last executing test programs: 2m26.774331174s ago: executing program 2 (id=728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b80080009000000000004000a"], 0x44}}, 0x0) 2m26.586178614s ago: executing program 2 (id=729): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) munlockall() 2m26.547683076s ago: executing program 2 (id=730): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x244021, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0), 0x3000000, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', 0x40800, &(0x7f0000001540), 0xfe, 0x0, 0x0) 2m26.47655527s ago: executing program 2 (id=731): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000240)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,allow_utime=00000000000000000000015,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maccenteuro,utf8,dmask=00000000000000002000000,dmask=00000000\x00\x000000000000001,\x00'], 0x1, 0x1548, &(0x7f0000003300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2m26.126351618s ago: executing program 2 (id=736): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) 2m25.636707384s ago: executing program 2 (id=740): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLctoNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSGWhhtZECNHqAY+GxLvxvzCe9GLUiyZe9W5IiOEC6mXN/NiylN2ypdsusJ9PMu17M6/73ndm3vTNvN0NoGeNZD+SiPsj4o+IGCqyNxYYKX5du3J+6p8r56eSqNXe/jvJy129cn6qXrT+d/cVmVqtzA82qffCexGT1erMmTI/tnDqw7H5s+denD01eWLmxMzpiSNHDh7YPXB44lBH4sziurrzk7ldO46+e/HNqWMX3/85qUQRdyyLo1NGir3b1DOdrqzLtjak8x27ZM+v19PNzgS6qS8issPVn/f/oeiLzUvbhuL1z7vaOGBd1Wq12gpX5cUacA9LotstALqjvAXI73/rywYOP7ru8ivFDVAW97VyKbZUIi0Se/qX3d920khEHFv89+tsiXV6DgEA0Oj7bPzzQrPxXxqPFImB7McD5RzKcEQ8GBHbIuKhiNgeEQ9H5GUfjYjHVln/8hmSm8c/6aXbDq4N2fjv5XJu68bxX1ovMtxX5rbm8fcnx2erM/vLfbIv+gePzyYz4yvU8cNrv3/Zalvj+C9bsvrrY8GyHZcqg5tu+JvpyYXJNQXd4PJnETsrEdf6Y1n8SdSncZKI2BERO2+zjtnnKi233Tr+FbR+2bbVvol4tjj+i7Es/rqk5fzk+EuHJw6NbYrqzP6x+llxs19+u/BWq/rXFH8HZMd/S9Pzfyn+4WRTxPzZcyfz+dr51ddx4c8vWt7TtHf+L2WObi3P/4HknXzFQLnh48mFhTPjEQPJGzevn7j+avV8vXwW/769zfv/tri+Jx6PiF0RsTsinshuCsu2PxkRT0XE3hXi/+nVpz9YffwbM1eaxT99q+Mfjcd/9Ym+kz9+d+v4s2tcq+N/ME/tK9e0c/1rt4Fr2XcAAABwt0jz98An6WhSKdNpOjpavId/e2xJq3PzC88fn/vo9HTxXvnh6E/rT7qGGp6HjpfPhocbXnu4YfuB8rnxV32b8/zo1Fx1uotxA0U/z/v/0rWg6P+Zv/q63Tpg3RXzaGm3mwF0QQfm0YG7lP4PvSnR/6Gn6f/Qu5r1/09blh79dl0bA2wo//+hd7XR/xeLX61HBcDdyf9/6F36P/Sklp+NT9f0kf8NT/xXfp/hndKeez8R6R3RjHs/UWn7yyxWkagNFf0/WzPYtEy3r0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8X8AAAD//yzI4o8=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 2m25.292969202s ago: executing program 32 (id=740): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 3.03047832s ago: executing program 0 (id=2135): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) close(0x3) 2.797604622s ago: executing program 0 (id=2137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.707426238s ago: executing program 0 (id=2139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x70bd2b, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.636835951s ago: executing program 0 (id=2140): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 2.218152983s ago: executing program 3 (id=2145): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) 2.193051284s ago: executing program 0 (id=2146): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 2.063526631s ago: executing program 3 (id=2147): unshare(0xe040400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000200)=0xfffffffe) 1.866012381s ago: executing program 3 (id=2149): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000002000)={0x0, 0x2, 0x200, 0x2000002}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x6}) 1.744083368s ago: executing program 3 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 1.70627201s ago: executing program 1 (id=2152): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) 1.70562057s ago: executing program 0 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)="690322d3dd3cb824f62154f8", &(0x7f0000000300), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 1.653622483s ago: executing program 4 (id=2154): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d6d616363656c7469632c71756965742c636f6465706167653d6d6163696e7569742c6469725f756d61736b3d30303030303030303030303030303030303030323030312c63726561746f723decf3ae122c00b9f0cf13144d95ad6fb52973147357153a250e5a9573d6335708978eca6178d431e94849beb47b385a257a6042"], 0x1, 0x314, &(0x7f00000004c0)="$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") socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0) 1.288651372s ago: executing program 33 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)="690322d3dd3cb824f62154f8", &(0x7f0000000300), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 1.283182622s ago: executing program 1 (id=2156): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001100)={[{@shortname_lower}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8}, {@utf8no}, {@numtail}, {@numtail}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_win95}, {@uni_xlateno}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002080)=""/4072, 0xfe8) 1.282801522s ago: executing program 4 (id=2157): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{r0, 0xe7d4c009da6c1985}], 0x1, 0x6) 1.282455903s ago: executing program 3 (id=2158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 1.091893012s ago: executing program 4 (id=2159): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7a, r1}) 898.765952ms ago: executing program 4 (id=2160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x201, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 751.36713ms ago: executing program 1 (id=2161): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1f, [{0xffffffffffffffff, 0x0, 0x0, 0x4000}]}) 698.224013ms ago: executing program 3 (id=2162): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 622.837377ms ago: executing program 4 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 533.843532ms ago: executing program 1 (id=2164): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 375.68262ms ago: executing program 4 (id=2165): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 290.434864ms ago: executing program 1 (id=2166): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x6, 0x15, "3eccd8000000000000000010000000040100"}) 0s ago: executing program 1 (id=2167): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000300)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): b-tree write err: -5, ino 2 [ 195.437126][ T9131] sit1: entered promiscuous mode [ 195.453222][ T9131] sit1: entered allmulticast mode [ 195.463112][ T9131] team0: Device sit1 is of different type [ 195.571126][ T1189] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.613084][ T9137] loop3: detected capacity change from 0 to 64 [ 195.771317][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 195.802747][ T1189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 195.828654][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 195.854407][ T1189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 195.874145][ T1189] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 195.896702][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.921628][ T1189] usb 1-1: Product: syz [ 195.927244][ T1189] usb 1-1: Manufacturer: syz [ 195.934309][ T1189] usb 1-1: SerialNumber: syz [ 195.955784][ T1189] usb 1-1: config 0 descriptor?? [ 195.966489][ T9147] loop3: detected capacity change from 0 to 512 [ 195.970176][ T1189] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 195.985684][ T9147] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 196.018743][ T9147] EXT4-fs (loop3): invalid journal inode [ 196.024993][ T9147] EXT4-fs (loop3): can't get journal size [ 196.065168][ T9147] EXT4-fs (loop3): 1 truncate cleaned up [ 196.091514][ T9147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.217387][ T1189] scsi host1: usb-storage 1-1:0.0 [ 196.226705][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.485205][ T788] usb 1-1: USB disconnect, device number 11 [ 197.167374][ T9186] loop1: detected capacity change from 0 to 256 [ 197.180164][ T9186] exfat: Deprecated parameter 'utf8' [ 197.186563][ T9186] exfat: Deprecated parameter 'namecase' [ 197.198151][ T9186] exfat: Deprecated parameter 'namecase' [ 197.232269][ T9186] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f78d, utbl_chksum : 0xe619d30d) [ 197.555925][ T9184] loop0: detected capacity change from 0 to 40427 [ 197.564355][ T9184] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 197.575487][ T9184] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 197.585791][ T9184] F2FS-fs (loop0): invalid crc value [ 197.759952][ T9197] loop1: detected capacity change from 0 to 4096 [ 197.801438][ T9184] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 197.821278][ T9184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.838446][ T9201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.151307][ T9203] loop3: detected capacity change from 0 to 4096 [ 198.246644][ T9203] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 198.288297][ T9203] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 198.320945][ T9203] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 198.350312][ T9203] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 198.410701][ T9203] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 198.465015][ T9203] ntfs: volume version 3.1. [ 198.504972][ T9203] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 198.528251][ T9203] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 198.578372][ T9203] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 198.607755][ T9203] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 198.909473][ T9217] loop0: detected capacity change from 0 to 1024 [ 198.956546][ T9221] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1226'. [ 198.984895][ T9217] hfsplus: failed to extend attributes file [ 199.013603][ T9221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1226'. [ 199.257473][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1229'. [ 199.296283][ T9211] loop1: detected capacity change from 0 to 32768 [ 199.408882][ T9231] netlink: 436 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.439453][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.472244][ T9230] FAT-fs (loop0): Directory bread(block 64) failed [ 199.487812][ T9230] FAT-fs (loop0): Directory bread(block 65) failed [ 199.494490][ T9230] FAT-fs (loop0): Directory bread(block 66) failed [ 199.567886][ T9230] FAT-fs (loop0): Directory bread(block 67) failed [ 199.600855][ T9230] FAT-fs (loop0): Directory bread(block 68) failed [ 199.620786][ T9230] FAT-fs (loop0): Directory bread(block 69) failed [ 199.627459][ T9230] FAT-fs (loop0): Directory bread(block 70) failed [ 199.660048][ T9230] FAT-fs (loop0): Directory bread(block 71) failed [ 199.667636][ T9230] FAT-fs (loop0): Directory bread(block 72) failed [ 199.709469][ T9230] FAT-fs (loop0): Directory bread(block 73) failed [ 199.770495][ T9239] set_capacity_and_notify: 1 callbacks suppressed [ 199.770510][ T9239] loop3: detected capacity change from 0 to 8 [ 200.071606][ T9239] binfmt_misc: register: failed to install interpreter file ./file1 [ 200.271221][ T9247] program syz.1.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.464052][ T9251] netlink: 'syz.1.1241': attribute type 3 has an invalid length. [ 200.535354][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 200.680692][ T9255] loop1: detected capacity change from 0 to 256 [ 200.783126][ T9255] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 200.819630][ T9237] loop4: detected capacity change from 0 to 32768 [ 200.982008][ T9237] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.167611][ T9246] loop0: detected capacity change from 0 to 32768 [ 201.216551][ T9237] XFS (loop4): Ending clean mount [ 201.413295][ T7788] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.598220][ T9283] loop1: detected capacity change from 0 to 4096 [ 201.766065][ T9283] ntfs3: loop1: ino=21, "file1" fallocate(0x40) is not supported [ 202.092141][ T9292] loop1: detected capacity change from 0 to 256 [ 202.157632][ T9292] FAT-fs (loop1): Directory bread(block 64) failed [ 202.172382][ T9292] FAT-fs (loop1): Directory bread(block 65) failed [ 202.189259][ T9292] FAT-fs (loop1): Directory bread(block 66) failed [ 202.210203][ T9294] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.230504][ T9292] FAT-fs (loop1): Directory bread(block 67) failed [ 202.257502][ T9292] FAT-fs (loop1): Directory bread(block 68) failed [ 202.285650][ T9292] FAT-fs (loop1): Directory bread(block 69) failed [ 202.311383][ T9292] FAT-fs (loop1): Directory bread(block 70) failed [ 202.357863][ T9292] FAT-fs (loop1): Directory bread(block 71) failed [ 202.369212][ T9292] FAT-fs (loop1): Directory bread(block 72) failed [ 202.375774][ T9292] FAT-fs (loop1): Directory bread(block 73) failed [ 202.452304][ T9303] loop3: detected capacity change from 0 to 1024 [ 202.489654][ T9303] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 202.629433][ T9303] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1260: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.690010][ T9303] __quota_error: 7 callbacks suppressed [ 202.690063][ T9303] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 202.717259][ T9303] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1260: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.757643][ T9303] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 202.778243][ T9303] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1260: Failed to acquire dquot type 0 [ 202.814469][ T9303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 202.846806][ T9303] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1260: mark_inode_dirty error [ 202.868315][ T9303] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.879091][ T9303] EXT4-fs (loop3): 1 orphan inode deleted [ 202.899258][ T2982] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.901602][ T9303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.952869][ T2982] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 202.981623][ T2982] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 203.076673][ T9303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.1260: Invalid inode table block 1 in block_group 0 [ 203.125105][ T9303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 203.181224][ T9322] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 203.254602][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.312780][ T5763] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.360525][ T5763] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 203.394783][ T5763] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 203.420563][ T9331] loop0: detected capacity change from 0 to 1024 [ 203.688781][ T5804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.824398][ T9342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.857466][ T9342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.881322][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9990, setting to 1024 [ 203.918468][ T5804] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 203.931842][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.958725][ T5804] usb 2-1: config 0 descriptor?? [ 203.963946][ T9342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.973517][ T9332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.999753][ T9342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.014683][ T9342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.021686][ T9342] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.037430][ T9342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.043806][ T9342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.051826][ T9342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.468997][ T5804] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0007/input/input9 [ 204.609494][ T5804] uclogic 0003:28BD:0935.0007: input,hidraw0: USB HID v7f.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 204.692986][ T5804] usb 2-1: USB disconnect, device number 5 [ 204.906742][ T9362] fido_id[9362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 205.224045][ T9374] loop4: detected capacity change from 0 to 256 [ 205.270770][ T9376] loop0: detected capacity change from 0 to 512 [ 205.340943][ T9376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.410162][ T9374] FAT-fs (loop4): Directory bread(block 64) failed [ 205.416746][ T9374] FAT-fs (loop4): Directory bread(block 65) failed [ 205.454677][ T9376] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.507000][ T9374] FAT-fs (loop4): Directory bread(block 66) failed [ 205.527945][ T9374] FAT-fs (loop4): Directory bread(block 67) failed [ 205.548406][ T9374] FAT-fs (loop4): Directory bread(block 68) failed [ 205.554971][ T9374] FAT-fs (loop4): Directory bread(block 69) failed [ 205.591907][ T9374] FAT-fs (loop4): Directory bread(block 70) failed [ 205.614050][ T9374] FAT-fs (loop4): Directory bread(block 71) failed [ 205.657828][ T9374] FAT-fs (loop4): Directory bread(block 72) failed [ 205.667961][ T9374] FAT-fs (loop4): Directory bread(block 73) failed [ 205.691129][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.848397][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 205.892392][ T9398] loop4: detected capacity change from 0 to 512 [ 205.933803][ T9398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.952234][ T9398] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.973502][ T9402] nbd: must specify a size in bytes for the device [ 206.007975][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 206.050220][ T9398] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.1303: Directory hole found for htree leaf block 0 [ 206.090309][ T5769] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.090612][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 206.239685][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.393731][ T9415] loop4: detected capacity change from 0 to 512 [ 206.404403][ T9415] EXT4-fs: inline encryption not supported [ 206.449655][ T9415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.449784][ T9415] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.584040][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.600981][ T9420] loop0: detected capacity change from 0 to 2048 [ 206.648434][ T9421] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.765867][ T9425] loop1: detected capacity change from 0 to 256 [ 206.825852][ T9425] exfat: Deprecated parameter 'utf8' [ 206.857462][ T9425] exfat: Deprecated parameter 'utf8' [ 206.884971][ T9425] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 206.905268][ T9421] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 206.945190][ T9421] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 206.991932][ T9421] Remounting filesystem read-only [ 206.997096][ T3507] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 207.014881][ T3507] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 207.028042][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.047140][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.077758][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.086733][ T3507] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 207.122456][ T3507] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 207.146705][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.167498][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.192295][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.214214][ T3507] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 207.235750][ T3507] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 207.258910][ T3507] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 207.266274][ T3507] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 207.316273][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.342722][ T3507] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 207.361785][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.382974][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.402477][ T3507] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 207.427942][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.447080][ T3507] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 207.478092][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.499603][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.509725][ T3507] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 207.522344][ T3507] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.549289][ T9423] loop3: detected capacity change from 0 to 40427 [ 207.556735][ T5765] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 207.580207][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 207.588024][ T9423] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 207.599932][ T5765] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 207.607256][ T5765] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 207.638018][ T5765] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 207.645476][ T9423] F2FS-fs (loop3): invalid crc value [ 207.658617][ T5765] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 207.667299][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 207.675942][ T9440] loop4: detected capacity change from 0 to 8192 [ 207.681890][ T5765] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 207.691006][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.714960][ T9423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.728010][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.740315][ T9440] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 207.747644][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.763326][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 207.770199][ T5765] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 207.777841][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.786924][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.796109][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.842764][ T9440] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 207.900780][ T9440] REISERFS (device loop4): using journaled data mode [ 207.907529][ T9440] reiserfs: using flush barriers [ 207.928792][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 207.938092][ T9423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.969256][ T9440] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.017303][ T9440] REISERFS (device loop4): checking transaction log (loop4) [ 208.092075][ T9440] REISERFS (device loop4): Using r5 hash to sort names [ 208.094123][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 208.168004][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 208.176494][ T9440] reiserfs: enabling write barrier flush mode [ 208.182704][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.226911][ T5763] syz-executor: attempt to access beyond end of device [ 208.226911][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.271992][ T9440] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.288623][ T9440] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 208.307003][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 208.664163][ T9467] tipc: Started in network mode [ 208.674180][ T9467] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 208.698245][ T9467] tipc: Enabling of bearer rejected, failed to enable media [ 209.474147][ T9502] loop1: detected capacity change from 0 to 1024 [ 209.477483][ T9501] loop4: detected capacity change from 0 to 1024 [ 209.501560][ T9501] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.552647][ T9501] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 5: comm syz.4.1349: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.570883][ T9501] Quota error (device loop4): write_blk: dquota write failed [ 209.578889][ T9501] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 209.588778][ T9501] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 209.598975][ T9501] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1349: Failed to acquire dquot type 0 [ 209.619971][ T9501] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 5: comm syz.4.1349: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.647798][ T9501] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 209.668464][ T9501] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 209.686597][ T9501] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1349: Failed to acquire dquot type 0 [ 209.726134][ T9501] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1349: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.755333][ T9501] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 5: comm syz.4.1349: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.785877][ T9501] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 209.795867][ T9501] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 209.812664][ T9501] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1349: Failed to acquire dquot type 0 [ 209.828271][ T9501] EXT4-fs (loop4): 1 orphan inode deleted [ 209.835317][ T9501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.922501][ T9501] EXT4-fs warning (device loop4): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 209.976442][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.117835][ T9517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.163207][ T9517] 9p: Unknown access argument 18446744073709551615: -34 [ 210.247811][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.261000][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.298929][ T9525] set_capacity_and_notify: 1 callbacks suppressed [ 210.298943][ T9525] loop1: detected capacity change from 0 to 512 [ 210.344845][ T9525] EXT4-fs: Ignoring removed oldalloc option [ 210.353416][ T9525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.369176][ T9525] EXT4-fs (loop1): 1 truncate cleaned up [ 210.379492][ T9525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.394342][ T9528] binder: 9526:9528 ioctl c018620b 200000000000 returned -14 [ 210.493530][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.635226][ T9534] loop4: detected capacity change from 0 to 64 [ 210.937451][ T9544] loop4: detected capacity change from 0 to 256 [ 210.967541][ T9544] exfat: Deprecated parameter 'utf8' [ 210.988171][ T9544] exfat: Deprecated parameter 'namecase' [ 211.015370][ T9544] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9974f712, utbl_chksum : 0xe619d30d) [ 211.411121][ T9559] loop1: detected capacity change from 0 to 2048 [ 211.429804][ T9559] UDF-fs: bad mount option "novrc" or missing value [ 211.497644][ T5777] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.530059][ T9559] 000000000: renamed from lo (while UP) [ 211.686468][ T9569] loop4: detected capacity change from 0 to 256 [ 211.939228][ T9577] loop4: detected capacity change from 0 to 512 [ 211.957500][ T9577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.979052][ T9577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.020715][ T9577] EXT4-fs (loop4): 1 truncate cleaned up [ 212.027596][ T9577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.067797][ T9577] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 212.125186][ T9584] loop1: detected capacity change from 0 to 512 [ 212.128675][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.156791][ T9584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.233651][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.268304][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.481430][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.509502][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.539274][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.539325][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.539347][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.548108][ T8] usb 4-1: config 0 descriptor?? [ 212.864197][ T9607] loop0: detected capacity change from 0 to 64 [ 212.971750][ T8] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 213.013196][ T8] plantronics 0003:047F:FFFF.0008: parse failed [ 213.037172][ T8] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 213.150579][ T9615] loop0: detected capacity change from 0 to 512 [ 213.174405][ T8] usb 4-1: USB disconnect, device number 9 [ 213.276689][ T9615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.299330][ T9599] loop4: detected capacity change from 0 to 32768 [ 213.312868][ T9615] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.385614][ T9599] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 213.398433][ T9599] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.448802][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.505686][ T9599] XFS (loop4): Ending clean mount [ 213.518788][ T9599] XFS (loop4): Quotacheck needed: Please wait. [ 213.606241][ T9599] XFS (loop4): Quotacheck: Done. [ 213.611508][ T27] audit: type=1326 audit(1777038093.325:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b47d9cdd9 code=0x7ffc0000 [ 213.652361][ T27] audit: type=1326 audit(1777038093.325:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b47d9cdd9 code=0x7ffc0000 [ 213.675244][ T27] audit: type=1326 audit(1777038093.325:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b47d9cdd9 code=0x7ffc0000 [ 213.765908][ T7788] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.057963][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.115793][ T9640] vxcan2: entered allmulticast mode [ 214.257813][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 214.266441][ T28] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 214.283293][ T9638] JBD2: Ignoring recovery information on journal [ 214.313840][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.341944][ T28] usb 2-1: config 0 descriptor?? [ 214.356710][ T28] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 214.382369][ T28] usb 2-1: Detected FT4232H [ 214.395022][ T9638] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 214.562641][ T28] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 214.584413][ T28] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 214.627535][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 214.787387][ T28] usb 2-1: USB disconnect, device number 6 [ 214.823640][ T28] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.847089][ T28] ftdi_sio 2-1:0.0: device disconnected [ 214.856112][ T9652] EXT4-fs: Ignoring removed orlov option [ 214.907178][ T9652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.111666][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.518562][ T9675] netlink: 'syz.4.1420': attribute type 3 has an invalid length. [ 215.611782][ T9679] set_capacity_and_notify: 3 callbacks suppressed [ 215.611797][ T9679] loop1: detected capacity change from 0 to 1024 [ 215.706386][ T9681] loop3: detected capacity change from 0 to 1024 [ 215.747540][ T145] hfsplus: b-tree write err: -5, ino 25 [ 215.775870][ T145] hfsplus: b-tree write err: -5, ino 4 [ 215.798093][ T145] hfsplus: b-tree write err: -5, ino 2 [ 215.833729][ T9681] hfsplus: trying to free free bnode 0(1) [ 215.905012][ T9685] loop4: detected capacity change from 0 to 2048 [ 215.952794][ T9688] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.969073][ T42] hfsplus: b-tree write err: -5, ino 25 [ 215.976657][ T42] hfsplus: b-tree write err: -5, ino 4 [ 216.008785][ T42] hfsplus: b-tree write err: -5, ino 2 [ 216.022436][ T42] hfsplus: b-tree write err: -5, ino 26 [ 217.265599][ T9741] loop4: detected capacity change from 0 to 256 [ 217.313695][ T9741] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 217.790126][ T9765] loop3: detected capacity change from 0 to 16 [ 217.825440][ T9765] erofs: (device loop3): mounted with root inode @ nid 36. [ 218.102760][ T9774] loop3: detected capacity change from 0 to 128 [ 218.226520][ T5770] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 219.174659][ T9788] loop0: detected capacity change from 0 to 32768 [ 219.762711][ T9805] loop3: detected capacity change from 0 to 32768 [ 219.932358][ T9809] loop0: detected capacity change from 0 to 32768 [ 220.013603][ T9809] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 220.013603][ T9809] [ 220.031616][ T9807] loop1: detected capacity change from 0 to 32768 [ 220.074165][ T9807] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.301989][ T9807] XFS (loop1): Ending clean mount [ 220.455043][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.637559][ T9824] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 220.882015][ T9824] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 220.978077][ T59] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 220.984997][ T5765] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 221.011655][ T5765] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 221.023928][ T5765] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 221.032256][ T49] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 221.226821][ T9826] set_capacity_and_notify: 1 callbacks suppressed [ 221.226836][ T9826] loop3: detected capacity change from 0 to 32768 [ 221.304483][ T5770] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 221.948972][ T9841] loop1: detected capacity change from 0 to 32768 [ 221.967281][ T9841] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1483 (9841) [ 222.013752][ T9841] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.044610][ T9841] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 222.066320][ T9841] BTRFS info (device loop1): using free space tree [ 222.196970][ T9841] BTRFS info (device loop1): enabling ssd optimizations [ 222.225198][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 222.237864][ T9841] BTRFS info (device loop1): auto enabling async discard [ 222.251098][ T5770] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 222.260163][ T5770] Bluetooth: hci2: Injecting HCI hardware error event [ 222.270485][ T5770] Bluetooth: hci2: hardware error 0x00 [ 222.288199][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 222.298301][ T9866] netlink: 'syz.4.1488': attribute type 6 has an invalid length. [ 222.306059][ T9866] netlink: 'syz.4.1488': attribute type 5 has an invalid length. [ 222.356694][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 222.356709][ T27] audit: type=1800 audit(1777038102.065:29): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1483" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 222.397331][ T9843] loop3: detected capacity change from 0 to 40427 [ 222.418922][ T9843] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 222.439685][ T9843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 222.494344][ T9843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.501209][ T5762] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.554289][ T9872] tipc: Enabled bearer , priority 10 [ 222.772160][ T9843] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 222.773927][ T27] audit: type=1326 audit(1777038102.485:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 222.818141][ T9843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 222.837659][ T27] audit: type=1326 audit(1777038102.515:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 222.968792][ T27] audit: type=1326 audit(1777038102.515:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 223.064577][ T27] audit: type=1326 audit(1777038102.575:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 223.066343][ T9882] loop4: detected capacity change from 0 to 16 [ 223.144876][ T9882] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.147813][ T27] audit: type=1326 audit(1777038102.575:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 223.455693][ T9874] loop0: detected capacity change from 0 to 32768 [ 223.617946][ T9874] JBD2: Ignoring recovery information on journal [ 223.806546][ T9888] loop4: detected capacity change from 0 to 4096 [ 223.816798][ T9874] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.911359][ T9888] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 224.029210][ T9888] ntfs3: loop4: Failed to load $Extend (-22). [ 224.035377][ T9888] ntfs3: loop4: Failed to initialize $Extend. [ 224.120730][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 224.328039][ T5770] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 224.634774][ T9911] kAFS: unable to lookup cell 'sէKyy [ 224.634774][ T9911] [ 224.634774][ T9911] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 224.873551][ T9900] loop1: detected capacity change from 0 to 32768 [ 224.911476][ T9900] [ 224.911476][ T9900] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.911476][ T9900] [ 224.950760][ T9900] ERROR: (device loop1): diWrite: ixpxd invalid [ 224.950760][ T9900] [ 224.965315][ T9900] ERROR: (device loop1): txCommit: [ 224.965315][ T9900] [ 225.069568][ T5762] [ 225.069568][ T5762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.069568][ T5762] [ 225.090291][ T5762] [ 225.090291][ T5762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.090291][ T5762] [ 225.217027][ T9920] loop0: detected capacity change from 0 to 512 [ 225.256898][ T9922] loop1: detected capacity change from 0 to 1024 [ 225.263959][ T9920] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 225.286157][ T9920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 225.318464][ T9920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.325306][ T9920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1511: bg 0: block 361: padding at end of block bitmap is not set [ 225.350359][ T9920] EXT4-fs (loop0): Remounting filesystem read-only [ 225.367478][ T9920] EXT4-fs (loop0): 1 truncate cleaned up [ 225.378142][ T5770] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 225.389809][ T5770] Bluetooth: hci1: Injecting HCI hardware error event [ 225.399266][ T5769] Bluetooth: hci1: hardware error 0x00 [ 225.401197][ T9920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 225.418721][ T9922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.468789][ T9922] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.542438][ T9913] loop3: detected capacity change from 0 to 32768 [ 225.572980][ T9922] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1510: bg 0: block 112: padding at end of block bitmap is not set [ 225.623549][ T9922] EXT4-fs (loop1): Remounting filesystem read-only [ 225.666500][ T9913] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 225.720771][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 225.741081][ T9913] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.763558][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.116435][ T9913] XFS (loop3): Ending clean mount [ 226.241721][ T5763] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.273287][ T9933] loop4: detected capacity change from 0 to 32768 [ 226.318383][ T5802] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 226.393956][ T27] audit: type=1800 audit(1777038106.095:35): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1513" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 226.542629][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 226.560333][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.599971][ T5802] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 226.624394][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.650203][ T5802] usb 2-1: config 0 descriptor?? [ 226.843700][ T5770] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 227.101066][ T5802] zeroplus 0003:0C12:0030.0009: unknown global tag 0xc [ 227.127997][ T5802] zeroplus 0003:0C12:0030.0009: item 0 2 1 12 parsing failed [ 227.136161][ T5802] zeroplus 0003:0C12:0030.0009: parse failed [ 227.168781][ T5802] zeroplus: probe of 0003:0C12:0030.0009 failed with error -22 [ 227.366606][ T23] usb 2-1: USB disconnect, device number 7 [ 227.367015][ T9963] loop4: detected capacity change from 0 to 64 [ 227.449217][ T5769] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 227.697137][ T9961] loop0: detected capacity change from 0 to 32768 [ 227.754374][ T9961] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.137234][ T9961] XFS (loop0): Ending clean mount [ 228.168597][ T9961] XFS (loop0): Quotacheck needed: Please wait. [ 228.295995][ T9961] XFS (loop0): Quotacheck: Done. [ 228.525850][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.674181][T10001] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.683823][T10001] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.692647][T10001] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.701802][T10001] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.882651][T10009] loop3: detected capacity change from 0 to 512 [ 228.910004][T10009] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1545: inode has both inline data and extents flags [ 228.934277][T10009] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1545: couldn't read orphan inode 15 (err -117) [ 229.029291][T10009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.129581][T10009] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.1545: invalid size [ 229.228570][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.378599][T10029] loop4: detected capacity change from 0 to 256 [ 229.400679][T10030] loop1: detected capacity change from 0 to 128 [ 229.462695][T10029] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 229.535069][T10030] FAT-fs (loop1): FAT read failed (blocknr 128) [ 230.454725][T10040] loop1: detected capacity change from 0 to 32768 [ 230.504493][T10040] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.565494][T10062] loop3: detected capacity change from 0 to 2048 [ 230.588141][T10062] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.605653][T10040] XFS (loop1): Ending clean mount [ 230.626155][T10040] XFS (loop1): Quotacheck needed: Please wait. [ 230.643654][T10062] NILFS (loop3): mounting unchecked fs [ 230.668925][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop3 [ 230.701411][T10062] NILFS (loop3): recovery complete [ 230.725068][T10069] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.738447][ T27] audit: type=1326 audit(1777038110.455:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.752526][T10040] XFS (loop1): Quotacheck: Done. [ 230.787970][ T27] audit: type=1326 audit(1777038110.455:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.814243][ T27] audit: type=1326 audit(1777038110.455:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.836537][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.843626][ T27] audit: type=1326 audit(1777038110.455:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.879332][ T27] audit: type=1326 audit(1777038110.455:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.917885][ T5769] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 230.929240][ T5769] Bluetooth: hci3: Injecting HCI hardware error event [ 230.940217][ T5770] Bluetooth: hci3: hardware error 0x00 [ 230.956938][ T27] audit: type=1326 audit(1777038110.475:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 230.981891][ T27] audit: type=1326 audit(1777038110.475:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 231.004135][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.137294][ T5762] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.187592][T10076] loop3: detected capacity change from 0 to 4096 [ 231.224745][T10076] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 231.334695][T10079] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.343669][T10079] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.352754][T10079] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.361702][T10079] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.554812][T10081] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 231.651518][T10083] loop3: detected capacity change from 0 to 1024 [ 231.704063][T10083] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 231.720734][T10083] hfsplus: xattr searching failed [ 231.781283][T10087] loop0: detected capacity change from 0 to 4096 [ 231.791555][ T49] hfsplus: b-tree write err: -5, ino 25 [ 231.797326][ T49] hfsplus: b-tree write err: -5, ino 4 [ 231.812941][T10087] NILFS (loop0): invalid segment: Checksum error in segment payload [ 231.823154][ T49] hfsplus: b-tree write err: -5, ino 2 [ 231.828892][T10087] NILFS (loop0): trying rollback from an earlier position [ 231.873274][T10087] NILFS (loop0): recovery complete [ 231.888002][T10088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.316408][ T5802] kernel write not supported for file /input/event0 (pid: 5802 comm: kworker/0:4) [ 232.353573][T10085] loop1: detected capacity change from 0 to 40427 [ 232.372995][T10085] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 232.398061][T10085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 232.441739][T10085] F2FS-fs (loop1): invalid crc value [ 232.631174][T10085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 232.644319][T10085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.968604][ T5770] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 233.057210][T10117] loop4: detected capacity change from 0 to 4096 [ 233.145610][T10117] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 233.162271][T10117] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 233.364039][ T3507] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 233.377247][T10109] loop0: detected capacity change from 0 to 32768 [ 233.384962][ T7788] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 233.408950][ T7788] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 233.415950][ T7788] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 233.449016][T10109] [ 233.449016][T10109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.449016][T10109] [ 233.470893][ T3507] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 233.512788][T10109] ERROR: (device loop0): diWrite: ixpxd invalid [ 233.512788][T10109] [ 233.548460][T10109] ERROR: (device loop0): txCommit: [ 233.548460][T10109] [ 233.588821][T10109] jfs_create: dtSearch returned -17 [ 233.700083][ T5765] [ 233.700083][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.700083][ T5765] [ 233.737955][ T5765] [ 233.737955][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.737955][ T5765] [ 234.088549][T10132] loop0: detected capacity change from 0 to 256 [ 234.129790][T10132] exfat: Deprecated parameter 'utf8' [ 234.135265][T10132] exfat: Bad value for 'gid' [ 234.247559][ T5777] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.667141][T10123] loop4: detected capacity change from 0 to 40427 [ 234.707863][T10123] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 234.724427][T10123] F2FS-fs (loop4): invalid crc value [ 234.746308][T10123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 234.795619][T10141] loop0: detected capacity change from 0 to 1024 [ 234.882241][T10123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 234.950216][T10129] loop3: detected capacity change from 0 to 40427 [ 234.992460][T10129] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 235.003325][ T59] hfsplus: b-tree write err: -5, ino 25 [ 235.037656][ T59] hfsplus: b-tree write err: -5, ino 4 [ 235.060619][ T59] hfsplus: b-tree write err: -5, ino 2 [ 235.086995][T10129] F2FS-fs (loop3): invalid crc value [ 235.100962][T10143] loop1: detected capacity change from 0 to 128 [ 235.140813][T10129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.176532][T10143] syz.1.1597: attempt to access beyond end of device [ 235.176532][T10143] loop1: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 235.230610][T10143] Buffer I/O error on dev loop1, logical block 12837, async page read [ 235.269832][T10143] syz.1.1597: attempt to access beyond end of device [ 235.269832][T10143] loop1: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 235.310682][T10143] Buffer I/O error on dev loop1, logical block 12837, async page read [ 235.340213][T10129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 235.574786][ T5763] syz-executor: attempt to access beyond end of device [ 235.574786][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.622026][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 235.896928][T10162] program syz.1.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.187991][T10170] ipvlan2: entered promiscuous mode [ 236.364595][T10172] NILFS (loop1): invalid segment: Checksum error in segment payload [ 236.376685][T10172] NILFS (loop1): trying rollback from an earlier position [ 236.414627][T10172] NILFS (loop1): recovery complete [ 236.422200][T10175] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.627165][T10166] JBD2: Ignoring recovery information on journal [ 236.687397][T10166] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 236.843676][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 237.507530][T10197] set_capacity_and_notify: 3 callbacks suppressed [ 237.507544][T10197] loop0: detected capacity change from 0 to 1024 [ 237.599322][T10197] hfsplus: bad catalog entry type [ 237.672214][ T3507] hfsplus: b-tree write err: -5, ino 25 [ 237.698137][ T3507] hfsplus: b-tree write err: -5, ino 4 [ 237.711004][ T3507] hfsplus: b-tree write err: -5, ino 2 [ 238.041546][T10207] loop3: detected capacity change from 0 to 2048 [ 238.081256][T10207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.183957][T10209] loop0: detected capacity change from 0 to 1024 [ 238.223932][T10209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.258394][T10209] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.326832][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.951170][T10188] syz.1.1616 (10188): drop_caches: 3 [ 239.665507][T10242] loop3: detected capacity change from 0 to 32768 [ 240.175647][T10246] loop0: detected capacity change from 0 to 8192 [ 240.239505][T10246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.294538][T10244] loop4: detected capacity change from 0 to 32768 [ 240.302510][T10246] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 240.341024][T10246] REISERFS (device loop0): using ordered data mode [ 240.355594][T10246] reiserfs: using flush barriers [ 240.461913][T10246] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.559738][T10246] REISERFS (device loop0): checking transaction log (loop0) [ 240.585019][T10246] REISERFS (device loop0): Using r5 hash to sort names [ 240.602422][T10246] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 240.656924][T10246] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 240.758307][T10259] loop1: detected capacity change from 0 to 64 [ 240.771805][T10256] loop4: detected capacity change from 0 to 512 [ 240.804126][T10256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.815742][T10257] loop3: detected capacity change from 0 to 2048 [ 240.828255][T10256] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.878448][T10256] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 240.940040][T10256] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 240.948856][T10257] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 240.974366][T10256] EXT4-fs (loop4): 1 truncate cleaned up [ 240.998006][T10256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.022524][T10257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.141163][T10256] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 241.318986][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.531982][T10270] loop1: detected capacity change from 0 to 4096 [ 241.583701][T10270] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 241.709896][T10270] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 241.716478][T10270] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 241.804941][T10270] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 241.849280][T10278] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1656'. [ 241.869757][ T49] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 241.878151][T10278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1656'. [ 241.887347][ T5762] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 241.910206][ T5762] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 241.917215][ T5762] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 241.946274][ T3507] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 242.612137][T10311] loop3: detected capacity change from 0 to 128 [ 242.689043][T10311] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 242.732190][T10311] hpfs: filesystem error: improperly stopped [ 242.753123][T10311] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 242.772055][T10311] hpfs: You really don't want any checks? You are crazy... [ 242.803520][T10311] hpfs: Code page index out of array [ 242.811793][T10317] loop4: detected capacity change from 0 to 512 [ 242.816274][T10311] hpfs: code page support is disabled [ 242.824246][T10311] hpfs: hpfs_map_4sectors(): unaligned read [ 242.838117][T10311] hpfs: hpfs_map_4sectors(): unaligned read [ 242.847645][T10311] hpfs: filesystem error: unable to find root dir [ 242.847918][T10317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 242.888623][T10317] EXT4-fs (loop4): invalid journal inode [ 242.899960][T10317] EXT4-fs (loop4): can't get journal size [ 242.954585][T10311] hpfs: hpfs_map_4sectors(): unaligned read [ 242.962591][T10317] EXT4-fs (loop4): 1 truncate cleaned up [ 243.014866][T10317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.086582][T10317] EXT4-fs warning (device loop4): ext4_group_extend:1892: will only finish group (8193 blocks, 7937 new) [ 243.130009][T10317] EXT4-fs warning (device loop4): ext4_group_extend:1897: can't read last block, resize aborted [ 243.174419][T10322] Bluetooth: MGMT ver 1.22 [ 243.244232][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.257879][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 243.396629][T10328] loop0: detected capacity change from 0 to 764 [ 243.874927][T10344] loop3: detected capacity change from 0 to 64 [ 244.167528][T10350] loop3: detected capacity change from 0 to 512 [ 244.182597][T10349] loop4: detected capacity change from 0 to 1024 [ 244.209860][T10350] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 244.273845][T10350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 244.278300][T10334] loop1: detected capacity change from 0 to 32768 [ 244.298952][T10350] System zones: 0-1, 15-15, 18-18, 34-34 [ 244.305172][T10334] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 244.317298][T10350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.323991][T10350] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 244.325716][T10349] hfsplus: xattr exists yet [ 244.333901][T10350] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 244.359758][T10350] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 244.368583][T10350] EXT4-fs (loop3): 1 truncate cleaned up [ 244.375403][T10350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.439882][T10350] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 244.498253][ T42] hfsplus: b-tree write err: -5, ino 8 [ 244.532507][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.558682][ T5777] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 244.623386][T10339] loop0: detected capacity change from 0 to 32768 [ 244.715709][T10339] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 244.740282][T10363] loop3: detected capacity change from 0 to 1024 [ 244.741745][T10339] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.762433][T10363] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.856021][T10368] loop1: detected capacity change from 0 to 512 [ 244.916382][T10363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.957430][T10339] XFS (loop0): Ending clean mount [ 244.989651][T10354] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 245.005806][T10368] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1694: EA inode hash validation failed [ 245.049767][T10354] ntfs3: loop4: Failed to load $Extend (-22). [ 245.053178][T10339] XFS (loop0): Quotacheck needed: Please wait. [ 245.067066][T10354] ntfs3: loop4: Failed to initialize $Extend. [ 245.085978][T10368] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1694: corrupted inode contents [ 245.183607][T10368] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #15: comm syz.1.1694: mark_inode_dirty error [ 245.218828][T10339] XFS (loop0): Quotacheck: Done. [ 245.233781][T10354] ntfs3: loop4: ino=1b, "file0" directory corrupted [ 245.268950][T10368] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1694: corrupted inode contents [ 245.292258][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.337209][T10368] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2998: inode #15: comm syz.1.1694: mark_inode_dirty error [ 245.407984][T10368] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.1694: mark inode dirty (error -117) [ 245.449596][T10368] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 245.466073][T10368] EXT4-fs (loop1): 1 orphan inode deleted [ 245.480880][T10368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.496251][T10373] netlink: 'syz.3.1695': attribute type 2 has an invalid length. [ 245.514624][T10373] netlink: 'syz.3.1695': attribute type 2 has an invalid length. [ 245.537795][T10373] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1695'. [ 245.586561][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.622108][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.907237][T10384] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1701'. [ 245.923605][T10384] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 246.123053][T10390] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 246.518410][T10381] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1698 (10381) [ 246.555749][T10381] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 246.577250][T10381] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 246.595685][T10381] BTRFS info (device loop1): force zlib compression, level 3 [ 246.612303][T10381] BTRFS info (device loop1): force clearing of disk cache [ 246.626712][T10381] BTRFS info (device loop1): setting nodatasum [ 246.642696][T10381] BTRFS info (device loop1): allowing degraded mounts [ 246.650078][T10381] BTRFS info (device loop1): enabling disk space caching [ 246.657138][T10381] BTRFS info (device loop1): disk space caching is enabled [ 246.768944][T10381] BTRFS info (device loop1): auto enabling async discard [ 246.825381][T10381] BTRFS info (device loop1): rebuilding free space tree [ 246.875689][T10381] BTRFS info (device loop1): disabling free space tree [ 246.913610][T10381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.940032][T10381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.100799][T10381] BTRFS info (device loop1): balance: start -d -m -susage=0..0,drange=0..0 [ 247.120643][T10381] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 247.185718][T10381] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 247.395034][T10381] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 247.418643][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.428466][T10400] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 247.455364][T10400] F2FS-fs (loop0): heap/no_heap options were deprecated [ 247.455472][T10381] BTRFS info (device loop1): balance: canceled [ 247.475040][T10400] F2FS-fs (loop0): invalid crc value [ 247.514848][T10400] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.613703][ T5762] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.628248][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 247.665056][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 247.692915][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.703030][T10400] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.715847][ T8] usb 4-1: Product: syz [ 247.725808][ T8] usb 4-1: Manufacturer: syz [ 247.735923][ T8] usb 4-1: SerialNumber: syz [ 247.754079][ T8] usb 4-1: config 0 descriptor?? [ 247.791009][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 247.895191][T10442] set_capacity_and_notify: 3 callbacks suppressed [ 247.895208][T10442] loop1: detected capacity change from 0 to 256 [ 247.928335][ T27] audit: type=1800 audit(1777038127.625:43): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1708" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 247.989364][T10442] exfat: Deprecated parameter 'namecase' [ 248.018334][T10442] exfat: Deprecated parameter 'namecase' [ 248.035312][T10442] exfat: Deprecated parameter 'namecase' [ 248.044933][ T5765] syz-executor: attempt to access beyond end of device [ 248.044933][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.072415][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 248.075350][T10442] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 248.398566][ T8] gspca_sonixj: reg_w1 err -71 [ 248.406207][ T8] sonixj: probe of 4-1:0.0 failed with error -71 [ 248.434103][ T8] usb 4-1: USB disconnect, device number 10 [ 248.785480][T10446] loop4: detected capacity change from 0 to 32768 [ 248.799942][T10446] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1721 (10446) [ 248.840604][T10446] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.868633][T10446] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 248.890743][T10446] BTRFS info (device loop4): using free space tree [ 248.971687][T10471] loop0: detected capacity change from 0 to 512 [ 248.979956][T10471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 249.025727][T10471] EXT4-fs (loop0): 1 truncate cleaned up [ 249.057603][T10471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.122935][T10446] BTRFS info (device loop4): enabling ssd optimizations [ 249.155079][T10446] BTRFS info (device loop4): auto enabling async discard [ 249.308490][T10471] EXT4-fs: can't change dax mount option while remounting [ 249.439407][ T7788] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.470931][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.526396][T10488] loop1: detected capacity change from 0 to 4096 [ 249.534420][T10488] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.557318][T10488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 249.570571][T10490] loop3: detected capacity change from 0 to 136 [ 249.590053][T10488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.590227][T10490] Attempt to read inode for relocated directory [ 249.675777][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.949772][T10493] loop0: detected capacity change from 0 to 4096 [ 250.004127][T10493] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 250.092021][T10499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 250.105436][T10499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 250.183887][T10493] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1733'. [ 250.259578][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1734'. [ 250.311506][T10502] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 250.438559][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 250.447471][T10504] ksmbd: Unknown IPC event: 0, ignore. [ 250.815739][T10497] loop1: detected capacity change from 0 to 32768 [ 250.913848][T10497] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.927548][T10522] loop3: detected capacity change from 0 to 256 [ 251.047110][T10522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d) [ 251.118202][T10497] XFS (loop1): Ending clean mount [ 251.164830][T10497] XFS (loop1): Quotacheck needed: Please wait. [ 251.249800][T10528] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1747'. [ 251.264418][T10497] XFS (loop1): Quotacheck: Done. [ 251.288331][T10528] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 251.396405][T10508] loop4: detected capacity change from 0 to 40427 [ 251.453639][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.459237][T10508] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 251.504961][T10508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 251.551650][T10508] F2FS-fs (loop4): invalid crc value [ 251.615881][T10532] loop0: detected capacity change from 0 to 4096 [ 251.871678][T10532] ntfs: (device loop0): parse_options(): NLS character set is not found. Using previous one default. [ 251.888990][T10508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.913538][T10532] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 251.917248][T10508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.006224][T10532] ntfs: volume version 3.1. [ 252.113329][T10533] f2fs_ckpt-7:4: attempt to access beyond end of device [ 252.113329][T10533] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.140821][T10543] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.141625][T10532] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 252.185901][T10533] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 252.199812][T10532] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 252.257927][T10548] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.821267][T10556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.884157][ T27] audit: type=1800 audit(1777038132.595:44): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1758" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 253.022657][ T27] audit: type=1326 audit(1777038132.735:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 253.131669][ T27] audit: type=1326 audit(1777038132.735:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 253.182674][ T27] audit: type=1326 audit(1777038132.775:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 253.258087][ T27] audit: type=1326 audit(1777038132.775:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 253.318703][ T27] audit: type=1326 audit(1777038132.775:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85279cdd9 code=0x7ffc0000 [ 253.392414][T10552] set_capacity_and_notify: 2 callbacks suppressed [ 253.392428][T10552] loop1: detected capacity change from 0 to 40427 [ 253.447026][T10552] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 253.448166][T10574] program syz.4.1764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.457318][T10552] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 253.489318][T10552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 253.594826][T10552] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 253.617756][T10552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.724324][T10584] loop4: detected capacity change from 0 to 512 [ 253.778685][T10584] EXT4-fs (loop4): 1 truncate cleaned up [ 253.787554][T10584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.846756][T10584] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1768: bg 0: block 465: padding at end of block bitmap is not set [ 253.868301][T10584] EXT4-fs (loop4): Remounting filesystem read-only [ 253.978436][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.263722][T10572] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.384593][T10596] loop4: detected capacity change from 0 to 2048 [ 254.450945][T10596] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 254.483737][T10603] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.600564][T10600] loop0: detected capacity change from 0 to 4096 [ 254.637623][T10600] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 254.849515][T10600] ntfs3: loop0: failed to convert "c46c" to iso8859-13 [ 255.853178][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882668][T10646] loop4: detected capacity change from 0 to 128 [ 255.907382][T10646] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 255.951329][T10646] hpfs: filesystem error: improperly stopped [ 255.957377][T10646] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 255.980818][T10646] hpfs: You really don't want any checks? You are crazy... [ 256.003516][T10646] hpfs: hpfs_map_sector(): read error [ 256.015967][T10646] hpfs: code page support is disabled [ 256.028039][T10646] hpfs: hpfs_map_4sectors(): unaligned read [ 256.044371][T10646] hpfs: hpfs_map_4sectors(): unaligned read [ 256.062974][T10646] hpfs: filesystem error: unable to find root dir [ 256.294596][T10631] loop3: detected capacity change from 0 to 40427 [ 256.338771][T10631] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 256.345774][T10631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.387823][T10631] F2FS-fs (loop3): heap/no_heap options were deprecated [ 256.428451][T10631] F2FS-fs (loop3): invalid crc value [ 256.463757][T10631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.621875][T10631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.652400][T10631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.773831][ T5763] syz-executor: attempt to access beyond end of device [ 256.773831][ T5763] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 256.815454][ T5763] F2FS-fs (loop3): Remounting filesystem read-only [ 256.839836][ T5763] syz-executor: attempt to access beyond end of device [ 256.839836][ T5763] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 256.870195][ T5763] F2FS-fs (loop3): Remounting filesystem read-only [ 257.044934][T10673] loop4: detected capacity change from 0 to 16 [ 257.074336][T10673] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.146850][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 257.176970][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 257.198897][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 257.226017][T10675] loop0: detected capacity change from 0 to 1024 [ 257.232623][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 257.247204][T10675] EXT4-fs: Ignoring removed orlov option [ 257.255669][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 257.270825][T10675] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 257.282965][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 257.304721][T10675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.313416][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 257.329999][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 257.339912][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 257.349546][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 257.360677][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 257.370368][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 257.380202][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 257.389915][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 257.399514][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 257.409113][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 257.418684][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 257.428972][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 257.438706][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 257.448952][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 257.459170][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 257.471853][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 257.484150][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 257.496989][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 257.511211][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 257.533481][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 257.545342][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.557036][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 257.593152][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 257.644447][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 257.664959][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 257.676199][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 257.692910][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 257.704168][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 257.717184][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 257.732390][T10667] loop1: detected capacity change from 0 to 32768 [ 257.755696][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 257.777932][T10673] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 257.798494][T10667] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 257.809627][T10673] syz.4.1807: attempt to access beyond end of device [ 257.809627][T10673] loop4: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 257.823885][T10673] syz.4.1807: attempt to access beyond end of device [ 257.823885][T10673] loop4: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 257.839265][T10673] syz.4.1807: attempt to access beyond end of device [ 257.839265][T10673] loop4: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 257.854088][T10673] syz.4.1807: attempt to access beyond end of device [ 257.854088][T10673] loop4: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 257.868877][T10673] syz.4.1807: attempt to access beyond end of device [ 257.868877][T10673] loop4: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 257.883181][T10673] syz.4.1807: attempt to access beyond end of device [ 257.883181][T10673] loop4: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 257.897358][T10673] syz.4.1807: attempt to access beyond end of device [ 257.897358][T10673] loop4: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 257.898698][ T5802] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.911472][T10673] syz.4.1807: attempt to access beyond end of device [ 257.911472][T10673] loop4: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 258.037059][T10667] XFS (loop1): Ending clean mount [ 258.157132][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 258.178972][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 258.247496][ T5802] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.276942][ T5802] usb 4-1: config 0 has no interface number 0 [ 258.283583][ T5802] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.308698][ T5802] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.351902][ T5802] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 258.396648][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.429002][ T5802] usb 4-1: config 0 descriptor?? [ 258.725878][T10706] loop1: detected capacity change from 0 to 1024 [ 258.861368][ T5802] prodikeys 0003:041E:2801.000A: item fetching failed at offset 5/7 [ 258.884330][ T5802] prodikeys 0003:041E:2801.000A: hid parse failed [ 258.904304][ T5802] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 259.029736][T10717] loop4: detected capacity change from 0 to 512 [ 259.039014][T10717] EXT4-fs: Ignoring removed nobh option [ 259.055108][T10717] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 259.191533][ T8] usb 4-1: USB disconnect, device number 11 [ 259.288733][T10723] loop4: detected capacity change from 0 to 128 [ 259.315765][T10719] loop0: detected capacity change from 0 to 4096 [ 259.358082][T10719] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 259.460575][T10725] loop1: detected capacity change from 0 to 4096 [ 259.505698][T10719] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 259.626139][T10725] __ntfs_error: 3 callbacks suppressed [ 259.626155][T10725] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default. [ 259.653783][T10725] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 259.693276][ T5765] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 259.769747][T10725] ntfs: volume version 3.1. [ 259.845768][T10732] loop0: detected capacity change from 0 to 256 [ 259.911997][T10725] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 259.972688][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 259.977978][T10725] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 260.000682][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1829'. [ 260.239285][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 260.260528][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 260.387138][T10745] loop1: detected capacity change from 0 to 1024 [ 260.444920][ T27] audit: type=1326 audit(1777038140.155:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.477926][T10745] hfsplus: bad catalog entry type [ 260.481238][ T27] audit: type=1326 audit(1777038140.155:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.505235][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.547357][ T49] hfsplus: b-tree write err: -5, ino 25 [ 260.557148][T10730] loop4: detected capacity change from 0 to 32768 [ 260.564847][ T27] audit: type=1326 audit(1777038140.195:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.571424][ T49] hfsplus: b-tree write err: -5, ino 4 [ 260.587115][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.610709][ T27] audit: type=1326 audit(1777038140.195:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.642202][T10730] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 260.646150][ T49] hfsplus: b-tree write err: -5, ino 2 [ 260.721471][ T27] audit: type=1326 audit(1777038140.195:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.827837][ T27] audit: type=1326 audit(1777038140.235:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f605e99cdd9 code=0x7ffc0000 [ 260.865089][ T5777] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 260.896299][T10753] loop3: detected capacity change from 0 to 512 [ 260.926860][T10755] loop4: detected capacity change from 0 to 128 [ 261.001482][T10755] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 261.022093][T10753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 261.047979][T10755] FAT-fs (loop4): Filesystem has been set read-only [ 261.055085][T10753] EXT4-fs (loop3): orphan cleanup on readonly fs [ 261.134070][T10753] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 261.168813][T10753] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 261.249355][T10753] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.1839: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 261.367089][T10753] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1839: couldn't read orphan inode 13 (err -117) [ 261.410689][T10753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.440352][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'. [ 261.599619][T10753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.648216][T10753] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 261.675137][T10753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 261.754516][T10753] System zones: 0-2, 18-18, 34-34 [ 261.765275][T10753] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 261.890082][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.378133][ T789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 262.458350][T10779] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 262.467199][T10779] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 262.476378][T10779] F2FS-fs (loop1): invalid crc value [ 262.485769][T10779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 262.539147][T10779] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 262.567789][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 262.574952][ T789] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 262.593774][ T789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.615489][T10779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 262.623305][ T789] usb 4-1: config 0 has no interface number 0 [ 262.632191][ T789] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.660321][ T789] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 262.677808][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.685870][ T789] usb 4-1: Product: syz [ 262.696883][ T789] usb 4-1: Manufacturer: syz [ 262.706924][ T789] usb 4-1: SerialNumber: syz [ 262.721183][ T789] usb 4-1: config 0 descriptor?? [ 262.749464][ T789] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 262.757076][ T789] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 262.768879][ T5762] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 262.954651][ T789] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 263.171890][ T789] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 263.371977][ T28] usb 4-1: USB disconnect, device number 12 [ 263.385611][ T28] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 263.776180][T10824] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1868'. [ 263.790258][T10824] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1868'. [ 264.088660][ T5802] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 264.168416][T10837] set_capacity_and_notify: 2 callbacks suppressed [ 264.168432][T10837] loop3: detected capacity change from 0 to 4096 [ 264.219300][T10837] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 264.237982][T10837] ntfs3: loop3: Failed to load $Extend (-22). [ 264.244287][T10837] ntfs3: loop3: Failed to initialize $Extend. [ 264.290223][ T5802] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 264.318436][ T5802] usb 2-1: config 0 has no interface number 0 [ 264.327050][ T5802] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.357736][ T5802] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.381268][ T5802] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 264.398195][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.419605][ T5802] usb 2-1: config 0 descriptor?? [ 264.719577][T10835] loop4: detected capacity change from 0 to 40427 [ 264.735436][T10835] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 264.747731][T10835] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.778779][T10835] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 264.795896][T10835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.859368][ T5802] uclogic 0003:28BD:0905.000B: Interface probing failed: -22 [ 264.866851][ T5802] uclogic 0003:28BD:0905.000B: interface is invalid, ignoring [ 264.908032][T10835] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.925679][T10835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 264.965593][T10835] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 265.069431][T10853] loop3: detected capacity change from 0 to 256 [ 265.126063][ T5802] usb 2-1: USB disconnect, device number 8 [ 265.150071][T10853] FAT-fs (loop3): Directory bread(block 64) failed [ 265.159425][T10853] FAT-fs (loop3): Directory bread(block 65) failed [ 265.166170][T10853] FAT-fs (loop3): Directory bread(block 66) failed [ 265.186307][T10853] FAT-fs (loop3): Directory bread(block 67) failed [ 265.196710][T10853] FAT-fs (loop3): Directory bread(block 68) failed [ 265.218015][T10853] FAT-fs (loop3): Directory bread(block 69) failed [ 265.224674][T10853] FAT-fs (loop3): Directory bread(block 70) failed [ 265.233466][T10853] FAT-fs (loop3): Directory bread(block 71) failed [ 265.241322][T10853] FAT-fs (loop3): Directory bread(block 72) failed [ 265.256712][T10853] FAT-fs (loop3): Directory bread(block 73) failed [ 266.022780][T10855] loop4: detected capacity change from 0 to 32768 [ 266.041460][T10876] loop3: detected capacity change from 0 to 256 [ 266.093272][T10855] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 266.093272][T10855] [ 266.175889][T10855] ERROR: (device loop4): remounting filesystem as read-only [ 266.186279][T10855] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 266.186279][T10855] [ 266.226022][T10876] FAT-fs (loop3): Directory bread(block 64) failed [ 266.229977][T10855] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 266.229977][T10855] [ 266.243446][T10876] FAT-fs (loop3): Directory bread(block 65) failed [ 266.298082][T10876] FAT-fs (loop3): Directory bread(block 66) failed [ 266.304664][T10876] FAT-fs (loop3): Directory bread(block 67) failed [ 266.321900][T10876] FAT-fs (loop3): Directory bread(block 68) failed [ 266.346113][T10876] FAT-fs (loop3): Directory bread(block 69) failed [ 266.367130][T10882] loop1: detected capacity change from 0 to 256 [ 266.367835][T10876] FAT-fs (loop3): Directory bread(block 70) failed [ 266.390300][T10876] FAT-fs (loop3): Directory bread(block 71) failed [ 266.397297][T10876] FAT-fs (loop3): Directory bread(block 72) failed [ 266.409932][T10876] FAT-fs (loop3): Directory bread(block 73) failed [ 266.813415][T10877] loop0: detected capacity change from 0 to 32768 [ 266.816745][T10890] loop3: detected capacity change from 0 to 256 [ 266.852715][T10877] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 266.895356][T10890] FAT-fs (loop3): Directory bread(block 64) failed [ 266.913353][T10890] FAT-fs (loop3): Directory bread(block 65) failed [ 266.921418][T10890] FAT-fs (loop3): Directory bread(block 66) failed [ 266.928332][T10890] FAT-fs (loop3): Directory bread(block 67) failed [ 266.935052][T10890] FAT-fs (loop3): Directory bread(block 68) failed [ 266.942261][T10890] FAT-fs (loop3): Directory bread(block 69) failed [ 266.949929][T10890] FAT-fs (loop3): Directory bread(block 70) failed [ 266.956606][T10890] FAT-fs (loop3): Directory bread(block 71) failed [ 266.963767][T10890] FAT-fs (loop3): Directory bread(block 72) failed [ 266.971140][T10890] FAT-fs (loop3): Directory bread(block 73) failed [ 267.049232][ T28] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.110711][T10877] XFS (loop0): Starting recovery (logdev: internal) [ 267.188227][T10877] XFS (loop0): Ending recovery (logdev: internal) [ 267.253757][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.284593][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.317825][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.337249][ T28] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 267.366953][ T28] usb 2-1: Product: syz [ 267.385262][ T28] usb 2-1: SerialNumber: syz [ 267.424319][ T28] usb 2-1: selecting invalid altsetting 1 [ 267.457155][T10908] loop3: detected capacity change from 0 to 512 [ 267.481234][T10908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.485020][ T5765] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 267.544618][T10910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1905'. [ 267.603780][T10908] EXT4-fs (loop3): 1 truncate cleaned up [ 267.622039][T10908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.733975][T10908] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 267.778428][T10908] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.879979][ T5763] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 267.949828][ T5763] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 268.009804][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.021658][T10918] program syz.0.1904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.054371][ T28] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 268.090888][ T28] usb 2-1: selecting invalid altsetting 1 [ 268.106286][ T28] cdc_ncm 2-1:1.0: bind() failure [ 268.131976][ T28] usb 2-1: USB disconnect, device number 9 [ 268.315925][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 268.315940][ T27] audit: type=1326 audit(1777038148.025:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.377379][T10928] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1912'. [ 268.382842][ T27] audit: type=1326 audit(1777038148.055:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.461621][ T27] audit: type=1326 audit(1777038148.065:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.539041][ T27] audit: type=1326 audit(1777038148.075:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f737c79cb42 code=0x7ffc0000 [ 268.561249][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.618201][ T27] audit: type=1326 audit(1777038148.075:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f737c79cb42 code=0x7ffc0000 [ 268.683372][ T27] audit: type=1326 audit(1777038148.075:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.758220][ T27] audit: type=1326 audit(1777038148.085:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.780576][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.839292][T10937] loop4: detected capacity change from 0 to 1024 [ 268.865680][ T27] audit: type=1326 audit(1777038148.085:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 268.887106][T10937] hfsplus: small file entry [ 268.947598][ T27] audit: type=1326 audit(1777038148.085:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 269.014095][ T27] audit: type=1326 audit(1777038148.085:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c79cdd9 code=0x7ffc0000 [ 269.125270][T10920] XFS: attr2 mount option is deprecated. [ 269.213886][T10920] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.316107][T10920] XFS (loop3): Ending clean mount [ 269.335190][T10920] XFS (loop3): Quotacheck needed: Please wait. [ 269.435904][T10920] XFS (loop3): Quotacheck: Done. [ 269.438058][T10938] set_capacity_and_notify: 1 callbacks suppressed [ 269.438071][T10938] loop1: detected capacity change from 0 to 32768 [ 269.483349][T10938] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 269.649135][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.650038][ T5777] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 270.209217][T10955] loop4: detected capacity change from 0 to 40427 [ 270.219650][T10955] F2FS-fs (loop4): invalid crc value [ 270.246297][T10955] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.340422][T10955] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 270.510546][ T7788] bio_check_eod: 35 callbacks suppressed [ 270.510564][ T7788] syz-executor: attempt to access beyond end of device [ 270.510564][ T7788] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.558114][ T7788] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 271.023137][T10972] loop3: detected capacity change from 0 to 40427 [ 271.042687][T10972] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 271.056885][T10972] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 271.072343][T10972] F2FS-fs (loop3): invalid crc value [ 271.121869][T10972] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.257633][T10972] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 271.335578][T10972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.527592][ T5763] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 271.733770][T11000] loop1: detected capacity change from 0 to 128 [ 271.757147][T11000] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 271.795014][T10989] loop4: detected capacity change from 0 to 32768 [ 271.797952][T11000] hpfs: filesystem error: improperly stopped [ 271.818817][T11000] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 271.869859][T11000] hpfs: You really don't want any checks? You are crazy... [ 271.879145][T11000] hpfs: hpfs_map_sector(): read error [ 271.884559][T11000] hpfs: code page support is disabled [ 271.920170][T11000] hpfs: hpfs_map_4sectors(): unaligned read [ 271.926311][T11000] hpfs: hpfs_map_4sectors(): unaligned read [ 271.959466][T11000] hpfs: filesystem error: unable to find root dir [ 272.059309][T11000] hpfs: hpfs_map_4sectors(): unaligned read [ 272.066372][T11000] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 272.315608][T11007] loop1: detected capacity change from 0 to 128 [ 272.331056][T11007] FAT-fs (loop1): Unrecognized mount option "ݚICmq;V_=pr7n&AcrUɯ|kiURqj.UFGv-֟D~a* }ƦT=P: TSIqJK$31i+=1C" or missing value [ 272.612837][T11002] loop0: detected capacity change from 0 to 32768 [ 272.674404][T11002] JBD2: Ignoring recovery information on journal [ 272.721536][T11002] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 272.957537][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 273.417261][T11014] loop3: detected capacity change from 0 to 40427 [ 273.440399][T11014] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 273.457123][T11014] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 273.480050][T11014] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 273.511353][T11014] F2FS-fs (loop3): invalid crc value [ 273.532921][T11014] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.652728][T11014] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 273.673379][T11014] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.827014][ T5763] syz-executor: attempt to access beyond end of device [ 273.827014][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.849391][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 273.877868][T11028] loop1: detected capacity change from 0 to 32768 [ 274.344555][T11039] loop0: detected capacity change from 0 to 32768 [ 274.434144][T11039] JBD2: Ignoring recovery information on journal [ 274.584432][T11039] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 274.731991][T11039] (syz.0.1957,11039,0):ocfs2_reflink_ioctl:4434 ERROR: status = -14 [ 274.882859][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 274.925948][T11056] netlink: 'syz.3.1965': attribute type 5 has an invalid length. [ 275.190402][T11064] loop3: detected capacity change from 0 to 512 [ 275.230346][T11064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.283077][T11064] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1970: iget: bad i_size value: 38620345925642 [ 275.362226][T11064] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1970: couldn't read orphan inode 15 (err -117) [ 275.399538][T11064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.568894][T11074] loop4: detected capacity change from 0 to 4096 [ 275.579312][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.707125][T11074] ntfs: volume version 3.1. [ 275.936742][T11062] loop1: detected capacity change from 0 to 32768 [ 275.949791][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 275.986131][T11062] (syz.1.1968,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.023872][T11062] (syz.1.1968,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.105391][T11062] JBD2: Ignoring recovery information on journal [ 276.271869][T11062] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 276.489429][T11062] (syz.1.1968,11062,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 276.504935][T11062] (syz.1.1968,11062,1):update_backups:188 ERROR: status = -12 [ 276.526942][T11062] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 276.607748][T11102] loop0: detected capacity change from 0 to 4096 [ 276.664521][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 276.833423][T11102] ntfs3: loop0: failed to convert "0080" to maciceland [ 276.873211][T11102] ntfs3: loop0: failed to convert name for inode 1e. [ 277.211955][T11120] loop4: detected capacity change from 0 to 1024 [ 277.248629][T11120] EXT4-fs: inline encryption not supported [ 277.289243][T11120] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 277.375528][T11120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.614502][ T7788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.792676][T11137] loop0: detected capacity change from 0 to 1024 [ 277.812647][T11139] usb usb8: usbfs: process 11139 (syz.4.1999) did not claim interface 0 before use [ 277.833644][T11137] EXT4-fs: Ignoring removed bh option [ 277.853408][T11137] EXT4-fs: Ignoring removed nobh option [ 277.882108][T11137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.885677][T11131] loop3: detected capacity change from 0 to 32768 [ 278.024354][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.035467][T11147] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 278.045770][T11131] JBD2: Ignoring recovery information on journal [ 278.104083][T11149] can0: slcan on ttyprintk. [ 278.182718][T11131] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 278.269541][T11148] can0 (unregistered): slcan off ttyprintk. [ 278.352594][T11155] ip6gretap1: entered allmulticast mode [ 278.427066][T11131] (syz.3.1996,11131,0):ocfs2_reflink_ioctl:4434 ERROR: status = -14 [ 278.642789][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 278.787960][T11174] loop1: detected capacity change from 0 to 256 [ 279.144271][T11188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2012'. [ 279.202972][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2012'. [ 279.252773][ T5802] kernel write not supported for file /input/mice (pid: 5802 comm: kworker/0:4) [ 279.887377][T11225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2029'. [ 280.334065][T11242] loop3: detected capacity change from 0 to 1024 [ 280.395847][ T59] hfsplus: b-tree write err: -5, ino 25 [ 280.404309][ T59] hfsplus: b-tree write err: -5, ino 4 [ 280.412830][ T59] hfsplus: b-tree write err: -5, ino 2 [ 280.675512][T11248] loop1: detected capacity change from 0 to 256 [ 280.688383][T11248] exfat: Deprecated parameter 'namecase' [ 280.695978][T11248] exfat: Deprecated parameter 'namecase' [ 280.702884][T11248] exfat: Deprecated parameter 'namecase' [ 280.726777][T11248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 280.804787][T11244] loop3: detected capacity change from 0 to 32768 [ 280.824026][T11244] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.850066][T11244] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 280.875033][T11244] BTRFS info (device loop3): setting nodatasum [ 280.890447][T11244] BTRFS info (device loop3): force zlib compression, level 3 [ 280.912728][T11244] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 280.925974][T11244] BTRFS info (device loop3): use lzo compression, level 0 [ 280.936476][T11244] BTRFS info (device loop3): turning on flush-on-commit [ 280.939900][T11250] loop1: detected capacity change from 0 to 256 [ 280.943907][T11244] BTRFS info (device loop3): enabling auto defrag [ 280.958730][T11244] BTRFS info (device loop3): max_inline at 4096 [ 280.965015][T11244] BTRFS info (device loop3): using free space tree [ 281.058478][T11250] FAT-fs (loop1): Directory bread(block 64) failed [ 281.066268][T11244] BTRFS info (device loop3): enabling ssd optimizations [ 281.082710][T11250] FAT-fs (loop1): Directory bread(block 65) failed [ 281.107137][T11250] FAT-fs (loop1): Directory bread(block 66) failed [ 281.117211][T11250] FAT-fs (loop1): Directory bread(block 67) failed [ 281.124045][T11250] FAT-fs (loop1): Directory bread(block 68) failed [ 281.131068][T11250] FAT-fs (loop1): Directory bread(block 69) failed [ 281.137793][T11250] FAT-fs (loop1): Directory bread(block 70) failed [ 281.144518][T11250] FAT-fs (loop1): Directory bread(block 71) failed [ 281.151805][T11250] FAT-fs (loop1): Directory bread(block 72) failed [ 281.158525][T11250] FAT-fs (loop1): Directory bread(block 73) failed [ 281.275115][ T5763] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.472573][T11309] loop0: detected capacity change from 0 to 512 [ 282.524554][T11311] loop1: detected capacity change from 0 to 512 [ 282.535006][T11309] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.617482][ T5765] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 282.670457][T11311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.710401][T11311] ext4 filesystem being mounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.825891][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.907071][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 283.052326][T11327] loop4: detected capacity change from 0 to 1024 [ 283.186792][ T2893] hfsplus: b-tree write err: -5, ino 25 [ 283.197609][ T2893] hfsplus: b-tree write err: -5, ino 4 [ 283.216768][ T2893] hfsplus: b-tree write err: -5, ino 2 [ 283.413309][T11344] loop1: detected capacity change from 0 to 1024 [ 283.722172][T11352] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2076'. [ 283.986931][T11363] loop3: detected capacity change from 0 to 64 [ 284.095466][T11366] loop1: detected capacity change from 0 to 512 [ 284.105566][T11366] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.143303][T11366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 284.155089][T11366] System zones: 1-12 [ 284.159475][T11366] EXT4-fs (loop1): orphan cleanup on readonly fs [ 284.175858][T11366] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.2083: attempt to clear invalid blocks 1024 len 1 [ 284.255183][T11366] EXT4-fs (loop1): Remounting filesystem read-only [ 284.293625][T11366] EXT4-fs (loop1): 1 truncate cleaned up [ 284.304612][T11366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 284.306187][T11369] hfsplus: bad catalog entry type [ 284.451570][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 284.497323][ T49] hfsplus: b-tree write err: -5, ino 25 [ 284.515743][ T49] hfsplus: b-tree write err: -5, ino 4 [ 284.531742][ T49] hfsplus: b-tree write err: -5, ino 2 [ 284.611232][T11379] UBIFS error (pid: 11379): cannot open "usrquota", error -22 [ 284.645093][T11381] Bluetooth: MGMT ver 1.22 [ 284.852591][T11390] veth0_to_bridge: default FDB implementation only supports local addresses [ 285.453744][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 285.542152][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 285.718876][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 285.952501][T11410] set_capacity_and_notify: 2 callbacks suppressed [ 285.952516][T11410] loop3: detected capacity change from 0 to 32768 [ 286.002177][T11410] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.190168][T11410] XFS (loop3): Ending clean mount [ 286.358100][ T5763] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.805075][T11450] loop3: detected capacity change from 0 to 1024 [ 286.818849][T11450] EXT4-fs: Ignoring removed orlov option [ 286.864471][T11450] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 286.876215][T11440] loop1: detected capacity change from 0 to 32768 [ 286.899505][T11440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2112 (11440) [ 286.954958][T11450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.955031][T11440] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.977476][T11440] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 286.987324][T11440] BTRFS info (device loop1): setting nodatasum [ 286.994684][T11440] BTRFS info (device loop1): force zlib compression, level 3 [ 287.002380][T11440] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 287.012086][T11440] BTRFS info (device loop1): use lzo compression, level 0 [ 287.019894][T11440] BTRFS info (device loop1): turning on flush-on-commit [ 287.026858][T11440] BTRFS info (device loop1): enabling auto defrag [ 287.033900][T11440] BTRFS info (device loop1): max_inline at 4096 [ 287.040446][T11440] BTRFS info (device loop1): using free space tree [ 287.133924][T11440] BTRFS info (device loop1): enabling ssd optimizations [ 287.241235][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.243657][T11444] loop0: detected capacity change from 0 to 40427 [ 287.291583][T11444] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 287.303919][T11444] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 287.351876][T11444] F2FS-fs (loop0): invalid crc value [ 287.437990][ T5762] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.570403][T11444] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 287.577492][T11444] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.863723][T11452] loop4: detected capacity change from 0 to 32768 [ 287.893049][ T5765] syz-executor: attempt to access beyond end of device [ 287.893049][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.950537][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 287.972388][T11452] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.122270][T11452] XFS (loop4): Ending clean mount [ 288.418592][ T7788] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.664010][T11476] loop3: detected capacity change from 0 to 40427 [ 288.698887][T11476] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 288.723694][T11476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 288.763653][T11476] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 288.792090][T11476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.964313][T11476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 288.993686][T11476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.200725][T11511] [U] [ 289.203782][T11511] [U] [ 289.206487][T11511] [U] [ 289.209187][T11511] [U] [ 289.211886][T11511] [U] [ 289.214586][T11511] [U] [ 289.217296][T11511] [U] [ 289.219998][T11511] [U] [ 289.224796][T11511] [U] [ 289.227520][T11511] [U] [ 289.230227][T11511] [U] [ 289.242914][T11510] [U] [ 289.442362][T11504] loop1: detected capacity change from 0 to 32768 [ 289.502781][T11504] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 289.523133][T11504] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 289.534021][T11520] loop0: detected capacity change from 0 to 256 [ 289.557917][T11520] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.687096][T11504] XFS (loop1): Ending clean mount [ 289.741104][T11504] XFS (loop1): Quotacheck needed: Please wait. [ 289.757625][ T2893] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x1684 dinode [ 289.773608][ T2893] XFS (loop1): Unmount and run xfs_repair [ 289.781095][ T2893] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 289.791576][ T2893] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 289.802925][ T2893] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.814186][ T2893] 00000020: 34 f7 58 68 a1 1e 07 ee 34 f7 58 68 a1 1e 07 ee 4.Xh....4.Xh.... [ 289.878113][ T2893] 00000030: 34 f7 58 68 a1 1e 07 ee 00 00 00 00 00 00 04 1a 4.Xh............ [ 289.909684][ T2893] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 289.938134][ T2893] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 c2 72 3d 69 .............r=i [ 289.947015][ T2893] 00000060: ff ff ff ff cf 80 b3 ab 00 00 00 00 00 00 00 05 ................ [ 289.995060][ T2893] 00000070: 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 08 .......@........ [ 290.063893][T11504] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 290.239703][T11539] loop0: detected capacity change from 0 to 64 [ 290.360257][T11539] overlayfs: upper fs needs to support d_type. [ 290.407184][T11539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 290.421823][T11539] overlayfs: failed to set xattr on upper [ 290.432501][T11539] overlayfs: ...falling back to redirect_dir=nofollow. [ 290.439838][T11539] overlayfs: ...falling back to index=off. [ 290.446037][T11539] overlayfs: ...falling back to uuid=null. [ 290.469613][ T5762] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 290.667669][ T5765] Bad inode number on dev loop0: 4160749571 is out of range [ 290.706562][ T5765] Bad inode number on dev loop0: 4160749571 is out of range [ 291.224829][T11564] loop4: detected capacity change from 0 to 64 [ 291.292295][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.315853][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.560673][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.585931][T11567] loop1: detected capacity change from 0 to 256 [ 291.587540][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.638338][T11567] FAT-fs (loop1): Directory bread(block 64) failed [ 291.645026][T11567] FAT-fs (loop1): Directory bread(block 65) failed [ 291.652352][T11567] FAT-fs (loop1): Directory bread(block 66) failed [ 291.666496][T11567] FAT-fs (loop1): Directory bread(block 67) failed [ 291.725016][T11567] FAT-fs (loop1): Directory bread(block 68) failed [ 291.747257][T11567] FAT-fs (loop1): Directory bread(block 69) failed [ 291.763146][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.779410][T11567] FAT-fs (loop1): Directory bread(block 70) failed [ 291.793193][T11567] FAT-fs (loop1): Directory bread(block 71) failed [ 291.801191][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.809016][T11567] FAT-fs (loop1): Directory bread(block 72) failed [ 291.828156][T11567] FAT-fs (loop1): Directory bread(block 73) failed [ 291.983582][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.017825][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.620505][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.631765][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.648496][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.656905][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.665864][ T5769] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 292.673452][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.906833][T11589] loop4: detected capacity change from 0 to 8192 [ 292.959833][T11589] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 293.033681][T11589] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 293.108127][T11589] REISERFS (device loop4): using ordered data mode [ 293.114693][T11589] reiserfs: using flush barriers [ 293.116049][T11582] loop3: detected capacity change from 0 to 32768 [ 293.148688][T11589] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 293.177942][ T5802] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 293.186543][T11589] REISERFS (device loop4): checking transaction log (loop4) [ 293.217220][T11589] REISERFS (device loop4): Using r5 hash to sort names [ 293.226459][T11582] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 293.279744][T11582] JBD2: Ignoring recovery information on journal [ 293.322130][T11589] reiserfs: enabling write barrier flush mode [ 293.390523][T11589] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 293.396825][T11582] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 293.417807][T11589] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 293.434778][T11589] REISERFS (device loop4): Remounting filesystem read-only [ 293.442321][T11589] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 293.448794][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.489444][T11589] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 293.494053][ T5802] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 293.545954][T11589] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 293.556996][T11589] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 293.557583][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.571896][T11582] [ 293.576188][T11582] ====================================================== [ 293.583213][T11582] WARNING: possible circular locking dependency detected [ 293.590244][T11582] syzkaller #0 Not tainted [ 293.594662][T11582] ------------------------------------------------------ [ 293.601681][T11582] syz.3.2162/11582 is trying to acquire lock: [ 293.607745][T11582] ffff8880773bea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 293.608890][ T5802] usb 2-1: config 0 descriptor?? [ 293.619330][T11582] [ 293.619330][T11582] but task is already holding lock: [ 293.619341][T11582] ffff8880773beab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 293.619396][T11582] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 293.619396][T11582] which lock already depends on the new lock. [ 293.619396][T11582] [ 293.619400][T11582] [ 293.619400][T11582] the existing dependency chain (in reverse order) is: [ 293.619405][T11582] [ 293.619405][T11582] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 293.619438][T11582] down_read+0x46/0x2e0 [ 293.619454][T11582] ocfs2_init_acl+0x30a/0x770 [ 293.619469][T11582] ocfs2_mknod+0x140f/0x2300 [ 293.619493][T11582] ocfs2_mkdir+0x196/0x430 [ 293.619509][T11582] vfs_mkdir+0x296/0x440 [ 293.619524][T11582] do_mkdirat+0x1dc/0x450 [ 293.619537][T11582] __x64_sys_mkdirat+0x89/0xa0 [ 293.619550][T11582] do_syscall_64+0x55/0xa0 [ 293.619564][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.619583][T11582] [ 293.619583][T11582] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 293.619607][T11582] down_read+0x46/0x2e0 [ 293.619620][T11582] ocfs2_start_trans+0x3a8/0x6f0 [ 293.619633][T11582] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 293.619647][T11582] ocfs2_dismount_volume+0x1e5/0x8a0 [ 293.619664][T11582] generic_shutdown_super+0x134/0x2b0 [ 293.619676][T11582] kill_block_super+0x44/0x90 [ 293.619690][T11582] deactivate_locked_super+0x97/0x100 [ 293.619702][T11582] cleanup_mnt+0x43b/0x4d0 [ 293.619718][T11582] task_work_run+0x1d4/0x260 [ 293.619735][T11582] exit_to_user_mode_loop+0xe6/0x110 [ 293.619752][T11582] exit_to_user_mode_prepare+0xee/0x180 [ 293.619768][T11582] syscall_exit_to_user_mode+0x1a/0x50 [ 293.619784][T11582] do_syscall_64+0x61/0xa0 [ 293.619796][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.619814][T11582] [ 293.619814][T11582] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 293.619840][T11582] ocfs2_start_trans+0x2a9/0x6f0 [ 293.619854][T11582] ocfs2_setattr+0x10b6/0x1bc0 [ 293.619871][T11582] notify_change+0xb0d/0xe10 [ 293.619886][T11582] chown_common+0x413/0x5d0 [ 293.619900][T11582] do_fchownat+0x14b/0x240 [ 293.619913][T11582] __x64_sys_lchown+0x85/0x90 [ 293.661760][T11589] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 293.662204][T11582] do_syscall_64+0x55/0xa0 [ 293.662226][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.734610][T11589] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 293.734743][T11582] [ 293.734743][T11582] -> #0 ( [ 293.755429][T11589] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 293.757817][T11582] &ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 293.757839][T11582] __lock_acquire+0x2df1/0x7d40 [ 293.764085][T11589] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 293.768632][T11582] lock_acquire+0x19e/0x420 [ 293.768653][T11582] down_write+0x97/0x200 [ 293.768669][T11582] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 293.768689][T11582] ocfs2_truncate_file+0xde5/0x1440 [ 293.768709][T11582] ocfs2_setattr+0x158d/0x1bc0 [ 293.768728][T11582] notify_change+0xb0d/0xe10 [ 293.768746][T11582] do_truncate+0x1b0/0x240 [ 293.768761][T11582] path_openat+0x2a32/0x3230 [ 293.768774][T11582] do_filp_open+0x1f5/0x430 [ 293.768787][T11582] do_sys_openat2+0x134/0x1d0 [ 293.768804][T11582] __x64_sys_openat+0x139/0x160 [ 293.768821][T11582] do_syscall_64+0x55/0xa0 [ 293.768833][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.768851][T11582] [ 293.768851][T11582] other info that might help us debug this: [ 293.768851][T11582] [ 293.768857][T11582] Chain exists of: [ 293.768857][T11582] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 293.768857][T11582] [ 293.768888][T11582] Possible unsafe locking scenario: [ 293.768888][T11582] [ 293.768892][T11582] CPU0 CPU1 [ 293.768896][T11582] ---- ---- [ 293.768901][T11582] lock(&oi->ip_xattr_sem); [ 293.768912][T11582] lock(&journal->j_trans_barrier); [ 293.768924][T11582] lock(&oi->ip_xattr_sem); [ 293.822842][ T5802] ath6kl: Failed to submit usb control message: -71 [ 293.826455][T11582] lock(&ocfs2_file_ip_alloc_sem_key [ 293.831654][ T5802] ath6kl: unable to send the bmi data to the device: -71 [ 293.836376][T11582] ); [ 293.836382][T11582] [ 293.836382][T11582] *** DEADLOCK *** [ 293.836382][T11582] [ 293.842196][ T5802] ath6kl: Unable to send get target info: -71 [ 293.856813][T11582] 3 locks held by syz.3.2162/11582: [ 293.856825][T11582] #0: ffff88807608c418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 293.862288][ T5802] ath6kl: Failed to init ath6kl core: -71 [ 293.868165][T11582] #1: ffff8880773bed98 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: do_truncate+0x19c/0x240 [ 293.868222][T11582] #2: ffff8880773beab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 293.868267][T11582] [ 293.868267][T11582] stack backtrace: [ 293.868273][T11582] CPU: 1 PID: 11582 Comm: syz.3.2162 Not tainted syzkaller #0 [ 293.868289][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.868310][T11582] Call Trace: [ 293.868320][T11582] [ 293.868327][T11582] dump_stack_lvl+0x18c/0x250 [ 293.868353][T11582] ? load_image+0x420/0x420 [ 293.868372][T11582] ? show_regs_print_info+0x20/0x20 [ 293.868399][T11582] ? print_circular_bug+0x12b/0x1a0 [ 293.868420][T11582] check_noncircular+0x2fc/0x400 [ 293.868442][T11582] ? print_deadlock_bug+0x5d0/0x5d0 [ 293.868460][T11582] ? lockdep_lock+0xf5/0x230 [ 293.868478][T11582] ? lockdep_unlock+0x146/0x2e0 [ 293.868494][T11582] ? _find_first_zero_bit+0xd3/0x100 [ 293.868513][T11582] __lock_acquire+0x2df1/0x7d40 [ 293.868539][T11582] ? verify_lock_unused+0x140/0x140 [ 293.868566][T11582] lock_acquire+0x19e/0x420 [ 293.868584][T11582] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 293.868608][T11582] ? __might_sleep+0xe0/0xe0 [ 293.868627][T11582] ? read_lock_is_recursive+0x20/0x20 [ 293.868649][T11582] down_write+0x97/0x200 [ 293.884004][ T5802] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 293.884230][T11582] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 293.903873][ T5802] usb 2-1: USB disconnect, device number 10 [ 293.908710][T11582] ? down_read_killable+0x340/0x340 [ 293.908734][T11582] ? ocfs2_truncate_file+0xd0b/0x1440 [ 294.269280][T11582] ? __lock_acquire+0x7d40/0x7d40 [ 294.274324][T11582] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 294.280324][T11582] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 294.286205][T11582] ? up_write+0x1c3/0x410 [ 294.290528][T11582] ocfs2_truncate_file+0xde5/0x1440 [ 294.295727][T11582] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 294.301542][T11582] ? do_raw_spin_unlock+0x121/0x230 [ 294.306740][T11582] ? _raw_spin_unlock+0x28/0x40 [ 294.311581][T11582] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 294.317302][T11582] ? ocfs2_inode_lock_atime+0x530/0x530 [ 294.322831][T11582] ? ocfs2_rw_lock+0x138/0x250 [ 294.327575][T11582] ? dquot_initialize+0x20/0x20 [ 294.332427][T11582] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 294.338474][T11582] ? setattr_prepare+0x1e6/0xac0 [ 294.343417][T11582] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 294.349986][T11582] ocfs2_setattr+0x158d/0x1bc0 [ 294.354739][T11582] ? ocfs2_extend_allocation+0x1840/0x1840 [ 294.360528][T11582] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 294.366318][T11582] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 294.372554][T11582] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 294.378437][T11582] ? current_time+0x195/0x280 [ 294.383122][T11582] ? inode_set_ctime_current+0x2e0/0x2e0 [ 294.388764][T11582] ? evm_inode_setattr+0x94/0x6a0 [ 294.393774][T11582] ? bpf_lsm_inode_setattr+0x9/0x10 [ 294.398954][T11582] ? try_break_deleg+0x79/0x120 [ 294.403789][T11582] ? ocfs2_extend_allocation+0x1840/0x1840 [ 294.409607][T11582] notify_change+0xb0d/0xe10 [ 294.414185][T11582] do_truncate+0x1b0/0x240 [ 294.418602][T11582] ? put_page_bootmem+0x2c0/0x2c0 [ 294.423629][T11582] ? apparmor_file_truncate+0x24a/0x2e0 [ 294.429164][T11582] ? ima_bprm_check+0x200/0x200 [ 294.434002][T11582] path_openat+0x2a32/0x3230 [ 294.438576][T11582] ? verify_lock_unused+0x140/0x140 [ 294.443751][T11582] ? do_filp_open+0x430/0x430 [ 294.448408][T11582] ? __virt_addr_valid+0x18c/0x540 [ 294.453501][T11582] do_filp_open+0x1f5/0x430 [ 294.457984][T11582] ? vfs_tmpfile+0x490/0x490 [ 294.462556][T11582] ? _raw_spin_unlock+0x28/0x40 [ 294.467384][T11582] ? alloc_fd+0x58f/0x630 [ 294.471698][T11582] do_sys_openat2+0x134/0x1d0 [ 294.476361][T11582] ? do_sys_open+0xe0/0xe0 [ 294.480757][T11582] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 294.486714][T11582] ? lock_chain_count+0x20/0x20 [ 294.491549][T11582] __x64_sys_openat+0x139/0x160 [ 294.496384][T11582] do_syscall_64+0x55/0xa0 [ 294.500792][T11582] ? clear_bhb_loop+0x40/0x90 [ 294.505452][T11582] ? clear_bhb_loop+0x40/0x90 [ 294.510110][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.515985][T11582] RIP: 0033:0x7f605e99cdd9 [ 294.520385][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.539973][T11582] RSP: 002b:00007f605f7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.548379][T11582] RAX: ffffffffffffffda RBX: 00007f605ec15fa0 RCX: 00007f605e99cdd9 [ 294.556429][T11582] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 294.564387][T11582] RBP: 00007f605ea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 294.572342][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.580297][T11582] R13: 00007f605ec16038 R14: 00007f605ec15fa0 R15: 00007fffbccf1748 [ 294.588261][T11582] [ 294.739116][ T5769] Bluetooth: hci1: command tx timeout [ 295.483344][T11589] ------------[ cut here ]------------ [ 295.489174][T11589] kernel BUG at fs/reiserfs/journal.c:1916! [ 295.495347][T11589] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 295.501445][T11589] CPU: 0 PID: 11589 Comm: syz.4.2165 Not tainted syzkaller #0 [ 295.508916][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.518986][T11589] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 295.524808][T11589] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ca a3 5d ff <0f> 0b e8 c3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 295.544428][T11589] RSP: 0018:ffffc9000d0a7700 EFLAGS: 00010293 [ 295.550509][T11589] RAX: ffffffff82297e36 RBX: 1ffff92001a14ee4 RCX: ffff888018f58000 [ 295.558492][T11589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.566469][T11589] RBP: ffffc9000d0a77f8 R08: ffffc9000d0a7777 R09: 0000000000000000 [ 295.574451][T11589] R10: ffffc9000d0a7740 R11: fffff52001a14eef R12: ffffc90003769000 [ 295.582431][T11589] R13: dffffc0000000000 R14: ffff888023ec0630 R15: 0000000000000000 [ 295.590416][T11589] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 295.599357][T11589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.605970][T11589] CR2: 00007fee6d714e9c CR3: 000000000cf32000 CR4: 00000000003506f0 [ 295.613969][T11589] Call Trace: [ 295.617261][T11589] [ 295.620199][T11589] ? journal_release+0x30/0x30 [ 295.624986][T11589] journal_release+0x1f/0x30 [ 295.629585][T11589] reiserfs_put_super+0x26b/0x510 [ 295.634709][T11589] ? hook_inode_free_security+0xb0/0xb0 [ 295.640267][T11589] ? evict_inodes+0x63c/0x6a0 [ 295.644954][T11589] ? reiserfs_dirty_inode+0x270/0x270 [ 295.650353][T11589] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 295.656004][T11589] ? reiserfs_dirty_inode+0x270/0x270 [ 295.661393][T11589] generic_shutdown_super+0x134/0x2b0 [ 295.666776][T11589] kill_block_super+0x44/0x90 [ 295.671467][T11589] deactivate_locked_super+0x97/0x100 [ 295.676851][T11589] cleanup_mnt+0x43b/0x4d0 [ 295.681280][T11589] task_work_run+0x1d4/0x260 [ 295.686103][T11589] ? task_work_cancel+0x220/0x220 [ 295.691142][T11589] ? do_exit+0x955/0x2460 [ 295.695486][T11589] ? kmem_cache_free+0xf8/0x270 [ 295.700353][T11589] do_exit+0x95a/0x2460 [ 295.704527][T11589] ? rcu_is_watching+0x15/0xb0 [ 295.709393][T11589] ? put_task_struct+0xc0/0xc0 [ 295.714167][T11589] ? lock_release+0xb5/0x8c0 [ 295.718767][T11589] ? __rwlock_init+0x150/0x150 [ 295.723544][T11589] ? lock_chain_count+0x20/0x20 [ 295.728403][T11589] ? _raw_spin_lock_irq+0xbb/0xf0 [ 295.733440][T11589] do_group_exit+0x21b/0x2d0 [ 295.738045][T11589] get_signal+0x12fc/0x13f0 [ 295.742563][T11589] arch_do_signal_or_restart+0xc2/0x800 [ 295.748127][T11589] ? slab_free_freelist_hook+0x130/0x1a0 [ 295.753771][T11589] ? get_sigframe_size+0x20/0x20 [ 295.758727][T11589] ? __se_sys_mount+0x393/0x3d0 [ 295.763591][T11589] ? __se_sys_mount+0x393/0x3d0 [ 295.768450][T11589] ? rcu_is_watching+0x15/0xb0 [ 295.773225][T11589] exit_to_user_mode_loop+0x70/0x110 [ 295.779055][T11589] exit_to_user_mode_prepare+0xee/0x180 [ 295.784635][T11589] syscall_exit_to_user_mode+0x1a/0x50 [ 295.791054][T11589] do_syscall_64+0x61/0xa0 [ 295.796973][T11589] ? clear_bhb_loop+0x40/0x90 [ 295.802691][T11589] ? clear_bhb_loop+0x40/0x90 [ 295.809755][T11589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.815769][T11589] RIP: 0033:0x7f737c79e04a [ 295.820197][T11589] Code: Unable to access opcode bytes at 0x7f737c79e020. [ 295.827224][T11589] RSP: 002b:00007f737d606e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.835649][T11589] RAX: 0000000000000000 RBX: 00007f737d606ee0 RCX: 00007f737c79e04a [ 295.843811][T11589] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 295.851881][T11589] RBP: 00002000000000c0 R08: 00007f737d606ee0 R09: 0000000001a484bc [ 295.859865][T11589] R10: 0000000001a484bc R11: 0000000000000246 R12: 0000200000000100 [ 295.867854][T11589] R13: 00007f737d606ea0 R14: 0000000000000000 R15: 0000200000000200 [ 295.875842][T11589] [ 295.879046][T11589] Modules linked in: [ 295.894979][T11589] ---[ end trace 0000000000000000 ]--- [ 295.897253][T11582] ocfs2: Unmounting device (7,3) on (node local) [ 295.900562][T11589] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 295.900588][T11589] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ca a3 5d ff <0f> 0b e8 c3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 295.900603][T11589] RSP: 0018:ffffc9000d0a7700 EFLAGS: 00010293 [ 295.900619][T11589] RAX: ffffffff82297e36 RBX: 1ffff92001a14ee4 RCX: ffff888018f58000 [ 295.900631][T11589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.900641][T11589] RBP: ffffc9000d0a77f8 R08: ffffc9000d0a7777 R09: 0000000000000000 [ 295.900652][T11589] R10: ffffc9000d0a7740 R11: fffff52001a14eef R12: ffffc90003769000 [ 295.900664][T11589] R13: dffffc0000000000 R14: ffff888023ec0630 R15: 0000000000000000 [ 295.900675][T11589] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 295.900688][T11589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.900700][T11589] CR2: 00007fee6d714e9c CR3: 0000000030348000 CR4: 00000000003506f0 [ 295.900716][T11589] Kernel panic - not syncing: Fatal exception [ 295.901055][T11589] Kernel Offset: disabled