last executing test programs: 7.489597644s ago: executing program 2 (id=390): setuid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 7.287489525s ago: executing program 2 (id=391): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0) 7.178261891s ago: executing program 2 (id=394): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e1e, @empty}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) 6.930195054s ago: executing program 2 (id=398): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0x4000b}, 0x1c) 2.111494205s ago: executing program 1 (id=443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x20, r1, 0x901, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 2.046041529s ago: executing program 1 (id=446): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) 1.923480566s ago: executing program 1 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000050007000008000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000000000000000000000000600020000000000050021"], 0x64}, 0x1, 0x620b}, 0x0) 1.83765182s ago: executing program 0 (id=450): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1.725708096s ago: executing program 2 (id=451): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 1.724347416s ago: executing program 1 (id=459): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00ef32ff1a8751f240789a4c4ac7909f079c126b1dec5a34ce5248c14762a2eab060bf8dc45f681c48b07540d3f8004a9ac9c8849c487a3e1998bb713c42866ee2afad6d"], 0x1, 0xd9c, &(0x7f0000000e80)="$eJzs3ctvG8f9APBZSrT8ys9yrPysuq6lxk2jPizFjtD0VhlwD0GBoED+gsB1UqdK+nB6SOAAdg691kCQP6BB7j306UMAIycXubToPxDk1IsbBEhbo0CiQtIMRX1NYklZEkXx8wGGw93vcmeGXC6X+5oEjKzG2uPi4nSV0ju33750f2b8P6tjZlpTzK49juehpZRSM6V0MQ9PhvktTaznn396/XJ7/kXOq3QhValqjU/P3Wu99khK6UaaTXfSZHr+k5O3Xv7w2eX3T9w8cenNubs703oAABgt93/w3s//8uT3rx//72/PLKWJ1viyfb6Uh4/m7f6lan04Z/n/w8Zw1ZbaHQjTjefUCNONdZiuvZxmmG68S/kHwnybXaabqCl/rG1cp3bDMCvL8WSqGvObhhuN+fn1/+SrPho7UM2/enX5xWsDqiiw7T6bybv4JEkaubRybNBrIIB18bjhA27EPQsPpzW38d7Kv3ex0fn1sA12e/lX/nCV/95Naxy2z35dmkq7yvfoaB6OxxHGw+v6/f6X+cXjEc0e69ntOMKwHF/oVs+xXa7HVnWrf1wu9quv5Ly8D2dCvP37Ez/TYfmMgc7u2/8vSSObVga9AgL2rHje3EpW4vG8vhifqIkfrIkfqokfrokfqYnDKPvda79Ot6qN//nxP32/+8PKfrZHcv5/fdYn7o/st/x43m+/Hrb8eD4x7Glz/z792S/v/DWe//9FOP//bP4tncwriLK/MO5Xb537Hy4MbnSZ7tFQnUc6TL/2fGrzdNXUxnxS23rmgXpMb37dsW7Tnd483WSY7nDeFjkY6hu3Tw6H15Xtj7JeLe/XeGhvM7TjQKhH+WSO5/xgaM/xbu0KO7IPhOmaOZ0I7ZoK7XosvO7/Q7uq6c3tivvPS31OhvHxOEmZLnxsD/wuxc8iXpfxeM7fyvm7Of8g5x93KHcUleWx2/n/ZfmcTs3qxavLV57Kw2U5vTvWnFgdf36X6w08vF6v/5lOm6//Odoa32y0rxeObYyv2tcLk2H8hS7jn87D5ffsx2OH1sbPX/7p8o+2u/Ew4q69/sZPXlhevvILTzzxxJPWk0GvmYCdtvDaKz9buPb6G+euvvLCS1deuvLq+ae++52nn3lmcWFtq36hfdse2F82fvQHXRMAAAAAAAAAAACgZ9WhzqNzXnd/23I9ebk+PV4fz3Aon1tZGsp9DMr1n93u61Ku3zy+C3Vk++3G5USDbiPQ2T/d/1eSRjatrLiLP7A3DLr/v3Lfw5IfPff346upTHbv4ub1Zbx/ITyMvd7/nPL3V/9/rf6vel7/hR6zJrdW7u/vH/pbW7HpVK/lx/aX+8BO9Vf+H3L5pTVPpN7KX/lNKD/eqLRHfwzlH+6x/Afaf3pr5f8pl1/etrmzvZa/XuOqsbkecb9xuQ9g3G9c/Dm0v9zbr+/2b7Gjttu5fBhlw9LPZL+Gpf/Pbsp8y3owr55bx+nK/bdjfwf91r/c97v8DjwW5l/V/L7p/3O41fX/WZa/Bf1/wr7zkeN/kjSyaWVlZaBdn4xqvyt7xaDf/0FvQw66/EG//3Vi/5/x/1Ls/zPGY/+fMR77/4zx2L9WjMf+P+P7Gfv/jPGTYb6xf9DpmviXauKnauJfromfronH/28xPlsTP1MTn6mJP1oTf7wmfrYm/rWa+BM18Sdr4nM18f3uqzkf1fbDKIv9Rvr+w+gox3+6ff+nauLA8Ir9Osfv99dr4sDwKud5+H7DCKo637Ej7m8v+3Hfyvm7Of8g5x/vWAXZDd/I+Tdz/q2cfzvn53I+n/OFnOsbcrj96h+nztyqNs7zOxbivZ5PGq8HiPeJOd9jfeLxuX7PZz3ZYzk7Vf4WLwcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBqNtcfFxekqpXduv33pX1Pf++HqmJnWFLNrj+N5aCml1EwpVXl4PMzvxsR6/vmn1y93yqt0Ye2xDKfn7rVee2T19Wk23UmT6flPTt56+cNnl98/cfPEpTfn7u5M6wEAAGA0/C8AAP//nfLmAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e84, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) 1.632625251s ago: executing program 0 (id=452): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./bus/file0\x00') 1.538912637s ago: executing program 3 (id=453): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e1e, @empty}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) 1.351702516s ago: executing program 3 (id=454): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x800) close_range(r0, r0, 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xffff7854, 0x0, 0x0) 1.195085825s ago: executing program 1 (id=455): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250 1 [ 74.972478][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.981336][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.988679][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.996694][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.003898][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.012096][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.019962][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.027521][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.035672][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.036237][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.050166][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.051344][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.064724][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.072269][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.083704][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.087820][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.098898][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.107356][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.115963][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.123681][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.132849][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.145061][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.152517][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.556547][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.639398][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.691871][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.699640][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.708416][ T5771] bridge_slave_0: entered allmulticast mode [ 75.716922][ T5771] bridge_slave_0: entered promiscuous mode [ 75.740260][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.757357][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.770124][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.777680][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.784948][ T5771] bridge_slave_1: entered allmulticast mode [ 75.791836][ T5771] bridge_slave_1: entered promiscuous mode [ 75.895897][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.908298][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.937090][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.944728][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.952754][ T5772] bridge_slave_0: entered allmulticast mode [ 75.960752][ T5772] bridge_slave_0: entered promiscuous mode [ 75.980365][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.987806][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.995517][ T5772] bridge_slave_1: entered allmulticast mode [ 76.002490][ T5772] bridge_slave_1: entered promiscuous mode [ 76.067576][ T5771] team0: Port device team_slave_0 added [ 76.102970][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.110251][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.118343][ T5770] bridge_slave_0: entered allmulticast mode [ 76.125969][ T5770] bridge_slave_0: entered promiscuous mode [ 76.135138][ T5771] team0: Port device team_slave_1 added [ 76.142603][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.151109][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.158671][ T5770] bridge_slave_1: entered allmulticast mode [ 76.166237][ T5770] bridge_slave_1: entered promiscuous mode [ 76.185934][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.232759][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.290143][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.299496][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.309946][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.317385][ T5773] bridge_slave_0: entered allmulticast mode [ 76.324610][ T5773] bridge_slave_0: entered promiscuous mode [ 76.333356][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.340968][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.367144][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.382869][ T5772] team0: Port device team_slave_0 added [ 76.391175][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.412299][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.419635][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.426979][ T5773] bridge_slave_1: entered allmulticast mode [ 76.434422][ T5773] bridge_slave_1: entered promiscuous mode [ 76.441354][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.448845][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.474979][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.495224][ T5772] team0: Port device team_slave_1 added [ 76.533448][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.561714][ T5770] team0: Port device team_slave_0 added [ 76.570876][ T5770] team0: Port device team_slave_1 added [ 76.591018][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.667754][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.675101][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.701447][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.713372][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.720653][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.747196][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.760315][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.767449][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.793414][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.812263][ T5771] hsr_slave_0: entered promiscuous mode [ 76.819092][ T5771] hsr_slave_1: entered promiscuous mode [ 76.828948][ T5773] team0: Port device team_slave_0 added [ 76.838129][ T5773] team0: Port device team_slave_1 added [ 76.844647][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.851621][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.877844][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.947408][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.954935][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.981011][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.994195][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.001173][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.027316][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.043590][ T5770] hsr_slave_0: entered promiscuous mode [ 77.050966][ T5770] hsr_slave_1: entered promiscuous mode [ 77.057538][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.065838][ T5770] Cannot create hsr debugfs directory [ 77.125076][ T5776] Bluetooth: hci1: command tx timeout [ 77.125095][ T5783] Bluetooth: hci3: command tx timeout [ 77.177661][ T5772] hsr_slave_0: entered promiscuous mode [ 77.187033][ T5772] hsr_slave_1: entered promiscuous mode [ 77.193145][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.200789][ T5772] Cannot create hsr debugfs directory [ 77.206753][ T5776] Bluetooth: hci2: command tx timeout [ 77.214308][ T5776] Bluetooth: hci0: command tx timeout [ 77.245667][ T5773] hsr_slave_0: entered promiscuous mode [ 77.252768][ T5773] hsr_slave_1: entered promiscuous mode [ 77.259347][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.267256][ T5773] Cannot create hsr debugfs directory [ 77.626677][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.647446][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.658935][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.670929][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.745776][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.758392][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.770541][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.781565][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.888492][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.901498][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.923716][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.931389][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.946081][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.022616][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.059281][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.071824][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.079280][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.089854][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.096975][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.115815][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.126315][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.141425][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.192668][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.239429][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.268385][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.316919][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.324078][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.380924][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.388207][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.446998][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.509278][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.540831][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.558400][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.575779][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.582952][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.637403][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.644603][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.666019][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.709497][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.716710][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.732759][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.739971][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.819220][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.955891][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.007433][ T5771] veth0_vlan: entered promiscuous mode [ 79.039841][ T5771] veth1_vlan: entered promiscuous mode [ 79.077543][ T5770] veth0_vlan: entered promiscuous mode [ 79.118345][ T5770] veth1_vlan: entered promiscuous mode [ 79.150806][ T5771] veth0_macvtap: entered promiscuous mode [ 79.167868][ T5771] veth1_macvtap: entered promiscuous mode [ 79.205266][ T5776] Bluetooth: hci1: command tx timeout [ 79.219321][ T5776] Bluetooth: hci3: command tx timeout [ 79.252035][ T5770] veth0_macvtap: entered promiscuous mode [ 79.276036][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.304001][ T5776] Bluetooth: hci0: command tx timeout [ 79.309455][ T5776] Bluetooth: hci2: command tx timeout [ 79.322393][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.343786][ T5770] veth1_macvtap: entered promiscuous mode [ 79.362670][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.383021][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.398205][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.409629][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.441006][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.452660][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.467259][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.480246][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.489761][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.498730][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.508691][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.526417][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.536187][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.546791][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555703][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.570510][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.706446][ T5773] veth0_vlan: entered promiscuous mode [ 79.722259][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.733058][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.791481][ T5773] veth1_vlan: entered promiscuous mode [ 79.803448][ T5772] veth0_vlan: entered promiscuous mode [ 79.811939][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.821705][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.873624][ T5772] veth1_vlan: entered promiscuous mode [ 79.892333][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.903045][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.926128][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.933751][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.977556][ T5772] veth0_macvtap: entered promiscuous mode [ 79.989100][ T5772] veth1_macvtap: entered promiscuous mode [ 80.015320][ T5773] veth0_macvtap: entered promiscuous mode [ 80.045870][ T5773] veth1_macvtap: entered promiscuous mode [ 80.060048][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.081364][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.092661][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.104653][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.119486][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.130668][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.146867][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.158328][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.174017][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.186128][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.206393][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.229317][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.247877][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.272683][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.340692][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.368552][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.382457][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.394376][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.405547][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.416424][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.435476][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.480402][ T5837] syz.1.2[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.493242][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.523985][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.533858][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.539058][ T5837] loop1: detected capacity change from 0 to 1024 [ 80.571014][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.594007][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.617941][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.647636][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.653361][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.722178][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764857][ T5842] loop0: detected capacity change from 0 to 4096 [ 80.789193][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822860][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.844094][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.955589][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.963467][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.985037][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.122464][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.164299][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.247622][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.273638][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.284636][ T5783] Bluetooth: hci1: command tx timeout [ 81.290134][ T5776] Bluetooth: hci3: command tx timeout [ 81.364827][ T5783] Bluetooth: hci0: command tx timeout [ 81.370442][ T5776] Bluetooth: hci2: command tx timeout [ 81.421807][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.445050][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.192648][ T5847] loop1: detected capacity change from 0 to 32768 [ 82.324440][ T27] audit: type=1800 audit(1777328401.588:2): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="file2" dev="loop1" ino=5 res=0 errno=0 [ 82.428281][ T5847] ERROR: (device loop1): dbAdjCtl: Corrupt dmapctl page [ 82.428281][ T5847] [ 82.451133][ T5847] ERROR: (device loop1): remounting filesystem as read-only [ 82.940148][ T5860] loop3: detected capacity change from 0 to 32768 [ 83.186184][ T5863] loop2: detected capacity change from 0 to 32768 [ 83.297304][ T5863] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 83.372681][ T5871] loop0: detected capacity change from 0 to 8192 [ 83.376956][ T5776] Bluetooth: hci3: command tx timeout [ 83.384564][ T5776] Bluetooth: hci1: command tx timeout [ 83.442809][ T5878] loop1: detected capacity change from 0 to 4096 [ 83.444086][ T5871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.463139][ T5776] Bluetooth: hci2: command tx timeout [ 83.463178][ T5776] Bluetooth: hci0: command tx timeout [ 83.476922][ T5871] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.489030][ T5871] REISERFS (device loop0): using ordered data mode [ 83.495727][ T5871] reiserfs: using flush barriers [ 83.505782][ T5871] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.573489][ T5871] REISERFS (device loop0): checking transaction log (loop0) [ 83.641045][ T5863] XFS (loop2): Ending clean mount [ 83.687942][ T5863] XFS (loop2): Quotacheck needed: Please wait. [ 83.790736][ T5878] ntfs3: loop1: failed to convert "0000" to iso8859-9 [ 83.840686][ T5878] ntfs3: loop1: failed to convert name for inode 1e. [ 83.861080][ T5863] XFS (loop2): Quotacheck: Done. [ 83.998106][ T5871] REISERFS (device loop0): Using tea hash to sort names [ 84.018101][ T5871] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 84.034467][ T5871] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 84.122821][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 84.875062][ T5884] loop3: detected capacity change from 0 to 32768 [ 84.897263][ T5884] XFS: attr2 mount option is deprecated. [ 84.907884][ T5884] XFS: attr2 mount option is deprecated. [ 84.993517][ T5886] loop1: detected capacity change from 0 to 32768 [ 85.012351][ T5884] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.191864][ T5884] XFS (loop3): Ending clean mount [ 85.217034][ T5884] XFS (loop3): Quotacheck needed: Please wait. [ 85.279541][ T5884] XFS (loop3): Quotacheck: Done. [ 85.418268][ T5888] loop2: detected capacity change from 0 to 32768 [ 85.446272][ T5888] ======================================================= [ 85.446272][ T5888] WARNING: The mand mount option has been deprecated and [ 85.446272][ T5888] and is ignored by this kernel. Remove the mand [ 85.446272][ T5888] option from the mount to silence this warning. [ 85.446272][ T5888] ======================================================= [ 85.489517][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.711712][ T5888] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 85.786776][ T5888] JBD2: Ignoring recovery information on journal [ 85.901309][ T5909] smc: net device bond0 applied user defined pnetid SYZ2 [ 85.911827][ T5888] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.120268][ T5913] binder: 5912:5913 ioctl c0306201 0 returned -14 [ 86.168339][ T5913] binder: 5912:5913 ioctl c00c6211 0 returned -14 [ 86.176638][ T5916] loop3: detected capacity change from 0 to 128 [ 86.200484][ T5916] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 86.227712][ T5916] hpfs: filesystem error: improperly stopped [ 86.238489][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 86.246984][ T5916] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 86.265681][ T5916] hpfs: You really don't want any checks? You are crazy... [ 86.283144][ T5916] hpfs: Code page index out of array [ 86.334757][ T5916] hpfs: code page support is disabled [ 86.355800][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 86.362130][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 86.417580][ T5916] hpfs: filesystem error: unable to find root dir [ 86.636403][ T5927] loop3: detected capacity change from 0 to 512 [ 86.755723][ T5927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.767238][ T5927] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.805920][ T786] cfg80211: failed to load regulatory.db [ 86.931552][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.188445][ T5924] loop0: detected capacity change from 0 to 32768 [ 87.685985][ T5956] loop1: detected capacity change from 0 to 512 [ 87.708478][ T5957] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.730758][ T5956] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.810601][ T5956] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #17: comm syz.1.43: inode has both inline data and extents flags [ 87.881557][ T5956] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.43: couldn't read orphan inode 17 (err -117) [ 87.945559][ T5956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.992832][ T5964] loop2: detected capacity change from 0 to 256 [ 88.219818][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.379495][ T5968] futex_wake_op: syz.0.48 tries to shift op by 32; fix this program [ 88.393809][ T5945] loop3: detected capacity change from 0 to 32768 [ 88.423856][ T5945] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 88.450556][ T5945] JBD2: Ignoring recovery information on journal [ 88.488407][ T5973] loop2: detected capacity change from 0 to 256 [ 88.575091][ T5973] exfat: Deprecated parameter 'utf8' [ 88.586764][ T5975] loop0: detected capacity change from 0 to 512 [ 88.603425][ T5975] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.52: corrupted inode contents [ 88.633415][ T5973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 88.645975][ T5975] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 88.690012][ T5945] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.764156][ T5975] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.52: corrupted inode contents [ 88.796024][ T5975] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.52: mark_inode_dirty error [ 88.834896][ T5975] EXT4-fs (loop0): 1 orphan inode deleted [ 88.856610][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.885846][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 88.970876][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.078302][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.170173][ T5986] loop0: detected capacity change from 0 to 764 [ 89.185183][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.231847][ T5986] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.324576][ T8] usb 2-1: config index 0 descriptor too short (expected 45, got 27) [ 89.332943][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.399207][ T8] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.00 [ 89.413988][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.434410][ T8] usb 2-1: Product: syz [ 89.438621][ T8] usb 2-1: Manufacturer: syz [ 89.443353][ T8] usb 2-1: SerialNumber: syz [ 89.538172][ T5995] loop3: detected capacity change from 0 to 512 [ 89.557588][ T5995] EXT4-fs: Ignoring removed orlov option [ 89.570294][ T5995] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.589212][ T5995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.640754][ T5995] EXT4-fs (loop3): 1 orphan inode deleted [ 89.646797][ T5995] EXT4-fs (loop3): 1 truncate cleaned up [ 89.653853][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.806357][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.908491][ T8] usb 2-1: USB disconnect, device number 2 [ 90.311690][ T6015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.344342][ T786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.545255][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 90.562560][ T786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.593839][ T786] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 90.623451][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.645591][ T786] usb 4-1: Product: syz [ 90.649904][ T786] usb 4-1: Manufacturer: syz [ 90.676635][ T786] usb 4-1: SerialNumber: syz [ 90.697377][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.917311][ T6012] F2FS-fs (loop0): invalid crc value [ 90.930613][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.933636][ T786] usb 4-1: unit 4 not found! [ 90.945601][ T786] usb 4-1: unit 0 not found! [ 90.967325][ T6012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.155084][ T6012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 91.351897][ T786] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 91.379444][ T786] usb 4-1: unit 4 not found! [ 91.400106][ T786] usb 4-1: unit 0 not found! [ 91.422996][ T786] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 91.464879][ T786] usb 4-1: unit 4 not found! [ 91.469529][ T786] usb 4-1: unit 0 not found! [ 91.501267][ T6018] set_capacity_and_notify: 3 callbacks suppressed [ 91.501278][ T6018] loop1: detected capacity change from 0 to 32768 [ 91.586777][ T6018] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.605596][ T786] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 91.621219][ T786] usb 4-1: USB disconnect, device number 2 [ 91.686715][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.793083][ T6018] XFS (loop1): Ending clean mount [ 91.827163][ T6018] XFS (loop1): Quotacheck needed: Please wait. [ 91.905884][ T6018] XFS (loop1): Quotacheck: Done. [ 91.984031][ T27] audit: type=1800 audit(1777328411.248:3): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 92.099457][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.413001][ T6056] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 92.450590][ T6058] Bluetooth: MGMT ver 1.22 [ 92.628391][ T6063] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 92.654498][ T6064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.81'. [ 93.352233][ T6093] loop1: detected capacity change from 0 to 1024 [ 93.364167][ T6093] EXT4-fs: Ignoring removed bh option [ 93.406870][ T6093] EXT4-fs (loop1): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 93.443065][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.485740][ T6093] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.518587][ T6093] syz.1.92 (6093) used greatest stack depth: 20720 bytes left [ 93.597329][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.704086][ T6102] loop1: detected capacity change from 0 to 8 [ 94.172906][ T6113] loop0: detected capacity change from 0 to 128 [ 94.283509][ T6113] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.334183][ T6113] hpfs: filesystem error: improperly stopped [ 94.340267][ T6113] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.380216][ T6113] hpfs: You really don't want any checks? You are crazy... [ 94.402642][ T6113] hpfs: Code page index out of array [ 94.411964][ T6113] hpfs: code page support is disabled [ 94.422303][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 94.439361][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 94.445609][ T6113] hpfs: filesystem error: unable to find root dir [ 94.486503][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.505183][ T5783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.541372][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 94.602164][ T6120] loop3: detected capacity change from 0 to 1024 [ 94.645060][ T6120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.683340][ T6125] loop1: detected capacity change from 0 to 1024 [ 94.699792][ T6126] loop2: detected capacity change from 0 to 8 [ 94.751616][ T6120] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 94.773705][ T6125] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 94.871402][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.521952][ T6147] vlan2: entered promiscuous mode [ 95.549221][ T6147] dummy0: entered promiscuous mode [ 95.675022][ T6153] loop0: detected capacity change from 0 to 512 [ 95.734787][ T6153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.764123][ T6153] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.783095][ T6153] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 95.817020][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.149295][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 96.168451][ T6151] loop2: detected capacity change from 0 to 32768 [ 96.204070][ T6151] (syz.2.118,6151,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.222963][ T6151] (syz.2.118,6151,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.280949][ T6151] JBD2: Ignoring recovery information on journal [ 96.324623][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.334115][ T6151] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.473587][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 96.529516][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 96.558327][ T5760] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.581164][ T5760] usb 1-1: config 0 has no interface number 0 [ 96.598676][ T5760] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.621759][ T5760] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.652151][ T5760] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.675652][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.695920][ T5760] usb 1-1: Product: syz [ 96.700140][ T5760] usb 1-1: SerialNumber: syz [ 96.722943][ T5760] usb 1-1: config 0 descriptor?? [ 96.733754][ T6172] loop1: detected capacity change from 0 to 4096 [ 96.741322][ T5760] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 96.788943][ T5760] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 96.952580][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.960548][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.968163][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.975493][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.984066][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.992213][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.999425][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.007278][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.014469][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.021679][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.037159][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 97.046883][ T5760] usb 1-1: USB disconnect, device number 2 [ 97.125889][ T5760] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.480989][ T6182] loop1: detected capacity change from 0 to 1024 [ 97.570549][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 97.576884][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 97.596743][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 97.602402][ T1095] hfsplus: b-tree write err: -5, ino 26 [ 97.990677][ T6199] loop2: detected capacity change from 0 to 4096 [ 98.164469][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.360143][ T28] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 98.368347][ T28] usb 1-1: config 0 has no interface number 0 [ 98.374624][ T28] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.385667][ T28] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.395613][ T28] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 98.405477][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.419551][ T28] usb 1-1: config 0 descriptor?? [ 98.848079][ T28] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 98.855525][ T28] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 98.862569][ T28] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 98.873220][ T28] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 98.880368][ T28] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 98.889360][ T28] uclogic 0003:5543:0522.0001: No inputs registered, leaving [ 98.900668][ T28] uclogic 0003:5543:0522.0001: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input17 [ 99.051277][ T28] usb 1-1: USB disconnect, device number 3 [ 99.656375][ T6207] bond_slave_0: entered promiscuous mode [ 99.662451][ T6207] bond_slave_1: entered promiscuous mode [ 99.704348][ T6207] vlan2: entered promiscuous mode [ 99.724151][ T6207] bond0: entered promiscuous mode [ 99.808772][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.148'. [ 99.906240][ T6219] loop2: detected capacity change from 0 to 64 [ 99.967010][ T6219] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 100.116141][ T6224] loop1: detected capacity change from 0 to 1024 [ 100.625501][ T6238] loop3: detected capacity change from 0 to 64 [ 101.132672][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 101.592609][ T27] audit: type=1326 audit(1777328420.868:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb3f99cdd9 code=0x0 [ 101.807013][ T6282] loop3: detected capacity change from 0 to 256 [ 102.178856][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'. [ 102.635668][ T6287] loop1: detected capacity change from 0 to 32768 [ 102.738842][ T6287] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 102.784028][ T6287] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.080067][ T6287] XFS (loop1): Ending clean mount [ 103.178364][ T6298] loop3: detected capacity change from 0 to 32768 [ 103.305777][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.900271][ T6340] loop0: detected capacity change from 0 to 512 [ 103.932497][ T6340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.101545][ T6340] EXT4-fs (loop0): 1 orphan inode deleted [ 104.112333][ T6340] EXT4-fs (loop0): 1 truncate cleaned up [ 104.136076][ T6340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.171783][ T6337] loop2: detected capacity change from 0 to 8192 [ 104.227658][ T6337] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.264290][ T6337] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 104.273692][ T6337] REISERFS (device loop2): using ordered data mode [ 104.281440][ T6337] reiserfs: using flush barriers [ 104.290565][ T6337] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.308399][ T6337] REISERFS (device loop2): checking transaction log (loop2) [ 104.403701][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.505226][ T6337] REISERFS (device loop2): Using tea hash to sort names [ 104.522612][ T6338] loop1: detected capacity change from 0 to 32768 [ 104.914464][ T6359] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 105.154631][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 105.182895][ T6357] loop0: detected capacity change from 0 to 8192 [ 105.227623][ T6357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.283156][ T6357] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 105.323805][ T6357] REISERFS (device loop0): using ordered data mode [ 105.342341][ T6371] warning: `syz.1.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.355970][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.372232][ T6357] reiserfs: using flush barriers [ 105.387568][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.404463][ T6357] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.408292][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 105.472586][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.481705][ T6357] REISERFS (device loop0): checking transaction log (loop0) [ 105.536346][ T8] usb 4-1: config 0 descriptor?? [ 105.610302][ T6357] REISERFS (device loop0): Using tea hash to sort names [ 105.620651][ T6357] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 105.680453][ T6375] loop1: detected capacity change from 0 to 256 [ 105.919054][ T6377] loop1: detected capacity change from 0 to 2048 [ 105.989783][ T6380] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.999942][ T8] isku 0003:1E7D:319C.0002: unbalanced collection at end of report description [ 106.088628][ T8] isku 0003:1E7D:319C.0002: parse failed [ 106.123615][ T8] isku: probe of 0003:1E7D:319C.0002 failed with error -22 [ 106.143764][ T6377] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 106.196532][ T8] usb 4-1: USB disconnect, device number 3 [ 106.248257][ T6377] Remounting filesystem read-only [ 106.325811][ T5770] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 106.349989][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 106.364343][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 106.371588][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.380926][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.418099][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.433233][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 106.440516][ T5770] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 106.452316][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.464002][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.472897][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.508364][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 106.520021][ T5770] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 106.531859][ T5770] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 106.539461][ T5770] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 106.551296][ T5770] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 106.565241][ T5770] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 106.575086][ T5770] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 106.582486][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.593042][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.603794][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.625291][ T5770] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 106.632020][ T5770] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 106.656338][ T5770] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 106.663683][ T5770] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 106.714124][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.723029][ T5770] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 106.740007][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.749083][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.758067][ T5770] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 106.765376][ T5770] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.831998][ T6393] netlink: 56 bytes leftover after parsing attributes in process `syz.0.227'. [ 107.041247][ T6389] loop2: detected capacity change from 0 to 32768 [ 107.281967][ T6407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.235'. [ 107.299002][ T6407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.680757][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 107.729747][ T6419] netlink: 7 bytes leftover after parsing attributes in process `syz.3.240'. [ 107.900476][ T6426] loop0: detected capacity change from 0 to 1024 [ 107.992571][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.005450][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 108.089848][ T6426] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.244462][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.770684][ T6462] loop1: detected capacity change from 0 to 512 [ 108.812333][ T6462] EXT4-fs: Ignoring removed oldalloc option [ 108.919513][ T6462] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.259: Parent and EA inode have the same ino 15 [ 108.977642][ T6462] EXT4-fs (loop1): 1 orphan inode deleted [ 109.005193][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.202938][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.224872][ T6456] loop0: detected capacity change from 0 to 32768 [ 109.636253][ T6458] loop3: detected capacity change from 0 to 32768 [ 109.737634][ T6458] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.932703][ T6458] XFS (loop3): Ending clean mount [ 110.065677][ T6458] XFS (loop3): syz.3.256 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 110.153779][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.390594][ T6472] loop2: detected capacity change from 0 to 32768 [ 110.415058][ T6498] ceph: Unexpected value for 'acl' [ 110.480476][ T6472] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.655600][ T6472] XFS (loop2): Ending clean mount [ 110.771347][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.457023][ T6510] loop0: detected capacity change from 0 to 32768 [ 111.538182][ T6510] JBD2: Ignoring recovery information on journal [ 111.558244][ T6516] loop1: detected capacity change from 0 to 32768 [ 111.599412][ T6516] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 111.623866][ T6516] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 111.659981][ T6510] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.694172][ T6516] JBD2: Ignoring recovery information on journal [ 111.837912][ T6516] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.965399][ T6537] vivid-006: disconnect [ 111.985792][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 112.067881][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 112.241286][ T6543] loop2: detected capacity change from 0 to 2048 [ 112.289621][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.397874][ T6543] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.289: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.458699][ T6543] EXT4-fs (loop2): Remounting filesystem read-only [ 112.539700][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.611058][ T6554] loop1: detected capacity change from 0 to 2048 [ 112.628921][ T6554] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.683021][ T6555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.702948][ T6536] vivid-006: reconnect [ 113.266068][ T6573] loop0: detected capacity change from 0 to 4096 [ 113.352679][ T6582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.395173][ T6573] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 113.476218][ T6581] loop3: detected capacity change from 0 to 4096 [ 113.519435][ T6581] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 113.598817][ T6581] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 113.622494][ T6581] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.677895][ T6581] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 113.723973][ T6581] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 113.754127][ T6581] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 113.791211][ T6581] ntfs: volume version 3.1. [ 113.829086][ T6581] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 113.871910][ T6581] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 113.916123][ T6581] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 113.940932][ T6592] loop2: detected capacity change from 0 to 764 [ 113.964460][ T6581] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 113.986381][ T6592] rock: directory entry would overflow storage [ 113.992591][ T6592] rock: sig=0x5850, size=36, remaining=22 [ 114.020585][ T6595] loop0: detected capacity change from 0 to 8 [ 114.131888][ T6595] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.166699][ T6595] SQUASHFS error: Failed to read block 0x108: -5 [ 114.220338][ T6595] SQUASHFS error: Unable to read metadata cache entry [106] [ 114.256317][ T6595] SQUASHFS error: Unable to read inode 0x11f [ 114.493637][ T6606] mmap: syz.2.313 (6606) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.832656][ T6621] loop0: detected capacity change from 0 to 128 [ 114.850483][ T6621] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 114.869321][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.021566][ T6623] IPVS: Error connecting to the multicast addr [ 115.044489][ T5760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.241704][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.253812][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.271212][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.274981][ T28] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 115.291220][ T5760] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 115.313705][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.335360][ T5760] usb 2-1: config 0 descriptor?? [ 115.476394][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.495248][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 115.516959][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.553376][ T28] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 115.576648][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.603772][ T28] usb 3-1: config 0 descriptor?? [ 115.624513][ T6625] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.789097][ T5760] wacom 0003:056A:0010.0003: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 115.818378][ T5760] wacom 0003:056A:0010.0003: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 115.855602][ T5760] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0003/input/input6 [ 116.020222][ T5760] usb 2-1: USB disconnect, device number 3 [ 116.091307][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x2 [ 116.108218][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 116.139332][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 116.156269][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 116.168616][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 116.176409][ T28] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 116.187646][ T28] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 116.237423][ T6652] loop3: detected capacity change from 0 to 16 [ 116.278087][ T6652] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.298414][ T8] usb 3-1: USB disconnect, device number 2 [ 116.334393][ T786] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 116.354971][ T6652] syz.3.335: attempt to access beyond end of device [ 116.354971][ T6652] loop3: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 116.613687][ T6655] loop3: detected capacity change from 0 to 512 [ 116.658486][ T6653] fido_id[6653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.689001][ T6655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.717482][ T6655] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 116.719931][ T6657] loop0: detected capacity change from 0 to 4096 [ 116.750321][ T6655] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 116.808383][ T6655] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 116.832435][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.852990][ T6655] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.873090][ T6657] EXT4-fs: can't change dax mount option while remounting [ 116.880512][ T6655] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 116.925886][ T6655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.932380][ T6655] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #4: comm syz.3.336: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 117.051066][ T6655] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.336: Bad quota inode: 4, type: 1 [ 117.070643][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.160893][ T6655] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.229605][ T6655] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 117.274823][ T6655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.419166][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.844202][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.956004][ T6666] loop2: detected capacity change from 0 to 40427 [ 117.976302][ T6666] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 117.983313][ T6666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.025962][ T6666] F2FS-fs (loop2): heap/no_heap options were deprecated [ 118.049662][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 118.058933][ T6666] F2FS-fs (loop2): invalid crc value [ 118.084915][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.099149][ T6666] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.127647][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.158351][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 118.191446][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.238835][ T23] usb 4-1: config 0 descriptor?? [ 118.294075][ T6666] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.304315][ T6666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.379259][ T6695] loop1: detected capacity change from 0 to 4096 [ 118.452682][ T5773] syz-executor: attempt to access beyond end of device [ 118.452682][ T5773] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 118.476890][ T5773] F2FS-fs (loop2): Remounting filesystem read-only [ 118.486165][ T5773] syz-executor: attempt to access beyond end of device [ 118.486165][ T5773] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 118.516893][ T6702] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.528854][ T5773] F2FS-fs (loop2): Remounting filesystem read-only [ 118.703194][ T23] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 118.898557][ T23] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 118.933709][ T23] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 118.967909][ T23] koneplus: probe of 0003:1E7D:2D51.0005 failed with error -71 [ 119.012598][ T23] usb 4-1: USB disconnect, device number 4 [ 119.088528][ T6711] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 119.101949][ T6710] IPVS: stopping backup sync thread 6711 ... [ 119.291517][ T6715] loop0: detected capacity change from 0 to 2048 [ 119.366163][ T6715] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 119.417162][ T6715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.621395][ T6726] loop3: detected capacity change from 0 to 256 [ 119.870132][ T6723] EXT4-fs: Conflicting test_dummy_encryption options [ 119.988032][ T6734] loop0: detected capacity change from 0 to 1024 [ 120.006324][ T6734] EXT4-fs: Ignoring removed bh option [ 120.045919][ T6736] mkiss: ax0: crc mode is auto. [ 120.063329][ T6734] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 120.135136][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.292810][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.379742][ T6720] loop2: detected capacity change from 0 to 32768 [ 120.497591][ T6746] loop3: detected capacity change from 0 to 512 [ 120.593434][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.654189][ T6746] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.834802][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 120.862442][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.066415][ T23] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 121.091540][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.113682][ T23] usb 1-1: Product: syz [ 121.127277][ T23] usb 1-1: Manufacturer: syz [ 121.156891][ T23] usb 1-1: SerialNumber: syz [ 121.178241][ T23] usb 1-1: config 0 descriptor?? [ 121.200006][ T23] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 121.228189][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 121.228203][ T27] audit: type=1326 audit(1777328440.508:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.325389][ T27] audit: type=1326 audit(1777328440.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.381884][ T27] audit: type=1326 audit(1777328440.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.405074][ T27] audit: type=1326 audit(1777328440.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.427883][ T27] audit: type=1326 audit(1777328440.508:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.452594][ T6773] loop3: detected capacity change from 0 to 64 [ 121.466563][ T27] audit: type=1326 audit(1777328440.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.489637][ T27] audit: type=1326 audit(1777328440.508:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.513523][ T27] audit: type=1326 audit(1777328440.508:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.573628][ T27] audit: type=1326 audit(1777328440.508:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.601910][ T27] audit: type=1326 audit(1777328440.508:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1ecd99cdd9 code=0x7ffc0000 [ 121.873707][ T23] gspca_stk1135: reg_w 0x3 err -71 [ 121.880913][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 121.904295][ T23] gspca_stk1135: Sensor write failed [ 121.920052][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 121.948153][ T23] gspca_stk1135: Sensor write failed [ 121.958771][ T6783] loop1: detected capacity change from 0 to 736 [ 121.968427][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 121.977688][ T23] gspca_stk1135: Sensor read failed [ 121.982971][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 121.991323][ T23] gspca_stk1135: Sensor read failed [ 121.997583][ T23] gspca_stk1135: Detected sensor type unknown (0x0) [ 122.005144][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 122.011561][ T23] gspca_stk1135: Sensor read failed [ 122.017620][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 122.061555][ T23] gspca_stk1135: Sensor read failed [ 122.092985][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 122.120771][ T23] gspca_stk1135: Sensor write failed [ 122.139150][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 122.156167][ T23] gspca_stk1135: Sensor write failed [ 122.161583][ T23] stk1135: probe of 1-1:0.0 failed with error -71 [ 122.184830][ T23] usb 1-1: USB disconnect, device number 4 [ 122.636151][ T6799] loop0: detected capacity change from 0 to 2048 [ 122.671404][ T6799] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.710634][ T6800] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.990805][ T6787] loop3: detected capacity change from 0 to 32768 [ 123.031666][ T6787] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.231096][ T6787] XFS (loop3): Ending clean mount [ 123.324096][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.394838][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.429926][ T6821] loop1: detected capacity change from 0 to 1764 [ 123.467402][ T6821] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 123.570412][ T6823] capability: warning: `syz.0.404' uses 32-bit capabilities (legacy support in use) [ 123.825952][ T6826] netlink: 'syz.1.405': attribute type 5 has an invalid length. [ 124.948177][ T6859] loop3: detected capacity change from 0 to 2048 [ 125.005534][ T6859] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002] [ 125.028567][ T6859] System zones: 0-4 [ 125.039912][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.089552][ T6859] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.174061][ T6859] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.420: bg 0: block 345: padding at end of block bitmap is not set [ 125.236581][ T6859] EXT4-fs (loop3): Remounting filesystem read-only [ 125.243622][ T6859] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.420: cleanup dec ref error -117 [ 125.286323][ T6870] loop1: detected capacity change from 0 to 256 [ 125.373401][ T6872] loop0: detected capacity change from 0 to 512 [ 125.410384][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.492635][ T6872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 125.508255][ T6872] System zones: 1-20 [ 125.532065][ T6872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.733161][ T6878] loop3: detected capacity change from 0 to 512 [ 125.777099][ T6878] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.426: invalid block [ 125.839094][ T6878] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.426: invalid indirect mapped block 10 (level 1) [ 125.899758][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.914814][ T6878] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.426: invalid indirect mapped block 8 (level 1) [ 125.987492][ T6878] EXT4-fs (loop3): 1 truncate cleaned up [ 126.004652][ T6878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.208275][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.269562][ T6887] loop0: detected capacity change from 0 to 256 [ 126.391035][ T6887] FAT-fs (loop0): Directory bread(block 64) failed [ 126.440108][ T6887] FAT-fs (loop0): Directory bread(block 65) failed [ 126.447744][ T6887] FAT-fs (loop0): Directory bread(block 66) failed [ 126.462130][ T6887] FAT-fs (loop0): Directory bread(block 67) failed [ 126.481759][ T6887] FAT-fs (loop0): Directory bread(block 68) failed [ 126.501885][ T6887] FAT-fs (loop0): Directory bread(block 69) failed [ 126.518880][ T6887] FAT-fs (loop0): Directory bread(block 70) failed [ 126.537452][ T6887] FAT-fs (loop0): Directory bread(block 71) failed [ 126.569617][ T6887] FAT-fs (loop0): Directory bread(block 72) failed [ 126.593336][ T6887] FAT-fs (loop0): Directory bread(block 73) failed [ 126.681791][ T6895] loop3: detected capacity change from 0 to 256 [ 126.984274][ T6901] tipc: Started in network mode [ 126.989415][ T6901] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 127.016697][ T6901] tipc: Enabling of bearer rejected, failed to enable media [ 127.165424][ T6906] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 127.176285][ T6903] IPVS: stopping backup sync thread 6906 ... [ 127.208229][ T6908] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 127.405521][ T6913] netlink: set zone limit has 8 unknown bytes [ 127.979193][ T6929] loop1: detected capacity change from 0 to 4096 [ 127.995293][ T6929] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.014210][ T6929] NILFS (loop1): mounting unchecked fs [ 128.088560][ T6929] NILFS (loop1): recovery complete [ 128.127973][ T6933] loop0: detected capacity change from 0 to 4096 [ 128.131793][ T6040] udevd[6040]: incorrect nilfs2 checksum on /dev/loop1 [ 128.147209][ T6934] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.202818][ T6937] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.218518][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.434123][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 128.466630][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.489987][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.532592][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.552950][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.571980][ T5867] usb 3-1: Product: syz [ 128.612896][ T5867] usb 3-1: Manufacturer: syz [ 128.618752][ T5867] usb 3-1: SerialNumber: syz [ 128.679052][ T6944] loop1: detected capacity change from 0 to 4096 [ 128.877861][ T5867] usb 3-1: 0:2 : does not exist [ 128.895336][ T5867] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 128.958343][ T5867] usb 3-1: USB disconnect, device number 3 [ 129.076877][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.399847][ T6953] loop0: detected capacity change from 0 to 32768 [ 129.442410][ T1095] JFS: metapage_get_blocks failed [ 129.450598][ T6953] JFS: metapage_get_blocks failed [ 129.456640][ T112] blkno = 50030, nblocks = 1 [ 129.461401][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 129.461401][ T112] [ 129.475745][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 129.480988][ T1095] JFS: metapage_get_blocks failed [ 129.483573][ T112] blkno = 5002c, nblocks = 4 [ 129.493397][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 129.493397][ T112] [ 129.515181][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 129.544073][ T112] BUG: Bad page state in process jfsCommit pfn:3015a [ 129.558247][ T112] page:ffffea0000c05680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x3015a [ 129.572376][ T112] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 129.590711][ T112] page_type: 0xffffffff() [ 129.596184][ T112] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 129.606061][ T112] raw: 0000000000050030 ffff888075593ba0 00000000ffffffff 0000000000000000 [ 129.615750][ T112] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 129.623095][ T112] page_owner tracks the page as allocated [ 129.643985][ T112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6953, tgid 6952 (syz.0.461), ts 129435328952, free_ts 117152537458 [ 129.672494][ T112] post_alloc_hook+0x1c1/0x200 [ 129.679591][ T112] get_page_from_freelist+0x1951/0x19e0 [ 129.700351][ T112] __alloc_pages+0x1f0/0x460 [ 129.709415][ T112] folio_alloc+0x1e/0x30 [ 129.713733][ T112] filemap_alloc_folio+0xdf/0x490 [ 129.720558][ T112] __filemap_get_folio+0x3ea/0xbb0 [ 129.730113][ T112] pagecache_get_page+0x2a/0x250 [ 129.739961][ T112] __get_metapage+0x2a8/0xfa0 [ 129.748405][ T112] dtSplitRoot+0x203/0x16b0 [ 129.753276][ T112] dtInsert+0xed5/0x5de0 [ 129.758777][ T112] jfs_mkdir+0x75c/0xac0 [ 129.763083][ T112] vfs_mkdir+0x296/0x440 [ 129.771226][ T112] do_mkdirat+0x1dc/0x450 [ 129.775747][ T112] __x64_sys_mkdirat+0x89/0xa0 [ 129.780560][ T112] do_syscall_64+0x55/0xa0 [ 129.790683][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.797068][ T112] page last free stack trace: [ 129.801810][ T112] free_unref_page_prepare+0x7b2/0x8c0 [ 129.809625][ T112] free_unref_page+0x32/0x2e0 [ 129.819059][ T112] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 129.825222][ T112] __apply_to_page_range+0x860/0xdd0 [ 129.831659][ T112] kasan_release_vmalloc+0x97/0xb0 [ 129.846202][ T112] __purge_vmap_area_lazy+0xfa7/0x1af0 [ 129.851853][ T112] drain_vmap_area_work+0x40/0xd0 [ 129.860778][ T112] process_scheduled_works+0xa5d/0x15d0 [ 129.867882][ T112] worker_thread+0xa55/0xfc0 [ 129.872618][ T112] kthread+0x2fa/0x390 [ 129.892299][ T6960] loop2: detected capacity change from 0 to 4096 [ 129.901580][ T112] ret_from_fork+0x48/0x80 [ 129.920492][ T6961] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.933555][ T112] ret_from_fork_asm+0x11/0x20 [ 129.943114][ T112] Modules linked in: [ 129.956408][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 129.963665][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.973779][ T112] Call Trace: [ 129.977105][ T112] [ 129.980112][ T112] dump_stack_lvl+0x18c/0x250 [ 129.984857][ T112] ? show_regs_print_info+0x20/0x20 [ 129.990115][ T112] ? swiotlb_print_info+0x70/0x70 [ 129.995209][ T112] ? dump_page+0xba3/0x14a0 [ 129.999771][ T112] bad_page+0x14b/0x170 [ 130.003976][ T112] free_unref_page_prepare+0x85f/0x8c0 [ 130.009502][ T112] free_unref_page+0x32/0x2e0 [ 130.014231][ T112] ? __folio_put+0xef/0x210 [ 130.018780][ T112] txUnlock+0x27e/0xcb0 [ 130.022988][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 130.028239][ T112] jfs_lazycommit+0x56e/0xa70 [ 130.032969][ T112] ? txFreelock+0x5a0/0x5a0 [ 130.037521][ T112] ? do_task_dead+0xd0/0xd0 [ 130.042070][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 130.047044][ T112] kthread+0x2fa/0x390 [ 130.051144][ T112] ? txFreelock+0x5a0/0x5a0 [ 130.055684][ T112] ? kthread_blkcg+0xd0/0xd0 [ 130.060295][ T112] ret_from_fork+0x48/0x80 [ 130.064746][ T112] ? kthread_blkcg+0xd0/0xd0 [ 130.069371][ T112] ret_from_fork_asm+0x11/0x20 [ 130.074179][ T112] [ 130.117688][ T112] Disabling lock debugging due to kernel taint [ 130.131361][ T112] page:ffffea0000c05680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x3015a [ 130.145972][ T112] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 130.156905][ T112] page_type: 0xffffffff() [ 130.161362][ T112] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 130.171304][ T112] raw: 0000000000050030 ffff888075593ba0 00000000ffffffff 0000000000000000 [ 130.180930][ T112] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 130.193784][ T112] page_owner tracks the page as allocated [ 130.202622][ T112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6953, tgid 6952 (syz.0.461), ts 129435328952, free_ts 117152537458 [ 130.223000][ T112] post_alloc_hook+0x1c1/0x200 [ 130.228326][ T112] get_page_from_freelist+0x1951/0x19e0 [ 130.235973][ T112] __alloc_pages+0x1f0/0x460 [ 130.240675][ T112] folio_alloc+0x1e/0x30 [ 130.247426][ T112] filemap_alloc_folio+0xdf/0x490 [ 130.252575][ T112] __filemap_get_folio+0x3ea/0xbb0 [ 130.260474][ T112] pagecache_get_page+0x2a/0x250 [ 130.265733][ T112] __get_metapage+0x2a8/0xfa0 [ 130.270525][ T112] dtSplitRoot+0x203/0x16b0 [ 130.277021][ T112] dtInsert+0xed5/0x5de0 [ 130.281381][ T112] jfs_mkdir+0x75c/0xac0 [ 130.286014][ T112] vfs_mkdir+0x296/0x440 [ 130.290394][ T112] do_mkdirat+0x1dc/0x450 [ 130.298371][ T112] __x64_sys_mkdirat+0x89/0xa0 [ 130.303268][ T112] do_syscall_64+0x55/0xa0 [ 130.309834][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.317697][ T112] page last free stack trace: [ 130.322574][ T112] free_unref_page_prepare+0x7b2/0x8c0 [ 130.329045][ T112] free_unref_page+0x32/0x2e0 [ 130.333856][ T112] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 130.340024][ T112] __apply_to_page_range+0x860/0xdd0 [ 130.347259][ T112] kasan_release_vmalloc+0x97/0xb0 [ 130.354687][ T112] __purge_vmap_area_lazy+0xfa7/0x1af0 [ 130.360286][ T112] drain_vmap_area_work+0x40/0xd0 [ 130.368092][ T112] process_scheduled_works+0xa5d/0x15d0 [ 130.373843][ T112] worker_thread+0xa55/0xfc0 [ 130.378829][ T112] kthread+0x2fa/0x390 [ 130.383061][ T112] ret_from_fork+0x48/0x80 [ 130.387914][ T112] ret_from_fork_asm+0x11/0x20 [ 130.393091][ T112] ------------[ cut here ]------------ [ 130.398623][ T112] kernel BUG at include/linux/mm.h:1458! [ 130.404444][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 130.410571][ T112] CPU: 0 PID: 112 Comm: jfsCommit Tainted: G B syzkaller #0 [ 130.419269][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.429356][ T112] RIP: 0010:put_metapage+0x253/0x340 [ 130.434667][ T112] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81 [ 130.454307][ T112] RSP: 0018:ffffc90002cc7cc0 EFLAGS: 00010246 [ 130.460392][ T112] RAX: 4b44a26bcf6abd00 RBX: ffff888075593ba0 RCX: 4b44a26bcf6abd00 [ 130.468381][ T112] RDX: 0000000000000000 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80 [ 130.476372][ T112] RBP: 000000000000007f R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 130.484365][ T112] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff888075593bc8 [ 130.492351][ T112] R13: ffffea0000c056b4 R14: 1ffff1100eab2779 R15: 1ffff1100eab2786 [ 130.500342][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 130.509287][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.515909][ T112] CR2: 00007f1ecd987c40 CR3: 0000000021cf7000 CR4: 00000000003506f0 [ 130.523899][ T112] Call Trace: [ 130.527206][ T112] [ 130.530160][ T112] txUnlock+0x427/0xcb0 [ 130.534355][ T112] jfs_lazycommit+0x56e/0xa70 [ 130.539080][ T112] ? txFreelock+0x5a0/0x5a0 [ 130.543606][ T112] ? do_task_dead+0xd0/0xd0 [ 130.548128][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 130.553099][ T112] kthread+0x2fa/0x390 [ 130.557216][ T112] ? txFreelock+0x5a0/0x5a0 [ 130.561759][ T112] ? kthread_blkcg+0xd0/0xd0 [ 130.566375][ T112] ret_from_fork+0x48/0x80 [ 130.570819][ T112] ? kthread_blkcg+0xd0/0xd0 [ 130.575435][ T112] ret_from_fork_asm+0x11/0x20 [ 130.580254][ T112] [ 130.583296][ T112] Modules linked in: [ 130.592802][ T112] ---[ end trace 0000000000000000 ]--- [ 130.598433][ T112] RIP: 0010:put_metapage+0x253/0x340 [ 130.603787][ T112] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81 [ 130.625014][ T112] RSP: 0018:ffffc90002cc7cc0 EFLAGS: 00010246 [ 130.631115][ T112] RAX: 4b44a26bcf6abd00 RBX: ffff888075593ba0 RCX: 4b44a26bcf6abd00 [ 130.639240][ T112] RDX: 0000000000000000 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80 [ 130.647681][ T112] RBP: 000000000000007f R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 130.656887][ T112] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff888075593bc8 [ 130.664928][ T112] R13: ffffea0000c056b4 R14: 1ffff1100eab2779 R15: 1ffff1100eab2786 [ 130.672927][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 130.681945][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.688776][ T112] CR2: 00007f1ecd987c40 CR3: 0000000021cf7000 CR4: 00000000003506f0 [ 130.696899][ T112] Kernel panic - not syncing: Fatal exception [ 130.703532][ T112] Kernel Offset: disabled [ 130.707865][ T112] Rebooting in 86400 seconds..