu to 4096 [ 242.424967][T11507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.441786][T11563] rdma_rxe: rxe_newlink: failed to add lo [ 242.621674][T11507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.852569][T10813] syz-executor: attempt to access beyond end of device [ 242.852569][T10813] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.883294][T10813] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 243.826122][T11613] ieee802154 phy0 wpan0: encryption failed: -90 [ 244.006225][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2472'. [ 244.132903][T11626] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.810240][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2485'. [ 244.976888][T11666] IPv6: Can't replace route, no match found [ 245.416957][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 245.430995][T11680] ubi31: attaching mtd0 [ 245.458434][T11680] ubi31: scanning is finished [ 245.498119][T11680] ubi31: empty MTD device detected [ 245.696502][T11680] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 245.716925][T11680] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 245.718178][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2501'. [ 245.739221][T11680] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 245.762732][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2501'. [ 245.772484][T11680] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 245.780943][T11680] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 245.826584][T11680] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 245.860596][T11680] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 841875375 [ 245.886607][T11680] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 245.926547][T11696] ubi31: background thread "ubi_bgt31d" started, PID 11696 [ 246.089593][T11709] loop5: detected capacity change from 0 to 16 [ 246.123167][T11709] erofs: (device loop5): mounted with root inode @ nid 36. [ 246.184161][T11709] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 246.242477][T11709] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 246.264518][T11716] loop4: detected capacity change from 0 to 64 [ 246.292737][T11709] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 246.941348][T11734] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407) [ 246.975316][T11734] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 247.547034][T11761] macsec0: entered promiscuous mode [ 247.553341][T11761] macsec0: entered allmulticast mode [ 247.559004][T11761] veth1_macvtap: entered allmulticast mode [ 248.729465][T11818] geneve2: entered promiscuous mode [ 248.879296][T11824] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 249.361387][ T27] audit: type=1326 audit(1750346387.031:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 249.448133][ T27] audit: type=1326 audit(1750346387.031:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 249.540433][T11853] loop1: detected capacity change from 0 to 164 [ 249.561918][ T27] audit: type=1326 audit(1750346387.061:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 249.662328][ T27] audit: type=1326 audit(1750346387.061:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 249.707697][ T27] audit: type=1326 audit(1750346387.061:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 250.052267][ T27] audit: type=1326 audit(1750346387.721:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 250.142298][ T27] audit: type=1326 audit(1750346387.721:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 250.232854][ T27] audit: type=1326 audit(1750346387.741:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 250.327759][ T27] audit: type=1326 audit(1750346387.741:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 250.381096][T11883] loop5: detected capacity change from 0 to 256 [ 250.405119][ T27] audit: type=1326 audit(1750346387.741:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 250.469110][T11883] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.849314][T11854] loop4: detected capacity change from 0 to 32768 [ 250.910528][T11854] [ 250.910528][T11854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.910528][T11854] [ 250.963752][T11854] [ 250.963752][T11854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.963752][T11854] [ 251.013401][T11854] [ 251.013401][T11854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.013401][T11854] [ 251.207209][T11908] loop5: detected capacity change from 0 to 512 [ 251.283342][T11908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.344117][T11908] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.456369][T11921] netlink: 'syz.2.2587': attribute type 63 has an invalid length. [ 251.527336][T11019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.086638][T11948] cgroup: subsys name conflicts with all [ 252.272349][ T966] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 252.452684][ T966] usb 6-1: Using ep0 maxpacket: 8 [ 252.459959][ T966] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 252.482699][ T966] usb 6-1: config 2 has no interface number 0 [ 252.500507][ T966] usb 6-1: config 2 interface 31 has no altsetting 0 [ 252.519512][ T966] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 252.533493][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.554323][ T966] usb 6-1: Product: syz [ 252.559256][ T966] usb 6-1: Manufacturer: syz [ 252.564856][ T966] usb 6-1: SerialNumber: syz [ 252.647330][T11970] vlan0: entered promiscuous mode [ 253.028997][ T966] ch9200: probe of 6-1:2.31 failed with error -22 [ 253.067380][ T966] usb 6-1: USB disconnect, device number 2 [ 253.595806][T11980] loop4: detected capacity change from 0 to 32768 [ 253.636991][T12005] vlan0: entered promiscuous mode [ 253.646491][T11980] (syz.4.2612,11980,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.697945][T11980] (syz.4.2612,11980,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.814881][T12010] loop2: detected capacity change from 0 to 256 [ 253.853210][T12010] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 253.877963][T11980] JBD2: Ignoring recovery information on journal [ 254.037877][T11980] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 254.047279][ T966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 254.252331][ T966] usb 6-1: Using ep0 maxpacket: 8 [ 254.268130][ T966] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.294149][ T966] usb 6-1: config 0 has no interface number 0 [ 254.300293][ T966] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.338716][T10813] ocfs2: Unmounting device (7,4) on (node local) [ 254.342277][ T966] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.370442][ T966] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.389992][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.418573][ T966] usb 6-1: config 0 descriptor?? [ 254.486179][ T966] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 254.696635][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 254.696648][ T27] audit: type=1326 audit(1750346392.371:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 254.751813][T12037] loop4: detected capacity change from 0 to 16 [ 254.771476][ T23] usb 6-1: USB disconnect, device number 3 [ 254.775352][T12037] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 254.793574][ T27] audit: type=1326 audit(1750346392.371:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 254.858918][ T27] audit: type=1326 audit(1750346392.381:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 254.932315][ T27] audit: type=1326 audit(1750346392.381:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.2.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 255.061630][T12025] loop1: detected capacity change from 0 to 32768 [ 255.125244][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.125244][T12025] [ 255.142934][T12025] xtLookup: xtSearch returned -5 [ 255.148011][T12025] add_index: get/read_metapage failed! [ 255.157719][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.157719][T12025] [ 255.212447][T12025] xtLookup: xtSearch returned -5 [ 255.217431][T12025] free_index: error reading directory table [ 255.261951][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.261951][T12025] [ 255.303110][T12025] xtLookup: xtSearch returned -5 [ 255.308097][T12025] free_index: error reading directory table [ 255.356811][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.356811][T12025] [ 255.391694][T12025] xtLookup: xtSearch returned -5 [ 255.422364][T12025] free_index: error reading directory table [ 255.441357][T12053] netlink: set zone limit has 8 unknown bytes [ 255.443381][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.443381][T12025] [ 255.476161][T12025] xtLookup: xtSearch returned -5 [ 255.494268][T12025] free_index: error reading directory table [ 255.507717][T12025] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 255.507717][T12025] [ 255.533220][T12025] xtLookup: xtSearch returned -5 [ 255.548990][T12025] free_index: error reading directory table [ 255.646254][T12062] loop5: detected capacity change from 0 to 1024 [ 255.775525][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'. [ 255.806378][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.815191][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051169][T12077] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.291395][T12089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2641'. [ 256.380898][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 256.779904][T12108] loop5: detected capacity change from 0 to 4096 [ 256.852986][T12113] loop1: detected capacity change from 0 to 512 [ 256.903506][T12113] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2658: invalid indirect mapped block 4294967295 (level 1) [ 256.977747][T12113] EXT4-fs (loop1): Remounting filesystem read-only [ 256.993299][T12113] EXT4-fs (loop1): 2 truncates cleaned up [ 257.023466][T12113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.208410][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.654475][T12132] loop5: detected capacity change from 0 to 128 [ 257.737648][T12132] FAT-fs (loop5): Directory bread(block 32) failed [ 257.745974][T12111] loop2: detected capacity change from 0 to 32768 [ 257.759126][T12132] FAT-fs (loop5): Directory bread(block 33) failed [ 257.800882][T12132] FAT-fs (loop5): Directory bread(block 34) failed [ 257.816497][T12111] ERROR: (device loop2): diNewExt: no free extents [ 257.816497][T12111] [ 257.840723][T12132] FAT-fs (loop5): Directory bread(block 35) failed [ 257.866767][T12132] FAT-fs (loop5): Directory bread(block 36) failed [ 257.877745][T12111] ERROR: (device loop2): remounting filesystem as read-only [ 257.883711][T12132] FAT-fs (loop5): Directory bread(block 37) failed [ 257.902437][T12132] FAT-fs (loop5): Directory bread(block 38) failed [ 257.934216][T12111] ialloc: diAlloc returned -5! [ 257.934574][T12132] FAT-fs (loop5): Directory bread(block 39) failed [ 257.991726][T12132] FAT-fs (loop5): Directory bread(block 40) failed [ 258.012317][T12132] FAT-fs (loop5): Directory bread(block 41) failed [ 258.102424][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2668'. [ 258.723568][ T27] audit: type=1326 audit(1750346396.401:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 258.776605][ T27] audit: type=1326 audit(1750346396.401:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 258.886678][T12176] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2679'. [ 258.889166][ T27] audit: type=1326 audit(1750346396.421:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd276590847 code=0x7ffc0000 [ 258.971731][ T27] audit: type=1326 audit(1750346396.421:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd2765907bc code=0x7ffc0000 [ 259.102425][ T27] audit: type=1326 audit(1750346396.421:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd2765906f4 code=0x7ffc0000 [ 259.136133][ T27] audit: type=1326 audit(1750346396.421:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd2765906f4 code=0x7ffc0000 [ 259.188056][T12191] loop2: detected capacity change from 0 to 512 [ 259.200719][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2683'. [ 259.240499][T12191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.273092][T12191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 259.303831][T12191] System zones: 1-12 [ 259.355384][T12191] EXT4-fs (loop2): 1 truncate cleaned up [ 259.412488][T12191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.551930][T12203] usb usb1: check_ctrlrecip: process 12203 (syz.1.2689) requesting ep 01 but needs 81 [ 259.595299][T12203] usb usb1: usbfs: process 12203 (syz.1.2689) did not claim interface 0 before use [ 259.630781][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.871823][T12215] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 260.247044][T12228] loop4: detected capacity change from 0 to 512 [ 260.345756][T12228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.414670][T12193] loop5: detected capacity change from 0 to 40427 [ 260.419657][T12228] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.473545][T12193] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 260.513548][T12193] F2FS-fs (loop5): invalid crc value [ 260.553620][T12193] F2FS-fs (loop5): Found nat_bits in checkpoint [ 260.730013][T12193] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 260.792086][T10813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.875375][T12251] loop2: detected capacity change from 0 to 8 [ 260.932919][T12251] process 'syz.2.2703' launched './file0/file0' with NULL argv: empty string added [ 261.303120][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 261.303133][ T27] audit: type=1326 audit(1750346398.981:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12264 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 261.404880][ T27] audit: type=1326 audit(1750346399.051:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12264 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 261.522926][ T27] audit: type=1326 audit(1750346399.151:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12264 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 261.635304][ T27] audit: type=1326 audit(1750346399.151:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12264 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 261.724645][ T27] audit: type=1326 audit(1750346399.151:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2765c11e5 code=0x7ffc0000 [ 261.806433][ T27] audit: type=1326 audit(1750346399.311:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd27658e929 code=0x7ffc0000 [ 261.850559][T12283] loop1: detected capacity change from 0 to 2048 [ 261.933049][T12283] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 262.018596][T12291] loop5: detected capacity change from 0 to 256 [ 262.043530][T12293] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.044530][T12292] x_tables: ip_tables: osf match: only valid for protocol 6 [ 262.158164][T12291] FAT-fs (loop5): Directory bread(block 64) failed [ 262.172729][T12291] FAT-fs (loop5): Directory bread(block 65) failed [ 262.179368][T12291] FAT-fs (loop5): Directory bread(block 66) failed [ 262.215384][T12291] FAT-fs (loop5): Directory bread(block 67) failed [ 262.242755][T12291] FAT-fs (loop5): Directory bread(block 68) failed [ 262.285281][T12291] FAT-fs (loop5): Directory bread(block 69) failed [ 262.291955][T12291] FAT-fs (loop5): Directory bread(block 70) failed [ 262.314455][T12283] syz.1.2715: attempt to access beyond end of device [ 262.314455][T12283] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 262.361124][T12291] FAT-fs (loop5): Directory bread(block 71) failed [ 262.399317][T12291] FAT-fs (loop5): Directory bread(block 72) failed [ 262.409783][T12283] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 262.432339][T12291] FAT-fs (loop5): Directory bread(block 73) failed [ 262.664771][T12305] sp0: Synchronizing with TNC [ 262.689937][T12304] [U] è [ 262.992620][T12318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 263.012249][T12323] loop1: detected capacity change from 0 to 256 [ 263.078864][T12323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 263.207963][T12328] loop5: detected capacity change from 0 to 256 [ 263.772406][T12353] loop5: detected capacity change from 0 to 1024 [ 263.896434][T12353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.941189][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2742'. [ 264.168932][T11019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.499391][T12385] loop1: detected capacity change from 0 to 1024 [ 264.598198][T12385] syz.1.2751: attempt to access beyond end of device [ 264.598198][T12385] loop1: rw=0, sector=393338, nr_sectors = 2 limit=1024 [ 264.937252][T12407] netlink: 'syz.1.2758': attribute type 3 has an invalid length. [ 265.175576][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.237030][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.280523][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.332751][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.342052][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.385290][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.431852][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.472761][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 265.482159][T12431] loop4: detected capacity change from 0 to 256 [ 265.513126][T12431] exfat: Deprecated parameter 'utf8' [ 265.547157][ T27] audit: type=1326 audit(1750346403.221:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 265.576504][T12431] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 265.611596][ T27] audit: type=1326 audit(1750346403.221:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 265.697468][ T27] audit: type=1326 audit(1750346403.271:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 265.745606][T12438] loop2: detected capacity change from 0 to 8 [ 265.804958][ T27] audit: type=1326 audit(1750346403.271:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f63d8e929 code=0x7ffc0000 [ 265.823143][T12438] SQUASHFS error: Failed to read block 0x1ec: -5 [ 265.884374][T12438] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 266.240163][T12459] loop1: detected capacity change from 0 to 512 [ 266.319468][T12459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.348852][T12459] ext4 filesystem being mounted at /727/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.550787][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.729855][T12476] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 267.028339][T12464] loop5: detected capacity change from 0 to 32768 [ 267.137536][T12464] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 267.203257][T12464] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 267.440166][T12464] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 267.513611][T12464] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 267.551915][T12464] OCFS2: File system is now read-only. [ 267.568049][T12464] (syz.5.2780,12464,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 267.612507][T12464] (syz.5.2780,12464,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 267.662332][T12464] (syz.5.2780,12464,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 267.692652][T12464] (syz.5.2780,12464,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 267.701215][T12464] (syz.5.2780,12464,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 267.770919][T12513] loop2: detected capacity change from 0 to 64 [ 267.772345][T12464] (syz.5.2780,12464,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 267.812284][T12464] (syz.5.2780,12464,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 267.822502][T12464] (syz.5.2780,12464,1):ocfs2_mknod:385 ERROR: status = -30 [ 267.829893][T12464] (syz.5.2780,12464,1):ocfs2_mknod:502 ERROR: status = -30 [ 267.878756][T12464] (syz.5.2780,12464,1):ocfs2_create:676 ERROR: status = -30 [ 267.973460][T11019] ocfs2: Unmounting device (7,5) on (node local) [ 268.338073][T12527] loop2: detected capacity change from 0 to 1024 [ 268.459432][T12532] __nla_validate_parse: 69 callbacks suppressed [ 268.459447][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2800'. [ 268.485909][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2800'. [ 268.692812][T12540] loop5: detected capacity change from 0 to 1024 [ 268.711704][T12503] loop4: detected capacity change from 0 to 40427 [ 268.736398][T12503] F2FS-fs (loop4): invalid crc value [ 268.796954][T12503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 268.880193][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 268.968875][T12503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 268.986197][T12550] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 269.036186][T12550] bridge2: entered promiscuous mode [ 269.056728][T12550] bridge2: entered allmulticast mode [ 269.110137][T12556] loop1: detected capacity change from 0 to 1024 [ 269.133511][T12556] EXT4-fs: Ignoring removed orlov option [ 269.185260][T12556] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 269.273972][T12556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.562460][ T5839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 269.752612][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 269.761226][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.775567][ T5839] usb 6-1: config 0 has no interfaces? [ 269.783820][ T5839] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 269.808738][ T5839] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 269.845681][ T5839] usb 6-1: Product: syz [ 269.857684][ T5839] usb 6-1: Manufacturer: syz [ 269.880545][ T5839] usb 6-1: SerialNumber: syz [ 269.930845][ T5839] usb 6-1: config 0 descriptor?? [ 270.034796][T12582] netlink: zone id is out of range [ 270.056739][T12582] netlink: get zone limit has 8 unknown bytes [ 270.088372][T12585] loop1: detected capacity change from 0 to 128 [ 270.207360][ T8] usb 6-1: USB disconnect, device number 4 [ 270.448642][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'. [ 270.478716][T12596] loop4: detected capacity change from 0 to 1024 [ 270.491411][T12596] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.540117][T12596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.599854][T12604] vivid-000: disconnect [ 270.608757][T12603] vivid-000: reconnect [ 270.679384][T12606] loop2: detected capacity change from 0 to 64 [ 270.716369][T12596] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.2820: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 270.764201][T12596] EXT4-fs (loop4): Remounting filesystem read-only [ 270.916472][T10813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.157829][T12621] loop4: detected capacity change from 0 to 64 [ 271.204369][T12621] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 271.231680][T12628] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 271.275537][T12628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 271.900334][T12654] netlink: 'syz.5.2838': attribute type 7 has an invalid length. [ 272.356421][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2846'. [ 272.430936][T12637] loop2: detected capacity change from 0 to 32768 [ 272.498518][T12637] [ 272.498518][T12637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.498518][T12637] [ 272.503107][T12680] loop5: detected capacity change from 0 to 512 [ 272.544876][T12680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.576792][T12680] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 272.646777][T12680] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2848: Invalid block bitmap block 0 in block_group 0 [ 272.697571][ T5768] [ 272.697571][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.697571][ T5768] [ 272.719553][T12686] loop4: detected capacity change from 0 to 64 [ 272.736594][T12680] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 272.771964][T12680] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.2848: attempt to clear invalid blocks 983261 len 1 [ 272.785711][ T5768] [ 272.785711][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.785711][ T5768] [ 272.846313][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 272.846325][ T27] audit: type=1326 audit(1750346410.521:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 272.852342][T12680] EXT4-fs error (device loop5): __ext4_get_inode_loc:4478: comm syz.5.2848: Invalid inode table block 0 in block_group 0 [ 272.853219][T12680] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 272.947178][T12680] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 272.969444][ T27] audit: type=1326 audit(1750346410.551:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 273.046054][T12680] EXT4-fs error (device loop5): __ext4_get_inode_loc:4478: comm syz.5.2848: Invalid inode table block 0 in block_group 0 [ 273.082551][ T27] audit: type=1326 audit(1750346410.561:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 273.127455][T12680] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 273.153108][ T27] audit: type=1326 audit(1750346410.561:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 273.177860][ T27] audit: type=1326 audit(1750346410.561:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 273.192356][T12680] EXT4-fs error (device loop5): ext4_truncate:4283: inode #11: comm syz.5.2848: mark_inode_dirty error [ 273.278017][T12680] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 273.319882][T12680] EXT4-fs error (device loop5): __ext4_get_inode_loc:4478: comm syz.5.2848: Invalid inode table block 0 in block_group 0 [ 273.380959][T12680] EXT4-fs (loop5): 1 truncate cleaned up [ 273.406527][T12680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.503585][T12707] loop2: detected capacity change from 0 to 4096 [ 273.546219][T12707] NILFS (loop2): invalid segment: Checksum error in segment payload [ 273.554859][T12680] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.2848: Invalid inode bitmap blk 0 in block_group 0 [ 273.589412][T12707] NILFS (loop2): trying rollback from an earlier position [ 273.618889][T12707] NILFS (loop2): recovery complete [ 273.658300][T12716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.774903][T11019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.945155][T12725] loop5: detected capacity change from 0 to 16 [ 274.559814][T12749] loop1: detected capacity change from 0 to 512 [ 274.624809][T12749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 274.657230][T12749] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2872: bad orphan inode 13 [ 274.763789][T12749] ext4_test_bit(bit=12, block=18) = 1 [ 274.822295][T12749] is_bad_inode(inode)=0 [ 274.862524][T12749] NEXT_ORPHAN(inode)=2130706432 [ 274.867468][T12749] max_ino=32 [ 274.870681][T12749] i_nlink=1 [ 274.893782][T12749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.073948][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.360425][T12736] loop4: detected capacity change from 0 to 32768 [ 275.473309][T12736] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.638744][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2884'. [ 275.770695][T12736] XFS (loop4): Ending clean mount [ 275.778306][T12798] loop1: detected capacity change from 0 to 2048 [ 275.822140][T12736] XFS (loop4): Quotacheck needed: Please wait. [ 275.880980][T12798] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.942281][T12736] XFS (loop4): Quotacheck: Done. [ 275.996671][T12809] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.022778][T12812] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 276.058484][T12798] /dev/loop1: Can't open blockdev [ 276.357876][T12821] loop1: detected capacity change from 0 to 512 [ 276.390433][T10813] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.416891][T12821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.430426][T12821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.497391][T12821] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.2890: Invalid block bitmap block 0 in block_group 0 [ 276.586882][T12821] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 276.679406][T12821] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.2890: attempt to clear invalid blocks 983261 len 1 [ 276.742783][T12821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.2890: Invalid inode table block 0 in block_group 0 [ 276.790082][T12821] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 276.842133][T12821] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 276.886586][T12821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.2890: Invalid inode table block 0 in block_group 0 [ 276.948911][T12821] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 276.993164][T12821] EXT4-fs error (device loop1): ext4_truncate:4283: inode #11: comm syz.1.2890: mark_inode_dirty error [ 277.031422][T12821] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 277.072711][T12821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.2890: Invalid inode table block 0 in block_group 0 [ 277.130357][T12821] EXT4-fs (loop1): 1 truncate cleaned up [ 277.146303][T12821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.166377][T12849] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 277.287487][T12821] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2890: Invalid inode bitmap blk 0 in block_group 0 [ 277.469455][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.748261][T12871] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2910'. [ 277.771181][T12871] hsr_slave_0: left promiscuous mode [ 277.832491][T12871] hsr_slave_1: left promiscuous mode [ 278.169544][T12892] loop2: detected capacity change from 0 to 512 [ 278.235070][T12892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.282360][T12892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.353047][T12892] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.2916: Invalid block bitmap block 0 in block_group 0 [ 278.386777][T12892] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 278.420179][T12892] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2916: attempt to clear invalid blocks 983261 len 1 [ 278.483982][T12892] EXT4-fs error (device loop2): __ext4_get_inode_loc:4478: comm syz.2.2916: Invalid inode table block 0 in block_group 0 [ 278.522798][T12892] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 278.568098][T12892] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 278.605640][T12892] EXT4-fs error (device loop2): __ext4_get_inode_loc:4478: comm syz.2.2916: Invalid inode table block 0 in block_group 0 [ 278.650769][T12892] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 278.673603][T12892] EXT4-fs error (device loop2): ext4_truncate:4283: inode #11: comm syz.2.2916: mark_inode_dirty error [ 278.711282][T12892] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 278.739685][T12910] loop1: detected capacity change from 0 to 8192 [ 278.746225][T12892] EXT4-fs error (device loop2): __ext4_get_inode_loc:4478: comm syz.2.2916: Invalid inode table block 0 in block_group 0 [ 278.759356][ T966] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.774703][T12910] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" [ 278.796162][T12892] EXT4-fs (loop2): 1 truncate cleaned up [ 278.803570][T12892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.951269][T12892] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2916: Invalid inode bitmap blk 0 in block_group 0 [ 278.985159][ T966] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 279.014677][ T966] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 279.049533][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.067900][ T966] usb 5-1: Product: syz [ 279.072109][ T966] usb 5-1: Manufacturer: syz [ 279.081667][T12893] loop5: detected capacity change from 0 to 32768 [ 279.099103][ T966] usb 5-1: SerialNumber: syz [ 279.106083][T12893] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2917 (12893) [ 279.120329][ T966] usb 5-1: config 0 descriptor?? [ 279.129494][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.173348][T12893] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.232319][T12893] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 279.241071][T12893] BTRFS info (device loop5): disabling free space tree [ 279.290465][T12893] BTRFS info (device loop5): turning on async discard [ 279.302088][T12893] BTRFS info (device loop5): force clearing of disk cache [ 279.345062][T12893] BTRFS info (device loop5): doing ref verification [ 279.367650][ T966] usb 5-1: USB disconnect, device number 2 [ 279.388911][T12893] BTRFS info (device loop5): enabling ssd optimizations [ 279.442461][T12893] BTRFS info (device loop5): using spread ssd allocation scheme [ 279.450169][T12893] BTRFS info (device loop5): setting nodatacow, compression disabled [ 279.497181][T12893] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 279.541093][T12893] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 279.571946][T12893] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 279.599407][T12893] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 279.633111][T12938] deleting an unspecified loop device is not supported. [ 279.645515][T12893] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 279.726813][T12893] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 279.801838][T12893] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 279.898474][T12893] BTRFS info (device loop5): rebuilding free space tree [ 279.952029][T12893] BTRFS info (device loop5): disabling free space tree [ 279.969412][T12893] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 279.992167][T12893] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 280.040985][T12961] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 280.272551][T11019] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.719327][T12984] vcan1: entered allmulticast mode [ 281.015714][T12990] loop5: detected capacity change from 0 to 4096 [ 281.080589][T12990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.367269][T11019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.817395][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 281.928442][T13005] loop4: detected capacity change from 0 to 32768 [ 282.013408][T13005] XFS (loop4): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 282.015621][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.087668][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.112296][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.135123][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.150026][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.158852][ T5839] usb 6-1: Product: syz [ 282.163384][ T5839] usb 6-1: Manufacturer: syz [ 282.167996][ T5839] usb 6-1: SerialNumber: syz [ 282.208993][ T5839] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 282.222529][ T5839] cdc_ncm 6-1:1.0: bind() failure [ 282.300698][T13005] XFS (loop4): Ending clean mount [ 282.497904][ T8] usb 6-1: USB disconnect, device number 5 [ 282.579416][T10813] XFS (loop4): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 282.855002][T13038] loop2: detected capacity change from 0 to 32768 [ 283.258449][T13065] netlink: 'syz.4.2979': attribute type 12 has an invalid length. [ 283.284453][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2979'. [ 283.861998][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'. [ 283.936167][T13092] lo speed is unknown, defaulting to 1000 [ 283.947567][T13092] lo speed is unknown, defaulting to 1000 [ 283.970330][T13092] lo speed is unknown, defaulting to 1000 [ 284.009767][T13092] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 284.042956][T13094] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2994'. [ 284.053875][T13092] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.108850][T13092] lo speed is unknown, defaulting to 1000 [ 284.127308][T13092] lo speed is unknown, defaulting to 1000 [ 284.143942][T13092] lo speed is unknown, defaulting to 1000 [ 284.162477][T13092] lo speed is unknown, defaulting to 1000 [ 284.401287][T13078] loop5: detected capacity change from 0 to 32768 [ 284.437320][T13078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2986 (13078) [ 284.472625][T13078] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.492516][T13078] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 284.511413][T13078] BTRFS info (device loop5): setting nodatasum [ 284.533974][T13078] BTRFS info (device loop5): force zlib compression, level 3 [ 284.553891][T13078] BTRFS info (device loop5): metadata ratio 1 [ 284.564610][T13078] BTRFS info (device loop5): enabling ssd optimizations [ 284.571582][T13078] BTRFS info (device loop5): allowing degraded mounts [ 284.612328][T13078] BTRFS info (device loop5): using free space tree [ 284.705718][T13128] loop1: detected capacity change from 0 to 64 [ 284.892532][ T5809] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 285.035761][T11019] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.104108][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.142254][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.167522][ T5809] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.184255][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.199798][ T5809] usb 3-1: config 0 descriptor?? [ 285.209691][ T5809] hub 3-1:0.0: USB hub found [ 285.396899][T13147] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3009'. [ 285.418896][ T5809] hub 3-1:0.0: 1 port detected [ 285.442779][T13147] hsr_slave_0: left promiscuous mode [ 285.463602][T13147] hsr_slave_1: left promiscuous mode [ 285.620320][ T5809] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 285.635073][ T5809] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 285.650198][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 285.664311][ T5809] usbhid: probe of 3-1:0.0 failed with error -71 [ 285.689067][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3014'. [ 285.716291][ T5809] usb 3-1: USB disconnect, device number 11 [ 285.913366][T13159] netlink: 'syz.1.3018': attribute type 12 has an invalid length. [ 285.953202][T13156] loop5: detected capacity change from 0 to 4096 [ 286.452400][T13175] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3025'. [ 286.492458][T13175] hsr_slave_0: left promiscuous mode [ 286.509725][T13175] hsr_slave_1: left promiscuous mode [ 286.704503][T13161] loop4: detected capacity change from 0 to 32768 [ 286.723471][T13161] (syz.4.3019,13161,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.765478][T13161] (syz.4.3019,13161,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 286.836079][T13161] JBD2: Ignoring recovery information on journal [ 287.112174][T13161] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.382559][ T27] audit: type=1326 audit(1750346425.051:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 287.456236][ T27] audit: type=1326 audit(1750346425.051:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 287.459319][T10813] ocfs2: Unmounting device (7,4) on (node local) [ 287.550046][ T27] audit: type=1326 audit(1750346425.071:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 287.592086][ T27] audit: type=1326 audit(1750346425.071:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 287.633351][ T27] audit: type=1326 audit(1750346425.071:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 287.672465][T13207] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 287.681448][T13207] overlayfs: missing 'lowerdir' [ 287.903526][T13220] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3045'. [ 288.372785][ T27] audit: type=1326 audit(1750346426.041:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 288.429517][ T27] audit: type=1326 audit(1750346426.041:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 288.479789][ T27] audit: type=1326 audit(1750346426.081:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 288.502681][ T27] audit: type=1326 audit(1750346426.091:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 288.525226][ T27] audit: type=1326 audit(1750346426.091:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b70f8e929 code=0x7ffc0000 [ 288.704498][T13252] loop4: detected capacity change from 0 to 47 [ 288.933482][T13261] loop4: detected capacity change from 0 to 16 [ 288.951986][T13261] erofs: (device loop4): mounted with root inode @ nid 36. [ 288.976546][T13263] loop2: detected capacity change from 0 to 64 [ 289.007787][T13264] loop1: detected capacity change from 0 to 512 [ 289.085747][T13264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.120835][T13264] ext4 filesystem being mounted at /828/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.326952][T13264] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3067: Failed to acquire dquot type 0 [ 289.478646][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 289.664291][T13283] loop2: detected capacity change from 0 to 128 [ 289.760644][T13266] loop5: detected capacity change from 0 to 32768 [ 289.802149][T13266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3068 (13266) [ 289.868202][T13266] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.925460][T13266] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 289.953757][T13266] BTRFS info (device loop5): turning on async discard [ 289.965723][T13266] BTRFS info (device loop5): metadata ratio 40517 [ 289.982720][T13266] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 290.012316][T13266] BTRFS info (device loop5): trying to use backup root at mount time [ 290.042668][T13266] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 290.103295][T13266] BTRFS info (device loop5): use lzo compression, level 0 [ 290.111828][T13266] BTRFS info (device loop5): enabling auto defrag [ 290.130830][T13266] BTRFS info (device loop5): enabling ssd optimizations [ 290.161112][T13266] BTRFS info (device loop5): using spread ssd allocation scheme [ 290.172809][T13266] BTRFS info (device loop5): using free space tree [ 290.301582][T13313] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 290.377742][T13313] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 290.622321][T11019] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.670160][T13326] geneve2: entered promiscuous mode [ 290.691496][T13326] geneve2: entered allmulticast mode [ 290.708120][T13328] loop4: detected capacity change from 0 to 1024 [ 291.478616][T13350] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3100'. [ 291.716042][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 292.137408][T13383] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3116'. [ 292.317658][T13387] loop2: detected capacity change from 0 to 2048 [ 292.338021][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3120'. [ 292.397478][T13387] Alternate GPT is invalid, using primary GPT. [ 292.428135][T13387] loop2: p2 p3 p7 [ 292.439616][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 292.439629][ T27] audit: type=1326 audit(1750346430.111:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 292.532316][ T27] audit: type=1326 audit(1750346430.111:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 292.597686][ T27] audit: type=1326 audit(1750346430.111:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd27658dea7 code=0x7ffc0000 [ 292.617263][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 292.634733][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 292.672859][ T7231] udevd[7231]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 292.715480][ T27] audit: type=1326 audit(1750346430.111:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 292.775922][T13376] loop4: detected capacity change from 0 to 32768 [ 292.796422][ T27] audit: type=1326 audit(1750346430.111:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd27658dea7 code=0x7ffc0000 [ 292.827351][T13376] (syz.4.3113,13376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.863641][ T27] audit: type=1326 audit(1750346430.111:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 292.892324][T13376] (syz.4.3113,13376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.962875][ T27] audit: type=1326 audit(1750346430.111:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 292.979725][T13376] JBD2: Ignoring recovery information on journal [ 292.986525][ T27] audit: type=1326 audit(1750346430.111:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 293.019998][ T27] audit: type=1326 audit(1750346430.111:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd27658d13a code=0x7ffc0000 [ 293.043524][ T27] audit: type=1326 audit(1750346430.111:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd27658dea7 code=0x7ffc0000 [ 293.110856][T13408] loop5: detected capacity change from 0 to 256 [ 293.146796][T13408] exfat: Deprecated parameter 'namecase' [ 293.177247][T13376] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 293.236155][T13408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 293.269664][T13376] [ 293.272041][T13376] ====================================================== [ 293.279059][T13376] WARNING: possible circular locking dependency detected [ 293.286089][T13376] 6.6.94-syzkaller #0 Not tainted [ 293.291115][T13376] ------------------------------------------------------ [ 293.298134][T13376] syz.4.3113/13376 is trying to acquire lock: [ 293.304206][T13376] ffff888058895f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 293.317460][T13376] [ 293.317460][T13376] but task is already holding lock: [ 293.324830][T13376] ffff888058845c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 293.334346][T13376] [ 293.334346][T13376] which lock already depends on the new lock. [ 293.334346][T13376] [ 293.344755][T13376] [ 293.344755][T13376] the existing dependency chain (in reverse order) is: [ 293.353772][T13376] [ 293.353772][T13376] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 293.361626][T13376] down_read+0x46/0x2e0 [ 293.366332][T13376] ocfs2_init_acl+0x2fa/0x720 [ 293.371544][T13376] ocfs2_mknod+0x12e5/0x20f0 [ 293.376672][T13376] ocfs2_create+0x196/0x410 [ 293.381711][T13376] vfs_create+0x1f4/0x360 [ 293.386575][T13376] do_mknodat+0x3c8/0x4f0 [ 293.391442][T13376] __x64_sys_mknod+0x8e/0xa0 [ 293.396570][T13376] do_syscall_64+0x55/0xb0 [ 293.401528][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.407964][T13376] [ 293.407964][T13376] -> #4 (jbd2_handle){++++}-{0:0}: [ 293.415279][T13376] start_this_handle+0x1e9d/0x20c0 [ 293.420929][T13376] jbd2__journal_start+0x2bb/0x5b0 [ 293.426582][T13376] jbd2_journal_start+0x2a/0x40 [ 293.431976][T13376] ocfs2_start_trans+0x376/0x6c0 [ 293.437452][T13376] ocfs2_mknod+0xe47/0x20f0 [ 293.442497][T13376] ocfs2_create+0x196/0x410 [ 293.447542][T13376] path_openat+0x1277/0x3190 [ 293.452670][T13376] do_filp_open+0x1c5/0x3d0 [ 293.457710][T13376] do_sys_openat2+0x12c/0x1c0 [ 293.462930][T13376] __x64_sys_openat+0x139/0x160 [ 293.468327][T13376] do_syscall_64+0x55/0xb0 [ 293.473291][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.479733][T13376] [ 293.479733][T13376] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 293.488266][T13376] down_read+0x46/0x2e0 [ 293.492965][T13376] ocfs2_start_trans+0x36a/0x6c0 [ 293.498440][T13376] ocfs2_mknod+0xe47/0x20f0 [ 293.503476][T13376] ocfs2_create+0x196/0x410 [ 293.508520][T13376] path_openat+0x1277/0x3190 [ 293.513646][T13376] do_filp_open+0x1c5/0x3d0 [ 293.518684][T13376] do_sys_openat2+0x12c/0x1c0 [ 293.523901][T13376] __x64_sys_openat+0x139/0x160 [ 293.529287][T13376] do_syscall_64+0x55/0xb0 [ 293.534241][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.540676][T13376] [ 293.540676][T13376] -> #2 (sb_internal#6){.+.+}-{0:0}: [ 293.548166][T13376] ocfs2_start_trans+0x26b/0x6c0 [ 293.553631][T13376] ocfs2_mknod+0xe47/0x20f0 [ 293.558667][T13376] ocfs2_create+0x196/0x410 [ 293.563706][T13376] path_openat+0x1277/0x3190 [ 293.568828][T13376] do_filp_open+0x1c5/0x3d0 [ 293.573864][T13376] do_sys_openat2+0x12c/0x1c0 [ 293.579080][T13376] __x64_sys_openat+0x139/0x160 [ 293.584466][T13376] do_syscall_64+0x55/0xb0 [ 293.589421][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.595857][T13376] [ 293.595857][T13376] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 293.606407][T13376] down_write+0x97/0x1f0 [ 293.611188][T13376] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 293.617882][T13376] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 293.624738][T13376] ocfs2_mknod+0xdee/0x20f0 [ 293.629777][T13376] ocfs2_create+0x196/0x410 [ 293.634817][T13376] path_openat+0x1277/0x3190 [ 293.639944][T13376] do_filp_open+0x1c5/0x3d0 [ 293.644981][T13376] do_sys_openat2+0x12c/0x1c0 [ 293.650192][T13376] __x64_sys_openat+0x139/0x160 [ 293.655578][T13376] do_syscall_64+0x55/0xb0 [ 293.660532][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.666962][T13376] [ 293.666962][T13376] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 293.677494][T13376] __lock_acquire+0x2ddb/0x7c80 [ 293.682883][T13376] lock_acquire+0x197/0x410 [ 293.687917][T13376] down_write+0x97/0x1f0 [ 293.692697][T13376] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 293.699131][T13376] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 293.705987][T13376] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 293.712156][T13376] ocfs2_xattr_set+0xb6d/0x11f0 [ 293.717542][T13376] __vfs_setxattr+0x431/0x470 [ 293.722758][T13376] __vfs_setxattr_noperm+0x12d/0x5e0 [ 293.728581][T13376] vfs_setxattr+0x16c/0x2f0 [ 293.733619][T13376] path_setxattr+0x362/0x550 [ 293.738741][T13376] __x64_sys_setxattr+0xbb/0xd0 [ 293.744125][T13376] do_syscall_64+0x55/0xb0 [ 293.749075][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.755510][T13376] [ 293.755510][T13376] other info that might help us debug this: [ 293.755510][T13376] [ 293.765735][T13376] Chain exists of: [ 293.765735][T13376] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 293.765735][T13376] [ 293.781485][T13376] Possible unsafe locking scenario: [ 293.781485][T13376] [ 293.788934][T13376] CPU0 CPU1 [ 293.794297][T13376] ---- ---- [ 293.799657][T13376] lock(&oi->ip_xattr_sem); [ 293.804269][T13376] lock(jbd2_handle); [ 293.810869][T13376] lock(&oi->ip_xattr_sem); [ 293.817984][T13376] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 293.825286][T13376] [ 293.825286][T13376] *** DEADLOCK *** [ 293.825286][T13376] [ 293.833434][T13376] 3 locks held by syz.4.3113/13376: [ 293.838632][T13376] #0: ffff88805a93e418 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 293.838759][T13417] loop1: detected capacity change from 0 to 65536 [ 293.847868][T13376] #1: ffff888058845f58 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0 [ 293.847925][T13376] #2: ffff888058845c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 293.847975][T13376] [ 293.847975][T13376] stack backtrace: [ 293.880364][T13376] CPU: 0 PID: 13376 Comm: syz.4.3113 Not tainted 6.6.94-syzkaller #0 [ 293.888423][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.898476][T13376] Call Trace: [ 293.901746][T13376] [ 293.904672][T13376] dump_stack_lvl+0x16c/0x230 [ 293.909349][T13376] ? load_image+0x3b0/0x3b0 [ 293.913847][T13376] ? show_regs_print_info+0x20/0x20 [ 293.919048][T13376] ? print_circular_bug+0x12b/0x1a0 [ 293.924242][T13376] check_noncircular+0x2bd/0x3c0 [ 293.929173][T13376] ? look_up_lock_class+0x75/0x140 [ 293.934276][T13376] ? print_deadlock_bug+0x5d0/0x5d0 [ 293.939470][T13376] ? lockdep_lock+0xe0/0x220 [ 293.944056][T13376] ? _find_first_zero_bit+0xd3/0x100 [ 293.949332][T13376] __lock_acquire+0x2ddb/0x7c80 [ 293.954182][T13376] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 293.960155][T13376] ? __lock_acquire+0x7c80/0x7c80 [ 293.965168][T13376] ? verify_lock_unused+0x140/0x140 [ 293.970358][T13376] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 293.975989][T13376] ? do_raw_spin_lock+0x121/0x2c0 [ 293.981003][T13376] ? mutex_unlock+0x10/0x10 [ 293.985499][T13376] lock_acquire+0x197/0x410 [ 293.989989][T13376] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 293.996046][T13376] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 294.002016][T13376] ? __might_sleep+0xe0/0xe0 [ 294.006596][T13376] ? read_lock_is_recursive+0x20/0x20 [ 294.011958][T13376] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 294.018114][T13376] ? check_noncircular+0x175/0x3c0 [ 294.023222][T13376] ? verify_lock_unused+0x140/0x140 [ 294.028408][T13376] down_write+0x97/0x1f0 [ 294.032643][T13376] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 294.038697][T13376] ? down_read_killable+0x340/0x340 [ 294.043893][T13376] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 294.049776][T13376] ? mark_lock+0x94/0x320 [ 294.054094][T13376] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 294.060060][T13376] ? lock_chain_count+0x20/0x20 [ 294.064899][T13376] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 294.070785][T13376] ? ocfs2_block_group_search+0x470/0x470 [ 294.076491][T13376] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 294.082383][T13376] ? _raw_spin_unlock+0x40/0x40 [ 294.087229][T13376] ? stack_trace_save+0x9c/0xe0 [ 294.092069][T13376] ? stack_trace_snprint+0xf0/0xf0 [ 294.097169][T13376] ? __stack_depot_save+0x560/0x630 [ 294.102360][T13376] ? kasan_set_track+0x5f/0x70 [ 294.107116][T13376] ? kasan_set_track+0x4e/0x70 [ 294.111869][T13376] ? __kasan_kmalloc+0x8f/0xa0 [ 294.116623][T13376] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 294.123111][T13376] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 294.128910][T13376] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 294.133926][T13376] ? __vfs_setxattr+0x431/0x470 [ 294.138768][T13376] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 294.144219][T13376] ? vfs_setxattr+0x16c/0x2f0 [ 294.148887][T13376] ? path_setxattr+0x362/0x550 [ 294.153635][T13376] ? __x64_sys_setxattr+0xbb/0xd0 [ 294.158651][T13376] ? do_syscall_64+0x55/0xb0 [ 294.163236][T13376] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.169316][T13376] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 294.175642][T13376] ? ocfs2_init_steal_slots+0x160/0x160 [ 294.181175][T13376] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 294.186808][T13376] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 294.192440][T13376] ? ocfs2_xattr_set+0xb33/0x11f0 [ 294.197455][T13376] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 294.203516][T13376] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 294.209752][T13376] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 294.215637][T13376] ? down_write+0x162/0x1f0 [ 294.220135][T13376] ? down_read_killable+0x340/0x340 [ 294.225326][T13376] ? up_write+0x1c3/0x410 [ 294.229642][T13376] ocfs2_xattr_set+0xb6d/0x11f0 [ 294.234494][T13376] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 294.240207][T13376] ? __lock_acquire+0x1334/0x7c80 [ 294.245219][T13376] ? verify_lock_unused+0x140/0x140 [ 294.250418][T13376] ? aa_get_newest_label+0xf8/0x5c0 [ 294.255608][T13376] ? end_current_label_crit_section+0x170/0x170 [ 294.261846][T13376] ? posix_xattr_acl+0x93/0xb0 [ 294.266597][T13376] ? evm_protect_xattr+0x36d/0x7a0 [ 294.271696][T13376] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 294.277584][T13376] __vfs_setxattr+0x431/0x470 [ 294.282259][T13376] __vfs_setxattr_noperm+0x12d/0x5e0 [ 294.287540][T13376] vfs_setxattr+0x16c/0x2f0 [ 294.292041][T13376] ? xattr_permission+0x470/0x470 [ 294.297060][T13376] ? __mnt_want_write+0x223/0x2a0 [ 294.302071][T13376] ? path_setxattr+0x314/0x550 [ 294.306827][T13376] path_setxattr+0x362/0x550 [ 294.311403][T13376] ? simple_xattrs_free+0x150/0x150 [ 294.316597][T13376] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 294.322566][T13376] ? lock_chain_count+0x20/0x20 [ 294.327406][T13376] __x64_sys_setxattr+0xbb/0xd0 [ 294.332250][T13376] do_syscall_64+0x55/0xb0 [ 294.336661][T13376] ? clear_bhb_loop+0x40/0x90 [ 294.341323][T13376] ? clear_bhb_loop+0x40/0x90 [ 294.345991][T13376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.351877][T13376] RIP: 0033:0x7fc7cf38e929 [ 294.356291][T13376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.375886][T13376] RSP: 002b:00007fc7d0232038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 294.384292][T13376] RAX: ffffffffffffffda RBX: 00007fc7cf5b5fa0 RCX: 00007fc7cf38e929 [ 294.392251][T13376] RDX: 0000200000002700 RSI: 00002000000000c0 RDI: 0000200000000080 [ 294.400209][T13376] RBP: 00007fc7cf410b39 R08: 0000000000000000 R09: 0000000000000000 [ 294.408166][T13376] R10: 0000000000001015 R11: 0000000000000246 R12: 0000000000000000 [ 294.416122][T13376] R13: 0000000000000000 R14: 00007fc7cf5b5fa0 R15: 00007ffe87794a28 [ 294.424086][T13376] [ 294.497998][T13417] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 294.529134][T13417] XFS (loop1): Ending clean mount [ 294.537540][T13417] XFS (loop1): Quotacheck needed: Please wait. [ 294.551291][T13417] XFS (loop1): Quotacheck: Done. [ 294.581077][T10813] ocfs2: Unmounting device (7,4) on (node local) [ 294.620423][ T5765] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2