last executing test programs: 1.40816766s ago: executing program 0 (id=1677): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0x14d1, &(0x7f0000002ac0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 1.395869005s ago: executing program 3 (id=1678): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0585605, &(0x7f0000000640)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.378335337s ago: executing program 3 (id=1680): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000140)) 1.247137637s ago: executing program 3 (id=1682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r1, 0x0) shutdown(r1, 0x0) 1.215386454s ago: executing program 3 (id=1683): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10144d4, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp737,mode=0000000\x00\x0000000000000006,fileset=00000000000000000126,gid=forget,iocharset=cp874,gid=forget,uid=forget,\x00'], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000d, 0x10012, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.21040031s ago: executing program 1 (id=1684): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x6194, &(0x7f0000004a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.150337101s ago: executing program 2 (id=1685): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 997.301821ms ago: executing program 3 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@rescan_uuid_tree}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0), 0x4) 907.011891ms ago: executing program 0 (id=1687): mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7e4968ab9f26f2da4149683f065714f8a000000008000000127cf0999459cff33a3a9ae50f1af9d51ef5bef3d63520d260804d02200", 0x3c}, 0x48, 0xfffffffffffffffd) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) keyctl$revoke(0x3, r1) symlinkat(&(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000280)='./bus\x00') 806.870522ms ago: executing program 2 (id=1688): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) setuid(0x0) 731.56018ms ago: executing program 1 (id=1689): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000b4f1a0930136388520a54a95a0a1094ada47f103d4a9e0a1e40300bb7c0d1832120bb29b66c45420de69658b4a042d06"]) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0) 650.904604ms ago: executing program 2 (id=1690): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e4504305a5e986f34c10", 0x14, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 636.482404ms ago: executing program 0 (id=1691): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 572.612753ms ago: executing program 2 (id=1692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r1, 0x0) shutdown(r1, 0x0) 571.282173ms ago: executing program 2 (id=1693): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r2, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x4, 0x12b}, @void, @val={0xc}}}}, 0x28}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 502.716278ms ago: executing program 0 (id=1694): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) 502.089803ms ago: executing program 2 (id=1695): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2000400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x1}}, 0x10) listen(r2, 0x0) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1}}, 0x10, 0x0}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2000400) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{r4}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x108) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 416.000513ms ago: executing program 1 (id=1696): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000480)={[{@discard}, {@norecovery}, {@nojournal_checksum}]}, 0x6, 0x4b1, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0xc042, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x979e) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)='m', 0x7ffff000}], 0x1, 0x2000, 0x0) 358.311715ms ago: executing program 0 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) 279.964272ms ago: executing program 1 (id=1698): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) setuid(0x0) 204.786576ms ago: executing program 0 (id=1699): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5d3, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x0) 167.876411ms ago: executing program 3 (id=1700): dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000740)=0x201, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) shutdown(r0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "52191cea6f22c242396783c3fa18fb27423dde2dd92139ac546f90c22c871025ec8fc98e48719c1a2a24ec7b7578abdb632cd4b899dd2d9c6e8d024112b3d4345d98860aa24a74c5b2b97dd2b747650b0ed8689540c009aa0dcaa2612a82474404c53c0a3a1d6d285b1f91b7666264851d716b5dc44ec5b1d51a1c66a77a9c37c8f2097b7250e3fca0cf7acc4731d10d50117da6303525f1e343155b8e9c25119bd12e5f9a5fc9486678c40e4c24902477c3afd227cd67299aef6e2c21df209a1dcb42546906e8f85bd6d084399bee4282b5ce502542ae44180d718a"}, 0xe0) 25.289551ms ago: executing program 1 (id=1701): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x7, 0x0, 0x0}) 0s ago: executing program 1 (id=1702): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) read(r3, &(0x7f00000001c0)=""/230, 0x62) kernel console output (not intermixed with test programs): bcachefs (loop2): going read-write [ 114.929586][ T7559] bcachefs (loop2): done starting filesystem [ 114.945437][ T7562] XFS (loop0): Quotacheck: Done. [ 115.100686][ T6341] bcachefs (loop2): shutting down [ 115.102502][ T6341] bcachefs (loop2): going read-only [ 115.104265][ T6341] bcachefs (loop2): finished waiting for writes to stop [ 115.120229][ T6341] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 115.123296][ T6267] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.134373][ T6341] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 115.150123][ T6341] bcachefs (loop2): shutdown complete, journal seq 13 [ 115.153629][ T6341] bcachefs (loop2): marking filesystem clean [ 115.206829][ T6341] bcachefs (loop2): shutdown complete [ 115.217410][ T7599] loop1: detected capacity change from 0 to 512 [ 115.220488][ T7599] EXT4-fs: Ignoring removed oldalloc option [ 115.230166][ T7599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9842e02d, mo2=0002] [ 115.237110][ T7599] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #11: comm syz.1.696: invalid indirect mapped block 1 (level 1) [ 115.244576][ T7599] EXT4-fs (loop1): Remounting filesystem read-only [ 115.252196][ T7599] EXT4-fs (loop1): 1 truncate cleaned up [ 115.256037][ T7599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.298387][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.345703][ T7605] netlink: 'syz.3.698': attribute type 29 has an invalid length. [ 115.349499][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 115.352840][ T7605] netlink: 'syz.3.698': attribute type 29 has an invalid length. [ 115.355943][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 115.360680][ T7605] netlink: 'syz.3.698': attribute type 29 has an invalid length. [ 115.366618][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 115.411545][ T7611] loop1: detected capacity change from 0 to 256 [ 115.430568][ T7611] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 115.464675][ T39] audit: type=1800 audit(1719401286.521:52): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.699" name="bus" dev="loop1" ino=1048621 res=0 errno=0 [ 115.489106][ T39] audit: type=1804 audit(1719401286.541:53): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.699" name="/syzkaller.aGdsV1/148/file1/bus" dev="loop1" ino=1048621 res=1 errno=0 [ 115.496674][ T39] audit: type=1804 audit(1719401286.551:54): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.699" name="/syzkaller.aGdsV1/148/file1/bus" dev="loop1" ino=1048621 res=1 errno=0 [ 115.504367][ T39] audit: type=1804 audit(1719401286.561:55): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.699" name="/syzkaller.aGdsV1/148/file1/bus" dev="loop1" ino=1048621 res=1 errno=0 [ 115.511312][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 115.515933][ T7620] mac80211_hwsim hwsim22 v: renamed from wlan1 (while UP) [ 115.530015][ T39] audit: type=1804 audit(1719401286.591:56): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.699" name="/syzkaller.aGdsV1/148/file1/bus" dev="loop1" ino=1048621 res=1 errno=0 [ 115.550152][ T7618] loop0: detected capacity change from 0 to 8192 [ 115.678574][ T7616] loop3: detected capacity change from 0 to 32768 [ 115.682394][ T7616] XFS: attr2 mount option is deprecated. [ 115.699406][ T7616] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.722345][ T7616] XFS (loop3): Ending clean mount [ 115.733743][ T7616] XFS (loop3): Quotacheck needed: Please wait. [ 115.740372][ T7622] loop2: detected capacity change from 0 to 32768 [ 115.776032][ T7616] XFS (loop3): Quotacheck: Done. [ 115.838000][ T7622] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 115.843833][ T7622] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 115.872758][ T7622] bcachefs (loop2): alloc_read... done [ 115.875138][ T7622] bcachefs (loop2): stripes_read... done [ 115.878733][ T7622] bcachefs (loop2): snapshots_read... done [ 115.882574][ T7622] bcachefs (loop2): journal_replay... done [ 115.884960][ T7622] bcachefs (loop2): resume_logged_ops... done [ 115.888013][ T7622] bcachefs (loop2): going read-write [ 115.889056][ T7646] loop0: detected capacity change from 0 to 512 [ 115.895506][ T7646] EXT4-fs: Ignoring removed oldalloc option [ 115.908248][ T7646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9842e02d, mo2=0002] [ 115.908397][ T7622] bcachefs (loop2): done starting filesystem [ 115.915245][ T7646] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #11: comm syz.0.708: invalid indirect mapped block 1 (level 1) [ 115.921581][ T7646] EXT4-fs (loop0): Remounting filesystem read-only [ 115.925067][ T7646] EXT4-fs (loop0): 1 truncate cleaned up [ 115.929511][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.979621][ T6267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.985299][ T6260] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.051910][ T6341] bcachefs (loop2): shutting down [ 116.054366][ T6341] bcachefs (loop2): going read-only [ 116.075171][ T6341] bcachefs (loop2): finished waiting for writes to stop [ 116.083700][ T7661] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 116.086346][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 116.089940][ T7661] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 116.092573][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 116.098840][ T7661] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 116.101460][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 116.103971][ T6341] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 116.131173][ T6341] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 116.157046][ T6341] bcachefs (loop2): shutdown complete, journal seq 14 [ 116.160276][ T6341] bcachefs (loop2): marking filesystem clean [ 116.200617][ T6341] bcachefs (loop2): shutdown complete [ 116.235459][ T7660] loop1: detected capacity change from 0 to 32768 [ 116.238936][ T7660] btrfs: Deprecated parameter 'usebackuproot' [ 116.240991][ T7660] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.244686][ T7660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.716 (7660) [ 116.254661][ T7660] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.260498][ T7660] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 116.265281][ T7660] BTRFS info (device loop1): using free-space-tree [ 116.272046][ T7663] loop0: detected capacity change from 0 to 8192 [ 116.371095][ T7660] BTRFS info (device loop1): rebuilding free space tree [ 116.444616][ T7667] loop3: detected capacity change from 0 to 32768 [ 116.449414][ T7667] XFS: attr2 mount option is deprecated. [ 116.533779][ T5471] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.546386][ T7667] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.591351][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 116.634099][ T7667] XFS (loop3): Ending clean mount [ 116.650033][ T7667] XFS (loop3): Quotacheck needed: Please wait. [ 116.693016][ T7700] loop0: detected capacity change from 0 to 512 [ 116.721945][ T7700] EXT4-fs: Ignoring removed oldalloc option [ 116.764305][ T7700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9842e02d, mo2=0002] [ 116.781514][ T7700] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #11: comm syz.0.720: invalid indirect mapped block 1 (level 1) [ 116.784687][ T7667] XFS (loop3): Quotacheck: Done. [ 116.814061][ T7700] EXT4-fs (loop0): Remounting filesystem read-only [ 116.820118][ T7706] mkiss: ax0: crc mode is auto. [ 116.822767][ T7700] EXT4-fs (loop0): 1 truncate cleaned up [ 116.827815][ T7700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.873920][ T6267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.005866][ T6260] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.136588][ T7720] netlink: 'syz.2.727': attribute type 29 has an invalid length. [ 117.147111][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 117.151427][ T7720] netlink: 'syz.2.727': attribute type 29 has an invalid length. [ 117.154861][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 117.179841][ T7720] netlink: 'syz.2.727': attribute type 29 has an invalid length. [ 117.332937][ T7728] mac80211_hwsim hwsim11 v: renamed from wlan1 (while UP) [ 117.333040][ T7724] loop2: detected capacity change from 0 to 8192 [ 117.384157][ T7730] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.401012][ T7733] loop1: detected capacity change from 0 to 512 [ 117.418111][ T7733] EXT4-fs: Ignoring removed oldalloc option [ 117.438050][ T7733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9842e02d, mo2=0002] [ 117.442347][ T7733] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #11: comm syz.1.732: invalid indirect mapped block 1 (level 1) [ 117.466493][ T7733] EXT4-fs (loop1): Remounting filesystem read-only [ 117.480376][ T7733] EXT4-fs (loop1): 1 truncate cleaned up [ 117.482491][ T7722] loop0: detected capacity change from 0 to 32768 [ 117.484106][ T7733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.485933][ T7722] btrfs: Deprecated parameter 'usebackuproot' [ 117.492886][ T7722] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.513015][ T7722] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.728 (7722) [ 117.529171][ T7722] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.534150][ T7722] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 117.541463][ T7722] BTRFS info (device loop0): using free-space-tree [ 117.597351][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.607842][ T7722] BTRFS info (device loop0): rebuilding free space tree [ 117.700892][ T6267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.917208][ T57] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.937345][ T973] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 117.978240][ T7774] loop0: detected capacity change from 0 to 2048 [ 118.000915][ T7774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.038414][ T6267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.097643][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 118.103626][ T57] usb 8-1: config 0 has no interfaces? [ 118.106146][ T57] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 118.115204][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.119379][ T57] usb 8-1: config 0 descriptor?? [ 118.127117][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 118.130982][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 118.134127][ T973] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 118.137721][ T973] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 118.142055][ T973] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 118.151948][ T973] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 118.156539][ T973] usb 7-1: config 1 interface 0 has no altsetting 0 [ 118.159856][ T973] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 118.163118][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.169884][ T973] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 118.304787][ T7786] loop0: detected capacity change from 0 to 8192 [ 118.360137][ T5239] usb 8-1: USB disconnect, device number 2 [ 118.447412][ T973] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 118.452331][ T973] usb 7-1: USB disconnect, device number 2 [ 118.560114][ T7789] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 118.564713][ T7789] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 118.571292][ T7789] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 118.615560][ T7793] mac80211_hwsim hwsim23 v: renamed from wlan1 (while UP) [ 118.642345][ T5239] kernel write not supported for file 7794/net/vlan/vlan0 (pid: 5239 comm: kworker/3:3) [ 118.804210][ T7809] netlink: 'syz.0.757': attribute type 29 has an invalid length. [ 118.808018][ T7809] netlink: 'syz.0.757': attribute type 29 has an invalid length. [ 118.812539][ T7809] netlink: 'syz.0.757': attribute type 29 has an invalid length. [ 118.961073][ T7824] loop3: detected capacity change from 0 to 1024 [ 118.964599][ T7824] ext2: Bad value for 'init_itable' [ 118.986545][ T7811] loop1: detected capacity change from 0 to 32768 [ 119.010514][ T7826] kvm: emulating exchange as write [ 119.020136][ T7307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.042355][ T7811] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 119.047333][ T7811] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 119.078104][ T973] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.091053][ T7811] bcachefs (loop1): alloc_read... done [ 119.093293][ T7811] bcachefs (loop1): stripes_read... done [ 119.095601][ T7811] bcachefs (loop1): snapshots_read... done [ 119.101289][ T7811] bcachefs (loop1): going read-write [ 119.110269][ T7811] bcachefs (loop1): journal_replay... done [ 119.140165][ T7811] bcachefs (loop1): resume_logged_ops... done [ 119.143010][ T7811] bcachefs (loop1): delete_dead_inodes... done [ 119.146742][ T7811] bcachefs (loop1): done starting filesystem [ 119.168598][ T7843] netlink: 'syz.3.767': attribute type 29 has an invalid length. [ 119.217233][ T39] audit: type=1800 audit(1719401290.271:57): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.758" name="bus" dev="loop1" ino=536870912 res=0 errno=0 [ 119.232047][ T39] audit: type=1800 audit(1719401290.291:58): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.758" name="bus" dev="loop1" ino=536870912 res=0 errno=0 [ 119.277275][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 119.282354][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 119.288310][ T973] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 119.292021][ T973] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 119.296075][ T973] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 119.299873][ T973] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 119.303448][ T973] usb 7-1: config 1 interface 0 has no altsetting 0 [ 119.305766][ T973] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 119.311491][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.348936][ T973] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 119.353013][ T5471] bcachefs (loop1): shutting down [ 119.355332][ T5471] bcachefs (loop1): going read-only [ 119.360000][ T5471] bcachefs (loop1): finished waiting for writes to stop [ 119.365779][ T5471] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 119.390026][ T5471] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 119.398435][ T5471] bcachefs (loop1): shutdown complete, journal seq 16 [ 119.402170][ T5471] bcachefs (loop1): marking filesystem clean [ 119.436923][ T5471] bcachefs (loop1): shutdown complete [ 119.551845][ T7860] loop0: detected capacity change from 0 to 1024 [ 119.554284][ T973] scsi host6: usb-storage 7-1:1.0 [ 119.556778][ T7860] ext2: Bad value for 'init_itable' [ 119.582216][ T973] usb 7-1: USB disconnect, device number 3 [ 119.596994][ T5262] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.628374][ T7437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.787192][ T5262] usb 8-1: Using ep0 maxpacket: 8 [ 119.800853][ T5262] usb 8-1: config 0 has no interfaces? [ 119.803086][ T5262] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 119.806055][ T5262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.816019][ T5247] libceph: connect (1)[c::]:6789 error -101 [ 119.822416][ T5247] libceph: mon0 (1)[c::]:6789 connect error [ 119.827468][ T5262] usb 8-1: config 0 descriptor?? [ 119.973985][ T7876] loop0: detected capacity change from 0 to 256 [ 119.997416][ T7876] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.033447][ T39] audit: type=1800 audit(1719401291.091:59): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.779" name="bus" dev="loop0" ino=1048626 res=0 errno=0 [ 120.041069][ T39] audit: type=1804 audit(1719401291.101:60): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.779" name="/syzkaller.p8NrnR/99/file1/bus" dev="loop0" ino=1048626 res=1 errno=0 [ 120.049625][ T39] audit: type=1804 audit(1719401291.111:61): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.779" name="/syzkaller.p8NrnR/99/file1/bus" dev="loop0" ino=1048626 res=1 errno=0 [ 120.060821][ T5247] usb 8-1: USB disconnect, device number 3 [ 120.087473][ T10] libceph: connect (1)[c::]:6789 error -101 [ 120.090068][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 120.395197][ T7895] mkiss: ax0: crc mode is auto. [ 120.434155][ T7896] input: syz0 as /devices/virtual/input/input11 [ 120.608084][ T5247] libceph: connect (1)[c::]:6789 error -101 [ 120.609963][ T5247] libceph: mon0 (1)[c::]:6789 connect error [ 120.613068][ T7868] ceph: No mds server is up or the cluster is laggy [ 121.009042][ T7923] mkiss: ax0: crc mode is auto. [ 121.014311][ T973] libceph: connect (1)[c::]:6789 error -101 [ 121.023370][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 121.292891][ T973] libceph: connect (1)[c::]:6789 error -101 [ 121.295736][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 121.829786][ T5262] libceph: connect (1)[c::]:6789 error -101 [ 121.832359][ T5262] libceph: mon0 (1)[c::]:6789 connect error [ 121.852042][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 121.852053][ T39] audit: type=1804 audit(1719401292.911:64): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.812" name="/syzkaller.aGdsV1/176/file0" dev="sda1" ino=1975 res=1 errno=0 [ 121.853000][ T7921] ceph: No mds server is up or the cluster is laggy [ 122.307801][ T7977] loop1: detected capacity change from 0 to 1024 [ 122.310355][ T7977] ext2: Bad value for 'init_itable' [ 122.323564][ T7980] loop0: detected capacity change from 0 to 16 [ 122.326790][ T7980] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 122.329813][ T39] audit: type=1804 audit(1719401293.391:65): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.823" name="/syzkaller.0SFOeU/141/file0" dev="sda1" ino=1988 res=1 errno=0 [ 122.914482][ T39] audit: type=1804 audit(1719401293.971:66): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.834" name="/syzkaller.0SFOeU/147/file0" dev="sda1" ino=1975 res=1 errno=0 [ 123.024024][ T8009] loop0: detected capacity change from 0 to 64 [ 123.119478][ T8009] hfs: request for non-existent node 237 in B*Tree [ 123.122956][ T8009] hfs: request for non-existent node 237 in B*Tree [ 123.280325][ T1092] hfs: request for non-existent node 237 in B*Tree [ 123.283262][ T1092] hfs: request for non-existent node 237 in B*Tree [ 123.310430][ T8017] warning: `syz.3.840' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.700457][ T8028] loop3: detected capacity change from 0 to 1024 [ 123.702039][ T7997] loop1: detected capacity change from 0 to 131072 [ 123.719925][ T7997] F2FS-fs (loop1): invalid crc value [ 123.736857][ T7997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.810098][ T7997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.996119][ T1092] hfsplus: b-tree write err: -5, ino 4 [ 124.033405][ T8033] loop0: detected capacity change from 0 to 512 [ 124.080143][ T8033] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.264433][ T8033] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.845: casefold flag without casefold feature [ 124.317784][ T8033] EXT4-fs (loop0): get root inode failed [ 124.327229][ T8033] EXT4-fs (loop0): mount failed [ 124.411366][ T5251] libceph: connect (1)[c::]:6789 error -101 [ 124.413568][ T5251] libceph: mon0 (1)[c::]:6789 connect error [ 124.677388][ T5251] libceph: connect (1)[c::]:6789 error -101 [ 124.680705][ T5251] libceph: mon0 (1)[c::]:6789 connect error [ 125.008884][ T8050] loop0: detected capacity change from 0 to 32768 [ 125.034984][ T8050] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 125.070488][ T8050] XFS (loop0): Ending clean mount [ 125.197247][ T5251] libceph: connect (1)[c::]:6789 error -101 [ 125.200479][ T5251] libceph: mon0 (1)[c::]:6789 connect error [ 125.214269][ T6267] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 125.304379][ T8042] ceph: No mds server is up or the cluster is laggy [ 125.767678][ T8089] loop0: detected capacity change from 0 to 1024 [ 125.918033][ T95] hfsplus: b-tree write err: -5, ino 4 [ 125.931002][ T8085] loop3: detected capacity change from 0 to 512 [ 125.936290][ T8085] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 125.958625][ T8085] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.860: casefold flag without casefold feature [ 125.979001][ T8085] EXT4-fs (loop3): get root inode failed [ 125.987084][ T8085] EXT4-fs (loop3): mount failed [ 126.297966][ T5251] libceph: connect (1)[c::]:6789 error -101 [ 126.300697][ T5251] libceph: mon0 (1)[c::]:6789 connect error [ 126.312919][ T8100] loop1: detected capacity change from 0 to 32768 [ 126.357860][ T8100] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 126.412362][ T8100] XFS (loop1): Ending clean mount [ 126.528430][ T5471] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 126.529942][ T8126] loop0: detected capacity change from 0 to 1024 [ 126.567261][ T57] libceph: connect (1)[c::]:6789 error -101 [ 126.569858][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 126.667228][ T95] hfsplus: b-tree write err: -5, ino 4 [ 127.063108][ T8104] ceph: No mds server is up or the cluster is laggy [ 127.110204][ T57] libceph: connect (1)[c::]:6789 error -101 [ 127.114430][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 127.300680][ T8134] loop1: detected capacity change from 0 to 512 [ 127.305167][ T8134] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 127.316386][ T8134] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.876: casefold flag without casefold feature [ 127.321333][ T8134] EXT4-fs (loop1): get root inode failed [ 127.323652][ T8134] EXT4-fs (loop1): mount failed [ 127.405954][ T8150] loop0: detected capacity change from 0 to 1024 [ 127.486024][ T63] hfsplus: b-tree write err: -5, ino 4 [ 127.673681][ T8151] loop3: detected capacity change from 0 to 32768 [ 127.704471][ T8151] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 127.754322][ T8182] input: syz0 as /devices/virtual/input/input15 [ 127.840727][ T8151] XFS (loop3): Ending clean mount [ 128.016595][ T8184] loop1: detected capacity change from 0 to 512 [ 128.021009][ T6260] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 128.048815][ T8184] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 128.073090][ T8184] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.895: casefold flag without casefold feature [ 128.095514][ T8193] bridge0: port 3(syz_tun) entered blocking state [ 128.098183][ T8193] bridge0: port 3(syz_tun) entered disabled state [ 128.102203][ T8193] syz_tun: entered allmulticast mode [ 128.104280][ T8184] EXT4-fs (loop1): get root inode failed [ 128.109955][ T8184] EXT4-fs (loop1): mount failed [ 128.114381][ T8193] syz_tun: entered promiscuous mode [ 128.124925][ T8193] bridge0: port 3(syz_tun) entered blocking state [ 128.128786][ T8193] bridge0: port 3(syz_tun) entered forwarding state [ 128.141068][ T8193] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 128.446853][ T8205] loop3: detected capacity change from 0 to 1024 [ 128.478761][ T8205] hfsplus: request for non-existent node 134217728 in B*Tree [ 128.482190][ T8205] hfsplus: request for non-existent node 134217728 in B*Tree [ 128.506520][ T8205] syzkaller0: entered promiscuous mode [ 128.508584][ T8205] syzkaller0: entered allmulticast mode [ 128.653895][ T8209] loop1: detected capacity change from 0 to 32768 [ 128.717439][ T8209] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 128.801973][ T8209] XFS (loop1): Ending clean mount [ 128.989656][ T5471] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 129.006005][ T8228] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 130.660270][ T8234] loop2: detected capacity change from 0 to 512 [ 130.679013][ T8234] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 130.693577][ T8234] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz.2.912: casefold flag without casefold feature [ 130.699532][ T8234] EXT4-fs (loop2): get root inode failed [ 130.701927][ T8234] EXT4-fs (loop2): mount failed [ 131.117079][ T8256] bridge0: port 3(syz_tun) entered blocking state [ 131.120037][ T8256] bridge0: port 3(syz_tun) entered disabled state [ 131.122817][ T8256] syz_tun: entered allmulticast mode [ 131.126391][ T8256] syz_tun: entered promiscuous mode [ 131.130524][ T8258] loop2: detected capacity change from 0 to 1024 [ 131.227564][ T8258] hfsplus: request for non-existent node 134217728 in B*Tree [ 131.238967][ T8258] hfsplus: request for non-existent node 134217728 in B*Tree [ 131.276362][ T8258] syzkaller0: entered promiscuous mode [ 131.279109][ T8258] syzkaller0: entered allmulticast mode [ 131.911422][ T8271] loop1: detected capacity change from 0 to 512 [ 131.917576][ T8271] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 131.928692][ T8271] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.929: casefold flag without casefold feature [ 131.940605][ T8271] EXT4-fs (loop1): get root inode failed [ 131.943058][ T8271] EXT4-fs (loop1): mount failed [ 132.821459][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824051][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.348332][ T8283] bridge0: port 2(syz_tun) entered blocking state [ 133.354759][ T8283] bridge0: port 2(syz_tun) entered disabled state [ 133.357964][ T8283] syz_tun: entered allmulticast mode [ 133.362019][ T8283] syz_tun: entered promiscuous mode [ 133.769188][ T8298] loop3: detected capacity change from 0 to 32768 [ 133.807278][ T8307] loop2: detected capacity change from 0 to 1024 [ 133.819963][ T8301] loop0: detected capacity change from 0 to 512 [ 133.848891][ T8301] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 133.864251][ T8301] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.942: casefold flag without casefold feature [ 133.875226][ T8301] EXT4-fs (loop0): get root inode failed [ 133.877476][ T8301] EXT4-fs (loop0): mount failed [ 133.885868][ T8307] hfsplus: request for non-existent node 134217728 in B*Tree [ 133.888883][ T8307] hfsplus: request for non-existent node 134217728 in B*Tree [ 133.916654][ T8307] syzkaller0: entered promiscuous mode [ 133.918583][ T8307] syzkaller0: entered allmulticast mode [ 134.044934][ T8312] loop0: detected capacity change from 0 to 256 [ 134.048809][ T8312] exFAT-fs (loop0): bogus number of FAT structure [ 134.053395][ T8312] exFAT-fs (loop0): failed to read boot sector [ 134.056157][ T8312] exFAT-fs (loop0): failed to recognize exfat type [ 134.127815][ T7307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.769573][ T8336] loop0: detected capacity change from 0 to 32768 [ 136.103419][ T8360] loop3: detected capacity change from 0 to 64 [ 136.154458][ T8360] hfs: request for non-existent node 237 in B*Tree [ 136.157259][ T8360] hfs: request for non-existent node 237 in B*Tree [ 136.170596][ T8363] kernel read not supported for file /eth0 (pid: 8363 comm: syz.1.965) [ 136.177095][ T39] audit: type=1800 audit(1719401307.227:67): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.965" name="eth0" dev="mqueue" ino=24780 res=0 errno=0 [ 136.224784][ T1149] hfs: request for non-existent node 237 in B*Tree [ 136.228257][ T1149] hfs: request for non-existent node 237 in B*Tree [ 136.245832][ T5247] kernel read not supported for file /eth0 (pid: 5247 comm: kworker/0:4) [ 136.359352][ T8369] loop1: detected capacity change from 0 to 1024 [ 136.397543][ T8369] hfsplus: request for non-existent node 134217728 in B*Tree [ 136.400916][ T8369] hfsplus: request for non-existent node 134217728 in B*Tree [ 136.447088][ T8369] syzkaller0: entered promiscuous mode [ 136.449509][ T8369] syzkaller0: entered allmulticast mode [ 136.629408][ T8372] loop3: detected capacity change from 0 to 512 [ 136.671159][ T8372] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 136.784557][ T8372] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.968: casefold flag without casefold feature [ 136.790766][ T8372] EXT4-fs (loop3): get root inode failed [ 136.796716][ T8372] EXT4-fs (loop3): mount failed [ 136.855824][ T8364] loop2: detected capacity change from 0 to 131072 [ 136.864452][ T8364] F2FS-fs (loop2): invalid crc value [ 136.878850][ T8364] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.926613][ T8364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 138.066055][ T8393] loop2: detected capacity change from 0 to 64 [ 138.159857][ T8393] hfs: request for non-existent node 237 in B*Tree [ 138.162195][ T8393] hfs: request for non-existent node 237 in B*Tree [ 138.272908][ T1123] hfs: request for non-existent node 237 in B*Tree [ 138.275467][ T1123] hfs: request for non-existent node 237 in B*Tree [ 138.367117][ T8395] kernel read not supported for file /eth0 (pid: 8395 comm: syz.2.978) [ 138.370627][ T39] audit: type=1800 audit(1719401309.426:68): pid=8395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.978" name="eth0" dev="mqueue" ino=23033 res=0 errno=0 [ 138.429219][ T5247] kernel read not supported for file /eth0 (pid: 5247 comm: kworker/0:4) [ 138.845957][ T8404] loop2: detected capacity change from 0 to 512 [ 138.851661][ T8404] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 138.860728][ T8404] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz.2.982: casefold flag without casefold feature [ 138.872458][ T8404] EXT4-fs (loop2): get root inode failed [ 138.874811][ T8404] EXT4-fs (loop2): mount failed [ 139.007627][ T8410] loop3: detected capacity change from 0 to 32768 [ 139.298357][ T8423] loop3: detected capacity change from 0 to 64 [ 139.299191][ T8419] kernel read not supported for file /eth0 (pid: 8419 comm: syz.0.988) [ 139.306610][ T39] audit: type=1800 audit(1719401310.365:69): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.988" name="eth0" dev="mqueue" ino=24943 res=0 errno=0 [ 139.359150][ T8423] hfs: request for non-existent node 237 in B*Tree [ 139.364360][ T8423] hfs: request for non-existent node 237 in B*Tree [ 139.374496][ T5247] kernel read not supported for file /eth0 (pid: 5247 comm: kworker/0:4) [ 139.437342][ T1123] hfs: request for non-existent node 237 in B*Tree [ 139.440214][ T1123] hfs: request for non-existent node 237 in B*Tree [ 139.507587][ T8429] loop0: detected capacity change from 0 to 1024 [ 139.555779][ T8429] hfsplus: request for non-existent node 134217728 in B*Tree [ 139.558556][ T8429] hfsplus: request for non-existent node 134217728 in B*Tree [ 139.614428][ T8408] loop1: detected capacity change from 0 to 131072 [ 139.621577][ T8429] syzkaller0: entered promiscuous mode [ 139.625793][ T8429] syzkaller0: entered allmulticast mode [ 139.628287][ T8408] F2FS-fs (loop1): invalid crc value [ 139.636111][ T8408] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.668988][ T8408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 139.815590][ T5239] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 140.002914][ T5239] usb 7-1: Using ep0 maxpacket: 8 [ 140.005794][ T8442] loop3: detected capacity change from 0 to 512 [ 140.014465][ T8442] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 140.018710][ T5239] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.028564][ T5239] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.031305][ T8442] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.995: casefold flag without casefold feature [ 140.032375][ T5239] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.048331][ T8442] EXT4-fs (loop3): get root inode failed [ 140.049765][ T5239] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.050320][ T8442] EXT4-fs (loop3): mount failed [ 140.057073][ T5239] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.060475][ T5239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.286274][ T5239] usb 7-1: GET_CAPABILITIES returned 0 [ 140.288823][ T5239] usbtmc 7-1:16.0: can't read capabilities [ 140.458077][ T8446] loop1: detected capacity change from 0 to 32768 [ 140.542345][ T5247] usb 7-1: USB disconnect, device number 4 [ 141.083635][ T8455] loop2: detected capacity change from 0 to 256 [ 141.088257][ T8455] exFAT-fs (loop2): bogus number of FAT structure [ 141.093018][ T8455] exFAT-fs (loop2): failed to read boot sector [ 141.096308][ T8455] exFAT-fs (loop2): failed to recognize exfat type [ 141.199674][ T8459] kernel read not supported for file /eth0 (pid: 8459 comm: syz.2.1001) [ 141.203109][ T39] audit: type=1800 audit(1719401312.254:70): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1001" name="eth0" dev="mqueue" ino=23033 res=0 errno=0 [ 141.259395][ T5239] kernel read not supported for file /eth0 (pid: 5239 comm: kworker/3:3) [ 141.957770][ T8471] loop0: detected capacity change from 0 to 32768 [ 142.057629][ T8480] loop3: detected capacity change from 0 to 256 [ 142.075512][ T8480] exFAT-fs (loop3): bogus number of FAT structure [ 142.078418][ T8480] exFAT-fs (loop3): failed to read boot sector [ 142.080975][ T8480] exFAT-fs (loop3): failed to recognize exfat type [ 142.325525][ T5247] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.522723][ T8468] loop2: detected capacity change from 0 to 131072 [ 142.524591][ T5247] usb 6-1: Using ep0 maxpacket: 8 [ 142.535959][ T5247] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.540057][ T5247] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.542776][ T8468] F2FS-fs (loop2): invalid crc value [ 142.547536][ T5247] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.551397][ T5247] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.555882][ T8468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.560017][ T5247] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.565365][ T8487] Bluetooth: MGMT ver 1.22 [ 142.570187][ T5247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.614380][ T8468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 142.760397][ T8500] loop0: detected capacity change from 0 to 1024 [ 142.804141][ T5247] usb 6-1: GET_CAPABILITIES returned 0 [ 142.806120][ T5247] usbtmc 6-1:16.0: can't read capabilities [ 142.821889][ T8500] hfsplus: request for non-existent node 134217728 in B*Tree [ 142.828392][ T8500] hfsplus: request for non-existent node 134217728 in B*Tree [ 142.878130][ T8500] syzkaller0: entered promiscuous mode [ 142.880645][ T8500] syzkaller0: entered allmulticast mode [ 143.013625][ T5251] usb 6-1: USB disconnect, device number 4 [ 143.252707][ T8507] loop3: detected capacity change from 0 to 256 [ 143.257548][ T8507] exFAT-fs (loop3): bogus number of FAT structure [ 143.260293][ T8507] exFAT-fs (loop3): failed to read boot sector [ 143.262421][ T8507] exFAT-fs (loop3): failed to recognize exfat type [ 144.580299][ T8521] loop1: detected capacity change from 0 to 131072 [ 144.600075][ T8521] F2FS-fs (loop1): invalid crc value [ 144.618695][ T8521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.646991][ T8536] loop2: detected capacity change from 0 to 256 [ 144.655881][ T8536] exFAT-fs (loop2): bogus number of FAT structure [ 144.658248][ T8536] exFAT-fs (loop2): failed to read boot sector [ 144.666250][ T8536] exFAT-fs (loop2): failed to recognize exfat type [ 144.684449][ T8521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 144.724105][ T7307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 145.680544][ T8569] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 145.683732][ T8569] PKCS7: Only support pkcs7_signedData type [ 145.763655][ T8573] loop0: detected capacity change from 0 to 2048 [ 145.780439][ T8573] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.809936][ T8574] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.965971][ T5251] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.171356][ T5251] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 146.175483][ T5251] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.181804][ T5251] usb 7-1: config 0 descriptor?? [ 146.188702][ T5251] usb 7-1: selecting invalid altsetting 1 [ 146.196654][ T8561] loop1: detected capacity change from 0 to 131072 [ 146.207644][ T8561] F2FS-fs (loop1): invalid crc value [ 146.219975][ T8561] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.245865][ T5251] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 146.270205][ T7307] udevd[7307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.283387][ T8561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 146.526584][ T8596] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 146.529561][ T8596] PKCS7: Only support pkcs7_signedData type [ 146.593753][ T8592] loop0: detected capacity change from 0 to 40427 [ 146.602935][ T8592] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 146.606652][ T8592] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 146.615802][ T8598] loop3: detected capacity change from 0 to 2048 [ 146.618258][ T8592] F2FS-fs (loop0): invalid crc value [ 146.632477][ T8598] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 146.638437][ T8592] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.666362][ T8603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.681920][ T8592] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 146.685029][ T8592] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.740761][ T6267] syz-executor: attempt to access beyond end of device [ 146.740761][ T6267] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.762922][ T6267] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 147.294907][ T8623] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 147.299294][ T8623] PKCS7: Only support pkcs7_signedData type [ 147.457164][ T8629] loop0: detected capacity change from 0 to 2048 [ 147.462266][ T8629] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.483218][ T8630] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.777552][ T8634] loop0: detected capacity change from 0 to 40427 [ 147.788247][ T8634] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 147.790862][ T8634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.799464][ T8634] F2FS-fs (loop0): invalid crc value [ 147.819870][ T8634] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.834174][ T8645] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 147.836471][ T8645] PKCS7: Only support pkcs7_signedData type [ 147.861657][ T8634] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 147.864849][ T8634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.917037][ T6267] syz-executor: attempt to access beyond end of device [ 147.917037][ T6267] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.923849][ T6267] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 148.299861][ T8664] loop0: detected capacity change from 0 to 2048 [ 148.304942][ T8664] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.315548][ T8665] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.525471][ T39] audit: type=1800 audit(1719401319.570:71): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1083" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 148.552243][ T8673] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 148.557177][ T8673] PKCS7: Only support pkcs7_signedData type [ 148.707926][ T973] usb 7-1: USB disconnect, device number 5 [ 148.840843][ T8687] loop1: detected capacity change from 0 to 2048 [ 148.856148][ T8687] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.877591][ T8692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.959803][ T8676] loop3: detected capacity change from 0 to 40427 [ 148.967475][ T8676] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 148.970186][ T8676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.974579][ T8676] F2FS-fs (loop3): invalid crc value [ 148.979026][ T8676] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.009237][ T8676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.015253][ T8676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.079246][ T6260] syz-executor: attempt to access beyond end of device [ 149.079246][ T6260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.085936][ T6260] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.112829][ T39] audit: type=1800 audit(1719401320.160:72): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1094" name="bus" dev="sda1" ino=1986 res=0 errno=0 [ 149.587010][ T8722] loop2: detected capacity change from 0 to 40427 [ 149.601515][ T8722] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 149.608018][ T8722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.611977][ T8722] F2FS-fs (loop2): invalid crc value [ 149.616561][ T8722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.618840][ T5239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.657841][ T39] audit: type=1800 audit(1719401320.700:73): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1111" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 149.671024][ T8722] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.673892][ T8722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.776331][ T6341] syz-executor: attempt to access beyond end of device [ 149.776331][ T6341] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.787907][ T6341] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.828952][ T5239] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 149.832749][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.837173][ T5239] usb 6-1: config 0 descriptor?? [ 149.844863][ T5239] usb 6-1: selecting invalid altsetting 1 [ 149.876599][ T5239] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 149.910548][ T7307] udevd[7307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.095731][ T39] audit: type=1800 audit(1719401321.140:74): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1121" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 150.451506][ T8765] loop2: detected capacity change from 0 to 40427 [ 150.463271][ T8765] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 150.466606][ T8765] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.482343][ T8765] F2FS-fs (loop2): invalid crc value [ 150.507049][ T8765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.551001][ T8765] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.553450][ T8765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.624576][ T6341] syz-executor: attempt to access beyond end of device [ 150.624576][ T6341] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.635506][ T6341] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.826995][ T39] audit: type=1800 audit(1719401321.869:75): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1132" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 151.384855][ T8819] loop0: detected capacity change from 0 to 2048 [ 151.396689][ T8819] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 151.871800][ T8837] loop2: detected capacity change from 0 to 2048 [ 151.899698][ T8837] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.144716][ T8853] loop2: detected capacity change from 0 to 16 [ 152.159203][ T8853] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.167526][ T8853] syz.2.1159: attempt to access beyond end of device [ 152.167526][ T8853] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 152.282887][ T8862] loop3: detected capacity change from 0 to 2048 [ 152.293576][ T8862] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.354081][ T816] usb 6-1: USB disconnect, device number 5 [ 152.594426][ T8881] loop1: detected capacity change from 0 to 16 [ 152.599735][ T8881] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.616556][ T8881] syz.1.1172: attempt to access beyond end of device [ 152.616556][ T8881] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 152.695151][ T8887] loop1: detected capacity change from 0 to 2048 [ 152.717082][ T8887] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.856013][ T8899] capability: warning: `syz.3.1182' uses deprecated v2 capabilities in a way that may be insecure [ 152.911857][ T8905] loop1: detected capacity change from 0 to 16 [ 152.920628][ T8905] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.942575][ T8905] syz.1.1184: attempt to access beyond end of device [ 152.942575][ T8905] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 152.969447][ T973] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.092876][ T8914] loop0: detected capacity change from 0 to 2048 [ 153.101413][ T8914] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 153.189664][ T973] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 153.192784][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.201736][ T973] usb 7-1: config 0 descriptor?? [ 153.205846][ T973] usb 7-1: selecting invalid altsetting 1 [ 153.259111][ T973] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 153.261087][ T8927] loop3: detected capacity change from 0 to 16 [ 153.276648][ T8927] erofs: (device loop3): mounted with root inode @ nid 36. [ 153.292121][ T7307] udevd[7307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.307363][ T8927] syz.3.1196: attempt to access beyond end of device [ 153.307363][ T8927] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 153.438943][ T8940] input: syz1 as /devices/virtual/input/input18 [ 153.523725][ T8946] loop1: detected capacity change from 0 to 512 [ 153.529458][ T8946] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1204: corrupted in-inode xattr: invalid ea_ino [ 153.539386][ T8946] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1204: couldn't read orphan inode 15 (err -117) [ 153.554115][ T8946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.687747][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.823427][ T8963] loop1: detected capacity change from 0 to 16 [ 153.835037][ T8963] erofs: (device loop1): mounted with root inode @ nid 36. [ 153.874546][ T8963] syz.1.1208: attempt to access beyond end of device [ 153.874546][ T8963] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 153.998966][ T8969] input: syz1 as /devices/virtual/input/input19 [ 154.097854][ T8977] loop1: detected capacity change from 0 to 512 [ 154.118792][ T8977] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1217: corrupted in-inode xattr: invalid ea_ino [ 154.124251][ T8977] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1217: couldn't read orphan inode 15 (err -117) [ 154.144186][ T8977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.311270][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.426851][ T9002] input: syz1 as /devices/virtual/input/input20 [ 154.519968][ T9011] __nla_validate_parse: 13 callbacks suppressed [ 154.519985][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 154.558655][ T9013] loop1: detected capacity change from 0 to 512 [ 154.566426][ T9013] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1234: corrupted in-inode xattr: invalid ea_ino [ 154.571647][ T9013] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1234: couldn't read orphan inode 15 (err -117) [ 154.577147][ T9013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.650370][ T816] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 154.694785][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.850351][ T816] usb 8-1: Using ep0 maxpacket: 32 [ 154.855274][ T816] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 154.858746][ T816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.862560][ T816] usb 8-1: Product: syz [ 154.864395][ T816] usb 8-1: Manufacturer: syz [ 154.866555][ T816] usb 8-1: SerialNumber: syz [ 154.871739][ T816] usb 8-1: config 0 descriptor?? [ 155.018591][ T9026] input: syz1 as /devices/virtual/input/input21 [ 155.200390][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 155.246168][ T9034] loop1: detected capacity change from 0 to 512 [ 155.258154][ T9034] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1244: corrupted in-inode xattr: invalid ea_ino [ 155.264950][ T9034] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1244: couldn't read orphan inode 15 (err -117) [ 155.272323][ T9034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.403476][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.584360][ T9049] input: syz1 as /devices/virtual/input/input22 [ 155.617711][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 155.626339][ T816] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:36:10:7f:21:cc [ 155.652135][ T816] rtl8150 8-1:0.0: eth2: rtl8150 is detected [ 155.693876][ T816] usb 7-1: USB disconnect, device number 6 [ 155.694237][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 155.757579][ T9061] loop0: detected capacity change from 0 to 512 [ 155.767819][ T9061] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.1255: corrupted in-inode xattr: invalid ea_ino [ 155.774231][ T9061] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1255: couldn't read orphan inode 15 (err -117) [ 155.780392][ T9061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.837148][ T5262] usb 8-1: USB disconnect, device number 4 [ 155.972581][ T6267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.052746][ T9078] loop2: detected capacity change from 0 to 4096 [ 156.089256][ T9083] loop0: detected capacity change from 0 to 16 [ 156.101768][ T9083] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 156.115028][ T9078] ntfs3: loop2: failed to convert "0080" to cp437 [ 156.118422][ T9078] ntfs3: loop2: failed to convert name for inode 1e. [ 156.134382][ T9083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.353618][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 156.480172][ T9087] loop2: detected capacity change from 0 to 32768 [ 156.569328][ T9112] loop1: detected capacity change from 0 to 16 [ 156.569811][ T9087] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 156.573018][ T9112] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 156.583953][ T9087] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 156.600868][ T9087] bcachefs (loop2): alloc_read... done [ 156.603610][ T9087] bcachefs (loop2): stripes_read... done [ 156.605608][ T9087] bcachefs (loop2): snapshots_read... done [ 156.608886][ T9087] bcachefs (loop2): journal_replay... done [ 156.610426][ T9110] loop0: detected capacity change from 0 to 4096 [ 156.611839][ T9087] bcachefs (loop2): resume_logged_ops... done [ 156.617307][ T9087] bcachefs (loop2): going read-write [ 156.620335][ T9112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.624196][ T9087] bcachefs (loop2): done starting filesystem [ 156.687157][ T816] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 156.720061][ T9110] ntfs3: loop0: failed to convert "0080" to cp437 [ 156.725066][ T9110] ntfs3: loop0: failed to convert name for inode 1e. [ 156.728922][ T6341] bcachefs (loop2): shutting down [ 156.731005][ T6341] bcachefs (loop2): going read-only [ 156.732948][ T6341] bcachefs (loop2): finished waiting for writes to stop [ 156.735921][ T6341] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 156.748571][ T6341] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 156.755448][ T6341] bcachefs (loop2): shutdown complete, journal seq 15 [ 156.759207][ T6341] bcachefs (loop2): marking filesystem clean [ 156.790230][ T6341] bcachefs (loop2): shutdown complete [ 156.830420][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 156.888692][ T816] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 156.892846][ T816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.898378][ T816] usb 8-1: config 0 descriptor?? [ 156.907283][ T816] usb 8-1: selecting invalid altsetting 1 [ 156.918233][ T39] audit: type=1800 audit(1719401327.956:76): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1276" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 156.949685][ T9124] loop1: detected capacity change from 0 to 256 [ 156.958496][ T9124] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 156.971150][ T816] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 157.002148][ T7307] udevd[7307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.013122][ T7437] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 157.034397][ T39] audit: type=1804 audit(1719401328.076:77): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1276" name="/syzkaller.aGdsV1/293/bus" dev="sda1" ino=1983 res=1 errno=0 [ 157.073669][ T9124] tipc: Started in network mode [ 157.075774][ T9124] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 157.079682][ T9124] tipc: Enabled bearer , priority 10 [ 157.089129][ T9124] tipc: Resetting bearer [ 157.159327][ T9124] tipc: Disabling bearer [ 157.321642][ T9139] loop1: detected capacity change from 0 to 16 [ 157.324491][ T9139] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 157.349415][ T9139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.354900][ T1279] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 157.551737][ T1279] usb 7-1: Using ep0 maxpacket: 32 [ 157.553158][ T9140] loop0: detected capacity change from 0 to 32768 [ 157.557747][ T1279] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 157.561911][ T1279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.567815][ T1279] usb 7-1: Product: syz [ 157.569817][ T1279] usb 7-1: Manufacturer: syz [ 157.572032][ T1279] usb 7-1: SerialNumber: syz [ 157.578464][ T1279] usb 7-1: config 0 descriptor?? [ 157.607645][ T9143] loop1: detected capacity change from 0 to 4096 [ 157.679660][ T9140] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 157.688234][ T9140] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 157.725206][ T9140] bcachefs (loop0): alloc_read... done [ 157.726249][ T9143] ntfs3: loop1: failed to convert "0080" to cp437 [ 157.727542][ T9140] bcachefs (loop0): stripes_read... [ 157.730409][ T9143] ntfs3: loop1: failed to convert name for inode 1e. [ 157.736418][ T9140] done [ 157.737778][ T9140] bcachefs (loop0): snapshots_read... done [ 157.743454][ T9140] bcachefs (loop0): journal_replay... done [ 157.746107][ T9140] bcachefs (loop0): resume_logged_ops... done [ 157.753963][ T9140] bcachefs (loop0): going read-write [ 157.775272][ T9140] bcachefs (loop0): done starting filesystem [ 157.885984][ T9157] syz.1.1286 (pid 9157) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 157.924252][ T6267] bcachefs (loop0): shutting down [ 157.926117][ T6267] bcachefs (loop0): going read-only [ 157.927930][ T6267] bcachefs (loop0): finished waiting for writes to stop [ 157.933285][ T6267] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 157.952675][ T6267] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 157.961261][ T6267] bcachefs (loop0): shutdown complete, journal seq 16 [ 157.965161][ T6267] bcachefs (loop0): marking filesystem clean [ 157.983919][ T6267] bcachefs (loop0): shutdown complete [ 158.019599][ T9157] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 158.266276][ T39] audit: type=1800 audit(1719401329.306:78): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1290" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 158.304221][ T9172] loop1: detected capacity change from 0 to 256 [ 158.322300][ T9172] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 158.344772][ T39] audit: type=1804 audit(1719401329.396:79): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1290" name="/syzkaller.aGdsV1/301/bus" dev="sda1" ino=1983 res=1 errno=0 [ 158.351951][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 158.371933][ T1279] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:50:ae:fe:4c:19 [ 158.373146][ T9172] tipc: Enabling of bearer rejected, failed to enable media [ 158.385609][ T1279] rtl8150 7-1:0.0: eth2: rtl8150 is detected [ 158.532554][ T9185] loop0: detected capacity change from 0 to 16 [ 158.535539][ T9185] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 158.542524][ T9182] loop1: detected capacity change from 0 to 4096 [ 158.572886][ T9185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.582447][ T5241] usb 7-1: USB disconnect, device number 7 [ 158.639094][ T9182] ntfs3: loop1: failed to convert "0080" to cp437 [ 158.641936][ T9182] ntfs3: loop1: failed to convert name for inode 1e. [ 158.908559][ T9193] loop0: detected capacity change from 0 to 32768 [ 158.986787][ T9193] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 158.997024][ T9193] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 159.036746][ T9193] bcachefs (loop0): alloc_read... done [ 159.038725][ T9193] bcachefs (loop0): stripes_read... done [ 159.044511][ T9193] bcachefs (loop0): snapshots_read... done [ 159.048206][ T9193] bcachefs (loop0): journal_replay... done [ 159.050413][ T9193] bcachefs (loop0): resume_logged_ops... done [ 159.054942][ T9193] bcachefs (loop0): going read-write [ 159.059295][ T9193] bcachefs (loop0): done starting filesystem [ 159.130847][ T39] audit: type=1800 audit(1719401330.175:80): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1301" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 159.142807][ T9221] loop2: detected capacity change from 0 to 256 [ 159.155750][ T9221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 159.224150][ T6267] bcachefs (loop0): shutting down [ 159.229467][ T6267] bcachefs (loop0): going read-only [ 159.232084][ T6267] bcachefs (loop0): finished waiting for writes to stop [ 159.246642][ T6267] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 159.258160][ T39] audit: type=1804 audit(1719401330.305:81): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1301" name="/syzkaller.MXF5Og/199/bus" dev="sda1" ino=1989 res=1 errno=0 [ 159.274535][ T9225] loop1: detected capacity change from 0 to 16 [ 159.286887][ T9225] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 159.302346][ T6267] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 159.304838][ T9221] tipc: Started in network mode [ 159.308646][ T9221] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 159.311964][ T6267] bcachefs (loop0): shutdown complete, journal seq 15 [ 159.312350][ T9221] tipc: Enabled bearer , priority 10 [ 159.316402][ T6267] bcachefs (loop0): marking filesystem clean [ 159.332961][ T6267] bcachefs (loop0): shutdown complete [ 159.337593][ T9225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.353560][ T9221] tipc: Resetting bearer [ 159.382116][ T9221] tipc: Disabling bearer [ 159.447210][ T5262] usb 8-1: USB disconnect, device number 5 [ 159.877107][ T9246] loop0: detected capacity change from 0 to 4096 [ 159.954418][ T9246] ntfs3: loop0: failed to convert "0080" to cp437 [ 159.956653][ T9246] ntfs3: loop0: failed to convert name for inode 1e. [ 159.960937][ T9242] loop1: detected capacity change from 0 to 32768 [ 159.983663][ T9250] loop3: detected capacity change from 0 to 64 [ 160.012925][ T1279] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 160.046241][ T9242] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 160.054928][ T9242] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 160.079203][ T9242] bcachefs (loop1): alloc_read... done [ 160.081675][ T9242] bcachefs (loop1): stripes_read... done [ 160.084892][ T9242] bcachefs (loop1): snapshots_read... done [ 160.091344][ T9242] bcachefs (loop1): journal_replay... done [ 160.093988][ T9242] bcachefs (loop1): resume_logged_ops... done [ 160.112753][ T9242] bcachefs (loop1): going read-write [ 160.118615][ T9242] bcachefs (loop1): done starting filesystem [ 160.205254][ T1279] usb 7-1: Using ep0 maxpacket: 32 [ 160.217819][ T1279] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 160.222243][ T1279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.236055][ T1279] usb 7-1: Product: syz [ 160.237996][ T1279] usb 7-1: Manufacturer: syz [ 160.240108][ T1279] usb 7-1: SerialNumber: syz [ 160.251115][ T1279] usb 7-1: config 0 descriptor?? [ 160.299483][ T5471] bcachefs (loop1): shutting down [ 160.302342][ T5471] bcachefs (loop1): going read-only [ 160.313273][ T5471] bcachefs (loop1): finished waiting for writes to stop [ 160.320464][ T5471] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 160.355155][ T9270] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1319'. [ 160.359373][ T5471] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 160.368703][ T5471] bcachefs (loop1): shutdown complete, journal seq 15 [ 160.372279][ T5471] bcachefs (loop1): marking filesystem clean [ 160.398698][ T5471] bcachefs (loop1): shutdown complete [ 160.412625][ T39] audit: type=1800 audit(1719401331.455:82): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1320" name="bus" dev="sda1" ino=1985 res=0 errno=0 [ 160.434762][ T9272] loop3: detected capacity change from 0 to 256 [ 160.449038][ T9272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 160.564381][ T39] audit: type=1804 audit(1719401331.604:83): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1320" name="/syzkaller.0SFOeU/278/bus" dev="sda1" ino=1985 res=1 errno=0 [ 160.602059][ T9272] tipc: Started in network mode [ 160.605168][ T9272] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 160.608062][ T9272] tipc: Enabled bearer , priority 10 [ 160.626468][ T9272] tipc: Resetting bearer [ 160.676323][ T9272] tipc: Disabling bearer [ 161.025858][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 161.047868][ T1279] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:47:89:cb:57:8e [ 161.072637][ T1279] rtl8150 7-1:0.0: eth2: rtl8150 is detected [ 161.240753][ T9301] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1330'. [ 161.279547][ T5239] usb 7-1: USB disconnect, device number 8 [ 161.354472][ T39] audit: type=1800 audit(1719401332.404:84): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1332" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 161.361981][ T9294] loop1: detected capacity change from 0 to 32768 [ 161.389946][ T9308] loop3: detected capacity change from 0 to 256 [ 161.399413][ T9308] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 161.456353][ T39] audit: type=1804 audit(1719401332.504:85): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1332" name="/syzkaller.0SFOeU/286/bus" dev="sda1" ino=1987 res=1 errno=0 [ 161.488001][ T9294] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 161.496300][ T9308] tipc: Enabling of bearer rejected, failed to enable media [ 161.498546][ T9294] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 161.522236][ T9294] bcachefs (loop1): alloc_read... done [ 161.553657][ T9294] bcachefs (loop1): stripes_read... done [ 161.556021][ T9294] bcachefs (loop1): snapshots_read... done [ 161.566823][ T9294] bcachefs (loop1): journal_replay... done [ 161.579521][ T9294] bcachefs (loop1): resume_logged_ops... done [ 161.591025][ T9294] bcachefs (loop1): going read-write [ 161.596376][ T9294] bcachefs (loop1): done starting filesystem [ 161.711441][ T5471] bcachefs (loop1): shutting down [ 161.713389][ T5471] bcachefs (loop1): going read-only [ 161.717514][ T5471] bcachefs (loop1): finished waiting for writes to stop [ 161.721375][ T5471] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 161.731409][ T5471] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 161.738168][ T5471] bcachefs (loop1): shutdown complete, journal seq 14 [ 161.741503][ T5471] bcachefs (loop1): marking filesystem clean [ 161.759450][ T5471] bcachefs (loop1): shutdown complete [ 162.074138][ T9341] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1339'. [ 162.153564][ T39] audit: type=1800 audit(1719401333.194:86): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1342" name="bus" dev="sda1" ino=1985 res=0 errno=0 [ 162.185787][ T9347] loop3: detected capacity change from 0 to 256 [ 162.194626][ T9347] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 162.266157][ T7307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 162.312920][ T39] audit: type=1804 audit(1719401333.354:87): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1342" name="/syzkaller.0SFOeU/292/bus" dev="sda1" ino=1985 res=1 errno=0 [ 162.371395][ T9347] tipc: Enabling of bearer rejected, failed to enable media [ 162.613613][ T9354] loop2: detected capacity change from 0 to 32768 [ 162.627378][ T9354] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.680668][ T9354] XFS (loop2): Ending clean mount [ 162.687048][ T9354] XFS (loop2): Quotacheck needed: Please wait. [ 162.714587][ T5247] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 162.718126][ T9354] XFS (loop2): Quotacheck: Done. [ 162.797618][ T6341] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.919148][ T5247] usb 8-1: Using ep0 maxpacket: 32 [ 162.925892][ T5247] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 162.929437][ T5247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.932865][ T5247] usb 8-1: Product: syz [ 162.934829][ T5247] usb 8-1: Manufacturer: syz [ 162.936777][ T5247] usb 8-1: SerialNumber: syz [ 162.943494][ T5247] usb 8-1: config 0 descriptor?? [ 163.273934][ T9374] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1350'. [ 163.348545][ T9378] loop0: detected capacity change from 0 to 512 [ 163.352551][ T9378] ext4: Unknown parameter 'obj_user' [ 163.424239][ T7760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.736987][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 163.756289][ T5247] (unnamed net_device) (uninitialized): Assigned a random MAC address: c2:ac:f2:0c:d8:04 [ 163.769226][ T5247] rtl8150 8-1:0.0: eth2: rtl8150 is detected [ 163.857794][ T9385] loop2: detected capacity change from 0 to 32768 [ 163.883608][ T9385] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.969177][ T9385] XFS (loop2): Ending clean mount [ 163.976865][ T9385] XFS (loop2): Quotacheck needed: Please wait. [ 163.977291][ T4918] net eth2: rx_urb submit failed: -2 [ 163.986293][ T5239] usb 8-1: USB disconnect, device number 6 [ 164.018232][ T9385] XFS (loop2): Quotacheck: Done. [ 164.133622][ T9417] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1360'. [ 164.162919][ T6341] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.415255][ T9426] loop0: detected capacity change from 0 to 512 [ 164.418669][ T9426] ext4: Unknown parameter 'obj_user' [ 164.487252][ T7307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.833863][ T9443] loop2: detected capacity change from 0 to 512 [ 164.847767][ T9439] loop3: detected capacity change from 0 to 32768 [ 164.852388][ T9439] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1369 (9439) [ 164.852880][ T9443] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.864674][ T9441] loop0: detected capacity change from 0 to 32768 [ 164.883004][ T9439] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 164.883155][ T9441] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.888218][ T9439] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 164.893246][ T9439] BTRFS info (device loop3): using free-space-tree [ 164.934495][ T9443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1371: bg 0: block 64: padding at end of block bitmap is not set [ 164.944613][ T9443] Quota error (device loop2): write_blk: dquota write failed [ 164.948884][ T9443] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 164.953247][ T9443] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.1371: Failed to acquire dquot type 0 [ 164.962435][ T9443] EXT4-fs (loop2): 1 truncate cleaned up [ 164.968912][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.024320][ T9443] Quota error (device loop2): write_blk: dquota write failed [ 165.030033][ T9441] XFS (loop0): Ending clean mount [ 165.030711][ T6260] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 165.032734][ T9443] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 165.041647][ T9443] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.1371: Failed to acquire dquot type 0 [ 165.067405][ T9441] XFS (loop0): Quotacheck needed: Please wait. [ 165.204003][ T9441] XFS (loop0): Quotacheck: Done. [ 165.403702][ T6267] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.510572][ T9484] loop3: detected capacity change from 0 to 128 [ 165.589596][ T7760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.607176][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.760437][ T9490] loop2: detected capacity change from 0 to 512 [ 165.763990][ T9490] ext4: Unknown parameter 'obj_user' [ 165.807395][ T7307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 166.017718][ T9494] loop1: detected capacity change from 0 to 32768 [ 166.023959][ T9494] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1381 (9494) [ 166.034882][ T9494] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 166.038850][ T9494] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.042767][ T9494] BTRFS info (device loop1): using free-space-tree [ 166.251113][ T5471] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 166.542129][ T9519] binder: 9518:9519 ioctl c0046209 0 returned -22 [ 166.545045][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'. [ 166.548764][ T9519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'. [ 166.761184][ T9522] loop1: detected capacity change from 0 to 32768 [ 166.799114][ T9522] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.848257][ T9522] XFS (loop1): Ending clean mount [ 166.851489][ T9522] XFS (loop1): Quotacheck needed: Please wait. [ 166.920293][ T9522] XFS (loop1): Quotacheck: Done. [ 167.007421][ T5471] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.009452][ T9540] loop3: detected capacity change from 0 to 512 [ 167.017847][ T9540] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.041704][ T9540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1390: bg 0: block 64: padding at end of block bitmap is not set [ 167.051026][ T9540] Quota error (device loop3): write_blk: dquota write failed [ 167.054481][ T9540] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.058926][ T9540] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz.3.1390: Failed to acquire dquot type 0 [ 167.064740][ T9540] EXT4-fs (loop3): 1 truncate cleaned up [ 167.071767][ T9540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.112976][ T9540] Quota error (device loop3): write_blk: dquota write failed [ 167.117836][ T9540] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 167.122049][ T9540] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz.3.1390: Failed to acquire dquot type 0 [ 167.384365][ T9546] loop1: detected capacity change from 0 to 4096 [ 167.390017][ T9546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.395675][ T9546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 167.409133][ T9547] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.737588][ T6260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.849358][ T9553] binder: 9552:9553 ioctl c0046209 0 returned -22 [ 167.854842][ T9553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1396'. [ 167.860598][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 167.887871][ T39] audit: type=1326 audit(1719401338.921:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.3.1397" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 168.396550][ T9565] loop1: detected capacity change from 0 to 32768 [ 168.401742][ T9565] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1400 (9565) [ 168.411054][ T9565] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 168.415219][ T9565] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 168.418382][ T9565] BTRFS info (device loop1): using free-space-tree [ 168.523949][ T5471] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 168.886173][ T9599] loop0: detected capacity change from 0 to 128 [ 168.941872][ T9598] loop1: detected capacity change from 0 to 4096 [ 168.959521][ T9598] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.965955][ T9598] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 168.976737][ T9601] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.025500][ T9593] loop3: detected capacity change from 0 to 32768 [ 169.066407][ T9593] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.148201][ T9593] XFS (loop3): Ending clean mount [ 169.170238][ T9593] XFS (loop3): Quotacheck needed: Please wait. [ 169.211063][ T9593] XFS (loop3): Quotacheck: Done. [ 169.254645][ T9611] loop1: detected capacity change from 0 to 512 [ 169.271157][ T9611] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.358062][ T6260] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.379518][ T9614] validate_nla: 2 callbacks suppressed [ 169.379528][ T9614] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 169.549715][ T9611] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 169.556026][ T9611] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.556462][ T9616] binder: 9615:9616 ioctl c0046209 0 returned -22 [ 169.585504][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'. [ 169.601349][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'. [ 169.619641][ T39] audit: type=1326 audit(1719401340.650:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.3.1412" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 169.636218][ T5471] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 169.897031][ T9636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1419'. [ 169.960801][ T9641] loop2: detected capacity change from 0 to 4096 [ 169.966852][ T9641] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.972709][ T9641] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 169.990298][ T9648] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.071964][ T9650] batadv0: entered promiscuous mode [ 170.238725][ T9656] loop1: detected capacity change from 0 to 128 [ 170.320530][ T7760] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.437732][ T9667] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 171.028499][ T5247] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 171.218605][ T5247] usb 7-1: Using ep0 maxpacket: 8 [ 171.229034][ T5247] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 171.231809][ T5247] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.235021][ T5247] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.242286][ T5247] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.247758][ T5247] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.260932][ T5247] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.265113][ T5247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.394186][ T9684] loop1: detected capacity change from 0 to 32768 [ 171.399744][ T9684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1438 (9684) [ 171.423116][ T9684] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.427446][ T9684] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 171.432799][ T9684] BTRFS info (device loop1): using free-space-tree [ 171.439795][ T9690] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 171.482621][ T5247] usb 7-1: usb_control_msg returned -32 [ 171.484556][ T5247] usbtmc 7-1:16.0: can't read capabilities [ 171.538184][ T5471] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.827745][ T9716] loop1: detected capacity change from 0 to 4096 [ 172.262815][ T9724] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 172.371702][ T9731] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 172.455555][ T39] audit: type=1326 audit(1719401343.489:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.463876][ T57] usb 7-1: USB disconnect, device number 9 [ 172.465111][ T39] audit: type=1326 audit(1719401343.489:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.479577][ T39] audit: type=1326 audit(1719401343.499:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.488871][ T39] audit: type=1326 audit(1719401343.499:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.498241][ T39] audit: type=1326 audit(1719401343.499:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.510426][ T39] audit: type=1326 audit(1719401343.509:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.525947][ T39] audit: type=1326 audit(1719401343.509:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.1.1452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 172.945233][ T9740] loop1: detected capacity change from 0 to 512 [ 172.958439][ T9740] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.048703][ T9740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.1453: bg 0: block 64: padding at end of block bitmap is not set [ 173.064738][ T9740] __quota_error: 63 callbacks suppressed [ 173.064749][ T9740] Quota error (device loop1): write_blk: dquota write failed [ 173.073915][ T9740] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 173.078101][ T9740] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz.1.1453: Failed to acquire dquot type 0 [ 173.083268][ T9740] EXT4-fs (loop1): 1 truncate cleaned up [ 173.086470][ T9740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.161516][ T9740] Quota error (device loop1): write_blk: dquota write failed [ 173.173946][ T9740] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 173.177915][ T9740] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz.1.1453: Failed to acquire dquot type 0 [ 173.454804][ T9757] loop3: detected capacity change from 0 to 32768 [ 173.458900][ T9757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1459 (9757) [ 173.482208][ T9757] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.485969][ T9757] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 173.489456][ T9757] BTRFS info (device loop3): using free-space-tree [ 173.524010][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 173.608223][ T9782] loop0: detected capacity change from 0 to 1024 [ 173.616530][ T9782] hfsplus: unable to parse mount options [ 173.629782][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.677179][ T7307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 173.727132][ T9757] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 173.871584][ T6260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.332229][ T9821] loop2: detected capacity change from 0 to 512 [ 174.339201][ T9821] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.398061][ T9821] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1473: bg 0: block 64: padding at end of block bitmap is not set [ 174.412988][ T9821] Quota error (device loop2): write_blk: dquota write failed [ 174.421270][ T9821] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 174.430294][ T9821] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.1473: Failed to acquire dquot type 0 [ 174.443505][ T9821] EXT4-fs (loop2): 1 truncate cleaned up [ 174.457371][ T9821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.552664][ T9821] Quota error (device loop2): write_blk: dquota write failed [ 174.556621][ T9821] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 174.580275][ T9821] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.1473: Failed to acquire dquot type 0 [ 174.690951][ T9820] loop3: detected capacity change from 0 to 32768 [ 174.696713][ T9820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1475 (9820) [ 174.726761][ T9820] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.732129][ T9820] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 174.740318][ T9820] BTRFS info (device loop3): using free-space-tree [ 174.956606][ T9820] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 175.071159][ T6260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.078852][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.574300][ T9864] loop3: detected capacity change from 0 to 8192 [ 175.836214][ T9852] loop2: detected capacity change from 0 to 32768 [ 175.878807][ T9852] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.906439][ T9852] XFS (loop2): Ending clean mount [ 175.928308][ T9852] XFS (loop2): Quotacheck needed: Please wait. [ 176.012158][ T9852] XFS (loop2): Quotacheck: Done. [ 176.064036][ T6341] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.192089][ T39] audit: type=1326 audit(1719401347.227:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.0.1488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7454579 code=0x7ffc0000 [ 176.201576][ T39] audit: type=1326 audit(1719401347.227:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.0.1488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7454579 code=0x7ffc0000 [ 176.633753][ T9881] loop2: detected capacity change from 0 to 32768 [ 176.646575][ T9881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1487 (9881) [ 176.655615][ T9883] loop0: detected capacity change from 0 to 32768 [ 176.665974][ T9881] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.671076][ T9881] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 176.675876][ T9881] BTRFS info (device loop2): using free-space-tree [ 176.677407][ T9883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1490 (9883) [ 176.698114][ T9883] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.703186][ T9883] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 176.717929][ T9885] loop1: detected capacity change from 0 to 2048 [ 176.786062][ T9885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.845081][ T9883] BTRFS info (device loop0): rebuilding free space tree [ 176.857163][ T9883] BTRFS info (device loop0): disabling free space tree [ 176.860115][ T9883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.864253][ T9883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.957907][ T6267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.973938][ T9881] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 177.007806][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.095513][ T6341] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.435791][ T9937] loop2: detected capacity change from 0 to 1024 [ 177.439877][ T9937] hfsplus: unable to parse mount options [ 177.525671][ T7307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 177.657754][ T9931] loop1: detected capacity change from 0 to 32768 [ 177.703214][ T9931] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.757279][ T9935] loop0: detected capacity change from 0 to 40427 [ 177.780483][ T9935] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 177.815513][ T9931] XFS (loop1): Ending clean mount [ 177.817606][ T9935] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.855320][ T9931] XFS (loop1): Quotacheck needed: Please wait. [ 177.860697][ T9935] F2FS-fs (loop0): invalid crc value [ 177.911895][ T9935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.956068][ T9931] XFS (loop1): Quotacheck: Done. [ 178.004837][ T9935] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.007255][ T9935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.040925][ T5471] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.195357][ T6267] syz-executor: attempt to access beyond end of device [ 178.195357][ T6267] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 178.244300][ T6267] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.306546][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 178.306561][ T39] audit: type=1326 audit(1719401349.346:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.332150][ T39] audit: type=1326 audit(1719401349.346:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.341637][ T39] audit: type=1326 audit(1719401349.366:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.350940][ T39] audit: type=1326 audit(1719401349.366:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.360684][ T39] audit: type=1326 audit(1719401349.376:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.369537][ T39] audit: type=1326 audit(1719401349.376:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.378623][ T39] audit: type=1326 audit(1719401349.376:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.388345][ T39] audit: type=1326 audit(1719401349.376:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.397747][ T39] audit: type=1326 audit(1719401349.376:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.407134][ T39] audit: type=1326 audit(1719401349.376:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.1.1499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e2579 code=0x7ffc0000 [ 178.687381][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 178.719550][ T9968] loop0: detected capacity change from 0 to 64 [ 178.722861][ T9968] hfs: invalid gid -1 [ 178.724797][ T9968] hfs: unable to parse mount options [ 178.770852][ T7307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 178.835339][ T9972] loop1: detected capacity change from 0 to 2048 [ 178.896912][ T9972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.935032][ T9970] loop3: detected capacity change from 0 to 32768 [ 178.944512][ T9970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1504 (9970) [ 178.962061][ T9970] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.976697][ T9970] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 179.019352][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.103465][ T9970] BTRFS info (device loop3): rebuilding free space tree [ 179.136179][ T9970] BTRFS info (device loop3): disabling free space tree [ 179.157572][ T9970] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.172680][ T9970] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.346963][ T6260] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.822238][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 179.858858][T10014] loop3: detected capacity change from 0 to 64 [ 179.864195][T10014] hfs: invalid gid -1 [ 179.866103][T10014] hfs: unable to parse mount options [ 179.936977][ T7307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.256618][T10021] loop3: detected capacity change from 0 to 32768 [ 180.261008][T10021] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1518 (10021) [ 180.277563][T10021] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.283272][T10021] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 180.381266][T10021] BTRFS info (device loop3): rebuilding free space tree [ 180.422019][T10021] BTRFS info (device loop3): disabling free space tree [ 180.425348][T10021] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.429906][T10021] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.527097][ T6260] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.698093][T10043] loop2: detected capacity change from 0 to 8192 [ 180.844859][T10052] program syz.1.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.962368][T10056] loop3: detected capacity change from 0 to 2048 [ 180.989986][T10056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.999450][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 181.108738][ T6260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.194566][T10060] loop1: detected capacity change from 0 to 32768 [ 181.199288][T10060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1528 (10060) [ 181.209057][T10060] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.214790][T10060] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 181.292007][T10060] BTRFS info (device loop1): rebuilding free space tree [ 181.315717][T10060] BTRFS info (device loop1): disabling free space tree [ 181.323003][T10060] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.332618][T10060] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.404422][ T5471] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.839636][T10094] program syz.1.1535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.239195][T10105] loop2: detected capacity change from 0 to 32768 [ 182.247255][T10105] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1539 (10105) [ 182.267664][T10105] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.295404][T10105] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 182.389942][T10105] BTRFS info (device loop2): rebuilding free space tree [ 182.415515][T10105] BTRFS info (device loop2): disabling free space tree [ 182.422813][T10105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.429782][T10105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.491255][ T6341] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.822889][T10141] program syz.1.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.921994][T10126] loop3: detected capacity change from 0 to 32768 [ 182.981149][T10126] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.019156][T10126] XFS (loop3): Ending clean mount [ 183.041919][T10126] XFS (loop3): Quotacheck needed: Please wait. [ 183.132886][T10126] XFS (loop3): Quotacheck: Done. [ 183.236936][ T6260] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.506272][T10169] program syz.1.1558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.689707][T10180] loop3: detected capacity change from 0 to 2048 [ 183.755903][T10180] loop3: p1 < > p4 [ 183.759013][T10180] loop3: p4 size 8388608 extends beyond EOD, truncated [ 183.760246][T10182] loop0: detected capacity change from 0 to 512 [ 183.834142][T10171] loop2: detected capacity change from 0 to 32768 [ 183.844893][ T5239] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.879189][T10171] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.932330][T10171] XFS (loop2): Ending clean mount [ 184.024973][ T5239] usb 6-1: Using ep0 maxpacket: 8 [ 184.029840][ T6341] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.037073][ T5239] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 184.040871][ T5239] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.048707][ T5239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.054511][ T5239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.060049][ T5239] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.067741][ T5239] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.072890][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.323196][ T5239] usb 6-1: usb_control_msg returned -32 [ 184.326155][ T5239] usbtmc 6-1:16.0: can't read capabilities [ 184.446035][T10199] loop3: detected capacity change from 0 to 1024 [ 184.460174][T10199] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.469884][T10199] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.478890][T10199] jbd2_journal_init_inode: Cannot locate journal superblock [ 184.482478][T10199] EXT4-fs (loop3): Could not load journal inode [ 184.862163][T10218] program syz.2.1569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.995560][T10222] loop0: detected capacity change from 0 to 4096 [ 185.055765][ T7307] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 185.120051][T10227] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 185.178296][T10222] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.182976][T10222] overlayfs: failed to set xattr on upper [ 185.186131][T10222] overlayfs: ...falling back to redirect_dir=nofollow. [ 185.189670][T10222] overlayfs: ...falling back to index=off. [ 185.192164][T10222] overlayfs: ...falling back to uuid=null. [ 185.213335][T10235] loop2: detected capacity change from 0 to 4096 [ 185.218287][T10235] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 185.241711][T10235] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 185.323564][ T57] usb 6-1: USB disconnect, device number 6 [ 185.405706][ T5262] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 185.439803][T10239] loop2: detected capacity change from 0 to 2048 [ 185.467551][T10239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.571734][T10239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1580: bg 0: block 234: padding at end of block bitmap is not set [ 185.585480][T10239] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 930 with error 28 [ 185.593136][T10239] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.593136][T10239] [ 185.597972][T10239] EXT4-fs (loop2): Total free blocks count 0 [ 185.600649][T10239] EXT4-fs (loop2): Free/Dirty block details [ 185.602000][T10244] loop0: detected capacity change from 0 to 8192 [ 185.603009][T10239] EXT4-fs (loop2): free_blocks=0 [ 185.605831][ T5262] usb 8-1: Using ep0 maxpacket: 16 [ 185.611568][T10239] EXT4-fs (loop2): dirty_blocks=944 [ 185.614003][T10239] EXT4-fs (loop2): Block reservation details [ 185.616907][T10239] EXT4-fs (loop2): i_reserved_data_blocks=59 [ 185.624624][ T5262] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 185.628146][ T5262] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.631374][ T5262] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.634780][ T5262] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.639018][ T5262] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.642512][ T5262] usb 8-1: config 0 has no interface number 0 [ 185.645127][ T5262] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 185.651812][ T5262] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 185.657508][ T5262] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.661800][ T5262] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.667545][ T5262] usb 8-1: config 0 interface 125 has no altsetting 0 [ 185.670427][ T5262] usb 8-1: config 0 interface 125 has no altsetting 2 [ 185.675586][ T5262] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 185.679409][ T5262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.686391][ T5262] usb 8-1: Product: syz [ 185.688478][ T5262] usb 8-1: Manufacturer: syz [ 185.690602][ T5262] usb 8-1: SerialNumber: syz [ 185.705190][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.709468][ T5262] usb 8-1: config 0 descriptor?? [ 185.714539][ T5262] usb 8-1: selecting invalid altsetting 2 [ 185.934086][T10231] loop3: detected capacity change from 0 to 8 [ 185.979280][T10231] unable to read fragment index table [ 186.040618][ T7760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 186.257848][ C2] usb 8-1: async_complete: urb error -71 [ 186.263290][ C2] usb 8-1: async_complete: urb error -71 [ 186.263342][ C2] usb 8-1: async_complete: urb error -71 [ 186.263390][ C2] usb 8-1: async_complete: urb error -71 [ 186.274781][ T5262] get_1284_register: usb error -71 [ 186.277847][T10265] loop2: detected capacity change from 0 to 2048 [ 186.282022][ T5262] uss720 8-1:0.125: probe with driver uss720 failed with error -71 [ 186.288288][ T5262] usb 8-1: USB disconnect, device number 7 [ 186.317132][T10265] loop2: p1 < > p4 [ 186.323050][T10265] loop2: p4 size 8388608 extends beyond EOD, truncated [ 186.344261][T10262] loop1: detected capacity change from 0 to 1024 [ 186.350552][ T4698] loop2: p1 < > p4 [ 186.353321][ T4698] loop2: p4 size 8388608 extends beyond EOD, truncated [ 186.376179][T10262] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 186.386419][T10262] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 186.404408][T10262] jbd2_journal_init_inode: Cannot locate journal superblock [ 186.431951][T10262] EXT4-fs (loop1): Could not load journal inode [ 186.950657][T10282] loop2: detected capacity change from 0 to 2048 [ 187.017835][T10282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.197266][T10282] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1592: bg 0: block 234: padding at end of block bitmap is not set [ 187.206052][T10282] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1172 with error 28 [ 187.216369][T10282] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.216369][T10282] [ 187.221629][T10282] EXT4-fs (loop2): Total free blocks count 0 [ 187.224715][T10282] EXT4-fs (loop2): Free/Dirty block details [ 187.230906][T10282] EXT4-fs (loop2): free_blocks=0 [ 187.233738][T10282] EXT4-fs (loop2): dirty_blocks=1184 [ 187.237958][T10282] EXT4-fs (loop2): Block reservation details [ 187.240870][T10282] EXT4-fs (loop2): i_reserved_data_blocks=74 [ 187.371412][T10295] loop3: detected capacity change from 0 to 32768 [ 187.385598][T10295] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 187.385598][T10295] [ 187.406779][T10295] xtLookup: xtSearch returned -5 [ 187.409323][T10295] read_mapping_page failed! [ 187.411680][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.415523][T10295] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 187.430758][T10295] Mount JFS Failure: -5 [ 187.433339][T10295] jfs_mount failed w/return code = -5 [ 187.541591][T10306] loop1: detected capacity change from 0 to 32768 [ 187.560924][T10308] loop2: detected capacity change from 0 to 4096 [ 187.565530][T10308] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 187.603069][T10306] ialloc: diAlloc returned -5! [ 187.612333][T10308] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 188.003011][T10330] loop3: detected capacity change from 0 to 512 [ 188.088171][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 188.121396][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1615'. [ 188.202802][T10332] loop1: detected capacity change from 0 to 1024 [ 188.221769][T10332] hfsplus: extend alloc file! (8192,65536,366) [ 188.328137][T10332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16000000 (32000000 ns) > initial count (394 ns). Using initial count to start timer. [ 188.406477][T10332] loop1: detected capacity change from 0 to 256 [ 188.410398][T10332] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 188.436479][T10332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.475161][T10343] loop2: detected capacity change from 0 to 32768 [ 188.486689][T10343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1617 (10343) [ 188.502792][T10343] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.511502][T10343] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 188.515128][T10343] BTRFS info (device loop2): using free-space-tree [ 188.618300][T10343] BTRFS info (device loop2): checking UUID tree [ 188.761981][T10366] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 188.766201][T10366] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 188.786133][ T6341] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.020273][T10374] loop1: detected capacity change from 0 to 512 [ 189.114811][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.122066][T10374] ext4 filesystem being mounted at /syzkaller.aGdsV1/410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.125479][T10377] loop2: detected capacity change from 0 to 1024 [ 189.166680][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 189.166695][ T39] audit: type=1800 audit(2000000000.979:304): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1623" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 189.210952][ T7307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.215218][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.322490][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 189.333222][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1627'. [ 189.394325][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 189.644298][T10395] loop3: detected capacity change from 0 to 32768 [ 189.654146][T10395] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1629 (10395) [ 189.661383][T10395] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.665381][T10395] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 189.668536][T10395] BTRFS info (device loop3): using free-space-tree [ 189.752202][T10395] BTRFS info (device loop3): checking UUID tree [ 189.764147][T10402] loop1: detected capacity change from 0 to 32768 [ 189.783945][T10402] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 189.783945][T10402] [ 189.807445][T10402] xtLookup: xtSearch returned -5 [ 189.810257][T10402] read_mapping_page failed! [ 189.812386][T10402] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 189.827132][T10402] Mount JFS Failure: -5 [ 189.829267][T10402] jfs_mount failed w/return code = -5 [ 189.915976][T10377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.923714][T10377] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 190.063786][T10433] loop1: detected capacity change from 0 to 2048 [ 190.071640][ T6260] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.085641][T10377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.091853][T10377] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 190.129190][T10435] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.173240][T10377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.175932][T10377] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 190.239353][T10377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.241528][T10377] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 190.244158][ T63] tipc: Subscription rejected, illegal request [ 190.379128][T10447] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 190.381843][T10447] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1633'. [ 190.433412][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 190.437855][T10449] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1636'. [ 190.443359][T10449] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1636'. [ 190.457733][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 190.601629][T10463] netlink: 'syz.0.1641': attribute type 4 has an invalid length. [ 190.794438][T10473] loop3: detected capacity change from 0 to 2048 [ 190.795426][T10475] loop0: detected capacity change from 0 to 512 [ 190.852187][T10475] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #11: comm syz.0.1646: invalid indirect mapped block 256 (level 2) [ 190.860931][T10475] EXT4-fs (loop0): 2 truncates cleaned up [ 190.864326][T10475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.865042][T10480] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.933473][ T6267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.946883][ T95] tipc: Subscription rejected, illegal request [ 191.030385][T10483] loop2: detected capacity change from 0 to 1024 [ 191.039967][T10483] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 191.053299][T10483] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 191.076568][T10484] loop1: detected capacity change from 0 to 1024 [ 191.084827][T10484] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.089941][T10484] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.102712][T10484] jbd2_journal_init_inode: Cannot locate journal superblock [ 191.111499][T10484] EXT4-fs (loop1): Could not load journal inode [ 191.114624][ T7760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 191.283300][T10495] loop2: detected capacity change from 0 to 512 [ 191.479710][T10499] loop0: detected capacity change from 0 to 2048 [ 191.480551][T10501] loop3: detected capacity change from 0 to 512 [ 191.491985][T10499] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 191.499053][T10499] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 191.505462][T10499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.552959][T10501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.565966][T10501] ext4 filesystem being mounted at /syzkaller.0SFOeU/367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.605201][ T39] audit: type=1800 audit(2000000003.418:305): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1656" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 191.691720][ T6260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.764416][T10508] loop1: detected capacity change from 0 to 1024 [ 191.769621][T10508] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 191.775502][T10508] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 191.864077][ T7307] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 192.090847][T10524] loop3: detected capacity change from 0 to 1024 [ 192.151842][ T7307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 192.357690][T10518] loop0: detected capacity change from 0 to 32768 [ 192.365771][T10518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1662 (10518) [ 192.376360][T10518] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.384087][T10518] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 192.387701][T10518] BTRFS info (device loop0): using free-space-tree [ 192.438377][T10547] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 192.490923][T10518] BTRFS info (device loop0): checking UUID tree [ 192.540570][T10561] netlink: 'syz.2.1672': attribute type 4 has an invalid length. [ 192.684142][ T6267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.783443][T10574] loop2: detected capacity change from 0 to 1024 [ 192.816115][T10574] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 192.838846][T10574] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 192.963964][T10582] loop3: detected capacity change from 0 to 2048 [ 192.978360][T10582] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.999953][T10582] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 193.007900][T10582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.049326][T10588] loop0: detected capacity change from 0 to 256 [ 193.117283][T10589] loop2: detected capacity change from 0 to 2048 [ 193.165747][T10591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.222259][ T1089] tipc: Subscription rejected, illegal request [ 193.247638][T10584] loop1: detected capacity change from 0 to 32768 [ 193.406972][T10595] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 193.573048][T10593] loop3: detected capacity change from 0 to 32768 [ 193.581927][T10593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1686 (10593) [ 193.605518][T10593] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.620266][T10593] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 193.624601][T10593] BTRFS info (device loop3): using free-space-tree [ 193.634929][T10616] PKCS7: Unknown OID: [5] (bad) [ 193.637171][T10616] PKCS7: Only support pkcs7_signedData type [ 193.638164][T10612] loop0: detected capacity change from 0 to 4096 [ 193.657805][T10612] NILFS (loop0): invalid segment: Checksum error in segment payload [ 193.663836][T10612] NILFS (loop0): trying rollback from an earlier position [ 193.698312][T10626] loop1: detected capacity change from 0 to 512 [ 193.710945][T10612] NILFS (loop0): recovery complete [ 193.723625][T10631] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.746090][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.755428][T10626] ext4 filesystem being mounted at /syzkaller.aGdsV1/427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.781685][T10593] BTRFS info (device loop3): checking UUID tree [ 193.789408][ T39] audit: type=1800 audit(2000000005.597:306): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1696" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 193.870664][ T5471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.954263][ T6260] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.966941][T10644] loop0: detected capacity change from 0 to 1024 [ 194.234384][T10643] [ 194.235592][T10643] ====================================================== [ 194.238767][T10643] WARNING: possible circular locking dependency detected [ 194.241810][T10643] 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 Not tainted [ 194.246760][T10643] ------------------------------------------------------ [ 194.248984][T10653] __nla_validate_parse: 14 callbacks suppressed [ 194.249000][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 194.250414][T10643] syz.0.1699/10643 is trying to acquire lock: [ 194.250428][T10643] ffff8880526340b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x886/0x9e0 [ 194.250472][T10643] [ 194.250472][T10643] but task is already holding lock: [ 194.250476][T10643] ffff88802bbf22c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x204/0x9e0 [ 194.273899][T10643] [ 194.273899][T10643] which lock already depends on the new lock. [ 194.273899][T10643] [ 194.278647][T10643] [ 194.278647][T10643] the existing dependency chain (in reverse order) is: [ 194.282520][T10643] [ 194.282520][T10643] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 194.282544][T10643] __mutex_lock+0x175/0x9c0 [ 194.282611][T10643] hfsplus_file_extend+0x1c1/0xfe0 [ 194.282632][T10643] hfsplus_bmap_reserve+0x31c/0x410 [ 194.282653][T10643] hfsplus_create_cat+0x213/0x10e0 [ 194.282671][T10643] hfsplus_fill_super+0x16ce/0x1bc0 [ 194.282687][T10643] mount_bdev+0x1e3/0x2d0 [ 194.282707][T10643] legacy_get_tree+0x109/0x220 [ 194.282723][T10643] vfs_get_tree+0x8f/0x380 [ 194.282742][T10643] path_mount+0x6e1/0x1f10 [ 194.282760][T10643] __ia32_sys_mount+0x295/0x320 [ 194.282779][T10643] __do_fast_syscall_32+0x73/0x120 [ 194.282800][T10643] do_fast_syscall_32+0x32/0x80 [ 194.282820][T10643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.282837][T10643] [ 194.282837][T10643] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 194.282860][T10643] __lock_acquire+0x2478/0x3b30 [ 194.282876][T10643] lock_acquire+0x1b1/0x560 [ 194.282891][T10643] __mutex_lock+0x175/0x9c0 [ 194.282909][T10643] hfsplus_file_truncate+0x886/0x9e0 [ 194.282927][T10643] hfsplus_file_release+0x103/0x230 [ 194.282944][T10643] __fput+0x408/0xbb0 [ 194.282958][T10643] task_work_run+0x14e/0x250 [ 194.282975][T10643] syscall_exit_to_user_mode+0x278/0x2a0 [ 194.282995][T10643] __do_fast_syscall_32+0x80/0x120 [ 194.283015][T10643] do_fast_syscall_32+0x32/0x80 [ 194.283035][T10643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.283051][T10643] [ 194.283051][T10643] other info that might help us debug this: [ 194.283051][T10643] [ 194.283057][T10643] Possible unsafe locking scenario: [ 194.283057][T10643] [ 194.283061][T10643] CPU0 CPU1 [ 194.283059][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.283066][T10643] ---- ---- [ 194.283070][T10643] lock(&HFSPLUS_I(inode)->extents_lock); [ 194.283081][T10643] lock(&tree->tree_lock); [ 194.283092][T10643] lock(&HFSPLUS_I(inode)->extents_lock); [ 194.283104][T10643] lock( [ 194.283104][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.283107][T10643] &tree->tree_lock [ 194.283112][T10643] ); [ 194.283117][T10643] [ 194.283117][T10643] *** DEADLOCK *** [ 194.283117][T10643] [ 194.283122][T10643] 2 locks held by syz.0.1699/10643: [ 194.283131][T10643] #0: ffff88802bbf24c0 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: hfsplus_file_release+0xfb/0x230 [ 194.283175][T10643] #1: ffff88802bbf22c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x204/0x9e0 [ 194.283216][T10643] [ 194.283216][T10643] stack backtrace: [ 194.283221][T10643] CPU: 3 PID: 10643 Comm: syz.0.1699 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 194.283239][T10643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.283249][T10643] Call Trace: [ 194.283256][T10643] [ 194.283264][T10643] dump_stack_lvl+0x116/0x1f0 [ 194.283284][T10643] check_noncircular+0x31a/0x400 [ 194.283311][T10643] ? __pfx_check_noncircular+0x10/0x10 [ 194.283334][T10643] ? register_lock_class+0xb1/0x1230 [ 194.283354][T10643] ? lockdep_lock+0xc6/0x200 [ 194.283375][T10643] ? __pfx_lockdep_lock+0x10/0x10 [ 194.283399][T10643] __lock_acquire+0x2478/0x3b30 [ 194.283418][T10643] ? __pfx___lock_acquire+0x10/0x10 [ 194.283432][T10643] ? find_held_lock+0x2d/0x110 [ 194.283449][T10643] lock_acquire+0x1b1/0x560 [ 194.283461][T10643] ? hfsplus_file_truncate+0x886/0x9e0 [ 194.283478][T10643] ? __pfx_lock_acquire+0x10/0x10 [ 194.283495][T10643] ? __mutex_unlock_slowpath+0x164/0x650 [ 194.283515][T10643] ? __pfx___might_resched+0x10/0x10 [ 194.283537][T10643] __mutex_lock+0x175/0x9c0 [ 194.283555][T10643] ? hfsplus_file_truncate+0x886/0x9e0 [ 194.283582][T10643] ? hfsplus_file_truncate+0x886/0x9e0 [ 194.283597][T10643] ? _raw_spin_unlock+0x28/0x50 [ 194.283613][T10643] ? __pfx___mutex_lock+0x10/0x10 [ 194.283637][T10643] ? hfsplus_file_truncate+0x886/0x9e0 [ 194.283656][T10643] hfsplus_file_truncate+0x886/0x9e0 [ 194.283675][T10643] ? __memcg_slab_free_hook+0xcc/0x5a0 [ 194.283700][T10643] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 194.283721][T10643] ? __pfx_lock_acquire+0x10/0x10 [ 194.283739][T10643] ? __pfx___might_resched+0x10/0x10 [ 194.283761][T10643] ? __pfx_hfsplus_file_release+0x10/0x10 [ 194.283779][T10643] hfsplus_file_release+0x103/0x230 [ 194.283799][T10643] __fput+0x408/0xbb0 [ 194.283815][T10643] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.283832][T10643] task_work_run+0x14e/0x250 [ 194.283850][T10643] ? __pfx_task_work_run+0x10/0x10 [ 194.283867][T10643] ? __pfx___close_range+0x10/0x10 [ 194.283891][T10643] syscall_exit_to_user_mode+0x278/0x2a0 [ 194.283913][T10643] __do_fast_syscall_32+0x80/0x120 [ 194.283938][T10643] do_fast_syscall_32+0x32/0x80 [ 194.283960][T10643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.283978][T10643] RIP: 0023:0xf7454579 [ 194.283991][T10643] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.284008][T10643] RSP: 002b:00000000ffac501c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 194.284025][T10643] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 194.284035][T10643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.284045][T10643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.284055][T10643] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 194.284066][T10643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.284081][T10643] VM DIAGNOSIS: 11:29:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ffc7374 RCX=0000000000000000 RDX=0000000000000007 RSI=ffffffff813c7aea RDI=0000000000000006 RBP=ffffffff8ffc7378 RSP=ffffc90000dff0b0 R8 =0000000000000006 R9 =ffffffff8202a5cf R10=ffffffff8202a554 R11=ffffffff8b2e3f40 R12=ffffffff8202a5cf R13=ffffffff8202a554 R14=dffffc0000000000 R15=ffffffff8ffc7374 RIP=ffffffff813c7b22 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74080a4 CR3=0000000052cda000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802c137ee8 RCX=ffffffff816cad09 RDX=0000000000000000 RSI=ffffffff8b8fb8a0 RDI=ffffffff8d494b48 RBP=0000000000000001 RSP=ffffc90004fdf3e0 R8 =0000000000000000 R9 =fffffbfff1fc5442 R10=ffffffff8fe2a217 R11=0000000000000000 R12=ffffffff8dbb51a0 R13=ffffffff817a4b40 R14=000000000003d90c R15=ffff888019de0000 RIP=ffffffff81750920 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0e4aa95280 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f90a4 CR3=00000000115de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf6363ed0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff00000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19694645585e4445 4905194e584b4905 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e445f4559051a04 1a101b0712051b07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a37622f613464 6635373666316365 632d383939612d30 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a5c8d2c40 0000559a5c8d2f40 0000559a5c8d2ec0 0000559a5c8d2dc0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a5c8d2d40 0000559a5c8d2cc0 0000559a5c71d700 0000559a5c70fe70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8ff5483c RCX=ffffffff813c7b34 RDX=0000000000000001 RSI=ffffffff813c7aea RDI=0000000000000006 RBP=ffffffff8ff54840 RSP=ffffc90006d170f0 R8 =0000000000000006 R9 =ffffffff817a4df4 R10=ffffffff817a4d50 R11=dffffc0000000000 R12=ffffffff817a4df4 R13=ffffffff817a4d50 R14=dffffc0000000000 R15=ffffffff8ff5483c RIP=ffffffff813c7b05 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0e4aa95280 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005611f7136000 CR3=0000000056d46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=2040000404420020 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf6364280 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000636e69002f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a93e55f412fdcee 737326ec76a7bdd9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 19e0962c325caf9d 0000559f05d504f7 0000000000000161 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a5c735500 00007f0e4a69aa2a 00007f00333a3762 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a5c71cd80 0000559a5c708910 0000559a5c715e70 0000559a5c701f60 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a5c712ac0 0000559a5c718f40 0000559a5c706620 0000559a5c704d10 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f95405 RDI=ffffffff94d5c040 RBP=ffffffff94d5c000 RSP=ffffc900060772d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000034 R14=ffffffff84f953a0 R15=0000000000000000 RIP=ffffffff84f9542f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000337f7ff8 CR3=0000000052f24000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000