last executing test programs: 2m21.826973891s ago: executing program 1 (id=44): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000040)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@order_relaxed}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2m21.200974908s ago: executing program 1 (id=48): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 2m20.936533953s ago: executing program 1 (id=61): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) 2m20.761288224s ago: executing program 1 (id=52): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m20.093676333s ago: executing program 1 (id=56): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x800, &(0x7f0000000340)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}]}, 0x1, 0x1539, &(0x7f0000002ec0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 2m18.126602078s ago: executing program 1 (id=86): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random='\x00\x00\a\x00', @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m18.018450384s ago: executing program 32 (id=86): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random='\x00\x00\a\x00', @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m17.710143562s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m17.638921426s ago: executing program 4 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d70002400028008000140faffff021000038009000100701e1630b7000000080002"], 0x88}}, 0x0) 2m17.531513572s ago: executing program 4 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000180)={[0x1]}, 0x8, 0x80000) 2m13.040642926s ago: executing program 4 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080001400000001008000240000000140900010073797a30000000000900020073797a3200"], 0x78}}, 0x0) 2m12.611110451s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 2m11.758243971s ago: executing program 4 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m56.639311146s ago: executing program 33 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m55.709165131s ago: executing program 3 (id=273): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2097, 0x0, 0x0) 1m55.452954856s ago: executing program 3 (id=277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x800000000000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) 1m55.289894296s ago: executing program 3 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 1m54.776917756s ago: executing program 3 (id=287): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f0000000340)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000006c0)='./binderfs\x00', &(0x7f0000000700), 0x8, 0x0) 1m54.439789766s ago: executing program 3 (id=291): syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000000c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1m53.833240061s ago: executing program 3 (id=299): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4d3, &(0x7f0000000f00)="$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") rmdir(&(0x7f00000004c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x194) 1m53.614920794s ago: executing program 34 (id=299): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4d3, &(0x7f0000000f00)="$eJzs3c9vG1kdAPDvTJImm81uurASPwRsWRYKqrATdzda7Wm5gNBqJcSKE4c2JG4UxY6j2ClN6CH9H5CoxAn+BA5IHJB64s4NbgipHJBaqEBNEQejGU/SpLXTiCYeiD8f6WnmvbHn+57beW/8kswLYGRdiojdiLgQEdcjYrYoT4oUH/ZS9rrHj24v7T26vZREt/vJ35L8eFYWh96TebU451REfP87ET9Kno/b3t5ZW2w06ptFvtppblTb2zt/Xm0urtRX6uu12sL8wtz7V9+rnVpb32r+6sG3Vz/6wW9/88X7v9/9xk+yas0Uxw634zT1mj5xECczHhEfnUWwEowV7blQdkX4r6QR8amIeDu7/rtl1wYAGIZudza6s4fzfQ0qBwD+D6X5HFiSVoq5gJlI00qlN4f3ZkynjVa7c+VGa2t9uTdXdjEm0hurjfpcMVd4MSaSLD+f7z/N157JX42INyLip5Ov5PnKUquxXOaNDwCMsFcfHh3//znZG/8BgHNuquwKAABDZ/wHgNFj/AeA0WP8B4DRY/wHgNFj/AeA0WP8B4CR8r2PP85Sd694/vXyze2ttdbNby7X22uV5tZSZam1uVFZabVW8mf2NF90vkartTH/bmzdqnbq7U61vb1zrdnaWu9cy5/rfa0+MZRWAQDHeeOte39MImL3g1fyFIfWcjBWw/mWll0BoDRjZVcAKM142RUASuM7PtBnid4jBv6K0N2Bb9G1wP+4y58z/w+jyvw/jC7z/zC6zP/D6Op2E2v7A8CIMccPnMHP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODcm8lTklaKtcBnIk0rlYjX4l8RMZHcWG3U5yLi9Yj4w+TEZJafL7vSAMBLSv+aFOt/XZ59Z+bZoxeSJ5P5NiJ+/PNPfnZrsdPZnM/K/35Q3rlblNeODWSpQQAoyf44vT+O73v86PbSfhpmfR58q7e4aBZ3r0i9I+Mxnm+n8huH6X8kRb4nu18ZO4X4u3ci4rP92p/kcyMXi5VPn42fxX5tqPHTI/HT/Fhvm30Wnz6FusCouZf1Px/2u/7SuJRv+1//U3kP9fL2+7+95/q/9KD/GxvQ/106aYx3f/fdgcfuRHx+vF/85CB+MiD+OyeM/6cvfOntfuXZ+bq/iLgc/eMfjlXtNDeq7e0kVpuLK/WV+nqttjC/MPf+1fdq1XyOuro/U/3818yHH1x5/bj2Tw+IP/WC9n/1hO3/5b+v//DLR0pmjsT/+lf6//u/eUz8rJVfO2H8xelfD1y+O4u/3L/9xXsGt//KCePf/8vO8glfCgAMQXt7Z22x0ahvnrudJyd9cfYxDLWG2b1b+Z+PnfJ2sv8Bp3Gez5xhVcvumYCz9vSiL7smAAAAAAAAAAAAAADAIMP4g6ey2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD59Z8AAAD//5Jq1m0=") rmdir(&(0x7f00000004c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x194) 1m34.162061863s ago: executing program 7 (id=477): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB='dir_umask=00000000000020000000001,codepage=maccyrillic,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x6, 0x322, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001080)=""/79, 0x4f) 1m33.723015469s ago: executing program 7 (id=482): setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000140)) 1m33.517523201s ago: executing program 7 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffcc9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) 1m33.280344525s ago: executing program 7 (id=489): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m32.317096021s ago: executing program 7 (id=496): unshare(0x20000400) r0 = socket(0x23, 0x5, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x113, 0x4, 0x0, 0x0) 1m30.730273704s ago: executing program 7 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 1m30.45914429s ago: executing program 35 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 15.597143896s ago: executing program 0 (id=1374): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000040)) 15.462525934s ago: executing program 0 (id=1377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) 15.259280915s ago: executing program 0 (id=1380): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000340)={[{@noquota}, {@discard}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x623d, &(0x7f0000006580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/55, 0x37) 14.138880671s ago: executing program 0 (id=1390): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 13.626645081s ago: executing program 0 (id=1395): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 12.703780535s ago: executing program 0 (id=1412): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000280)) 9.402536759s ago: executing program 6 (id=1457): r0 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCSETSF2(r0, 0x40085500, &(0x7f0000000600)={0x130, 0x6, 0x7, 0x4, 0x18, "b65883272c705dcc57c06618386595a5eedb49", 0x6, 0x8}) 9.336792792s ago: executing program 6 (id=1459): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 8.838389312s ago: executing program 6 (id=1470): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) 8.69060211s ago: executing program 6 (id=1474): unshare(0x20000400) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000002c0)=""/214, &(0x7f00000001c0)=0xd6) 8.656808872s ago: executing program 6 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x80440d4) 8.534476719s ago: executing program 6 (id=1477): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") sync() truncate(&(0x7f0000000000)='./file0/file0\x00', 0x9) 2.092535007s ago: executing program 2 (id=1538): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x83, {{0x2, 0x4e23, @broadcast}}}, 0x88) 2.061858119s ago: executing program 2 (id=1539): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10400, &(0x7f0000000280)={[{@noinline_data}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4f1}}, {@noinline_dentry}, {@noacl}, {@six_active_logs}, {@alloc_mode_def}, {@noextent_cache}, {@compress_chksum}, {@checkpoint_diasble}]}, 0x1, 0x550c, &(0x7f00000089c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x5, 0x8}) 1.268964475s ago: executing program 8 (id=1551): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4b, 0x7ffffffffffffffd) 1.01956395s ago: executing program 8 (id=1553): r0 = socket(0x10, 0x80002, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff81, 0x1, 0xffffffffffffffe0, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 917.116706ms ago: executing program 8 (id=1554): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0xb, 0x5, 0x4d, 0x0, 0x5, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', '@\x00\f\x00', ["1af0b1ba1cb8fd54c9c9b587", "030000005e13b6f1540b3651", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62795a1c3c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0xffffffffffff8001, 0x0, 0x0, 0xffffffff, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x6}) 831.73245ms ago: executing program 2 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001a00010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="04001e"], 0x30}}, 0x0) 831.101251ms ago: executing program 8 (id=1556): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x9, 0x9, 0x7, 0x83, 0x3}, 0xc) 790.406533ms ago: executing program 8 (id=1557): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 736.077386ms ago: executing program 5 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) 600.843824ms ago: executing program 5 (id=1559): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff9}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff9}], 0x30, 0x40841}, 0x4000000) 392.792186ms ago: executing program 5 (id=1560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 323.72664ms ago: executing program 5 (id=1561): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) 250.620264ms ago: executing program 2 (id=1562): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 115.183113ms ago: executing program 5 (id=1563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000003c0)=0x8000, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)=""/17, &(0x7f0000000240)=0x11) 96.194654ms ago: executing program 2 (id=1564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455ca, 0x1) 15.833078ms ago: executing program 8 (id=1565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002240)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000055c0)) 15.535418ms ago: executing program 5 (id=1566): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 0s ago: executing program 2 (id=1567): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x4, {0x2}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ut of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 114.827256][ T5939] loop0: detected capacity change from 0 to 4096 [ 114.907923][ T5947] loop2: detected capacity change from 0 to 128 [ 115.005650][ T5950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.020377][ T5949] sp0: Synchronizing with TNC [ 115.038512][ T5916] loop6: detected capacity change from 0 to 32768 [ 115.189082][ T5916] XFS (loop6): Mounting V5 Filesystem [ 115.257972][ T5963] netlink: 128 bytes leftover after parsing attributes in process `syz.2.506'. [ 115.326912][ T5916] XFS (loop6): Ending clean mount [ 115.483459][ T5108] XFS (loop6): Unmounting Filesystem [ 115.502894][ T508] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.651164][ T508] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.804057][ T508] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.974389][ T508] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.009974][ T5983] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.063808][ T5983] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.163351][ T5996] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.375728][ T6005] FAT-fs (loop2): Directory bread(block 64) failed [ 116.458317][ T6005] FAT-fs (loop2): Directory bread(block 65) failed [ 116.529789][ T6005] FAT-fs (loop2): Directory bread(block 66) failed [ 116.537977][ T6005] FAT-fs (loop2): Directory bread(block 67) failed [ 116.619975][ T6005] FAT-fs (loop2): Directory bread(block 68) failed [ 116.626579][ T6005] FAT-fs (loop2): Directory bread(block 69) failed [ 116.635369][ T26] audit: type=1326 audit(1770113194.779:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd727dc0eb9 code=0x7ffc0000 [ 116.665293][ T26] audit: type=1326 audit(1770113194.789:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd727dc0eb9 code=0x7ffc0000 [ 116.690616][ T26] audit: type=1326 audit(1770113194.789:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd727dc0eb9 code=0x7ffc0000 [ 116.713841][ T26] audit: type=1326 audit(1770113194.789:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd727dc0eb9 code=0x7ffc0000 [ 116.716378][ T6005] FAT-fs (loop2): Directory bread(block 70) failed [ 116.747156][ T6018] bond0: option arp_interval: invalid value (18446744073709551615) [ 116.763274][ T6018] bond0: option arp_interval: allowed values 0 - 2147483647 [ 116.902475][ T6005] FAT-fs (loop2): Directory bread(block 71) failed [ 116.940019][ T6005] FAT-fs (loop2): Directory bread(block 72) failed [ 116.966671][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 116.980321][ T6005] FAT-fs (loop2): Directory bread(block 73) failed [ 117.113532][ T6005] attempt to access beyond end of device [ 117.113532][ T6005] loop2: rw=524288, want=1260, limit=256 [ 117.157081][ T6005] attempt to access beyond end of device [ 117.157081][ T6005] loop2: rw=0, want=1260, limit=256 [ 117.296798][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.368134][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.398115][ T5994] device bridge_slave_0 entered promiscuous mode [ 117.519612][ T6046] netlink: 'syz.0.531': attribute type 3 has an invalid length. [ 117.550529][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.558710][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.577649][ T5994] device bridge_slave_1 entered promiscuous mode [ 117.692135][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.766977][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.778611][ T6057] set_capacity_and_notify: 3 callbacks suppressed [ 117.778628][ T6057] loop6: detected capacity change from 0 to 64 [ 117.874730][ T5994] team0: Port device team_slave_0 added [ 117.904888][ T6055] loop0: detected capacity change from 0 to 4096 [ 117.906133][ T5994] team0: Port device team_slave_1 added [ 117.915358][ T6026] loop5: detected capacity change from 0 to 32768 [ 118.047772][ T6026] ERROR: (device loop5): diWrite: ixpxd invalid [ 118.047772][ T6026] [ 118.092158][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.099331][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.131191][ T6026] ERROR: (device loop5): remounting filesystem as read-only [ 118.170961][ T6026] ERROR: (device loop5): txCommit: [ 118.170961][ T6026] [ 118.194535][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 118.234291][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.355689][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.398776][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.424757][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.446971][ T26] kauditd_printk_skb: 122 callbacks suppressed [ 118.446989][ T26] audit: type=1326 audit(1770113196.579:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.487287][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.509218][ T26] audit: type=1326 audit(1770113196.619:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.611695][ T26] audit: type=1326 audit(1770113196.649:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.674799][ T26] audit: type=1326 audit(1770113196.649:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.704864][ T6083] loop6: detected capacity change from 0 to 1024 [ 118.732780][ T5994] device hsr_slave_0 entered promiscuous mode [ 118.744942][ T26] audit: type=1326 audit(1770113196.669:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.788702][ T5994] device hsr_slave_1 entered promiscuous mode [ 118.796994][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.815009][ T26] audit: type=1326 audit(1770113196.669:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.844068][ T5994] Cannot create hsr debugfs directory [ 118.857136][ T508] device hsr_slave_0 left promiscuous mode [ 118.870924][ T508] device hsr_slave_1 left promiscuous mode [ 118.879465][ T508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.893288][ T26] audit: type=1326 audit(1770113196.669:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.916401][ T26] audit: type=1326 audit(1770113196.679:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.949864][ T508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.967335][ T26] audit: type=1326 audit(1770113196.679:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 118.999065][ T26] audit: type=1326 audit(1770113196.679:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f751f330eb9 code=0x7ffc0000 [ 119.035605][ T508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.039884][ T4202] hfsplus: b-tree write err: -5, ino 4 [ 119.059944][ T508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.067722][ T508] device bridge_slave_1 left promiscuous mode [ 119.078057][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.101713][ T508] device bridge_slave_0 left promiscuous mode [ 119.108019][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.195342][ T508] device veth1_macvtap left promiscuous mode [ 119.202682][ T508] device veth0_macvtap left promiscuous mode [ 119.209161][ T508] device veth1_vlan left promiscuous mode [ 119.216523][ T508] device veth0_vlan left promiscuous mode [ 119.420854][ T508] team0 (unregistering): Port device team_slave_1 removed [ 119.434600][ T508] team0 (unregistering): Port device team_slave_0 removed [ 119.447796][ T508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.466577][ T508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.539798][ T508] bond0 (unregistering): Released all slaves [ 119.618091][ T6091] sp0: Synchronizing with TNC [ 119.864056][ T6107] loop2: detected capacity change from 0 to 2048 [ 120.018819][ T6116] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.246812][ T5994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 120.269632][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 120.291479][ T6127] loop6: detected capacity change from 0 to 64 [ 120.326380][ T5994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 120.357549][ T5994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 120.385810][ T5994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 120.476498][ T6135] vivid-001: disconnect [ 120.537927][ T6134] vivid-001: reconnect [ 120.947346][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.000856][ T6157] loop6: detected capacity change from 0 to 8 [ 121.031899][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.061931][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.084492][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.125952][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.165041][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.229983][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.237427][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.249989][ T6157] SQUASHFS error: zstd decompression error: 2 [ 121.278257][ T6157] SQUASHFS error: zstd decompression failed, data probably corrupt [ 121.296915][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.308216][ T6157] SQUASHFS error: Failed to read block 0x60: -5 [ 121.335229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.351994][ T6157] SQUASHFS error: zstd decompression error: 2 [ 121.368935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.382661][ T6157] SQUASHFS error: zstd decompression failed, data probably corrupt [ 121.396712][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.404468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.429465][ T6157] SQUASHFS error: Failed to read block 0x60: -5 [ 121.455185][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.498106][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.535794][ T6132] loop2: detected capacity change from 0 to 32768 [ 121.549652][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.567616][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.609718][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.643883][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.666417][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.703038][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.728766][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.758422][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.788043][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.850413][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.056089][ T6175] loop0: detected capacity change from 0 to 512 [ 122.178768][ T6179] loop6: detected capacity change from 0 to 1024 [ 122.285849][ T6175] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.349093][ T6175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 122.358117][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 122.369706][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.377261][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.435513][ T6175] System zones: 1-12 [ 122.480599][ T6175] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.495197][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.509639][ T6179] hfsplus: keylen 65060 too large [ 122.519607][ T6179] hfsplus: xattr searching failed [ 122.546542][ T6175] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.574: bg 0: block 361: padding at end of block bitmap is not set [ 122.633201][ T6175] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 122.713195][ T6175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.574: invalid indirect mapped block 12 (level 1) [ 122.762477][ T6175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.574: invalid indirect mapped block 2 (level 2) [ 122.859694][ T6175] EXT4-fs (loop0): 1 truncate cleaned up [ 122.880213][ T6175] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 123.191310][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 123.302044][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.304091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.356939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.407234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.440239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.496367][ T5994] device veth0_vlan entered promiscuous mode [ 123.502754][ T6210] fido_id[6210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.524289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.544060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.604522][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.580'. [ 123.650841][ T6214] tipc: Invalid UDP bearer configuration [ 123.650888][ T6214] tipc: Enabling of bearer rejected, failed to enable media [ 123.677062][ T5994] device veth1_vlan entered promiscuous mode [ 123.795095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.816575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.885194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.925729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.964314][ T5994] device veth0_macvtap entered promiscuous mode [ 124.033233][ T5994] device veth1_macvtap entered promiscuous mode [ 124.092317][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.132347][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.135944][ T6200] loop2: detected capacity change from 0 to 32768 [ 124.162298][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.199134][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.235256][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.255504][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.268254][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.290765][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.327374][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.352566][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.376216][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.399044][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.429898][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 124.436128][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.475424][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.495589][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.535293][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.567440][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.584237][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.597723][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.611896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.623903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.634777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.653731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.674917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.685705][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.695974][ T23] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 124.707010][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.719726][ T23] usb 1-1: config 0 descriptor?? [ 124.733390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.746933][ T6200] XFS (loop2): Mounting V5 Filesystem [ 124.781794][ T5994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.837866][ T5994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.880936][ T5994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.907886][ T5994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.978475][ T6200] XFS (loop2): Ending clean mount [ 125.019181][ T6200] XFS (loop2): Quotacheck needed: Please wait. [ 125.037819][ T6250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.045598][ T6250] IPv6: NLM_F_CREATE should be set when creating new route [ 125.053205][ T6250] IPv6: NLM_F_CREATE should be set when creating new route [ 125.168810][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.185103][ T23] waltop 0003:172F:0501.000D: unbalanced collection at end of report description [ 125.195784][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.204345][ T23] waltop: probe of 0003:172F:0501.000D failed with error -22 [ 125.228314][ T6200] XFS (loop2): Quotacheck: Done. [ 125.278187][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.323861][ T4183] XFS (loop2): Unmounting Filesystem [ 125.334282][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.380156][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.412107][ T1325] usb 1-1: USB disconnect, device number 9 [ 125.422500][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.671219][ T6262] loop8: detected capacity change from 0 to 256 [ 125.904911][ T6265] loop5: detected capacity change from 0 to 4096 [ 125.998966][ T6265] __ntfs_error: 172 callbacks suppressed [ 125.998986][ T6265] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 126.049803][ T6265] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 126.058860][ T6265] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 126.159559][ T6265] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 126.252971][ T6265] ntfs: volume version 3.1. [ 126.401259][ T6265] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 126.528210][ T6265] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 126.533117][ T6289] loop8: detected capacity change from 0 to 512 [ 126.807190][ T6289] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 126.858555][ T6289] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 126.954856][ T6289] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #13: comm syz.8.597: iget: bad i_size value: 12154757448730 [ 126.994776][ T6289] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.597: couldn't read orphan inode 13 (err -117) [ 127.066192][ T6289] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 127.136716][ T6256] loop6: detected capacity change from 0 to 40427 [ 127.160776][ T6313] loop0: detected capacity change from 0 to 1024 [ 127.226814][ T6256] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 127.240495][ T6256] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 127.281852][ T6256] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 127.363745][ T4318] hfsplus: b-tree write err: -5, ino 8 [ 127.364179][ T6256] F2FS-fs (loop6): invalid crc value [ 127.482813][ T6256] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 127.757429][ T6336] loop5: detected capacity change from 0 to 2048 [ 127.822631][ T6342] netlink: 32 bytes leftover after parsing attributes in process `syz.8.613'. [ 127.901859][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.613'. [ 127.922339][ T6256] F2FS-fs (loop6): Start checkpoint disabled! [ 127.937279][ T6336] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.950017][ T6256] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 127.957464][ T6256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 128.210869][ T6360] loop0: detected capacity change from 0 to 64 [ 128.389941][ T6360] hfs: unable to locate alternate MDB [ 128.425961][ T6360] hfs: continuing without an alternate MDB [ 129.544418][ T6354] loop8: detected capacity change from 0 to 32768 [ 129.773442][ T6354] XFS (loop8): Mounting V5 Filesystem [ 129.929514][ T6354] XFS (loop8): Ending clean mount [ 129.955588][ T6354] XFS (loop8): Quotacheck needed: Please wait. [ 130.078332][ T6354] XFS (loop8): Quotacheck: Done. [ 130.179596][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.293804][ T5994] XFS (loop8): Unmounting Filesystem [ 130.306861][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 130.489730][ T13] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 130.548527][ T6452] loop0: detected capacity change from 0 to 512 [ 130.652475][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.689773][ T6452] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.759670][ T4223] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 130.867604][ T6414] loop6: detected capacity change from 0 to 40427 [ 130.926275][ T6414] F2FS-fs (loop6): invalid crc value [ 130.974680][ T6414] F2FS-fs (loop6): Found nat_bits in checkpoint [ 131.055561][ T4223] usb 6-1: Using ep0 maxpacket: 8 [ 131.192642][ T6414] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 131.200456][ T4223] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.252486][ T4223] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 131.262818][ T6414] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 131.278947][ T4223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.305290][ T6470] loop8: detected capacity change from 0 to 512 [ 131.312307][ T13] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 131.315253][ T4223] usb 6-1: config 0 descriptor?? [ 131.342528][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.378591][ T13] usb 3-1: Product: syz [ 131.396416][ T13] usb 3-1: Manufacturer: syz [ 131.429489][ T13] usb 3-1: SerialNumber: syz [ 131.466192][ T13] usb 3-1: config 0 descriptor?? [ 131.477827][ T6470] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.654: invalid indirect mapped block 10 (level 1) [ 131.495106][ T5108] attempt to access beyond end of device [ 131.495106][ T5108] loop6: rw=2049, want=45104, limit=40427 [ 131.516488][ T6470] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.654: invalid indirect mapped block 8 (level 1) [ 131.536928][ T6470] EXT4-fs (loop8): 1 truncate cleaned up [ 131.537182][ T13] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 131.543230][ T6470] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 131.676721][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.729950][ T13] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 131.745714][ T6433] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 131.770527][ T13] usb 3-1: media controller created [ 131.821736][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.841453][ T4223] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 131.848520][ T4223] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 131.876173][ T4223] kye 0003:0458:4018.000E: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0 [ 132.086761][ T6498] loop8: detected capacity change from 0 to 128 [ 132.093927][ T4223] usb 6-1: USB disconnect, device number 5 [ 132.112017][ T13] DVB: Unable to find symbol mt352_attach() [ 132.153964][ T6498] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 132.232862][ T6498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.255509][ T13] DVB: Unable to find symbol nxt6000_attach() [ 132.262591][ T13] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 132.360859][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 132.395063][ T13] dvb-usb: schedule remote query interval to 1000 msecs. [ 132.451414][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 132.471847][ T6509] loop6: detected capacity change from 0 to 512 [ 132.494820][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 132.514921][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 132.563286][ T13] usb 3-1: USB disconnect, device number 5 [ 132.595624][ T6517] loop8: detected capacity change from 0 to 128 [ 132.728866][ T6517] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 132.746102][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 132.814704][ T6517] hpfs: filesystem error: improperly stopped [ 132.835092][ T6528] loop6: detected capacity change from 0 to 164 [ 132.839884][ T6517] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.849316][ T6517] hpfs: You really don't want any checks? You are crazy... [ 132.909011][ T6517] hpfs: hpfs_map_sector(): read error [ 132.915548][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922096][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.953489][ T6517] hpfs: code page support is disabled [ 132.973818][ T6517] hpfs: hpfs_map_4sectors(): unaligned read [ 132.996017][ T6517] hpfs: hpfs_map_4sectors(): unaligned read [ 133.049566][ T6517] hpfs: filesystem error: unable to find root dir [ 133.769085][ T6554] loop5: detected capacity change from 0 to 32768 [ 133.883651][ T6554] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 133.892488][ T6554] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.916134][ T6554] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 133.916134][ T6554] bh = 52 (type: exp=5, found=8) [ 133.916134][ T6554] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 133.937209][ T6554] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 133.945198][ T6554] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 133.953655][ T6562] loop2: detected capacity change from 0 to 512 [ 133.954210][ T6554] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 133.969004][ T6554] gfs2: fsid=syz:syz.s: File system withdrawn [ 133.975419][ T6554] CPU: 0 PID: 6554 Comm: syz.5.678 Not tainted syzkaller #0 [ 133.982767][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.992946][ T6554] Call Trace: [ 133.996263][ T6554] [ 133.999314][ T6554] dump_stack_lvl+0x188/0x250 [ 134.004072][ T6554] ? kobject_uevent_env+0x371/0x890 [ 134.009317][ T6554] ? show_regs_print_info+0x20/0x20 [ 134.014643][ T6554] ? load_image+0x400/0x400 [ 134.019343][ T6554] ? kobject_uevent_env+0x371/0x890 [ 134.024571][ T6554] gfs2_withdraw+0x1149/0x1490 [ 134.029540][ T6554] ? gfs2_lm+0x240/0x240 [ 134.033903][ T6554] ? gfs2_meta_read+0x8a9/0xa60 [ 134.038768][ T6554] ? gfs2_meta_new+0x160/0x160 [ 134.043627][ T6554] gfs2_metatype_check_ii+0x74/0x90 [ 134.048833][ T6554] gfs2_meta_buffer+0x262/0x310 [ 134.053691][ T6554] __fillup_metapath+0x14d/0x340 [ 134.058722][ T6554] __gfs2_iomap_get+0x709/0x1400 [ 134.063763][ T6554] ? gfs2_alloc_extent+0x580/0x580 [ 134.068898][ T6554] ? rcu_is_watching+0x11/0xa0 [ 134.074135][ T6554] gfs2_block_map+0x2a0/0x740 [ 134.079030][ T6554] ? gfs2_iomap_end+0x6b0/0x6b0 [ 134.084077][ T6554] ? mark_lock+0x94/0x320 [ 134.088532][ T6554] ? verify_lock_unused+0x140/0x140 [ 134.094278][ T6554] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 134.100378][ T6554] ? lockdep_hardirqs_on+0x94/0x140 [ 134.105762][ T6554] gfs2_write_alloc_required+0x3ae/0x680 [ 134.111413][ T6554] ? gfs2_map_journal_extents+0xb10/0xb10 [ 134.117240][ T6554] ? _raw_spin_unlock+0x24/0x40 [ 134.122186][ T6554] ? gfs2_glock_nq+0xcb0/0x1550 [ 134.127138][ T6554] gfs2_jdesc_check+0x1c3/0x290 [ 134.132080][ T6554] check_journal_clean+0x186/0x360 [ 134.137382][ T6554] ? gfs2_trans_remove_revoke+0x370/0x370 [ 134.143205][ T6554] ? check_journal_clean+0x142/0x360 [ 134.148582][ T6554] ? __rwlock_init+0x140/0x140 [ 134.153447][ T6554] ? do_raw_spin_unlock+0x11d/0x230 [ 134.158749][ T6554] ? _raw_spin_unlock+0x24/0x40 [ 134.163607][ T6554] ? gfs2_jdesc_find+0xa7/0xc0 [ 134.168387][ T6554] init_journal+0x17a5/0x22f0 [ 134.173168][ T6554] ? end_bio_io_page+0x100/0x100 [ 134.178209][ T6554] ? vsnprintf+0x1b21/0x1c20 [ 134.183050][ T6554] ? snprintf+0xe5/0x140 [ 134.187436][ T6554] ? init_journal+0x74d/0x22f0 [ 134.192291][ T6554] ? vscnprintf+0x80/0x80 [ 134.196722][ T6554] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 134.202218][ T6554] init_inodes+0xdb/0x320 [ 134.206735][ T6554] gfs2_fill_super+0x16b2/0x1f00 [ 134.211791][ T6554] ? gfs2_reconfigure+0xd30/0xd30 [ 134.216909][ T6554] ? gfs2_glock_nq_num+0x82/0x1b0 [ 134.221961][ T6554] ? sb_set_blocksize+0xa5/0xe0 [ 134.227011][ T6554] get_tree_bdev+0x3f1/0x610 [ 134.231614][ T6554] ? gfs2_reconfigure+0xd30/0xd30 [ 134.236778][ T6554] gfs2_get_tree+0x4d/0x1e0 [ 134.241287][ T6554] vfs_get_tree+0x88/0x270 [ 134.245740][ T6554] do_new_mount+0x24a/0xa40 [ 134.250520][ T6554] __se_sys_mount+0x2e3/0x3d0 [ 134.255231][ T6554] ? __x64_sys_mount+0xc0/0xc0 [ 134.260105][ T6554] ? lockdep_hardirqs_on+0x94/0x140 [ 134.265414][ T6554] ? __x64_sys_mount+0x1c/0xc0 [ 134.270287][ T6554] do_syscall_64+0x4c/0xa0 [ 134.274705][ T6554] ? clear_bhb_loop+0x30/0x80 [ 134.279577][ T6554] ? clear_bhb_loop+0x30/0x80 [ 134.284435][ T6554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.290530][ T6554] RIP: 0033:0x7f751f33214a [ 134.295042][ T6554] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.315274][ T6554] RSP: 002b:00007f751d58be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.324040][ T6554] RAX: ffffffffffffffda RBX: 00007f751d58bee0 RCX: 00007f751f33214a [ 134.332104][ T6554] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007f751d58bea0 [ 134.340165][ T6554] RBP: 000020000001f680 R08: 00007f751d58bee0 R09: 0000000000000084 [ 134.348577][ T6554] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 134.356910][ T6554] R13: 00007f751d58bea0 R14: 000000000001f707 R15: 00002000000000c0 [ 134.365188][ T6554] [ 134.370801][ T6554] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 134.564368][ T6562] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.681: invalid block [ 134.697989][ T6552] loop8: detected capacity change from 0 to 32768 [ 134.741224][ T6562] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.681: invalid indirect mapped block 10 (level 1) [ 134.836997][ T6562] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.681: invalid indirect mapped block 8 (level 1) [ 134.929811][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.686'. [ 134.951552][ T6562] EXT4-fs (loop2): 1 truncate cleaned up [ 134.957343][ T6562] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 135.076651][ T6580] netlink: 'syz.5.689': attribute type 5 has an invalid length. [ 135.322934][ T6590] loop5: detected capacity change from 0 to 256 [ 135.426867][ T6590] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.437011][ T6537] loop0: detected capacity change from 0 to 40427 [ 135.539548][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.568848][ T6537] F2FS-fs (loop0): invalid crc value [ 135.647109][ T6537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.829470][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 135.850084][ T6537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.049002][ T26] audit: type=1800 audit(1770113214.179:385): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.672" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 136.072235][ T23] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 136.105594][ T23] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 136.129252][ T23] usb 7-1: Product: syz [ 136.154328][ T4187] attempt to access beyond end of device [ 136.154328][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 136.228763][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 136.365517][ T4286] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.536017][ T6607] loop5: detected capacity change from 0 to 32768 [ 136.643228][ T6620] loop8: detected capacity change from 0 to 32768 [ 136.701024][ T6607] XFS (loop5): Mounting V5 Filesystem [ 136.759846][ T4286] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 136.804301][ T4286] usb 3-1: config 1 has no interface number 0 [ 136.821198][ T4286] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 136.849471][ T4286] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.887960][ T23] usb 7-1: USB disconnect, device number 3 [ 136.900424][ T6620] XFS (loop8): Mounting V5 Filesystem [ 136.906065][ T6607] XFS (loop5): Ending clean mount [ 137.080053][ T4286] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 137.086379][ T6620] XFS (loop8): Ending clean mount [ 137.101399][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.139964][ T4286] usb 3-1: Product: syz [ 137.144200][ T4286] usb 3-1: Manufacturer: syz [ 137.196107][ T4286] usb 3-1: SerialNumber: syz [ 137.223420][ T4490] XFS (loop5): Unmounting Filesystem [ 137.224682][ T5994] XFS (loop8): Unmounting Filesystem [ 137.261440][ T6622] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.304634][ T4286] usb 3-1: Expected 3 endpoints, found: 2 [ 138.004608][ T6693] loop6: detected capacity change from 0 to 128 [ 138.123221][ T6698] loop5: detected capacity change from 0 to 2048 [ 138.233675][ T6703] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.296866][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.707'. [ 138.697580][ T6725] loop6: detected capacity change from 0 to 512 [ 138.828896][ T6725] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.730: inode has both inline data and extents flags [ 138.924881][ T6725] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.730: couldn't read orphan inode 15 (err -117) [ 138.999938][ T6725] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,prjquota,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: writeback. [ 139.026861][ T6742] loop0: detected capacity change from 0 to 8 [ 139.073899][ T4286] usb 3-1: USB disconnect, device number 6 [ 139.527781][ T6765] raw_sendmsg: syz.6.743 forgot to set AF_INET. Fix it! [ 139.759469][ T1111] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.768879][ T6772] loop2: detected capacity change from 0 to 1024 [ 139.954572][ T6772] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.745: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.019557][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 140.076190][ T6772] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 140.100308][ T6772] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.745: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.143401][ T6746] loop5: detected capacity change from 0 to 32768 [ 140.169789][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.205200][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.221516][ T6772] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 140.246947][ T1111] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 140.256967][ T6772] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.745: Failed to acquire dquot type 0 [ 140.287068][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.290446][ T6772] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 140.342881][ T1111] usb 1-1: config 0 descriptor?? [ 140.382713][ T6772] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.745: mark_inode_dirty error [ 140.401921][ T6746] XFS (loop5): Mounting V5 Filesystem [ 140.427529][ T6781] loop6: detected capacity change from 0 to 4096 [ 140.528060][ T6746] XFS (loop5): Ending clean mount [ 140.540768][ T6772] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 140.548492][ T6758] loop8: detected capacity change from 0 to 40427 [ 140.557457][ T6781] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 140.603572][ T6772] EXT4-fs (loop2): 1 orphan inode deleted [ 140.621492][ T9] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.646344][ T6758] F2FS-fs (loop8): invalid crc value [ 140.677884][ T6772] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 140.701884][ T6781] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 140.704985][ T6758] F2FS-fs (loop8): Found nat_bits in checkpoint [ 140.719034][ T4490] XFS (loop5): Unmounting Filesystem [ 140.749279][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 140.827112][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 140.878736][ T1111] savu 0003:1E7D:2D5A.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 141.078560][ T6758] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 141.125925][ T4223] usb 1-1: USB disconnect, device number 10 [ 141.216226][ T9] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.234108][ T5994] attempt to access beyond end of device [ 141.234108][ T5994] loop8: rw=2049, want=45104, limit=40427 [ 141.272765][ T6807] fido_id[6807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.318010][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 141.358250][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 141.439337][ T4183] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 141.484986][ T4183] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 141.515857][ T4183] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 142.247228][ T6844] loop0: detected capacity change from 0 to 64 [ 142.296863][ T6841] loop5: detected capacity change from 0 to 4096 [ 142.363179][ T6841] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 142.393098][ T6844] hfs: keylen 94 too large [ 142.471425][ T6853] netlink: 9 bytes leftover after parsing attributes in process `syz.8.767'. [ 142.539336][ T6853] device gretap0 entered promiscuous mode [ 142.563353][ T6816] loop6: detected capacity change from 0 to 40427 [ 142.607410][ T6816] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 142.667663][ T6854] netlink: 5 bytes leftover after parsing attributes in process `syz.8.767'. [ 142.695253][ T6816] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 142.737173][ T6854] 0XD: renamed from gretap0 [ 142.743367][ T6816] F2FS-fs (loop6): invalid crc value [ 142.761961][ T6816] F2FS-fs (loop6): Found nat_bits in checkpoint [ 142.782720][ T6854] device 30XD left promiscuous mode [ 142.899879][ T6854] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 142.984744][ T6816] F2FS-fs (loop6): recover fsync data on readonly fs [ 143.002883][ T6816] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 143.056362][ T6816] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 143.123112][ T26] audit: type=1326 audit(1770113221.259:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.8.774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9109323eb9 code=0x0 [ 143.401597][ T6880] loop6: detected capacity change from 0 to 2048 [ 143.532863][ T6880] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.613725][ T6850] loop2: detected capacity change from 0 to 40427 [ 143.653222][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.661498][ T6887] loop5: detected capacity change from 0 to 4096 [ 143.680313][ T6850] F2FS-fs (loop2): invalid crc value [ 143.695192][ T6850] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.761754][ T6887] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 143.916530][ T6850] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 143.923480][ T6887] ntfs3: loop5: failed to convert "c46c" to cp866 [ 143.948641][ T6897] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 143.982864][ T6850] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.016478][ T6897] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.059991][ T6850] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=50000, run fsck to fix. [ 144.072925][ T6850] F2FS-fs (loop2): sanity_check_inode: inode (ino=5) has corrupted i_xattr_nid: 327680, run fsck to fix. [ 144.093864][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.137934][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 144.170125][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.170417][ T6897] netlink: 88 bytes leftover after parsing attributes in process `syz.6.781'. [ 144.218491][ T23] usb 1-1: config 0 descriptor?? [ 144.320797][ T6907] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.731467][ T23] logitech 0003:046D:C626.0010: unbalanced collection at end of report description [ 144.752409][ T23] logitech 0003:046D:C626.0010: parse failed [ 144.760063][ T23] logitech: probe of 0003:046D:C626.0010 failed with error -22 [ 144.910084][ T6936] set_capacity_and_notify: 1 callbacks suppressed [ 144.910100][ T6936] loop2: detected capacity change from 0 to 4096 [ 144.954391][ T13] usb 1-1: USB disconnect, device number 11 [ 144.960649][ T4287] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 144.970358][ T6936] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 144.989664][ T6936] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 145.015147][ T6936] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 145.045957][ T6936] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 145.120024][ T6936] ntfs: volume version 3.1. [ 145.226103][ T6936] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-4. You might want to try to use the mount option nls=utf8. [ 145.245253][ T4287] usb 7-1: Using ep0 maxpacket: 32 [ 145.291211][ T6936] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 145.379553][ T4287] usb 7-1: config 0 interface 0 altsetting 145 endpoint 0x81 has invalid maxpacket 1027, setting to 1024 [ 145.393587][ T6950] loop8: detected capacity change from 0 to 4096 [ 145.406605][ T4287] usb 7-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.437888][ T6950] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 145.440252][ T6957] loop2: detected capacity change from 0 to 64 [ 145.482402][ T4287] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.490237][ T4287] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 145.545562][ T4287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.581326][ T4287] usb 7-1: config 0 descriptor?? [ 145.609716][ T6927] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.718459][ T6950] ntfs3: loop8: failed to convert "c46c" to cp1251 [ 145.789110][ T6964] loop0: detected capacity change from 0 to 4096 [ 146.062932][ T6981] loop5: detected capacity change from 0 to 256 [ 146.071651][ T4287] elo 0003:04E7:0030.0011: item fetching failed at offset 0/2 [ 146.095464][ T4287] elo 0003:04E7:0030.0011: parse failed [ 146.116832][ T6983] IPVS: set_ctl: invalid protocol: 35143 10.1.1.2:20004 [ 146.130492][ T4287] elo: probe of 0003:04E7:0030.0011 failed with error -22 [ 146.227935][ T6981] FAT-fs (loop5): Directory bread(block 64) failed [ 146.245481][ T6981] FAT-fs (loop5): Directory bread(block 65) failed [ 146.295758][ T6981] FAT-fs (loop5): Directory bread(block 66) failed [ 146.333134][ T6981] FAT-fs (loop5): Directory bread(block 67) failed [ 146.336838][ T4257] usb 7-1: USB disconnect, device number 4 [ 146.399804][ T6981] FAT-fs (loop5): Directory bread(block 68) failed [ 146.406586][ T6981] FAT-fs (loop5): Directory bread(block 69) failed [ 146.419770][ T6981] FAT-fs (loop5): Directory bread(block 70) failed [ 146.426393][ T6981] FAT-fs (loop5): Directory bread(block 71) failed [ 146.447242][ T6988] loop0: detected capacity change from 0 to 4096 [ 146.463960][ T6981] FAT-fs (loop5): Directory bread(block 72) failed [ 146.475059][ T6981] FAT-fs (loop5): Directory bread(block 73) failed [ 146.577874][ T6988] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 146.941199][ T7011] loop5: detected capacity change from 0 to 1024 [ 147.175072][ T7022] loop6: detected capacity change from 0 to 256 [ 147.316173][ T7025] loop5: detected capacity change from 0 to 512 [ 147.344293][ T6990] loop2: detected capacity change from 0 to 32768 [ 147.470944][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.829'. [ 147.564689][ T7040] tipc: Started in network mode [ 147.574719][ T7040] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 147.584873][ T7040] tipc: Enabling of bearer rejected, failed to enable media [ 147.627084][ T7036] hfsplus: bad catalog entry type [ 147.767876][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 147.832271][ T6990] XFS (loop2): Mounting V5 Filesystem [ 148.328639][ T6990] XFS (loop2): Ending clean mount [ 148.353482][ T7057] gfs2: fsid=__"_z#˱1 I3wʂX9: Trying to join cluster "lock_nolock", "__"_z#˱1 I3wʂX9" [ 148.367875][ T7057] gfs2: fsid=__"_z#˱1 I3wʂX9: Now mounting FS (format 0)... [ 148.388464][ T7057] gfs2: fsid=__"_z#˱1 I3wʂX9.0: journal 0 mapped with 16 extents in 0ms [ 148.405158][ T4257] gfs2: fsid=__"_z#˱1 I3wʂX9.0: jid=0, already locked for use [ 148.422521][ T4257] gfs2: fsid=__"_z#˱1 I3wʂX9.0: jid=0: Looking at journal... [ 148.427027][ T6990] XFS (loop2): Quotacheck needed: Please wait. [ 148.561820][ T4257] gfs2: fsid=__"_z#˱1 I3wʂX9.0: jid=0: Journal head lookup took 139ms [ 148.594059][ T4257] gfs2: fsid=__"_z#˱1 I3wʂX9.0: jid=0: Done [ 148.636480][ T7057] gfs2: fsid=__"_z#˱1 I3wʂX9.0: first mount done, others may mount [ 148.650337][ T6990] XFS (loop2): Quotacheck: Done. [ 148.660955][ T7057] gfs2: fsid=__"_z#˱1 I3wʂX9.0: no resource groups found in the file system. [ 148.837074][ T4183] XFS (loop2): Unmounting Filesystem [ 149.399605][ T4257] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.769682][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 149.799486][ T4257] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 149.830113][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 149.885428][ T4257] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 150.017511][ T7079] set_capacity_and_notify: 4 callbacks suppressed [ 150.017528][ T7079] loop6: detected capacity change from 0 to 32768 [ 150.069662][ T4257] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 150.089498][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.097550][ T4257] usb 1-1: Product: syz [ 150.154075][ T4257] usb 1-1: Manufacturer: syz [ 150.158838][ T4257] usb 1-1: SerialNumber: syz [ 150.206009][ T7079] JBD2: Ignoring recovery information on journal [ 150.215032][ T7091] loop2: detected capacity change from 0 to 32768 [ 150.245016][ T4257] usb 1-1: config 0 descriptor?? [ 150.308097][ T7078] loop8: detected capacity change from 0 to 40427 [ 150.315879][ T4257] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 150.340440][ T7079] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 150.423367][ T7078] F2FS-fs (loop8): invalid crc value [ 150.469944][ T5108] ocfs2: Unmounting device (7,6) on (node local) [ 150.546818][ T7078] F2FS-fs (loop8): Found nat_bits in checkpoint [ 150.569888][ T4257] scsi host1: usb-storage 1-1:0.0 [ 150.764953][ T4257] usb 1-1: USB disconnect, device number 12 [ 150.772430][ T7078] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 151.434512][ T7163] loop6: detected capacity change from 0 to 1024 [ 151.509750][ T7167] loop5: detected capacity change from 0 to 128 [ 151.697433][ T7169] loop0: detected capacity change from 0 to 2048 [ 151.736953][ T9] hfsplus: b-tree write err: -5, ino 4 [ 151.937514][ T7179] loop5: detected capacity change from 0 to 256 [ 151.947200][ T7169] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 152.067183][ T7169] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.867: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.138083][ T7139] loop2: detected capacity change from 0 to 32768 [ 152.159821][ T7169] EXT4-fs (loop0): Remounting filesystem read-only [ 152.221785][ T7192] trusted_key: encrypted_key: key user:syz not found [ 152.321730][ T7139] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 152.464275][ T7188] loop8: detected capacity change from 0 to 4096 [ 152.550132][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 152.612762][ T7188] ntfs: volume version 3.1. [ 152.677159][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 152.730564][ T26] audit: type=1800 audit(1770113230.869:387): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.873" name="/newroot/166/bus/#889//deleted" dev="tmpfs" ino=889 res=0 errno=0 [ 152.950248][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 153.408333][ T7203] loop6: detected capacity change from 0 to 32768 [ 153.529144][ T26] audit: type=1326 audit(1770113231.659:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.2.889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b6010eb9 code=0x0 [ 154.119549][ T1325] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.359556][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 154.394613][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.445753][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.485499][ T1325] usb 1-1: config 0 interface 0 altsetting 17 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.496491][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.519889][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.526661][ T1325] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 154.541427][ C1] Illegal XDP return value 16128, expect packet loss! [ 154.556564][ T7287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.556693][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.651646][ T1325] usb 1-1: config 0 descriptor?? [ 154.773044][ T7302] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 155.131334][ T1325] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 155.147181][ T1325] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 155.218653][ T1325] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 155.241625][ T1325] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 155.259970][ T7323] nbd: must specify a size in bytes for the device [ 155.282402][ T1325] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 155.339743][ T1325] chicony 0003:04F2:1421.0012: hidraw0: USB HID v0.05 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 155.391467][ T1325] usb 1-1: USB disconnect, device number 13 [ 155.440228][ T7329] set_capacity_and_notify: 2 callbacks suppressed [ 155.440248][ T7329] loop8: detected capacity change from 0 to 64 [ 155.634275][ T7327] fido_id[7327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 156.499541][ T26] audit: type=1326 audit(1770113234.619:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.0.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff962de8eb9 code=0x0 [ 156.506260][ T7376] loop2: detected capacity change from 0 to 2048 [ 156.677324][ T7337] loop6: detected capacity change from 0 to 32768 [ 157.099313][ T7393] loop6: detected capacity change from 0 to 2048 [ 157.190310][ T7393] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.213668][ T7393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.410838][ T7413] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 157.410838][ T7413] The task syz.5.942 (7413) triggered the difference, watch for misbehavior. [ 158.157262][ T7450] loop0: detected capacity change from 0 to 256 [ 158.230922][ T7450] exfat: Deprecated parameter 'namecase' [ 158.293011][ T7450] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 158.439629][ T7458] loop8: detected capacity change from 0 to 256 [ 158.654116][ T7424] loop6: detected capacity change from 0 to 32768 [ 158.768059][ T7424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.945 (7424) [ 158.792065][ T7472] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.872051][ T7424] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 158.919682][ T7424] BTRFS info (device loop6): using free space tree [ 158.946891][ T7424] BTRFS info (device loop6): has skinny extents [ 159.005932][ T7474] loop0: detected capacity change from 0 to 4096 [ 159.074513][ T7474] EXT4-fs (loop0): inline encryption not supported [ 159.081939][ T7474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.092002][ T7491] loop5: detected capacity change from 0 to 256 [ 159.173443][ T7474] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 159.197562][ T7491] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 159.225093][ T7474] System zones: 0-5 [ 159.237911][ T7474] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 159.421076][ T7424] BTRFS info (device loop6): enabling ssd optimizations [ 159.666692][ T7526] loop8: detected capacity change from 0 to 2048 [ 159.756862][ T7526] loop8: p1 < > p3 [ 159.896312][ T7526] loop8: p3 size 134217728 extends beyond EOD, truncated [ 159.994980][ T7531] exFAT-fs (loop8): invalid fs_name [ 160.071285][ T7539] sp0: Synchronizing with TNC [ 160.087161][ T7531] exFAT-fs (loop8): failed to read boot sector [ 160.137574][ T7538] [U] ` [ 160.144723][ T3560] loop8: p1 < > p3 [ 160.154741][ T4268] hfsplus: b-tree write err: -5, ino 4 [ 160.161165][ T3560] loop8: p3 size 134217728 extends beyond EOD, truncated [ 160.229420][ T7531] exFAT-fs (loop8): failed to recognize exfat type [ 160.308704][ T9] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 160.825398][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 160.832711][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 160.961478][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 160.977473][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 161.010490][ T7572] set_capacity_and_notify: 1 callbacks suppressed [ 161.010511][ T7572] loop0: detected capacity change from 0 to 512 [ 161.125611][ T7572] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.195836][ T7572] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 161.316301][ T7572] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.989: invalid indirect mapped block 2683928664 (level 1) [ 161.350210][ T7543] loop2: detected capacity change from 0 to 32768 [ 161.431961][ T7572] EXT4-fs (loop0): 1 truncate cleaned up [ 161.437676][ T7572] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noauto_da_alloc,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 161.494272][ T7592] loop8: detected capacity change from 0 to 512 [ 161.616720][ T7592] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 161.729300][ T7592] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.770321][ T7600] loop6: detected capacity change from 0 to 512 [ 161.910031][ T7600] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.995: iget: bad i_size value: 38620345925642 [ 162.019147][ T7600] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.995: couldn't read orphan inode 15 (err -117) [ 162.109250][ T7600] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.063279][ T7670] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 163.139929][ T7673] loop2: detected capacity change from 0 to 256 [ 163.163541][ T7662] loop6: detected capacity change from 0 to 4096 [ 163.190675][ T7673] exfat: Deprecated parameter 'utf8' [ 163.196337][ T7673] exfat: Deprecated parameter 'namecase' [ 163.243207][ T7662] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 163.259595][ T7673] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 163.501532][ T5108] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 163.504598][ T7680] loop5: detected capacity change from 0 to 4096 [ 163.530055][ T5108] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 163.536625][ T5108] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 163.690229][ T7680] ntfs: volume version 3.1. [ 164.168146][ T7708] usb usb9: usbfs: process 7708 (syz.2.1032) did not claim interface 0 before use [ 164.429530][ T1325] Bluetooth: hci3: command 0x0405 tx timeout [ 165.038539][ T7703] loop5: detected capacity change from 0 to 32768 [ 165.149643][ T7577] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.175279][ T7703] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 165.330498][ T4490] ocfs2: Unmounting device (7,5) on (node local) [ 165.429441][ T7577] usb 3-1: Using ep0 maxpacket: 32 [ 165.538474][ T7772] loop8: detected capacity change from 0 to 4096 [ 165.560290][ T7577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.595867][ T7772] EXT4-fs (loop8): inline encryption not supported [ 165.613373][ T7577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.650953][ T7772] EXT4-fs (loop8): Test dummy encryption mode enabled [ 165.657909][ T7577] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 165.708979][ T7577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.740831][ T7772] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 165.743406][ T7786] MPTCP: kernel_bind error, err=-22 [ 165.749030][ T7772] System zones: [ 165.773766][ T7577] usb 3-1: config 0 descriptor?? [ 165.850810][ T7772] 0-5 [ 165.856850][ T7772] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 165.935521][ T26] audit: type=1800 audit(1770113244.069:390): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1057" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 166.288934][ T7765] loop0: detected capacity change from 0 to 32768 [ 166.342578][ T7577] aquacomputer-d5next 0003:0C70:F00E.0013: unknown main item tag 0x0 [ 166.359435][ T7577] aquacomputer-d5next 0003:0C70:F00E.0013: unknown main item tag 0x0 [ 166.393349][ T7577] aquacomputer-d5next 0003:0C70:F00E.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.2-1/input0 [ 166.444933][ T7765] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 166.504535][ T7765] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.550988][ T7577] usb 3-1: USB disconnect, device number 7 [ 166.666477][ T7810] loop8: detected capacity change from 0 to 4096 [ 166.713227][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.767191][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 166.837165][ T7810] EXT4-fs (loop8): inline encryption not supported [ 166.856219][ T7810] EXT4-fs (loop8): Test dummy encryption mode enabled [ 166.887864][ T7810] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,mb_optimize_scan=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback. [ 167.473653][ T7806] loop6: detected capacity change from 0 to 32768 [ 167.615448][ T7862] loop5: detected capacity change from 0 to 64 [ 167.677546][ T7806] XFS (loop6): Mounting V5 Filesystem [ 167.747265][ T7873] loop8: detected capacity change from 0 to 4096 [ 167.895427][ T7873] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 167.952805][ T7806] XFS (loop6): Ending clean mount [ 168.040620][ T7806] XFS (loop6): Quotacheck needed: Please wait. [ 168.142940][ T7873] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 168.214847][ T7806] XFS (loop6): Quotacheck: Done. [ 168.445531][ T5108] XFS (loop6): Unmounting Filesystem [ 169.101237][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 169.274932][ T7938] loop5: detected capacity change from 0 to 4096 [ 169.333183][ T7938] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 169.434498][ T7938] ntfs3: loop5: failed to convert "c46c" to cp936 [ 169.493343][ T7951] loop0: detected capacity change from 0 to 512 [ 169.673331][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 169.739052][ T7965] loop8: detected capacity change from 0 to 16 [ 169.762443][ T7951] EXT4-fs (loop0): 1 orphan inode deleted [ 169.786632][ T7951] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.808703][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1116'. [ 169.814045][ T7965] erofs: (device loop8): mounted with root inode @ nid 36. [ 169.818396][ T7951] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.954599][ T7951] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 170.388367][ T7994] loop2: detected capacity change from 0 to 2048 [ 170.491556][ T7994] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 170.622404][ T7994] EXT4-fs error (device loop2): ext4_ext_precache:626: inode #2: comm syz.2.1125: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 170.689197][ T7994] EXT4-fs (loop2): Remounting filesystem read-only [ 170.928343][ T8026] loop6: detected capacity change from 0 to 256 [ 171.084329][ T26] audit: type=1800 audit(1770113249.219:391): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1136" name=AB558DD927B972A7B6E39F9435C9CE7FF7 dev="loop6" ino=1048674 res=0 errno=0 [ 171.555581][ T7983] loop5: detected capacity change from 0 to 40427 [ 171.698764][ T7983] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 171.712965][ T7983] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 171.766651][ T7983] F2FS-fs (loop5): invalid crc value [ 171.875526][ T7983] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.028116][ T8057] loop6: detected capacity change from 0 to 4096 [ 172.076631][ T7983] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 172.093137][ T7983] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.219765][ T8057] ntfs3: loop6: failed to convert name for inode 1e. [ 172.523603][ T8041] loop8: detected capacity change from 0 to 32768 [ 172.562548][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1152'. [ 172.626809][ T8041] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 scanned by syz.8.1140 (8041) [ 172.672164][ T8081] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1152'. [ 172.696348][ T8045] loop2: detected capacity change from 0 to 40427 [ 172.706806][ T8041] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 172.748951][ T8041] BTRFS info (device loop8): using free space tree [ 172.766485][ T8045] F2FS-fs (loop2): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 172.769822][ T8081] netlink: 'syz.0.1152': attribute type 6 has an invalid length. [ 172.796058][ T8041] BTRFS info (device loop8): has skinny extents [ 172.810973][ T8045] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 172.839533][ T8045] F2FS-fs (loop2): invalid crc value [ 172.879896][ T8081] netlink: 'syz.0.1152': attribute type 5 has an invalid length. [ 172.928408][ T8081] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1152'. [ 172.949533][ T8045] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.029475][ T1108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 173.101165][ T8045] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 173.129535][ T8045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.213270][ T26] audit: type=1800 audit(1770113251.349:392): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1142" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 173.240864][ T8041] BTRFS info (device loop8): enabling ssd optimizations [ 173.282489][ T1108] usb 7-1: Using ep0 maxpacket: 16 [ 173.317205][ T4183] attempt to access beyond end of device [ 173.317205][ T4183] loop2: rw=2049, want=45104, limit=40427 [ 173.399660][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.439477][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.487982][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.559637][ T1108] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.599693][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.695671][ T1108] usb 7-1: config 0 descriptor?? [ 173.739285][ T4313] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop8 scanned by udevd (4313) [ 174.221536][ T1108] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 174.297501][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0014/input/input8 [ 174.576738][ T1108] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 174.624479][ T8172] loop2: detected capacity change from 0 to 4096 [ 174.674105][ T1108] usb 7-1: USB disconnect, device number 5 [ 174.680835][ T4257] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 174.782037][ T8172] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.916948][ T8177] fido_id[8177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 174.937562][ T8172] ntfs3: loop2: Failed to load $Extend. [ 174.958178][ T8184] loop5: detected capacity change from 0 to 1024 [ 174.999220][ T8184] EXT4-fs (loop5): Ignoring removed bh option [ 175.040417][ T8184] EXT4-fs (loop5): inline encryption not supported [ 175.049655][ T4257] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 175.077137][ T4257] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 175.103916][ T4257] usb 1-1: config 220 has no interface number 2 [ 175.114679][ T8184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 175.143727][ T4257] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 175.186879][ T8184] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.1172: lblock 2 mapped to illegal pblock 2 (length 1) [ 175.240263][ T4257] usb 1-1: config 220 interface 0 has no altsetting 0 [ 175.258327][ T8184] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 175.268730][ T8149] loop8: detected capacity change from 0 to 40427 [ 175.275006][ T4257] usb 1-1: config 220 interface 76 has no altsetting 0 [ 175.296324][ T8184] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.1172: lblock 0 mapped to illegal pblock 48 (length 1) [ 175.305435][ T8191] ptrace attach of "./syz-executor exec"[5108] was attempted by " [ 175.314160][ T4257] usb 1-1: config 220 interface 1 has no altsetting 0 [ 175.354138][ T8184] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 175.443464][ T8184] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1172: Failed to acquire dquot type 0 [ 175.478825][ T8184] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 175.481933][ T8149] F2FS-fs (loop8): invalid crc value [ 175.501043][ T8149] F2FS-fs (loop8): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 175.554152][ T8184] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.1172: mark_inode_dirty error [ 175.567352][ T8149] F2FS-fs (loop8): Found nat_bits in checkpoint [ 175.609756][ T4257] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 175.625382][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.640959][ T8184] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 175.658224][ T4257] usb 1-1: Product: syz [ 175.668332][ T4257] usb 1-1: Manufacturer: syz [ 175.673254][ T4257] usb 1-1: SerialNumber: syz [ 175.698701][ T8184] EXT4-fs (loop5): 1 orphan inode deleted [ 175.719777][ T4318] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.745214][ T8184] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 175.778718][ T8149] F2FS-fs (loop8): recover fsync data on readonly fs [ 175.801030][ T4318] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 175.818418][ T4318] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 175.830088][ T8149] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 175.847289][ T8149] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 176.055677][ T4257] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 176.075146][ T4257] usb 1-1: No valid video chain found. [ 176.106786][ T4257] usb 1-1: selecting invalid altsetting 0 [ 176.124803][ T8184] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.1172: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.188154][ T8184] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 176.240582][ T4257] usb 1-1: selecting invalid altsetting 0 [ 176.246472][ T4257] usbtest: probe of 1-1:220.1 failed with error -22 [ 176.296017][ T4257] usb 1-1: USB disconnect, device number 14 [ 176.304597][ T8214] loop2: detected capacity change from 0 to 8192 [ 176.382176][ T8214] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 176.395445][ T8214] REISERFS (device loop2): using ordered data mode [ 176.403889][ T8214] reiserfs: using flush barriers [ 176.417499][ T8214] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.439522][ T8214] REISERFS (device loop2): checking transaction log (loop2) [ 176.799727][ T8214] REISERFS (device loop2): Using tea hash to sort names [ 176.807189][ T8214] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 177.194742][ T8216] loop6: detected capacity change from 0 to 32768 [ 177.403299][ T8258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.426281][ T8216] XFS (loop6): Mounting V5 Filesystem [ 177.502446][ T8266] loop5: detected capacity change from 0 to 512 [ 177.572906][ T8230] loop0: detected capacity change from 0 to 40427 [ 177.644201][ T8216] XFS (loop6): Ending clean mount [ 177.677460][ T8230] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 177.740951][ T8230] F2FS-fs (loop0): invalid crc value [ 177.775133][ T8277] loop2: detected capacity change from 0 to 24 [ 177.785655][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.1193: corrupted inode contents [ 177.830479][ T8230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.932803][ T8266] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #3: comm syz.5.1193: mark_inode_dirty error [ 177.963058][ T8281] loop8: detected capacity change from 0 to 2048 [ 177.986448][ T5108] XFS (loop6): Unmounting Filesystem [ 178.031058][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.1193: corrupted inode contents [ 178.065589][ T8281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.076737][ T8230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.125882][ T8266] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.1193: mark_inode_dirty error [ 178.206039][ T8266] Quota error (device loop5): write_blk: dquota write failed [ 178.239921][ T8266] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.262050][ T8266] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1193: Failed to acquire dquot type 0 [ 178.371089][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1193: corrupted inode contents [ 178.393501][ T8266] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #16: comm syz.5.1193: mark_inode_dirty error [ 178.412810][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1193: corrupted inode contents [ 178.426455][ T4187] attempt to access beyond end of device [ 178.426455][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 178.452460][ T8266] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.1193: mark_inode_dirty error [ 178.498270][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1193: corrupted inode contents [ 178.639933][ T8266] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 178.667140][ T8266] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1193: corrupted inode contents [ 178.690219][ T8266] EXT4-fs error (device loop5): ext4_truncate:4279: inode #16: comm syz.5.1193: mark_inode_dirty error [ 178.735478][ T8266] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 178.779644][ T8266] EXT4-fs (loop5): 1 truncate cleaned up [ 178.795394][ T8266] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 178.842790][ T7574] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.866550][ T8266] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.954356][ T8307] loop6: detected capacity change from 0 to 2048 [ 179.078040][ T8307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.146360][ T7574] usb 3-1: Using ep0 maxpacket: 16 [ 179.299851][ T7574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.321730][ T7574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.358981][ T7574] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.381850][ T8326] loop0: detected capacity change from 0 to 164 [ 179.390082][ T7574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.448820][ T7574] usb 3-1: config 0 descriptor?? [ 179.472639][ T146] Bluetooth: hci3: link tx timeout [ 179.478349][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.493090][ T8326] Unable to read rock-ridge attributes [ 179.493959][ T146] Bluetooth: hci3: link tx timeout [ 179.504572][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.515764][ T146] Bluetooth: hci3: link tx timeout [ 179.521000][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.530392][ T146] Bluetooth: hci3: link tx timeout [ 179.535794][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.543990][ T146] Bluetooth: hci3: link tx timeout [ 179.549141][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.692431][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1214'. [ 179.820505][ T8332] loop5: detected capacity change from 0 to 4096 [ 179.918415][ T8332] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 179.956248][ T7574] microsoft 0003:045E:07DA.0015: collection stack underflow [ 179.967534][ T8349] loop8: detected capacity change from 0 to 1024 [ 179.975432][ T7574] microsoft 0003:045E:07DA.0015: item 0 2 0 12 parsing failed [ 179.983515][ T8332] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 180.004185][ T7574] microsoft 0003:045E:07DA.0015: parse failed [ 180.022600][ T7574] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 180.030667][ T8349] EXT4-fs (loop8): inline encryption not supported [ 180.044406][ T8332] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 180.063084][ T8349] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.127613][ T8332] ntfs: volume version 3.1. [ 180.154799][ T8349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8857c028, mo2=0002] [ 180.157946][ T7574] usb 3-1: USB disconnect, device number 8 [ 180.191697][ T8349] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,debug,errors=remount-ro,. Quota mode: writeback. [ 180.383525][ T4490] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 180.623534][ T8369] loop5: detected capacity change from 0 to 65 [ 180.688549][ T8369] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 180.714490][ T8339] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.749510][ T8339] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.801121][ T8339] F2FS-fs (loop0): invalid crc value [ 180.863694][ T8339] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.068958][ T8339] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.069510][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 181.094915][ T8339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.103878][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 181.461831][ T8404] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 181.529536][ T8152] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 181.550092][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 181.720992][ T8415] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 181.743266][ T8415] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.089285][ T8426] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.104694][ T8152] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.125937][ T8152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.145113][ T8426] hpfs: filesystem error: improperly stopped [ 182.152284][ T8152] usb 9-1: Product: syz [ 182.156704][ T8426] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 182.165026][ T8152] usb 9-1: Manufacturer: syz [ 182.170179][ T8426] hpfs: You really don't want any checks? You are crazy... [ 182.170327][ T8152] usb 9-1: SerialNumber: syz [ 182.178025][ T8426] hpfs: hpfs_map_sector(): read error [ 182.188219][ T8426] hpfs: code page support is disabled [ 182.223213][ T8426] hpfs: hpfs_map_4sectors(): unaligned read [ 182.232533][ T8426] hpfs: hpfs_map_4sectors(): unaligned read [ 182.238788][ T8152] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 182.247662][ T8426] hpfs: filesystem error: unable to find root dir [ 182.422217][ T8438] set_capacity_and_notify: 5 callbacks suppressed [ 182.422234][ T8438] loop2: detected capacity change from 0 to 1024 [ 182.505051][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 182.533402][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1257'. [ 182.562104][ T8438] hfsplus: request for non-existent node 134217728 in B*Tree [ 182.578449][ T8438] hfsplus: request for non-existent node 134217728 in B*Tree [ 182.682423][ T8442] hugetlbfs: Bad value for 'size' [ 182.850578][ T8436] loop5: detected capacity change from 0 to 32768 [ 182.968954][ T8436] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 183.029703][ T8152] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.111361][ T8436] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.294211][ T8472] loop2: detected capacity change from 0 to 1024 [ 183.322728][ T4490] ocfs2: Unmounting device (7,5) on (node local) [ 183.346121][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 183.406641][ T8472] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 183.425897][ T8472] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.1272: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 183.465870][ T8472] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1272: couldn't read orphan inode 11 (err -117) [ 183.482234][ T8472] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 183.561179][ T4257] usb 9-1: USB disconnect, device number 2 [ 183.738934][ T8472] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 183.743592][ T8489] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.866973][ T8493] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1282'. [ 183.885187][ T8493] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 184.119545][ T8152] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 184.126868][ T8152] ath9k_htc: Failed to initialize the device [ 184.146254][ T4257] usb 9-1: ath9k_htc: USB layer deinitialized [ 184.148301][ T7580] kernel write not supported for file /602/attr/keycreate (pid: 7580 comm: kworker/1:14) [ 184.161927][ T8505] loop6: detected capacity change from 0 to 256 [ 184.269123][ T8515] loop2: detected capacity change from 0 to 256 [ 184.269272][ T8505] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 184.529134][ T8527] loop5: detected capacity change from 0 to 512 [ 184.599696][ T8527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.630209][ T8527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 184.666836][ T8527] System zones: 1-12 [ 184.710856][ T8527] EXT4-fs (loop5): 1 truncate cleaned up [ 184.754727][ T8527] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 185.019441][ T8511] loop8: detected capacity change from 0 to 32768 [ 185.068738][ T8511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1291 (8511) [ 185.110182][ T8511] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 185.153861][ T8511] BTRFS info (device loop8): using free space tree [ 185.188837][ T8552] loop2: detected capacity change from 0 to 64 [ 185.218073][ T8511] BTRFS info (device loop8): has skinny extents [ 185.394226][ T8566] netlink: 'syz.5.1309': attribute type 25 has an invalid length. [ 185.482837][ T8566] netlink: 'syz.5.1309': attribute type 25 has an invalid length. [ 185.525163][ T8576] loop2: detected capacity change from 0 to 64 [ 185.545589][ T8566] Zero length message leads to an empty skb [ 185.570510][ T8511] BTRFS info (device loop8): enabling ssd optimizations [ 185.643635][ T8511] BTRFS info (device loop8): Snapshot src from another FS [ 185.681688][ T8576] hfs: request for non-existent node 1280 in B*Tree [ 185.739610][ T8576] hfs: request for non-existent node 1280 in B*Tree [ 185.872837][ T4268] hfs: request for non-existent node 1280 in B*Tree [ 185.953187][ T4268] hfs: request for non-existent node 1280 in B*Tree [ 185.962404][ T8585] IPVS: Error joining to the multicast group [ 186.238729][ T8597] loop6: detected capacity change from 0 to 1024 [ 186.372175][ T8573] (syz.0.1310,8573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 186.437477][ T8573] (syz.0.1310,8573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 186.550827][ T8573] JBD2: Ignoring recovery information on journal [ 186.590619][ T8597] hfsplus: invalid extended attribute record [ 186.839832][ T8573] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.862672][ T154] hfsplus: b-tree write err: -5, ino 4 [ 187.079232][ T8625] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 187.134390][ T8625] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.255771][ T8625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1325: bg 0: block 18: invalid block bitmap [ 187.275389][ T8625] Quota error (device loop2): write_blk: dquota write failed [ 187.291658][ T8625] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 187.295969][ T8602] XFS (loop8): Mounting V5 Filesystem [ 187.302338][ T8637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 187.343868][ T8642] Quota error (device loop2): write_blk: dquota write failed [ 187.350612][ T8625] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1325: Failed to acquire dquot type 1 [ 187.352060][ T8642] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 187.368887][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 187.374227][ T8642] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1325: Failed to acquire dquot type 1 [ 187.402321][ T8637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 187.418733][ T8637] System zones: 1-12 [ 187.467530][ T8637] EXT4-fs (loop6): 1 truncate cleaned up [ 187.502441][ T8602] XFS (loop8): Ending clean mount [ 187.504590][ T8637] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 187.622284][ T5994] XFS (loop8): Unmounting Filesystem [ 187.960107][ T8656] set_capacity_and_notify: 4 callbacks suppressed [ 187.960126][ T8656] loop5: detected capacity change from 0 to 1024 [ 188.021900][ T8661] loop2: detected capacity change from 0 to 64 [ 188.058224][ T8656] hfsplus: bad catalog entry type [ 188.469173][ T8675] loop5: detected capacity change from 0 to 64 [ 188.668720][ T8687] loop0: detected capacity change from 0 to 1024 [ 188.710828][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1349'. [ 188.764755][ T8687] hfsplus: bad catalog entry type [ 188.834659][ T4268] hfsplus: b-tree write err: -5, ino 4 [ 188.937794][ T8700] loop5: detected capacity change from 0 to 128 [ 188.938972][ T8703] loop0: detected capacity change from 0 to 512 [ 189.008698][ T8664] loop6: detected capacity change from 0 to 32768 [ 189.031629][ T8703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 189.048924][ T8700] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.049508][ T8703] System zones: [ 189.069587][ T8700] hpfs: filesystem error: improperly stopped [ 189.089673][ T8700] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.109565][ T8700] hpfs: You really don't want any checks? You are crazy... [ 189.122109][ T8703] 0-2, 18-18, 34-34 [ 189.127254][ T8700] hpfs: hpfs_map_sector(): read error [ 189.131464][ T8664] JBD2: Ignoring recovery information on journal [ 189.133103][ T8700] hpfs: code page support is disabled [ 189.209509][ T8700] hpfs: hpfs_map_4sectors(): unaligned read [ 189.216376][ T8700] hpfs: hpfs_map_4sectors(): unaligned read [ 189.226237][ T8700] hpfs: filesystem error: unable to find root dir [ 189.227248][ T8664] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 189.251495][ T8703] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1354: bg 0: block 248: padding at end of block bitmap is not set [ 189.310897][ T8703] Quota error (device loop0): write_blk: dquota write failed [ 189.349070][ T8703] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 189.399723][ T8703] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1354: Failed to acquire dquot type 1 [ 189.512588][ T8703] EXT4-fs (loop0): 1 truncate cleaned up [ 189.537711][ T8703] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 189.581636][ T5108] ocfs2: Unmounting device (7,6) on (node local) [ 189.617249][ T8703] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.900709][ T8717] loop5: detected capacity change from 0 to 2048 [ 189.936247][ T8717] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.012175][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop5 [ 190.069591][ T8726] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.141036][ T26] audit: type=1800 audit(1770113268.279:393): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1360" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 190.151064][ T8702] loop2: detected capacity change from 0 to 32768 [ 190.236970][ T8732] loop6: detected capacity change from 0 to 64 [ 190.559748][ T7574] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 190.659749][ T8745] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.714039][ T8745] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1372: missing EA_INODE flag [ 190.734436][ T8745] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1372: error while reading EA inode 2 err=-117 [ 190.808720][ T8745] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 190.822127][ T7574] usb 9-1: Using ep0 maxpacket: 16 [ 190.853299][ T8745] EXT4-fs (loop5): 1 truncate cleaned up [ 190.859109][ T8745] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,nogrpid,,errors=continue. Quota mode: none. [ 190.989658][ T7574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.023361][ T7574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.050077][ T7574] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.101643][ T7574] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.119410][ T7574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.137535][ T7574] usb 9-1: config 0 descriptor?? [ 191.235728][ T8765] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1381'. [ 191.309590][ T8615] Bluetooth: hci2: command 0x0406 tx timeout [ 191.612411][ T7574] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 191.630673][ T8771] FAT-fs (loop5): Directory bread(block 64) failed [ 191.637477][ T8771] FAT-fs (loop5): Directory bread(block 65) failed [ 191.695902][ T7574] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0016/input/input9 [ 191.707826][ T8771] FAT-fs (loop5): Directory bread(block 66) failed [ 191.728079][ T8771] FAT-fs (loop5): Directory bread(block 67) failed [ 191.746102][ T8771] FAT-fs (loop5): Directory bread(block 68) failed [ 191.759606][ T8771] FAT-fs (loop5): Directory bread(block 69) failed [ 191.776635][ T8771] FAT-fs (loop5): Directory bread(block 70) failed [ 191.783786][ T8771] FAT-fs (loop5): Directory bread(block 71) failed [ 191.808101][ T8771] FAT-fs (loop5): Directory bread(block 72) failed [ 191.830531][ T8771] FAT-fs (loop5): Directory bread(block 73) failed [ 191.838743][ T7574] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 191.885764][ T8762] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 191.885764][ T8762] [ 191.906097][ T7574] usb 9-1: USB disconnect, device number 3 [ 192.098629][ T8778] fido_id[8778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 192.856251][ T8804] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.1400: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.984732][ T8818] set_capacity_and_notify: 8 callbacks suppressed [ 192.984751][ T8818] loop8: detected capacity change from 0 to 8192 [ 192.999384][ T8804] Quota error (device loop2): write_blk: dquota write failed [ 193.007283][ T8804] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 193.029935][ T8804] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1400: Failed to acquire dquot type 0 [ 193.088973][ T8804] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.1400: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.196011][ T8804] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1400: Invalid inode bitmap blk 0 in block_group 0 [ 193.216990][ T4294] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.275044][ T4294] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 193.284137][ T8804] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 193.304206][ T4294] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 193.319051][ T8804] EXT4-fs (loop2): 1 orphan inode deleted [ 193.339595][ T8804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 193.897770][ T8852] loop2: detected capacity change from 0 to 512 [ 193.942634][ T8852] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.988456][ T8852] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1422: invalid indirect mapped block 4294967295 (level 1) [ 194.020705][ T8857] loop8: detected capacity change from 0 to 256 [ 194.057088][ T8852] EXT4-fs (loop2): Remounting filesystem read-only [ 194.069511][ T8852] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1422: invalid indirect mapped block 4294967295 (level 1) [ 194.085681][ T8852] EXT4-fs (loop2): Remounting filesystem read-only [ 194.092627][ T8852] EXT4-fs (loop2): 2 truncates cleaned up [ 194.098592][ T8852] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 194.234275][ T8859] loop5: detected capacity change from 0 to 512 [ 194.341691][ T8828] loop6: detected capacity change from 0 to 40427 [ 194.353075][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.371312][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414288][ T8865] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1428'. [ 194.426909][ T8859] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 194.445312][ T8828] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 194.459532][ T8828] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 194.503248][ T8828] F2FS-fs (loop6): invalid crc value [ 194.538644][ T8828] F2FS-fs (loop6): Found nat_bits in checkpoint [ 194.588760][ T8828] F2FS-fs (loop6): recover fsync data on readonly fs [ 194.625212][ T8828] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 194.642682][ T8828] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 195.268239][ T8863] loop8: detected capacity change from 0 to 32768 [ 195.374814][ T8894] loop5: detected capacity change from 0 to 1024 [ 195.429749][ T8863] XFS (loop8): Mounting V5 Filesystem [ 195.449654][ T8894] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.466503][ T8870] loop2: detected capacity change from 0 to 32768 [ 195.567126][ T8863] XFS (loop8): Ending clean mount [ 195.578925][ T26] audit: type=1800 audit(1770113273.709:394): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1430" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 195.654008][ T8863] XFS (loop8): Quotacheck needed: Please wait. [ 195.673062][ T8894] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 195.702056][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.854038][ T8863] XFS (loop8): Quotacheck: Done. [ 195.958998][ T8910] loop2: detected capacity change from 0 to 64 [ 196.047913][ T5994] XFS (loop8): Unmounting Filesystem [ 196.449049][ T8904] loop6: detected capacity change from 0 to 32768 [ 196.540676][ T26] audit: type=1800 audit(1770113274.679:395): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1443" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 196.589545][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 196.598938][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 196.608555][ T8924] netlink: 'syz.5.1453': attribute type 18 has an invalid length. [ 196.649578][ T8588] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.009683][ T8588] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 197.032157][ T8588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.064395][ T8588] usb 3-1: config 0 descriptor?? [ 197.150919][ T8949] program syz.8.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.562616][ T8588] waltop 0003:172F:0038.0017: unknown main item tag 0x0 [ 197.576965][ T8588] waltop 0003:172F:0038.0017: unknown main item tag 0x0 [ 197.592780][ T8588] waltop 0003:172F:0038.0017: unknown main item tag 0x0 [ 197.600308][ T8588] waltop 0003:172F:0038.0017: unknown main item tag 0x0 [ 197.607973][ T8588] waltop 0003:172F:0038.0017: unknown main item tag 0x0 [ 197.617212][ T8588] waltop 0003:172F:0038.0017: hidraw0: USB HID v0.05 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 197.721325][ T8972] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 197.733500][ T8972] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.764242][ T8588] usb 3-1: USB disconnect, device number 9 [ 197.782652][ T8976] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 197.925326][ T8978] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 197.933288][ T8979] fido_id[8979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 198.049167][ T8986] set_capacity_and_notify: 4 callbacks suppressed [ 198.049185][ T8986] loop5: detected capacity change from 0 to 1024 [ 198.190725][ T8986] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,usrjquota=,lazytime,nobarrier,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 198.216573][ T5994] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22. [ 198.238192][ T5994] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22. [ 198.267920][ T5994] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 198.268251][ T8986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1480: bg 0: block 260: invalid block bitmap [ 198.320192][ T8986] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.1480: bit already cleared for inode 15 [ 198.335913][ T8991] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 198.426875][ T8993] loop8: detected capacity change from 0 to 736 [ 198.640383][ T8999] loop2: detected capacity change from 0 to 2048 [ 198.684108][ T8999] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 198.722920][ T8182] udevd[8182]: incorrect nilfs2 checksum on /dev/loop2 [ 198.756902][ T9005] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.765339][ T9006] loop8: detected capacity change from 0 to 1024 [ 198.788445][ T26] audit: type=1800 audit(1770113276.919:396): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1485" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 198.796318][ T8999] attempt to access beyond end of device [ 198.796318][ T8999] loop2: rw=0, want=3122, limit=2048 [ 198.885625][ T9006] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,barrier=0x0000000000000007,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 198.923799][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.932961][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.940886][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.948421][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.956290][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.964153][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.975395][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.983539][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 198.986427][ T9006] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.991615][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.009495][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.017029][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.024623][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.026476][ T9006] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #15: comm syz.8.1488: lblock 0 mapped to illegal pblock 0 (length 1) [ 199.032288][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032315][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032342][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032363][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032390][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032410][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032431][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032451][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032468][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.032485][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.059821][ T9006] EXT4-fs (loop8): Remounting filesystem read-only [ 199.061943][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.078193][ T9006] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #15: comm syz.8.1488: lblock 0 mapped to illegal pblock 0 (length 1) [ 199.084515][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084541][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084561][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084581][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084602][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084623][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084642][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084660][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.084677][ T8615] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 199.086806][ T8615] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.143858][ T9014] device ipvlan2 entered promiscuous mode [ 199.166476][ T9006] EXT4-fs (loop8): Remounting filesystem read-only [ 199.221916][ T9014] bridge0: port 3(ipvlan2) entered blocking state [ 199.237143][ T9006] EXT4-fs error (device loop8): ext4_ext_remove_space:2929: inode #15: comm syz.8.1488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 199.298174][ T9006] EXT4-fs (loop8): Remounting filesystem read-only [ 199.306046][ T9014] bridge0: port 3(ipvlan2) entered disabled state [ 199.404007][ T9015] fido_id[9015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.076692][ T9020] loop2: detected capacity change from 0 to 32768 [ 200.102061][ T9020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1493 (9020) [ 200.145026][ T9020] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 200.190389][ T9020] BTRFS info (device loop2): using free space tree [ 200.197756][ T9020] BTRFS info (device loop2): has skinny extents [ 200.221674][ T9036] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1501'. [ 200.284932][ T9034] loop8: detected capacity change from 0 to 8192 [ 200.324680][ T9034] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 200.336698][ T9034] REISERFS (device loop8): using ordered data mode [ 200.344223][ T9034] reiserfs: using flush barriers [ 200.351497][ T9034] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.441242][ T9034] REISERFS (device loop8): checking transaction log (loop8) [ 200.547559][ T9020] BTRFS info (device loop2): enabling ssd optimizations [ 200.604408][ T9020] BTRFS info (device loop2): Snapshot src from another FS [ 200.810263][ T4313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4313) [ 200.899438][ T9034] REISERFS (device loop8): Using tea hash to sort names [ 200.909162][ T9034] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 201.267708][ T9064] loop5: detected capacity change from 0 to 32768 [ 201.362239][ T9064] JBD2: Ignoring recovery information on journal [ 201.442306][ T4223] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.528692][ T9076] loop8: detected capacity change from 0 to 1024 [ 201.547371][ T9064] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 201.555836][ T9076] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #3: block 1: comm syz.8.1510: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.571894][ T9076] Quota error (device loop8): write_blk: dquota write failed [ 201.580716][ T9076] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 201.595536][ T9076] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.1510: Failed to acquire dquot type 0 [ 201.620593][ T9076] EXT4-fs error (device loop8): ext4_free_blocks:6234: comm syz.8.1510: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.636595][ T9076] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1510: Invalid inode bitmap blk 0 in block_group 0 [ 201.656209][ T4268] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.660207][ T9076] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 201.677287][ T4268] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 201.697537][ T4268] EXT4-fs error (device loop8): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 201.718106][ T9076] EXT4-fs (loop8): 1 orphan inode deleted [ 201.724388][ T9076] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 201.731222][ T4490] ocfs2: Unmounting device (7,5) on (node local) [ 201.880281][ T4223] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.886963][ T4223] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 201.896558][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.945891][ T4223] usb 3-1: config 0 descriptor?? [ 202.003522][ T9081] sp0: Synchronizing with TNC [ 202.242261][ T9092] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1517'. [ 202.384841][ T9096] loop8: detected capacity change from 0 to 64 [ 202.427695][ T9088] loop5: detected capacity change from 0 to 32768 [ 202.452506][ T4223] wacom 0003:056A:0028.0019: unknown main item tag 0x0 [ 202.467709][ T4223] wacom 0003:056A:0028.0019: unknown main item tag 0x0 [ 202.475203][ T4223] wacom 0003:056A:0028.0019: unknown main item tag 0x0 [ 202.492757][ T4223] wacom 0003:056A:0028.0019: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 202.504164][ T4223] wacom 0003:056A:0028.0019: hidraw0: USB HID v0.02 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 202.517312][ T4223] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.0019/input/input10 [ 202.716712][ T13] usb 3-1: USB disconnect, device number 10 [ 202.800193][ T9103] fido_id[9103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 202.929506][ T8152] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 203.179677][ T8152] usb 9-1: Using ep0 maxpacket: 16 [ 203.310547][ T8152] usb 9-1: config 1 has an invalid interface number: 214 but max is 0 [ 203.318872][ T8152] usb 9-1: config 1 has no interface number 0 [ 203.343437][ T8152] usb 9-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 203.354460][ T8152] usb 9-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.365490][ T9114] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1527'. [ 203.377687][ T8152] usb 9-1: config 1 interface 214 has no altsetting 0 [ 203.452631][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1528'. [ 203.549798][ T8152] usb 9-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 203.568518][ T8152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.576890][ T8152] usb 9-1: Product: syz [ 203.581721][ T8152] usb 9-1: Manufacturer: syz [ 203.587055][ T8152] usb 9-1: SerialNumber: syz [ 203.620378][ T9098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 203.627728][ T9098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 203.640535][ T8152] ums-alauda 9-1:1.214: USB Mass Storage device detected [ 203.682225][ T8152] scsi host1: usb-storage 9-1:1.214 [ 203.796430][ T9135] set_capacity_and_notify: 1 callbacks suppressed [ 203.796446][ T9135] loop2: detected capacity change from 0 to 1024 [ 203.871679][ T4287] usb 9-1: USB disconnect, device number 4 [ 203.893410][ T9135] EXT4-fs (loop2): Ignoring removed orlov option [ 203.916353][ T9135] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 204.679203][ T9169] loop8: detected capacity change from 0 to 512 [ 204.680660][ T9170] loop5: detected capacity change from 0 to 256 [ 204.746091][ T9170] FAT-fs (loop5): Directory bread(block 64) failed [ 204.773435][ T9170] FAT-fs (loop5): Directory bread(block 65) failed [ 204.782736][ T9170] FAT-fs (loop5): Directory bread(block 66) failed [ 204.784767][ T9169] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.789981][ T9170] FAT-fs (loop5): Directory bread(block 67) failed [ 204.807248][ T9170] FAT-fs (loop5): Directory bread(block 68) failed [ 204.814018][ T9170] FAT-fs (loop5): Directory bread(block 69) failed [ 204.822364][ T9170] FAT-fs (loop5): Directory bread(block 70) failed [ 204.829024][ T9170] FAT-fs (loop5): Directory bread(block 71) failed [ 204.836325][ T9170] FAT-fs (loop5): Directory bread(block 72) failed [ 204.842976][ T9170] FAT-fs (loop5): Directory bread(block 73) failed [ 204.941015][ T9146] loop2: detected capacity change from 0 to 40427 [ 204.963729][ T9146] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x1ffff [ 205.036138][ T9146] F2FS-fs (loop2): invalid crc value [ 205.103586][ T9146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.148354][ T9175] loop5: detected capacity change from 0 to 4096 [ 205.203078][ T9146] F2FS-fs (loop2): Start checkpoint disabled! [ 205.228113][ T9175] NILFS (loop5): invalid segment: Checksum error in segment payload [ 205.238464][ T9146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 205.262070][ T9175] NILFS (loop5): trying rollback from an earlier position [ 205.346125][ T9175] NILFS (loop5): recovery complete [ 205.408098][ T9186] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.588375][ T9190] loop8: detected capacity change from 0 to 8192 [ 205.654357][ T9190] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 205.691384][ T9190] REISERFS (device loop8): using ordered data mode [ 205.708046][ T9190] reiserfs: using flush barriers [ 205.762709][ T9190] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.770460][ T9197] netlink: 'syz.2.1555': attribute type 30 has an invalid length. [ 205.784795][ T9190] REISERFS (device loop8): checking transaction log (loop8) [ 205.802474][ T9190] REISERFS (device loop8): Using r5 hash to sort names [ 205.827554][ T9190] reiserfs: enabling write barrier flush mode [ 205.861422][ T9190] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 205.897591][ T9190] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 205.916039][ T9190] REISERFS (device loop8): Remounting filesystem read-only [ 205.933954][ T9190] REISERFS error (device loop8): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 205.977585][ T9190] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 206.000827][ T9190] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 206.017208][ T9190] REISERFS error (device loop8): zam-7001 reiserfs_find_entry: io error [ 206.030508][ T9190] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 206.048428][ T9190] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 206.067918][ T9190] REISERFS error (device loop8): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 206.082246][ T9190] REISERFS warning (device loop8): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 206.166345][ T5994] ------------[ cut here ]------------ [ 206.173492][ T5994] kernel BUG at fs/reiserfs/journal.c:1913! [ 206.180351][ T5994] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 206.186625][ T5994] CPU: 1 PID: 5994 Comm: syz-executor Not tainted syzkaller #0 [ 206.194854][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.205027][ T5994] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 206.211060][ T5994] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 206.231892][ T5994] RSP: 0018:ffffc90002fcfb80 EFLAGS: 00010293 [ 206.238002][ T5994] RAX: ffffffff82009dd2 RBX: 1ffff920005f9f74 RCX: ffff888026875940 [ 206.246013][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.254278][ T5994] RBP: ffffc90002fcfc78 R08: ffffc90002fcfbf7 R09: ffffc90002fcfbc0 [ 206.262509][ T5994] R10: dffffc0000000000 R11: fffff520005f9f7f R12: ffffc900048f9000 [ 206.270686][ T5994] R13: dffffc0000000000 R14: ffff88805fc22678 R15: 0000000000000000 [ 206.278688][ T5994] FS: 0000555575791500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 206.287736][ T5994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.294347][ T5994] CR2: 000000110c249ac3 CR3: 0000000057498000 CR4: 00000000003506e0 [ 206.302350][ T5994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.310351][ T5994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.318635][ T5994] Call Trace: [ 206.321962][ T5994] [ 206.324924][ T5994] ? journal_release+0x30/0x30 [ 206.329816][ T5994] ? do_raw_spin_unlock+0x11d/0x230 [ 206.335042][ T5994] journal_release+0x1b/0x30 [ 206.339652][ T5994] reiserfs_put_super+0x267/0x510 [ 206.345002][ T5994] ? hook_inode_free_security+0xa0/0xa0 [ 206.350666][ T5994] ? evict_inodes+0x642/0x6a0 [ 206.355471][ T5994] ? reiserfs_dirty_inode+0x260/0x260 [ 206.361094][ T5994] ? reiserfs_dirty_inode+0x260/0x260 [ 206.366503][ T5994] generic_shutdown_super+0x130/0x300 [ 206.371913][ T5994] kill_block_super+0x7c/0xe0 [ 206.376876][ T5994] deactivate_locked_super+0x93/0xf0 [ 206.382461][ T5994] cleanup_mnt+0x42d/0x4e0 [ 206.386901][ T5994] ? lockdep_hardirqs_on+0x94/0x140 [ 206.392234][ T5994] task_work_run+0x125/0x1a0 [ 206.394905][ T9223] loop2: detected capacity change from 0 to 2048 [ 206.396864][ T5994] exit_to_user_mode_loop+0x10f/0x130 [ 206.408764][ T5994] exit_to_user_mode_prepare+0xee/0x180 [ 206.414347][ T5994] syscall_exit_to_user_mode+0x16/0x40 [ 206.420087][ T5994] do_syscall_64+0x58/0xa0 [ 206.424615][ T5994] ? clear_bhb_loop+0x30/0x80 [ 206.429304][ T5994] ? clear_bhb_loop+0x30/0x80 [ 206.434001][ T5994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.440174][ T5994] RIP: 0033:0x7f9109325117 [ 206.444800][ T5994] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 206.465158][ T5994] RSP: 002b:00007ffdbfb22298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 206.473902][ T5994] RAX: 0000000000000000 RBX: 00007f910938d71f RCX: 00007f9109325117 [ 206.481966][ T5994] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbfb22350 [ 206.490027][ T5994] RBP: 00007ffdbfb22350 R08: 00007ffdbfb23350 R09: 00000000ffffffff [ 206.498096][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbfb233e0 [ 206.506242][ T5994] R13: 00007f910938d71f R14: 000000000003250e R15: 00007ffdbfb23420 [ 206.514228][ T5994] [ 206.517255][ T5994] Modules linked in: [ 206.524165][ T5994] ---[ end trace 5b579d25ffedcd04 ]--- [ 206.532705][ T9223] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.537757][ T5994] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 206.545403][ T4313] udevd[4313]: incorrect nilfs2 checksum on /dev/loop2 [ 206.560784][ T9223] NILFS (loop2): mounting unchecked fs [ 206.566314][ T5994] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 206.580642][ T9223] NILFS (loop2): recovery complete [ 206.586922][ T5994] RSP: 0018:ffffc90002fcfb80 EFLAGS: 00010293 [ 206.598264][ T5994] RAX: ffffffff82009dd2 RBX: 1ffff920005f9f74 RCX: ffff888026875940 [ 206.606670][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.614471][ T9224] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.627456][ T5994] RBP: ffffc90002fcfc78 R08: ffffc90002fcfbf7 R09: ffffc90002fcfbc0 [ 206.639184][ T5994] R10: dffffc0000000000 R11: fffff520005f9f7f R12: ffffc900048f9000 [ 206.648475][ T5994] R13: dffffc0000000000 R14: ffff88805fc22678 R15: 0000000000000000 [ 206.656983][ T5994] FS: 0000555575791500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 206.666630][ T5994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.674904][ T5994] CR2: 0000001b32622ff8 CR3: 0000000057498000 CR4: 00000000003506f0 [ 206.683515][ T5994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.692655][ T5994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.701003][ T5994] Kernel panic - not syncing: Fatal exception [ 206.707214][ T5994] Kernel Offset: disabled [ 206.711633][ T5994] Rebooting in 86400 seconds..