last executing test programs: 3m16.162729999s ago: executing program 0 (id=3908): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0xfffffffe, 0x0}, 0x10) 3m16.025384862s ago: executing program 0 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x22eb, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 3m15.622008002s ago: executing program 0 (id=3915): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m15.418451856s ago: executing program 0 (id=3919): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 3m15.138710493s ago: executing program 0 (id=3922): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='*', 0x1) 3m14.995638147s ago: executing program 0 (id=3925): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 2m59.622335792s ago: executing program 32 (id=3925): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 2m14.942327033s ago: executing program 2 (id=4200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002e40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) 2m14.545199733s ago: executing program 2 (id=4205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaab72693b59bc786dd6000000000740601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="c6d035f9c7"], 0x0) 2m14.402656127s ago: executing program 2 (id=4207): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 2m14.2385323s ago: executing program 2 (id=4209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x9901) move_mount(r0, &(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000003c0)='./file0/../file0\x00', 0x161) 2m13.973379026s ago: executing program 2 (id=4211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x40000003}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) 2m13.526460197s ago: executing program 2 (id=4213): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 2m12.99495522s ago: executing program 33 (id=4213): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 7.99743963s ago: executing program 5 (id=5030): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00001d00000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000de300000045", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.598628217s ago: executing program 5 (id=5053): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x12123, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 4.947087132s ago: executing program 5 (id=5057): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.488587357s ago: executing program 4 (id=5074): r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x1b04) 2.997586789s ago: executing program 4 (id=5079): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2.836619142s ago: executing program 1 (id=5080): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}]}]}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) 2.746572625s ago: executing program 3 (id=5081): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x3e}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.746333315s ago: executing program 4 (id=5082): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000580)="34d4ec46370523e08902a8e24c118992db2b4377aa404eb702816ffc737af86c3a114c0e7278aee3c15e274bbc8c09161f8c8c9f3a8ac85b0152cca0e2b4b73f37bebc0a645109344ed2d0ae5cc6d203e9cf4671297e2a47a157975b53328b3d78000000000000000000000000000000000000000000afc8ddd1a4df5ef0ba8d058ab671500b7d2ec942103e9c1eca6426d839d02eb06c5634cfddf40e21b71dbe1c0d17eb306c0f7d3840f9351db382dec5961e6df7fe7a0000000007e4e21401dfd4c858d24b87f543e99c40b0e1c6e2a2000000000000000000", 0xfe7f) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000205, 0x0, 0x0, 0x5, 0xc, "fee8a2ab7800e87aaeccb2ce3a2000001ea89fe2b7fb0000e60080b8785d960001000000000200f97a640d46a73867000000000000000800", "28094cf00000000000004ad54a1d875397bdc0d8529e01177d2d4589d4792961ac0000084c640000000008001900", "9003001c550a001d00e6fffffff0ffffd39600", [0xfffffffffffff801, 0x8009]}}) 2.54232199s ago: executing program 1 (id=5083): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x90, &(0x7f0000000980)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x0, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo") ptrace$setregs(0xd, r0, 0x2008, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 2.51318781s ago: executing program 3 (id=5084): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x2cb, 0x3, {}, {r2, r3/1000+10000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 2.298554225s ago: executing program 4 (id=5085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000540)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a3c7f", 0x23}, {&(0x7f0000000300)="b0c6", 0x2}], 0x3}, 0x20008b88) 2.275119556s ago: executing program 3 (id=5086): unshare(0x20000400) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 2.12487787s ago: executing program 1 (id=5087): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r0, 0x0) close(0x3) 2.069376451s ago: executing program 3 (id=5088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1.998666253s ago: executing program 4 (id=5089): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 1.856878166s ago: executing program 1 (id=5090): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.763987068s ago: executing program 5 (id=5091): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1.68224149s ago: executing program 1 (id=5092): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0) 1.634660221s ago: executing program 3 (id=5100): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/45, 0x2d}], 0x1, 0x80000000, 0xffffff7c) 1.571280883s ago: executing program 5 (id=5093): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ublk_bdev(0x0, 0x0, 0x408102) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) 1.547735813s ago: executing program 3 (id=5094): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f00000014c0)="5c64e9d542f372633819fe534e7430bbf282dfd6b128acf2d6099cdb18c913d22f7d565ac2e8898818824d19", 0x2c) 1.138779873s ago: executing program 5 (id=5095): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 128.587857ms ago: executing program 4 (id=5096): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2800411, &(0x7f00000003c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000700)="$eJzsVU9rGkEU/83uuKstlF5bCj20tHqormtb2lN7afED9FwiZmMka/64QqIYMCe/Ry5+kUA+Qg4JuZhDCORg7mHDzLzdjAEPgYRomB/o7/femzdvnoNvVqOtyAVwPenX8RsSNl7hmDFwAO+Z8v11FV84iotkn3PFBfLvE58QR93eWi0Mg/ZdwWaH7isebKP5Fv8fYefDl+qayCMuU4g3c9LyQguOGSH6y+DJT/jsxa35a8/CpZxlR5N+XYglAHEcx0ByH2D6GhvAQboGeMvlh9mI0zUiUxifAZQ6rc1S1O19abZqjaARrPt+5bv31fO++aWVZhh46ptpJSyqK7gAQMzUnBbPADjNqTUvMA2mHY3iTM91tOGc/zCdazGe5iacpZjIpdmO3Z9/uv/wSca2BywmaL+YbKkKBhtcGmWunU/1lpWBYn0jXB6CQbwrsQt4I3BYSdoYmcQQqakRVH4MkmJD4o/EVeIR8Zg4ebOSt4jLHc7Iyg8ABzu1TqddFi6lUp+f+vzXaWWLql450829c2FgYGBgYGBgsGC4CQAA//96Ul4h") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x5) 0s ago: executing program 1 (id=5097): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14f803, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8641) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0xde9, 0x5, 0x0, 0x0, 0x16, 0xd, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x7]}}) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) kernel console output (not intermixed with test programs): T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 655.522384][T17430] BTRFS warning (device loop3): couldn't read tree root [ 655.534202][T17430] BTRFS warning (device loop3): try to load backup roots slot 3 [ 655.582218][T17430] BTRFS info (device loop3): enabling ssd optimizations [ 655.598860][T17430] BTRFS info (device loop3): auto enabling async discard [ 655.624118][T17430] BTRFS info (device loop3): rebuilding free space tree [ 655.663686][T17430] BTRFS info (device loop3): checking UUID tree [ 655.809591][ T27] audit: type=1800 audit(1785549962.305:166): pid=17430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4280" name="file2" dev="loop3" ino=258 res=0 errno=0 [ 655.830288][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.871577][T17464] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4274'. [ 655.907756][T17464] gretap0: entered promiscuous mode [ 655.941178][T17466] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4274'. [ 656.006914][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 656.012389][T17466] 0ªî{X¹¦: renamed from gretap0 [ 656.071680][T17466] 0ªî{X¹¦: left promiscuous mode [ 656.079034][T17468] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4285'. [ 656.102690][T17466] 0ªî{X¹¦: entered allmulticast mode [ 656.145817][T17466] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 657.304315][T17480] loop5: detected capacity change from 0 to 2048 [ 657.371260][T17480] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 657.439093][T17480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.816862][T17498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4290'. [ 658.655894][T17521] loop3: detected capacity change from 0 to 8192 [ 658.680705][T17529] fuse: Bad value for 'fd' [ 658.852080][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 659.058417][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 659.079197][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 659.114310][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.134734][ T8] usb 5-1: Product: syz [ 659.139139][ T8] usb 5-1: Manufacturer: syz [ 659.163569][ T8] usb 5-1: SerialNumber: syz [ 659.180896][T17541] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4308'. [ 659.196937][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 659.207179][ T8] usb 5-1: config 0 descriptor?? [ 659.242501][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 660.072344][T17561] loop3: detected capacity change from 0 to 256 [ 660.303394][ T8] gspca_sonixj: reg_w1 err -71 [ 660.421793][ T8] sonixj: probe of 5-1:0.0 failed with error -71 [ 660.440732][ T8] usb 5-1: USB disconnect, device number 7 [ 660.990975][T17580] loop3: detected capacity change from 0 to 256 [ 661.055751][T17580] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 661.128661][T17580] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 661.173770][T17585] bridge1: entered promiscuous mode [ 661.179103][T17585] bridge1: entered allmulticast mode [ 661.205208][T17585] team0: Port device bridge1 added [ 661.225562][T17586] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4326'. [ 661.285487][T17585] bridge0: port 3(team0) entered blocking state [ 661.293705][T17588] loop5: detected capacity change from 0 to 64 [ 661.303546][T17585] bridge0: port 3(team0) entered disabled state [ 661.310027][T17585] team0: entered allmulticast mode [ 661.324866][T17585] team_slave_0: entered allmulticast mode [ 661.364854][T17585] team_slave_1: entered allmulticast mode [ 661.382966][T17585] team0: entered promiscuous mode [ 661.388207][T17585] team_slave_0: entered promiscuous mode [ 661.396944][T17585] team_slave_1: entered promiscuous mode [ 661.423688][T17585] bridge0: port 3(team0) entered blocking state [ 661.430160][T17585] bridge0: port 3(team0) entered forwarding state [ 661.438446][T17588] bio_check_eod: 2 callbacks suppressed [ 661.438457][T17588] syz.5.4327: attempt to access beyond end of device [ 661.438457][T17588] loop5: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 661.478839][T17588] syz.5.4327: attempt to access beyond end of device [ 661.478839][T17588] loop5: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 661.661405][T17588] syz.5.4327: attempt to access beyond end of device [ 661.661405][T17588] loop5: rw=34817, sector=76, nr_sectors = 2041 limit=64 [ 661.849240][T17588] syz.5.4327: attempt to access beyond end of device [ 661.849240][T17588] loop5: rw=34817, sector=2117, nr_sectors = 2048 limit=64 [ 661.898907][T17588] syz.5.4327: attempt to access beyond end of device [ 661.898907][T17588] loop5: rw=34817, sector=4165, nr_sectors = 6 limit=64 [ 661.932109][T17588] syz.5.4327: attempt to access beyond end of device [ 661.932109][T17588] loop5: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 661.985861][T17588] syz.5.4327: attempt to access beyond end of device [ 661.985861][T17588] loop5: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 662.018199][ T5763] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 662.042354][T17588] syz.5.4327: attempt to access beyond end of device [ 662.042354][T17588] loop5: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 662.073837][T17588] syz.5.4327: attempt to access beyond end of device [ 662.073837][T17588] loop5: rw=34817, sector=4388, nr_sectors = 29 limit=64 [ 662.096061][T17588] syz.5.4327: attempt to access beyond end of device [ 662.096061][T17588] loop5: rw=34817, sector=4418, nr_sectors = 32 limit=64 [ 662.249283][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 662.277775][ T5763] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 662.292215][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.301583][ T5763] usb 5-1: Product: syz [ 662.305792][ T5763] usb 5-1: Manufacturer: syz [ 662.310644][ T5763] usb 5-1: SerialNumber: syz [ 662.337431][ T5763] usb 5-1: config 0 descriptor?? [ 662.589027][T17619] loop3: detected capacity change from 0 to 256 [ 662.781500][ T5763] airspy 5-1:0.0: Board ID: 00 [ 662.787948][ T5763] airspy 5-1:0.0: Firmware version: [ 663.186485][ T5763] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 663.213836][ T5763] airspy 5-1:0.0: Registered as swradio24 [ 663.225432][ T5763] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 663.238576][ T5763] usb 5-1: USB disconnect, device number 8 [ 663.263610][T17629] fuseblk: Bad value for 'fd' [ 663.498023][T17637] bridge1: entered promiscuous mode [ 663.531480][T17637] bridge1: entered allmulticast mode [ 663.584800][T17637] team0: Port device bridge1 added [ 663.616022][T17640] loop5: detected capacity change from 0 to 128 [ 663.643109][T17640] EXT4-fs: Ignoring removed mblk_io_submit option [ 663.663858][T17639] bridge0: port 1(team0) entered blocking state [ 663.667626][T17640] EXT4-fs (loop5): unsupported inode size: 0 [ 663.670455][T17639] bridge0: port 1(team0) entered disabled state [ 663.691635][T17640] EXT4-fs (loop5): blocksize: 1024 [ 663.766683][T17639] team0: entered allmulticast mode [ 663.798732][T17639] team_slave_0: entered allmulticast mode [ 663.817389][T17639] team_slave_1: entered allmulticast mode [ 663.837768][T17639] team0: entered promiscuous mode [ 663.848557][T17639] team_slave_0: entered promiscuous mode [ 663.858579][T17639] team_slave_1: entered promiscuous mode [ 663.869092][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.109584][T17653] loop3: detected capacity change from 0 to 512 [ 664.143687][T17650] loop4: detected capacity change from 0 to 4096 [ 664.213649][T17653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.338766][T17664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.403730][T17666] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 664.488309][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.551332][T15515] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 664.763289][T15515] usb 6-1: config 0 has no interfaces? [ 664.768854][T15515] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 664.796256][T15515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.822054][T15515] usb 6-1: config 0 descriptor?? [ 665.080127][ T8] usb 6-1: USB disconnect, device number 2 [ 665.261294][ T5817] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 665.461859][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 665.488286][ T5817] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 665.511176][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.534210][ T5817] usb 4-1: Product: syz [ 665.541991][ T5817] usb 4-1: Manufacturer: syz [ 665.546645][ T5817] usb 4-1: SerialNumber: syz [ 665.577923][ T5817] usb 4-1: config 0 descriptor?? [ 665.703852][T17686] loop4: detected capacity change from 0 to 32768 [ 665.757988][T17686] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 666.025167][ T5817] airspy 4-1:0.0: Board ID: 00 [ 666.040913][ T5817] airspy 4-1:0.0: Firmware version: [ 666.070640][T17708] loop5: detected capacity change from 0 to 512 [ 666.205734][T17686] XFS (loop4): Ending clean mount [ 666.236580][T17708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.250199][T17686] XFS (loop4): Quotacheck needed: Please wait. [ 666.327423][T17708] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.429377][ T5817] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 666.451745][ T5817] airspy 4-1:0.0: Registered as swradio24 [ 666.462680][ T5817] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 666.480325][ T5817] usb 4-1: USB disconnect, device number 36 [ 666.590780][T17686] XFS (loop4): Quotacheck: Done. [ 666.627872][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.981260][T17726] loop5: detected capacity change from 0 to 256 [ 667.048921][T16281] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 667.294098][T17730] loop5: detected capacity change from 0 to 7 [ 667.361678][T17730] Dev loop5: unable to read RDB block 7 [ 667.367336][T17730] loop5: unable to read partition table [ 667.404809][T17730] loop5: partition table beyond EOD, truncated [ 667.431216][T17730] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.651137][ T5817] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 667.866958][ T5817] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 667.886799][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.911058][ T5817] usb 4-1: Product: syz [ 667.921049][ T5817] usb 4-1: Manufacturer: syz [ 667.929366][ T5817] usb 4-1: SerialNumber: syz [ 667.947554][ T5817] usb 4-1: config 0 descriptor?? [ 668.020106][T17742] loop5: detected capacity change from 0 to 1024 [ 668.050703][T17742] EXT4-fs: Ignoring removed bh option [ 668.097770][T17742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.188965][ T5817] usb 4-1: USB disconnect, device number 37 [ 668.253645][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.414522][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.641041][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 669.845913][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 669.867217][ T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 669.890853][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.898908][ T8] usb 6-1: Product: syz [ 669.911288][T17791] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 669.926743][ T8] usb 6-1: Manufacturer: syz [ 669.931785][ T8] usb 6-1: SerialNumber: syz [ 669.954870][ T8] usb 6-1: config 0 descriptor?? [ 670.416495][ T8] airspy 6-1:0.0: Board ID: 00 [ 670.424003][ T8] airspy 6-1:0.0: Firmware version: [ 670.430171][T17806] loop4: detected capacity change from 0 to 256 [ 670.689219][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4381'. [ 670.758753][T17810] bond_slave_0: entered promiscuous mode [ 670.765725][T17810] bond_slave_1: entered promiscuous mode [ 670.793556][T17810] macvlan2: entered promiscuous mode [ 670.799022][T17810] bond0: entered promiscuous mode [ 670.819326][T17810] bond1: entered promiscuous mode [ 670.833374][ T8] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e [ 670.845644][T17810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 670.853119][ T8] airspy 6-1:0.0: Registered as swradio24 [ 670.859943][ T8] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 670.895439][ T8] usb 6-1: USB disconnect, device number 3 [ 670.901636][ T5818] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 671.100866][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 671.114508][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.144501][ T5818] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 671.160954][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.198338][ T5818] usb 4-1: config 0 descriptor?? [ 671.429556][ T5818] usb 4-1: USB disconnect, device number 38 [ 671.639306][T17832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4395'. [ 671.863276][T17840] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 672.667841][T17871] loop3: detected capacity change from 0 to 4096 [ 672.680692][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 672.756763][T17878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 672.809088][T17871] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 672.819788][ T27] audit: type=1800 audit(1785549979.305:167): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4400" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 672.851732][T17871] Remounting filesystem read-only [ 672.859175][T17871] NILFS (loop3): mounting fs with errors [ 672.868871][T17881] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 672.894708][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.942472][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.980018][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.030961][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.065994][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.092470][ T8] usb 5-1: config 0 descriptor?? [ 673.603025][ T8] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 673.660965][ T8] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 673.721126][T17897] loop3: detected capacity change from 0 to 256 [ 673.872591][ T788] usb 5-1: USB disconnect, device number 9 [ 673.892603][T17899] fido_id[17899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 674.475849][T17908] loop4: detected capacity change from 0 to 1764 [ 674.531524][ T6657] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 674.775880][T17915] loop5: detected capacity change from 0 to 7 [ 674.805462][T17915] Dev loop5: unable to read RDB block 7 [ 674.821661][T17915] loop5: unable to read partition table [ 674.838015][T17915] loop5: partition table beyond EOD, truncated [ 674.857751][T17915] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 676.450327][ T788] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 676.641397][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 676.699988][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.721488][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.735518][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.750511][ T788] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 676.759611][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.788471][ T788] usb 4-1: config 0 descriptor?? [ 677.140346][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 677.236167][T17956] loop3: detected capacity change from 0 to 8 [ 677.292399][ T6657] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.306152][ T788] microsoft 0003:045E:07DA.001D: unknown main item tag 0x2 [ 677.321472][ T788] microsoft 0003:045E:07DA.001D: item fetching failed at offset 27/34 [ 677.331303][ T788] microsoft 0003:045E:07DA.001D: parse failed [ 677.338279][ T788] microsoft: probe of 0003:045E:07DA.001D failed with error -22 [ 677.356310][ T5818] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 677.380814][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.402998][ T5818] usb 5-1: Product: syz [ 677.407223][ T5818] usb 5-1: Manufacturer: syz [ 677.421758][ T5818] usb 5-1: SerialNumber: syz [ 677.438175][ T5818] usb 5-1: config 0 descriptor?? [ 677.485463][T17967] loop5: detected capacity change from 0 to 32768 [ 677.512681][T17967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.4434 (17967) [ 677.547885][T17967] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 677.576760][T17967] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 677.592782][T17967] BTRFS info (device loop5): setting nodatacow, compression disabled [ 677.605520][T17967] BTRFS info (device loop5): turning on flush-on-commit [ 677.614545][ T788] usb 4-1: USB disconnect, device number 39 [ 677.634842][T17967] BTRFS info (device loop5): trying to use backup root at mount time [ 677.655931][T17967] BTRFS info (device loop5): max_inline at 0 [ 677.665979][T17967] BTRFS info (device loop5): using free space tree [ 677.736072][ T5818] usb 5-1: USB disconnect, device number 10 [ 677.783242][ T11] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 677.828750][T17967] BTRFS error (device loop5): failed to load root extent [ 677.836425][T17967] BTRFS warning (device loop5): try to load backup roots slot 1 [ 677.845759][ T3465] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 677.867290][T17967] BTRFS warning (device loop5): couldn't read tree root [ 677.875194][T17967] BTRFS warning (device loop5): try to load backup roots slot 2 [ 677.894747][ T1142] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 677.905396][T17967] BTRFS warning (device loop5): couldn't read tree root [ 677.918808][T17967] BTRFS warning (device loop5): try to load backup roots slot 3 [ 677.947702][T17967] BTRFS info (device loop5): enabling ssd optimizations [ 677.956027][T17967] BTRFS info (device loop5): auto enabling async discard [ 677.964464][T17967] BTRFS info (device loop5): rebuilding free space tree [ 677.983634][T17967] BTRFS info (device loop5): checking UUID tree [ 678.008837][ T27] audit: type=1800 audit(1785549984.505:168): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4434" name="file1" dev="loop5" ino=257 res=0 errno=0 [ 678.088465][T17128] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 678.261930][ T6657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (6657) [ 678.723294][T18006] loop4: detected capacity change from 0 to 256 [ 678.762065][T18009] 9pnet_fd: Insufficient options for proto=fd [ 679.602828][T18010] loop5: detected capacity change from 0 to 32768 [ 679.637049][T18010] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 679.680182][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 679.777379][T18010] XFS (loop5): Ending clean mount [ 679.811746][T18010] XFS (loop5): Quotacheck needed: Please wait. [ 679.870592][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 679.878692][ T5818] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 679.893424][ T5818] usb 5-1: config 2 has no interface number 0 [ 679.910207][ T5818] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 679.913605][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.942861][T18010] XFS (loop5): Quotacheck: Done. [ 679.949364][ T5818] usb 5-1: config 2 interface 88 has no altsetting 0 [ 679.978596][ T5818] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 680.003418][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.018638][ T5818] usb 5-1: Product: syz [ 680.026603][ T5818] usb 5-1: Manufacturer: syz [ 680.041168][ T5818] usb 5-1: SerialNumber: syz [ 680.064099][T18025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 680.320777][T18025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 680.394948][T18029] loop3: detected capacity change from 0 to 32768 [ 680.462708][T18029] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 680.467306][T17128] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 680.683994][T18029] XFS (loop3): Ending clean mount [ 680.708753][T18029] XFS (loop3): Quotacheck needed: Please wait. [ 680.925430][T18029] XFS (loop3): Quotacheck: Done. [ 681.172120][ T5818] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 681.186584][ T5818] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 681.199386][ T5818] asix: probe of 5-1:2.88 failed with error -71 [ 681.211459][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 681.226413][ T5818] usb 5-1: USB disconnect, device number 11 [ 681.248294][T18051] loop5: detected capacity change from 0 to 2048 [ 681.351913][T18051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.465742][T18051] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 681.558976][T18051] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 681.595307][T18051] EXT4-fs (loop5): This should not happen!! Data will be lost [ 681.595307][T18051] [ 681.620164][T18051] EXT4-fs (loop5): Total free blocks count 0 [ 681.626306][T18051] EXT4-fs (loop5): Free/Dirty block details [ 681.633290][T18051] EXT4-fs (loop5): free_blocks=2415919104 [ 681.640562][T18051] EXT4-fs (loop5): dirty_blocks=32 [ 681.645951][T18051] EXT4-fs (loop5): Block reservation details [ 681.676441][T18051] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 681.692245][T18057] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 681.846043][ T5818] kernel write not supported for file /dummy_udc (pid: 5818 comm: kworker/0:4) [ 682.347825][T18071] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 682.357331][T18071] syzkaller0: persist enabled [ 682.363149][T18071] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 682.369202][T18071] syzkaller0: persist enabled [ 682.758357][T18083] sctp: [Deprecated]: syz.4.4464 (pid 18083) Use of int in max_burst socket option. [ 682.758357][T18083] Use struct sctp_assoc_value instead [ 684.129733][ T5818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 684.325268][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.336823][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.346983][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.361543][ T5818] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.371753][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.384474][ T5818] usb 6-1: config 0 descriptor?? [ 684.833985][ T5818] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 684.857025][ T5818] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 685.111590][ T5817] usb 6-1: USB disconnect, device number 4 [ 685.937713][T18134] loop5: detected capacity change from 0 to 256 [ 685.960963][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.968682][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.980513][ T1291] clip:clip_start_xmit: skb_dst(skb) == NULL [ 687.194249][T18169] sctp: [Deprecated]: syz.1.4507 (pid 18169) Use of int in max_burst socket option. [ 687.194249][T18169] Use struct sctp_assoc_value instead [ 687.302658][T18173] loop4: detected capacity change from 0 to 764 [ 687.637602][T18181] loop4: detected capacity change from 0 to 4096 [ 687.684560][T18182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.722961][ T27] audit: type=1800 audit(1785549994.224:169): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4506" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 687.732643][T18181] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 687.760858][T18181] Remounting filesystem read-only [ 687.783497][T18181] NILFS (loop4): mounting fs with errors [ 688.030724][T14850] Bluetooth: hci1: command 0x0406 tx timeout [ 688.301964][T18194] loop5: detected capacity change from 0 to 1024 [ 688.855545][T18199] loop4: detected capacity change from 0 to 32768 [ 688.871957][T18199] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 688.880587][T18199] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 688.901836][T18199] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 688.919318][ T5818] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 688.943828][ T5818] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 688.970704][T18205] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 688.976804][T18205] syzkaller0: persist enabled [ 688.982757][T18205] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 688.988762][T18205] syzkaller0: persist enabled [ 689.179877][ T5818] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 236ms [ 689.216283][T18208] loop3: detected capacity change from 0 to 512 [ 689.223289][ T5818] gfs2: fsid=syz:syz.0: jid=0: Done [ 689.228609][T18199] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 689.323883][T18208] EXT4-fs (loop3): Test dummy encryption mode enabled [ 689.360109][T18208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 689.401169][T18208] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.4517: bad orphan inode 131083 [ 689.451003][T18208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.579212][ T788] psmouse serio2: Failed to reset mouse on : -5 [ 689.599945][T18199] gfs2: fsid=syz:syz.0: found 1 quota changes [ 689.702482][T18199] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 689.711992][T18199] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 689.722280][T18199] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 689.732292][T18199] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 689.743293][T18199] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 689.760874][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.906416][T16281] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 689.948297][T16281] CPU: 1 PID: 16281 Comm: syz-executor Not tainted syzkaller #0 [ 689.956000][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.966146][T16281] Call Trace: [ 689.970358][T16281] [ 689.973351][T16281] dump_stack_lvl+0x18c/0x250 [ 689.978126][T16281] ? show_regs_print_info+0x20/0x20 [ 689.983474][T16281] ? load_image+0x420/0x420 [ 689.988053][T16281] ? do_raw_spin_unlock+0x121/0x230 [ 689.993408][T16281] gfs2_assert_warn_i+0x18b/0x2c0 [ 689.998510][T16281] gfs2_qd_dispose+0x488/0x580 [ 690.003435][T16281] gfs2_quota_cleanup+0x40d/0x720 [ 690.008550][T16281] ? gfs2_make_fs_ro+0x17e/0x320 [ 690.013541][T16281] ? spin_lock_bucket+0x150/0x150 [ 690.018618][T16281] ? __might_sleep+0xe0/0xe0 [ 690.023289][T16281] ? down_write+0x16e/0x200 [ 690.027838][T16281] ? down_read_killable+0x340/0x340 [ 690.033090][T16281] ? gfs2_quota_sync+0x595/0x5a0 [ 690.038090][T16281] gfs2_make_fs_ro+0x2aa/0x320 [ 690.042902][T16281] ? gfs2_put_super+0x1db/0x930 [ 690.047796][T16281] ? gfs2_dinode_out+0xb10/0xb10 [ 690.052778][T16281] ? do_raw_spin_lock+0x11f/0x2b0 [ 690.057857][T16281] ? __rwlock_init+0x150/0x150 [ 690.062712][T16281] ? do_raw_spin_unlock+0x121/0x230 [ 690.067967][T16281] gfs2_put_super+0x224/0x930 [ 690.072693][T16281] ? gfs2_evict_inode+0x13c0/0x13c0 [ 690.077933][T16281] generic_shutdown_super+0x134/0x2b0 [ 690.083352][T16281] kill_block_super+0x44/0x90 [ 690.088084][T16281] deactivate_locked_super+0x97/0x100 [ 690.093509][T16281] cleanup_mnt+0x3d7/0x460 [ 690.097992][T16281] task_work_run+0x1d4/0x260 [ 690.102648][T16281] ? task_work_cancel+0x220/0x220 [ 690.107744][T16281] ? exit_to_user_mode_loop+0x3b/0x110 [ 690.113264][T16281] exit_to_user_mode_loop+0xe6/0x110 [ 690.118607][T16281] exit_to_user_mode_prepare+0xee/0x180 [ 690.124237][T16281] syscall_exit_to_user_mode+0x1a/0x50 [ 690.129748][T16281] do_syscall_64+0x61/0xb0 [ 690.134224][T16281] ? clear_bhb_loop+0x40/0x90 [ 690.138959][T16281] ? clear_bhb_loop+0x40/0x90 [ 690.143690][T16281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.149642][T16281] RIP: 0033:0x7f272639f1d7 [ 690.154097][T16281] Code: a2 c7 05 1c 35 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 690.173750][T16281] RSP: 002b:00007fff05399328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 690.182486][T16281] RAX: 0000000000000000 RBX: 00007f2726434314 RCX: 00007f272639f1d7 [ 690.190687][T16281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff053993e0 [ 690.198712][T16281] RBP: 00007fff053993e0 R08: 00007fff0539a3e0 R09: 00000000ffffffff [ 690.206735][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0539a470 [ 690.214773][T16281] R13: 00007f2726434314 R14: 00000000000a865d R15: 00007fff0539a4b0 [ 690.222812][T16281] [ 690.226028][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.293664][T18237] loop3: detected capacity change from 0 to 40427 [ 691.315899][T18237] F2FS-fs (loop3): Image doesn't support compression [ 691.323835][T18237] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 693.588745][ T788] misc userio: Buffer overflowed, userio client isn't keeping up [ 694.654685][ T788] input: PS/2 Generic Mouse as /devices/serio2/input/input32 [ 694.908961][ T788] psmouse serio2: Failed to enable mouse on [ 696.375595][T18295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4551'. [ 696.588801][T18303] tipc: Started in network mode [ 696.598474][T18303] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 696.637526][T18303] tipc: Enabled bearer , priority 10 [ 696.754640][T18306] loop4: detected capacity change from 0 to 256 [ 696.808600][T18308] netlink: 'syz.5.4556': attribute type 1 has an invalid length. [ 696.858445][T18306] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 696.924452][ T27] audit: type=1800 audit(1785550003.404:170): pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4555" name="file1" dev="loop4" ino=1048845 res=0 errno=0 [ 697.044609][T18290] loop3: detected capacity change from 0 to 40427 [ 697.075186][T18290] F2FS-fs (loop3): invalid crc value [ 697.088776][T18290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 697.208449][T18290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 697.368295][ T5084] Bluetooth: hci2: link tx timeout [ 697.374651][ T5084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.394211][ T5084] Bluetooth: hci2: link tx timeout [ 697.400454][ T5084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.410850][ T5084] Bluetooth: hci2: link tx timeout [ 697.416018][ T5084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.423905][ T5084] Bluetooth: hci2: link tx timeout [ 697.429172][ T5084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 697.495781][ T5773] bio_check_eod: 4 callbacks suppressed [ 697.495800][ T5773] syz-executor: attempt to access beyond end of device [ 697.495800][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 697.531806][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 697.753884][ T8] tipc: Node number set to 4269801494 [ 698.468267][ T5817] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 698.492386][T18335] loop5: detected capacity change from 0 to 16 [ 698.543110][T18335] erofs: (device loop5): mounted with root inode @ nid 36. [ 698.559146][T18332] loop3: detected capacity change from 0 to 4096 [ 698.581530][T18332] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 698.644831][T18332] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 698.681015][ T5817] usb 5-1: not running at top speed; connect to a high speed hub [ 698.701763][ T5817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 698.711146][T18332] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 698.738300][ T5817] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 698.747413][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.755759][T18332] ntfs: volume version 3.1. [ 698.818795][ T5817] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 698.863454][ T5817] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 699.075184][ T5817] usb 5-1: USB disconnect, device number 12 [ 699.093137][T18342] syzkaller1: entered promiscuous mode [ 699.100146][ T5817] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 699.116657][T18342] syzkaller1: entered allmulticast mode [ 699.130607][ T5817] garmin_gps 5-1:1.0: device disconnected [ 699.255639][ T5773] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 699.399773][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4569'. [ 699.486255][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 699.984628][T18363] batadv_slave_1: entered promiscuous mode [ 700.023601][T18362] batadv_slave_1: left promiscuous mode [ 700.206788][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'. [ 700.569806][T18380] loop3: detected capacity change from 0 to 1024 [ 700.579538][T18380] EXT4-fs: Ignoring removed orlov option [ 700.610408][T18380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.646646][ T27] audit: type=1800 audit(1785550007.144:171): pid=18380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4585" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 700.748454][T18380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.948888][ T788] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 701.109470][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4590'. [ 701.161384][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.173075][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.185568][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.211555][ T788] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.221055][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.232589][ T788] usb 5-1: config 0 descriptor?? [ 701.254923][T18398] team1: entered promiscuous mode [ 701.264522][T18398] team1: entered allmulticast mode [ 701.273321][T18398] 8021q: adding VLAN 0 to HW filter on device team1 [ 701.672164][ T788] plantronics 0003:047F:FFFF.001F: unknown main item tag 0xd [ 701.694578][ T788] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 701.730992][ T788] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 701.906325][T18415] loop3: detected capacity change from 0 to 2048 [ 702.024658][T18415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.061399][ T788] usb 5-1: USB disconnect, device number 13 [ 702.248413][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.301814][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 702.497904][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 702.515547][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 702.547964][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 702.563358][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.585525][ T8] usb 6-1: config 0 descriptor?? [ 702.808039][ T8] rc_core: IR keymap rc-xbox-dvd not found [ 702.825691][ T8] Registered IR keymap rc-empty [ 702.844762][ T8] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 702.888762][ T8] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 702.965988][ C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 702.974142][ T8] usb 6-1: USB disconnect, device number 5 [ 704.187690][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 704.262461][T18454] loop3: detected capacity change from 0 to 32768 [ 704.314353][T18454] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 704.381873][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 704.423223][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 704.461661][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.560033][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 704.577206][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 704.585956][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 704.618939][ T8] usb 5-1: Product: syz [ 704.623157][ T8] usb 5-1: Manufacturer: syz [ 704.647619][ T8] usb 5-1: SerialNumber: syz [ 704.805464][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 704.920413][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 704.948722][T18470] loop5: detected capacity change from 0 to 512 [ 704.983880][T18470] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.4619: corrupted in-inode xattr: e_value out of bounds [ 705.035190][T18473] loop3: detected capacity change from 0 to 2048 [ 705.081412][T18470] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.4619: couldn't read orphan inode 15 (err -117) [ 705.105126][T18473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.139745][T18470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.178587][T18473] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 705.224006][T18473] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 705.235558][T18478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 705.249015][T18478] EXT4-fs (loop3): This should not happen!! Data will be lost [ 705.249015][T18478] [ 705.277726][T18478] EXT4-fs (loop3): Total free blocks count 0 [ 705.295622][T18478] EXT4-fs (loop3): Free/Dirty block details [ 705.317695][T18478] EXT4-fs (loop3): free_blocks=2415919104 [ 705.331991][T18473] EXT4-fs (loop3): This should not happen!! Data will be lost [ 705.331991][T18473] [ 705.344343][ T788] usb 5-1: USB disconnect, device number 14 [ 705.378133][T18473] EXT4-fs (loop3): Total free blocks count 0 [ 705.382316][ T788] usblp0: removed [ 705.384281][T18473] EXT4-fs (loop3): Free/Dirty block details [ 705.475617][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.812746][T18486] loop3: detected capacity change from 0 to 4096 [ 705.827052][T18486] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.835749][T18486] EXT4-fs (loop3): Test dummy encryption mode enabled [ 705.911462][T18486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.993663][ T27] audit: type=1800 audit(1785550012.494:172): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4625" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 706.046804][ T27] audit: type=1800 audit(1785550012.494:173): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4625" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 706.139285][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.227518][ T788] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 706.326510][T18496] loop9: detected capacity change from 0 to 7 [ 706.336174][T18497] loop3: detected capacity change from 0 to 64 [ 706.354321][T18496] Dev loop9: unable to read RDB block 7 [ 706.368987][T18496] loop9: AHDI p1 p2 p3 [ 706.376960][T18496] loop9: partition table partially beyond EOD, truncated [ 706.390837][T18496] loop9: p1 start 1920169572 is beyond EOD, truncated [ 706.417706][T18496] loop9: p2 start 1851744889 is beyond EOD, truncated [ 706.422581][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 706.454612][ T788] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 706.478302][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.507127][ T788] usb 6-1: Product: syz [ 706.522292][ T788] usb 6-1: Manufacturer: syz [ 706.526955][ T788] usb 6-1: SerialNumber: syz [ 706.577146][ T788] usb 6-1: config 0 descriptor?? [ 706.622108][ T788] gspca_main: se401-2.14.0 probing 047d:5003 [ 707.032011][ T788] gspca_se401: ExtraFeatures: 31 [ 707.047550][ T788] gspca_se401: Frame size: 0x0 1/16th janggu [ 707.056952][ T788] gspca_se401: Frame size: 1x0 bayer [ 707.071220][ T788] gspca_se401: Frame size: 256x0 bayer [ 707.076795][ T788] gspca_se401: Frame size: 0x128 bayer [ 707.170631][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4639'. [ 707.237697][ T176] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 707.250943][ T788] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 707.265256][ T788] usb 6-1: USB disconnect, device number 6 [ 707.467462][ T176] usb 4-1: Using ep0 maxpacket: 32 [ 707.478979][ T176] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 707.502438][ T176] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 707.525254][ T176] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 707.551200][ T176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.573418][ T176] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.591675][ T176] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 707.605419][ T176] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 707.614950][ T176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.637010][ T176] usb 4-1: config 0 descriptor?? [ 707.840366][T18510] loop4: detected capacity change from 0 to 40427 [ 707.861821][T18510] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 707.912049][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.915776][T18510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 707.956949][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.977454][T18510] F2FS-fs (loop4): Image doesn't support compression [ 708.009059][ T176] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 708.017500][T18510] F2FS-fs (loop4): Image doesn't support compression [ 708.063517][T18510] F2FS-fs (loop4): invalid crc value [ 708.063956][ T176] usb 4-1: USB disconnect, device number 40 [ 708.114907][ T176] usblp0: removed [ 708.380641][T18510] F2FS-fs (loop4): Start checkpoint disabled! [ 708.423471][T18510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 708.430679][T18510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 708.552358][T18510] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 708.584821][T18510] CPU: 1 PID: 18510 Comm: syz.4.4637 Not tainted syzkaller #0 [ 708.592359][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.602552][T18510] Call Trace: [ 708.605886][T18510] [ 708.608863][T18510] dump_stack_lvl+0x18c/0x250 [ 708.613612][T18510] ? show_regs_print_info+0x20/0x20 [ 708.618875][T18510] ? __asan_memset+0x22/0x40 [ 708.623549][T18510] ? f2fs_lookup_read_extent_cache_block+0x231/0x430 [ 708.630309][T18510] ? __lookup_extent_tree+0xb80/0xb80 [ 708.635744][T18510] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 708.637489][ T176] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 708.641170][T18510] f2fs_get_read_data_page+0x3bb/0x5d0 [ 708.654371][T18510] ? f2fs_reserve_block+0x240/0x240 [ 708.659650][T18510] f2fs_find_data_page+0x9f/0x3a0 [ 708.664744][T18510] f2fs_readdir+0x4c7/0x970 [ 708.669331][T18510] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 708.674595][T18510] ? read_lock_is_recursive+0x20/0x20 [ 708.680032][T18510] ? __fdget_pos+0x2a3/0x330 [ 708.684690][T18510] ? __lock_acquire+0x7d80/0x7d80 [ 708.689798][T18510] ? mutex_lock_nested+0x20/0x20 [ 708.694832][T18510] ? iterate_dir+0xcb/0x590 [ 708.699433][T18510] ? down_read_killable+0x1d0/0x340 [ 708.704693][T18510] ? fsnotify_perm+0x271/0x5e0 [ 708.709549][T18510] iterate_dir+0x1bd/0x590 [ 708.714050][T18510] __se_sys_getdents64+0xf6/0x270 [ 708.719174][T18510] ? __x64_sys_getdents64+0x80/0x80 [ 708.724458][T18510] ? filldir+0x620/0x620 [ 708.728814][T18510] ? lockdep_hardirqs_on+0x98/0x150 [ 708.734134][T18510] do_syscall_64+0x55/0xb0 [ 708.738640][T18510] ? clear_bhb_loop+0x40/0x90 [ 708.743393][T18510] ? clear_bhb_loop+0x40/0x90 [ 708.748223][T18510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.754201][T18510] RIP: 0033:0x7f272639df99 [ 708.758687][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.778359][T18510] RSP: 002b:00007f2727204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 708.786921][T18510] RAX: ffffffffffffffda RBX: 00007f2726625fa0 RCX: 00007f272639df99 [ 708.794950][T18510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 708.803018][T18510] RBP: 00007f2726434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 708.811064][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.819086][T18510] R13: 00007f2726626038 R14: 00007f2726625fa0 R15: 00007fff0539a0b8 [ 708.827148][T18510] [ 708.830313][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.028897][ T176] usb 4-1: Using ep0 maxpacket: 16 [ 709.045863][ T176] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 709.094215][ T176] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 709.127439][ T176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.135485][ T176] usb 4-1: Product: syz [ 709.147695][ T176] usb 4-1: Manufacturer: syz [ 709.152350][ T176] usb 4-1: SerialNumber: syz [ 709.198877][ T176] usb 4-1: config 0 descriptor?? [ 709.222187][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 709.437559][ C0] port100 4-1:0.0: NFC: Received an invalid ack [ 709.448800][ T176] port100 4-1:0.0: NFC: Could not get supported command types [ 709.696087][ T28] usb 4-1: USB disconnect, device number 41 [ 709.909549][T18546] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4651'. [ 709.936291][T18548] loop5: detected capacity change from 0 to 16 [ 709.968551][T18548] erofs: (device loop5): mounted with root inode @ nid 36. [ 710.029823][T18548] erofs: (device loop5): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 710.048331][T18548] erofs: (device loop5): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 710.060000][T18548] syz.5.4652: attempt to access beyond end of device [ 710.060000][T18548] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 710.074270][T18548] syz.5.4652: attempt to access beyond end of device [ 710.074270][T18548] loop5: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 710.127911][T18548] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 710.142414][T18548] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 710.409892][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.480916][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.488237][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.092065][T18565] loop5: detected capacity change from 0 to 40427 [ 711.118419][T18565] F2FS-fs (loop5): invalid crc value [ 711.183287][T18565] F2FS-fs (loop5): Found nat_bits in checkpoint [ 711.282930][T18565] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 711.395126][T17128] syz-executor: attempt to access beyond end of device [ 711.395126][T17128] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 711.426169][T17128] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 711.920072][T18592] loop3: detected capacity change from 0 to 256 [ 712.161697][T18598] loop5: detected capacity change from 0 to 1024 [ 712.202422][T18598] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 712.222714][T18598] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 712.235092][T18598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.286899][ T28] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 712.296650][T18598] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.4665: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 712.371701][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.476873][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 712.494397][T18606] input: syz0 as /devices/virtual/input/input36 [ 712.500871][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.500924][ T28] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.500952][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.581629][ T28] usb 5-1: config 0 descriptor?? [ 712.825341][ T28] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 713.055268][ T28] usb 5-1: USB disconnect, device number 15 [ 713.406217][T18619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4680'. [ 713.626933][T14850] Bluetooth: hci4: command 0x0406 tx timeout [ 713.726897][T18632] loop5: detected capacity change from 0 to 2048 [ 713.769242][T18632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.808884][T18632] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 713.835547][T18632] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 713.921755][T18632] EXT4-fs (loop5): This should not happen!! Data will be lost [ 713.921755][T18632] [ 713.953069][T18632] EXT4-fs (loop5): Total free blocks count 0 [ 713.979050][T18632] EXT4-fs (loop5): Free/Dirty block details [ 713.987333][T18641] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 714.015664][T18632] EXT4-fs (loop5): free_blocks=2415919104 [ 714.026237][T18632] EXT4-fs (loop5): dirty_blocks=64 [ 714.035157][T18641] EXT4-fs (loop5): This should not happen!! Data will be lost [ 714.035157][T18641] [ 714.054036][T18632] EXT4-fs (loop5): Block reservation details [ 714.075251][T18646] loop3: detected capacity change from 0 to 512 [ 714.094690][T18646] EXT4-fs: Ignoring removed orlov option [ 714.120052][T18646] EXT4-fs: Ignoring removed mblk_io_submit option [ 714.163626][T18646] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.4689: corrupted in-inode xattr: e_value size too large [ 714.222554][T18646] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4689: couldn't read orphan inode 15 (err -117) [ 714.275179][T18646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.342331][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.472041][T18651] loop3: detected capacity change from 0 to 512 [ 714.511147][T18651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 714.556793][T18651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 714.635840][T18651] EXT4-fs (loop3): 1 truncate cleaned up [ 714.679523][T18651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.750505][ T27] audit: type=1800 audit(1785550021.254:174): pid=18651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4693" name="ext4" dev="loop3" ino=18 res=0 errno=0 [ 714.770979][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.899982][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.162989][T18653] loop5: detected capacity change from 0 to 32768 [ 715.252682][T18653] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 715.280515][T18653] XFS (loop5): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 715.436792][T17128] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 715.575284][T18684] input: syz0 as /devices/virtual/input/input37 [ 715.888159][T18690] loop3: detected capacity change from 0 to 256 [ 715.908215][T18690] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 715.929872][T18690] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 715.946805][ T788] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 715.970030][T18690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 716.034092][T18692] loop5: detected capacity change from 0 to 2048 [ 716.149692][T18692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.175950][ T788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 716.194557][ T788] usb 5-1: not running at top speed; connect to a high speed hub [ 716.225797][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 716.273540][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 716.309693][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 716.350017][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 716.361471][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 44636, setting to 64 [ 716.381788][ T788] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 716.395860][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.413117][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.423916][ T788] usb 5-1: Product: syz [ 716.440041][ T788] usb 5-1: Manufacturer: syz [ 716.444777][ T788] usb 5-1: SerialNumber: syz [ 716.474897][ T788] usb 5-1: config 0 descriptor?? [ 716.482327][T18686] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.496100][ T788] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 716.726230][T18329] udevd[18329]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.817096][T18705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4711'. [ 716.927634][ T788] usb 5-1: USB disconnect, device number 16 [ 717.209981][T18698] loop3: detected capacity change from 0 to 32768 [ 717.253211][T18698] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 717.399145][T18388] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 717.509027][T18718] loop3: detected capacity change from 0 to 64 [ 717.614279][T18702] loop5: detected capacity change from 0 to 40427 [ 717.645362][T18702] F2FS-fs (loop5): invalid crc value [ 717.692296][T18702] F2FS-fs (loop5): Found nat_bits in checkpoint [ 717.873899][T18702] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 718.112656][T18732] loop4: detected capacity change from 0 to 2048 [ 718.176570][T18732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 718.200878][T17128] syz-executor: attempt to access beyond end of device [ 718.200878][T17128] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 718.259538][T17128] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 718.280593][T17128] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 718.899067][T18748] loop3: detected capacity change from 0 to 512 [ 719.010114][T18748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.028606][T18748] ext4 filesystem being mounted at /1178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.070689][T18748] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.4728: corrupted inode contents [ 719.124815][T18748] EXT4-fs (loop3): Remounting filesystem read-only [ 719.174820][T18756] loop5: detected capacity change from 0 to 1024 [ 719.186764][T18756] EXT4-fs: Ignoring removed orlov option [ 719.265222][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.274922][T18756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 719.360962][T18756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.534861][T18766] loop3: detected capacity change from 0 to 512 [ 719.672284][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.844329][T18768] loop4: detected capacity change from 0 to 32768 [ 720.953598][T18768] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 721.181774][T18770] loop3: detected capacity change from 0 to 32768 [ 721.252018][T18770] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 721.299932][T18770] JBD2: Ignoring recovery information on journal [ 721.495690][T18770] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 721.699019][T16281] ocfs2: Unmounting device (7,4) on (node local) [ 721.979056][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 722.154791][T18792] Format for deleting device is "id" (uint). [ 722.169665][T18793] fuseblk: Bad value for 'fd' [ 722.715958][ T788] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 722.906918][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 722.928877][ T788] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 722.938056][ T788] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 722.954736][T18797] loop5: detected capacity change from 0 to 40427 [ 722.966355][ T788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 722.982983][T18797] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 722.993238][ T788] usb 5-1: config 1 has no interface number 0 [ 723.001165][ T788] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.014896][T18797] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 723.025052][ T788] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 723.042251][T18797] F2FS-fs (loop5): Image doesn't support compression [ 723.049565][T18797] F2FS-fs (loop5): Image doesn't support compression [ 723.060452][ T788] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 723.072917][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.082148][T18797] F2FS-fs (loop5): invalid crc value [ 723.111169][ T788] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 723.216826][ T8] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 723.257408][T18797] F2FS-fs (loop5): Start checkpoint disabled! [ 723.280792][T18797] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 723.290371][T18797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 723.324717][ T788] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 723.376004][T18797] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 723.394336][T18797] CPU: 0 PID: 18797 Comm: syz.5.4745 Not tainted syzkaller #0 [ 723.401875][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.412006][T18797] Call Trace: [ 723.415358][T18797] [ 723.418369][T18797] dump_stack_lvl+0x18c/0x250 [ 723.423122][T18797] ? show_regs_print_info+0x20/0x20 [ 723.428386][T18797] ? __asan_memset+0x22/0x40 [ 723.433072][T18797] ? f2fs_lookup_read_extent_cache_block+0x231/0x430 [ 723.439854][T18797] ? __lookup_extent_tree+0xb80/0xb80 [ 723.445351][T18797] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 723.450833][T18797] f2fs_get_read_data_page+0x3bb/0x5d0 [ 723.456372][T18797] ? f2fs_reserve_block+0x240/0x240 [ 723.461796][T18797] f2fs_find_data_page+0x9f/0x3a0 [ 723.466921][T18797] f2fs_readdir+0x4c7/0x970 [ 723.471517][T18797] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 723.476786][T18797] ? read_lock_is_recursive+0x20/0x20 [ 723.482227][T18797] ? __fdget_pos+0x2a3/0x330 [ 723.486851][T18797] ? __lock_acquire+0x7d80/0x7d80 [ 723.491907][T18797] ? mutex_lock_nested+0x20/0x20 [ 723.496906][T18797] ? iterate_dir+0xcb/0x590 [ 723.501452][T18797] ? down_read_killable+0x1d0/0x340 [ 723.506731][T18797] ? fsnotify_perm+0x271/0x5e0 [ 723.511564][T18797] iterate_dir+0x1bd/0x590 [ 723.516045][T18797] __se_sys_getdents64+0xf6/0x270 [ 723.521129][T18797] ? __x64_sys_getdents64+0x80/0x80 [ 723.526429][T18797] ? filldir+0x620/0x620 [ 723.530765][T18797] ? lockdep_hardirqs_on+0x98/0x150 [ 723.536045][T18797] do_syscall_64+0x55/0xb0 [ 723.540524][T18797] ? clear_bhb_loop+0x40/0x90 [ 723.545272][T18797] ? clear_bhb_loop+0x40/0x90 [ 723.550011][T18797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.555939][T18797] RIP: 0033:0x7f909ed9df99 [ 723.560385][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.580070][T18797] RSP: 002b:00007f909fbef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 723.588520][T18797] RAX: ffffffffffffffda RBX: 00007f909f025fa0 RCX: 00007f909ed9df99 [ 723.596527][T18797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 723.604536][T18797] RBP: 00007f909ee34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 723.612547][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.620549][T18797] R13: 00007f909f026038 R14: 00007f909f025fa0 R15: 00007ffe7a809478 [ 723.628604][T18797] [ 723.699635][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 723.711093][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.732485][ T8] usb 4-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 723.741821][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.763457][ T8] usb 4-1: config 0 descriptor?? [ 723.770081][T18815] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 723.972850][ T788] usb 5-1: USB disconnect, device number 17 [ 723.984331][ T788] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 724.136534][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.222167][ T8] hid (null): usage index exceeded [ 724.227724][ T8] hid (null): unknown global tag 0xc [ 724.234357][ T8] hid (null): usage index exceeded [ 724.248850][ T8] hid-generic 0003:0B05:184A.0020: unknown main item tag 0x2 [ 724.260104][ T8] hid-generic 0003:0B05:184A.0020: unknown main item tag 0xd [ 724.268733][ T8] hid-generic 0003:0B05:184A.0020: item 0 0 0 11 parsing failed [ 724.277873][ T8] hid-generic: probe of 0003:0B05:184A.0020 failed with error -22 [ 724.426873][ T8] usb 4-1: USB disconnect, device number 42 [ 724.543095][T18821] syzkaller1: entered promiscuous mode [ 724.563192][T18821] syzkaller1: entered allmulticast mode [ 724.897326][T18829] vlan2: entered allmulticast mode [ 724.902595][T18829] bond0: entered allmulticast mode [ 724.908490][T18829] bond_slave_0: entered allmulticast mode [ 724.914278][T18829] bond_slave_1: entered allmulticast mode [ 724.928542][T18829] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4758'. [ 725.110978][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 725.137322][T18829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.146673][T18829] bond_slave_0: left allmulticast mode [ 725.157320][ T12] tipc: Subscription rejected, illegal request [ 725.170896][T18829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.183197][T18829] bond_slave_1: left allmulticast mode [ 725.197748][T18829] bond0 (unregistering): Released all slaves [ 725.959733][T18850] loop5: detected capacity change from 0 to 2048 [ 725.983224][T18850] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 726.026015][T18850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.084560][T18836] loop3: detected capacity change from 0 to 40427 [ 726.102984][T18836] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 726.110850][T18836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 726.132305][T18836] F2FS-fs (loop3): Image doesn't support compression [ 726.147110][T18836] F2FS-fs (loop3): Image doesn't support compression [ 726.171868][T18836] F2FS-fs (loop3): invalid crc value [ 726.485106][T18836] F2FS-fs (loop3): Start checkpoint disabled! [ 726.496273][T18858] usb usb7: usbfs: process 18858 (syz.5.4770) did not claim interface 0 before use [ 726.542283][T18836] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 726.560351][T18836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 726.666153][T18836] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 726.683503][T18836] CPU: 0 PID: 18836 Comm: syz.3.4761 Not tainted syzkaller #0 [ 726.691122][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.701234][T18836] Call Trace: [ 726.704565][T18836] [ 726.707541][T18836] dump_stack_lvl+0x18c/0x250 [ 726.712284][T18836] ? show_regs_print_info+0x20/0x20 [ 726.717543][T18836] ? __asan_memset+0x22/0x40 [ 726.722196][T18836] ? f2fs_lookup_read_extent_cache_block+0x231/0x430 [ 726.728974][T18836] ? __lookup_extent_tree+0xb80/0xb80 [ 726.734436][T18836] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 726.739882][T18836] f2fs_get_read_data_page+0x3bb/0x5d0 [ 726.745423][T18836] ? f2fs_reserve_block+0x240/0x240 [ 726.750724][T18836] f2fs_find_data_page+0x9f/0x3a0 [ 726.755818][T18836] f2fs_readdir+0x4c7/0x970 [ 726.760409][T18836] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 726.765678][T18836] ? read_lock_is_recursive+0x20/0x20 [ 726.771116][T18836] ? __fdget_pos+0x2a3/0x330 [ 726.775802][T18836] ? __lock_acquire+0x7d80/0x7d80 [ 726.780895][T18836] ? mutex_lock_nested+0x20/0x20 [ 726.785907][T18836] ? iterate_dir+0xcb/0x590 [ 726.790477][T18836] ? down_read_killable+0x1d0/0x340 [ 726.795740][T18836] ? fsnotify_perm+0x271/0x5e0 [ 726.800550][T18836] iterate_dir+0x1bd/0x590 [ 726.805008][T18836] __se_sys_getdents64+0xf6/0x270 [ 726.810086][T18836] ? __x64_sys_getdents64+0x80/0x80 [ 726.815417][T18836] ? filldir+0x620/0x620 [ 726.819742][T18836] ? lockdep_hardirqs_on+0x98/0x150 [ 726.824978][T18836] do_syscall_64+0x55/0xb0 [ 726.829429][T18836] ? clear_bhb_loop+0x40/0x90 [ 726.834144][T18836] ? clear_bhb_loop+0x40/0x90 [ 726.838858][T18836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.844788][T18836] RIP: 0033:0x7fc6c579df99 [ 726.849235][T18836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.868875][T18836] RSP: 002b:00007fc6c663e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 726.877319][T18836] RAX: ffffffffffffffda RBX: 00007fc6c5a25fa0 RCX: 00007fc6c579df99 [ 726.885318][T18836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 726.893320][T18836] RBP: 00007fc6c5834ec4 R08: 0000000000000000 R09: 0000000000000000 [ 726.901320][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.909320][T18836] R13: 00007fc6c5a26038 R14: 00007fc6c5a25fa0 R15: 00007fff03d67d78 [ 726.917333][T18836] [ 726.923939][T18862] loop4: detected capacity change from 0 to 512 [ 726.991094][T18862] EXT4-fs (loop4): 1 orphan inode deleted [ 727.000271][T18862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.025991][T16327] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 727.037698][T16327] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 727.066466][T18862] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.186494][ T3465] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 727.236312][ T3465] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 727.300363][T16281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.484637][T18874] loop4: detected capacity change from 0 to 256 [ 727.565950][T18874] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 727.856719][T18872] loop5: detected capacity change from 0 to 32768 [ 727.875211][T18872] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 727.883528][T18872] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 727.906683][T18872] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 727.919041][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 727.976313][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 728.246282][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 269ms [ 728.273118][T18885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 728.298355][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 728.303725][T18872] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 728.636609][T18872] gfs2: fsid=syz:syz.0: found 1 quota changes [ 728.818389][T18872] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 728.826905][T18872] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 728.836021][T18872] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 728.845605][T18872] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 728.857008][T18872] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 728.886866][T18897] input: syz1 as /devices/virtual/input/input38 [ 729.039308][T17128] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 729.085579][T17128] CPU: 1 PID: 17128 Comm: syz-executor Not tainted syzkaller #0 [ 729.093276][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.103464][T17128] Call Trace: [ 729.106798][T17128] [ 729.109777][T17128] dump_stack_lvl+0x18c/0x250 [ 729.114513][T17128] ? show_regs_print_info+0x20/0x20 [ 729.119770][T17128] ? load_image+0x420/0x420 [ 729.124354][T17128] ? do_raw_spin_unlock+0x121/0x230 [ 729.129621][T17128] gfs2_assert_warn_i+0x18b/0x2c0 [ 729.134739][T17128] gfs2_qd_dispose+0x488/0x580 [ 729.139569][T17128] gfs2_quota_cleanup+0x40d/0x720 [ 729.144660][T17128] ? gfs2_make_fs_ro+0x17e/0x320 [ 729.149660][T17128] ? spin_lock_bucket+0x150/0x150 [ 729.154739][T17128] ? __might_sleep+0xe0/0xe0 [ 729.159381][T17128] ? down_write+0x16e/0x200 [ 729.163941][T17128] ? down_read_killable+0x340/0x340 [ 729.169225][T17128] ? gfs2_quota_sync+0x595/0x5a0 [ 729.174234][T17128] gfs2_make_fs_ro+0x2aa/0x320 [ 729.179041][T17128] ? gfs2_put_super+0x1db/0x930 [ 729.183923][T17128] ? gfs2_dinode_out+0xb10/0xb10 [ 729.188887][T17128] ? do_raw_spin_lock+0x11f/0x2b0 [ 729.193964][T17128] ? __rwlock_init+0x150/0x150 [ 729.198802][T17128] ? do_raw_spin_unlock+0x121/0x230 [ 729.204044][T17128] gfs2_put_super+0x224/0x930 [ 729.209016][T17128] ? gfs2_evict_inode+0x13c0/0x13c0 [ 729.214248][T17128] generic_shutdown_super+0x134/0x2b0 [ 729.219655][T17128] kill_block_super+0x44/0x90 [ 729.224366][T17128] deactivate_locked_super+0x97/0x100 [ 729.229771][T17128] cleanup_mnt+0x3d7/0x460 [ 729.234224][T17128] task_work_run+0x1d4/0x260 [ 729.238850][T17128] ? task_work_cancel+0x220/0x220 [ 729.243917][T17128] ? exit_to_user_mode_loop+0x3b/0x110 [ 729.249417][T17128] exit_to_user_mode_loop+0xe6/0x110 [ 729.254747][T17128] exit_to_user_mode_prepare+0xee/0x180 [ 729.260334][T17128] syscall_exit_to_user_mode+0x1a/0x50 [ 729.265826][T17128] do_syscall_64+0x61/0xb0 [ 729.270266][T17128] ? clear_bhb_loop+0x40/0x90 [ 729.275074][T17128] ? clear_bhb_loop+0x40/0x90 [ 729.279867][T17128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.285799][T17128] RIP: 0033:0x7f909ed9f1d7 [ 729.290429][T17128] Code: a2 c7 05 1c 35 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 729.310155][T17128] RSP: 002b:00007ffe7a8086e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 729.318599][T17128] RAX: 0000000000000000 RBX: 00007f909ee34314 RCX: 00007f909ed9f1d7 [ 729.326686][T17128] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7a8087a0 [ 729.334687][T17128] RBP: 00007ffe7a8087a0 R08: 00007ffe7a8097a0 R09: 00000000ffffffff [ 729.342710][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7a809830 [ 729.350801][T17128] R13: 00007f909ee34314 R14: 00000000000b1f0a R15: 00007ffe7a809870 [ 729.358817][T17128] [ 729.361964][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.841652][T18915] loop5: detected capacity change from 0 to 32768 [ 730.861209][T18927] loop4: detected capacity change from 0 to 4096 [ 730.899792][T18914] loop3: detected capacity change from 0 to 32768 [ 730.911769][T18915] [ 730.911769][T18915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.911769][T18915] [ 730.938690][T18927] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 730.955671][T18927] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 730.975508][T18915] JFS: metapage_get_blocks failed [ 731.003529][T18915] ERROR: (device loop5): release_metapage: metapage_write_one() failed [ 731.003529][T18915] [ 731.043657][T18927] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 731.057103][T18915] ERROR: (device loop5): diWrite: ixpxd invalid [ 731.057103][T18915] [ 731.077049][T18915] ERROR: (device loop5): txCommit: [ 731.077049][T18915] [ 731.092377][T18936] [ 731.092377][T18936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.092377][T18936] [ 731.106510][T18914] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 731.146734][T18927] ntfs: volume version 3.1. [ 731.159714][T18936] [ 731.159714][T18936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.159714][T18936] [ 731.269530][T18936] [ 731.269530][T18936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.269530][T18936] [ 731.309532][T18914] XFS (loop3): Ending clean mount [ 731.355831][T18936] [ 731.355831][T18936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.355831][T18936] [ 731.377772][T18936] [ 731.377772][T18936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.377772][T18936] [ 731.413642][ T112] [ 731.413642][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.413642][ T112] [ 731.436485][T18915] ERROR: (device loop5): diWrite: ixpxd invalid [ 731.436485][T18915] [ 731.450415][T18915] ERROR: (device loop5): txCommit: [ 731.450415][T18915] [ 731.477045][T18942] ERROR: (device loop5): diWrite: ixpxd invalid [ 731.477045][T18942] [ 731.526358][T18942] ERROR: (device loop5): txCommit: [ 731.526358][T18942] [ 731.598446][T16281] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 731.631035][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 731.756652][ T3465] [ 731.756652][ T3465] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.756652][ T3465] [ 731.791940][ T3465] [ 731.791940][ T3465] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.791940][ T3465] [ 731.842107][T18947] loop4: detected capacity change from 0 to 512 [ 731.852931][ T113] [ 731.852931][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.852931][ T113] [ 731.885332][T18947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 731.917265][T17128] [ 731.917265][T17128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.917265][T17128] [ 731.959798][T18947] EXT4-fs (loop4): 1 truncate cleaned up [ 731.967970][T17128] [ 731.967970][T17128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 731.967970][T17128] [ 731.979984][T18947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.269586][T16281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.537598][T18963] loop2: detected capacity change from 0 to 7 [ 732.545541][T18963] Dev loop2: unable to read RDB block 7 [ 732.551306][T18963] loop2: unable to read partition table [ 732.569084][T18963] loop2: partition table beyond EOD, truncated [ 732.585247][T18963] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 732.705059][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 732.801875][T18967] loop5: detected capacity change from 0 to 4096 [ 732.864094][T18967] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 732.882490][T18967] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 732.895890][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 732.905452][T18967] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 732.944027][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 732.949910][T18967] ntfs: volume version 3.1. [ 732.960730][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.971454][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.007179][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.032943][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.054960][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 733.069400][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.298497][T18977] 9pnet_fd: Insufficient options for proto=fd [ 733.314045][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 733.320433][ T8] usbtmc 5-1:16.0: can't read capabilities [ 733.351312][T18975] loop3: detected capacity change from 0 to 2048 [ 733.381872][T17128] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 733.434631][T18975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 733.648362][T18957] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 733.681883][ T28] usb 5-1: USB disconnect, device number 18 [ 734.143959][ T27] audit: type=1800 audit(1785550040.644:175): pid=18975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4817" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 734.338322][T18997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4827'. [ 734.567692][T19003] loop4: detected capacity change from 0 to 128 [ 734.606391][T19003] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 734.662656][T19003] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.508618][ T28] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 735.714770][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 735.727464][ T28] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.743261][ T28] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 735.762501][ T28] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.777239][ T28] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.791222][ T28] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 735.801708][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.031147][ T28] usb 5-1: GET_CAPABILITIES returned 0 [ 736.041287][ T28] usbtmc 5-1:16.0: can't read capabilities [ 736.134466][T19033] sctp: [Deprecated]: syz.1.4843 (pid 19033) Use of int in max_burst socket option. [ 736.134466][T19033] Use struct sctp_assoc_value instead [ 736.241765][ T28] usb 5-1: USB disconnect, device number 19 [ 737.108102][T19054] loop4: detected capacity change from 0 to 512 [ 737.137050][T19054] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 737.256088][T19054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 737.277036][T19054] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 737.551923][T19048] loop5: detected capacity change from 0 to 40427 [ 737.577960][T19048] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 737.601608][T19048] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 737.627250][T19048] F2FS-fs (loop5): heap/no_heap options were deprecated [ 737.644266][T19048] F2FS-fs (loop5): extra_attr or flexible_inline_xattr feature is off [ 738.084871][T19066] vlan2: entered allmulticast mode [ 738.094792][T19066] bond0: entered allmulticast mode [ 738.099963][T19066] bond_slave_0: entered allmulticast mode [ 738.121792][T19066] bond_slave_1: entered allmulticast mode [ 738.142533][T19070] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4858'. [ 738.298136][T19072] loop4: detected capacity change from 0 to 64 [ 738.374767][T19070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.416009][T19070] bond_slave_0: left allmulticast mode [ 738.458062][T19070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.489112][T19070] bond_slave_1: left allmulticast mode [ 738.518121][T19070] bond0 (unregistering): Released all slaves [ 738.855615][T19063] loop5: detected capacity change from 0 to 32768 [ 738.951708][ T27] audit: type=1800 audit(1785550045.454:176): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4857" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 739.788885][T19074] loop4: detected capacity change from 0 to 131072 [ 739.811594][T19074] F2FS-fs (loop4): invalid crc value [ 739.874123][T19074] F2FS-fs (loop4): Found nat_bits in checkpoint [ 739.918417][ T27] audit: type=1326 audit(1785550046.414:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fff03d74ac9 code=0x7ffc0000 [ 739.974529][T19074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 740.000556][ T27] audit: type=1326 audit(1785550046.414:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c579df99 code=0x7ffc0000 [ 740.049399][ T27] audit: type=1326 audit(1785550046.464:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c579df99 code=0x7ffc0000 [ 740.162504][ T27] audit: type=1326 audit(1785550046.464:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fff03d74ac9 code=0x7ffc0000 [ 740.254339][ T27] audit: type=1326 audit(1785550046.464:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc6c579df99 code=0x7ffc0000 [ 740.334369][ T27] audit: type=1326 audit(1785550046.654:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fff03d74ac9 code=0x7ffc0000 [ 740.375375][ T27] audit: type=1326 audit(1785550046.654:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c579df99 code=0x7ffc0000 [ 740.474365][ T27] audit: type=1326 audit(1785550046.654:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c579df99 code=0x7ffc0000 [ 740.529834][T18388] FAULT_INJECTION: forcing a failure. [ 740.529834][T18388] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 740.565789][ T27] audit: type=1326 audit(1785550046.664:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19096 comm="syz.3.4869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6c575e7ce code=0x7ffc0000 [ 740.596483][T19094] FAULT_INJECTION: forcing a failure. [ 740.596483][T19094] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 740.611276][T18388] CPU: 0 PID: 18388 Comm: udevd Not tainted syzkaller #0 [ 740.618373][T18388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.628477][T18388] Call Trace: [ 740.631802][T18388] [ 740.634773][T18388] dump_stack_lvl+0x18c/0x250 [ 740.639501][T18388] ? show_regs_print_info+0x20/0x20 [ 740.644748][T18388] ? load_image+0x420/0x420 [ 740.649310][T18388] ? __lock_acquire+0x7d80/0x7d80 [ 740.654399][T18388] ? verify_lock_unused+0x140/0x140 [ 740.659662][T18388] should_fail_ex+0x394/0x4c0 [ 740.664453][T18388] prepare_alloc_pages+0x1e1/0x5b0 [ 740.669632][T18388] __alloc_pages+0x134/0x460 [ 740.674270][T18388] ? zone_statistics+0x170/0x170 [ 740.679261][T18388] ? mt_find+0x169/0x640 [ 740.683540][T18388] ? handle_mm_fault+0xe6/0x4a50 [ 740.688530][T18388] ? __lock_acquire+0x7d80/0x7d80 [ 740.693605][T18388] __folio_alloc+0x10/0x20 [ 740.698062][T18388] vma_alloc_folio+0x474/0x8f0 [ 740.702875][T18388] ? handle_mm_fault+0xe6/0x4a50 [ 740.707850][T18388] handle_mm_fault+0x1ab6/0x4a50 [ 740.712820][T18388] ? handle_mm_fault+0xe6/0x4a50 [ 740.717806][T18388] ? numa_migrate_prep+0x350/0x350 [ 740.722985][T18388] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 740.728313][T18388] do_user_addr_fault+0x736/0x12d0 [ 740.733486][T18388] exc_page_fault+0x64/0x100 [ 740.738144][T18388] asm_exc_page_fault+0x26/0x30 [ 740.743028][T18388] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 740.748888][T18388] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 740.768622][T18388] RSP: 0018:ffffc90003427918 EFLAGS: 00050206 [ 740.774735][T18388] RAX: ffffffff842f9101 RBX: 1ffff92000684fb7 RCX: 0000000000001000 [ 740.782742][T18388] RDX: 0000000000000000 RSI: ffff888073dba000 RDI: 00007fbb0600b000 [ 740.790745][T18388] RBP: ffffc90003427a78 R08: ffff888073dbafff R09: 1ffff1100e7b75ff [ 740.798748][T18388] R10: dffffc0000000000 R11: ffffed100e7b7600 R12: ffff888073dba000 [ 740.806755][T18388] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc90003427dc8 [ 740.814768][T18388] ? _copy_to_iter+0x211/0x1110 [ 740.819677][T18388] _copy_to_iter+0x24f/0x1110 [ 740.824416][T18388] ? filemap_read+0xf20/0xf20 [ 740.829151][T18388] ? iov_iter_init+0x1e0/0x1e0 [ 740.833972][T18388] ? folio_mark_accessed+0x2fe/0x14a0 [ 740.839387][T18388] ? folio_activate_fn+0x2000/0x2000 [ 740.844705][T18388] ? page_copy_sane+0x4e/0x270 [ 740.849528][T18388] copy_page_to_iter+0xa7/0x150 [ 740.854436][T18388] filemap_read+0x830/0xf20 [ 740.859009][T18388] ? filemap_get_folios_tag+0x840/0x840 [ 740.864615][T18388] ? down_read+0x1ac/0x2e0 [ 740.869085][T18388] blkdev_read_iter+0x34a/0x480 [ 740.874022][T18388] vfs_read+0x486/0x990 [ 740.878240][T18388] ? kernel_read+0x1e0/0x1e0 [ 740.882887][T18388] ? down_write+0x200/0x200 [ 740.887464][T18388] ? __fdget_pos+0x1d8/0x330 [ 740.892117][T18388] ksys_read+0x151/0x260 [ 740.896430][T18388] ? vfs_write+0x9a0/0x9a0 [ 740.900910][T18388] ? lockdep_hardirqs_on+0x98/0x150 [ 740.906167][T18388] do_syscall_64+0x55/0xb0 [ 740.910629][T18388] ? clear_bhb_loop+0x40/0x90 [ 740.915373][T18388] ? clear_bhb_loop+0x40/0x90 [ 740.920121][T18388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.926083][T18388] RIP: 0033:0x7fbb060a7407 [ 740.930538][T18388] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 740.950194][T18388] RSP: 002b:00007ffcd6dd4420 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 740.958662][T18388] RAX: ffffffffffffffda RBX: 00007fbb0675e880 RCX: 00007fbb060a7407 [ 740.966685][T18388] RDX: 0000000000040000 RSI: 00007fbb05fd9000 RDI: 0000000000000009 [ 740.974690][T18388] RBP: 0000556a1f98f050 R08: 0000000000000000 R09: 0000000000000000 [ 740.982701][T18388] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 740.990709][T18388] R13: 0000000000000000 R14: 0000556a1f9a1368 R15: 00007fbb0688539c [ 740.998738][T18388] [ 741.015753][T19094] CPU: 0 PID: 19094 Comm: syz.1.4870 Not tainted syzkaller #0 [ 741.023276][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.033380][T19094] Call Trace: [ 741.036707][T19094] [ 741.039676][T19094] dump_stack_lvl+0x18c/0x250 [ 741.044407][T19094] ? show_regs_print_info+0x20/0x20 [ 741.049663][T19094] ? load_image+0x420/0x420 [ 741.054236][T19094] ? __lock_acquire+0x7d80/0x7d80 [ 741.059316][T19094] ? mark_lock+0x94/0x320 [ 741.063704][T19094] should_fail_ex+0x394/0x4c0 [ 741.068488][T19094] prepare_alloc_pages+0x1e1/0x5b0 [ 741.073671][T19094] __alloc_pages+0x134/0x460 [ 741.078313][T19094] ? zone_statistics+0x170/0x170 [ 741.083318][T19094] __folio_alloc+0x10/0x20 [ 741.087787][T19094] vma_alloc_folio+0x474/0x8f0 [ 741.092594][T19094] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 741.098455][T19094] shmem_alloc_folio+0x1a9/0x2a0 [ 741.103462][T19094] ? folio_put+0xd0/0xd0 [ 741.107780][T19094] ? __vm_enough_memory+0x11a/0x370 [ 741.113035][T19094] ? shmem_inode_acct_block+0x324/0x460 [ 741.118641][T19094] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 741.124428][T19094] ? put_swap_device+0x230/0x230 [ 741.129440][T19094] ? xas_load+0x12b/0x140 [ 741.133818][T19094] ? filemap_get_entry+0xce/0x3f0 [ 741.138882][T19094] ? filemap_get_entry+0xce/0x3f0 [ 741.143956][T19094] ? filemap_get_entry+0x375/0x3f0 [ 741.149095][T19094] ? page_cache_prev_miss+0x390/0x390 [ 741.154506][T19094] ? page_copy_sane+0x4e/0x270 [ 741.159307][T19094] shmem_get_folio_gfp+0xe1d/0x2b40 [ 741.164560][T19094] shmem_write_begin+0xf2/0x430 [ 741.169457][T19094] generic_perform_write+0x2fe/0x5c0 [ 741.174790][T19094] ? generic_file_direct_write+0x3e0/0x3e0 [ 741.180646][T19094] ? file_update_time+0x192/0x1a0 [ 741.185705][T19094] shmem_file_write_iter+0xfb/0x120 [ 741.190939][T19094] vfs_write+0x474/0x9a0 [ 741.195228][T19094] ? file_end_write+0x250/0x250 [ 741.200118][T19094] ? __fget_files+0x3fc/0x460 [ 741.204832][T19094] ? __fdget_pos+0x1d8/0x330 [ 741.209455][T19094] ? ksys_write+0x74/0x260 [ 741.213926][T19094] ksys_write+0x151/0x260 [ 741.218328][T19094] ? __ia32_sys_read+0x90/0x90 [ 741.223148][T19094] ? lockdep_hardirqs_on+0x98/0x150 [ 741.228399][T19094] do_syscall_64+0x55/0xb0 [ 741.232854][T19094] ? clear_bhb_loop+0x40/0x90 [ 741.237605][T19094] ? clear_bhb_loop+0x40/0x90 [ 741.242316][T19094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.248246][T19094] RIP: 0033:0x7fbcc835e7ce [ 741.252688][T19094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.272335][T19094] RSP: 002b:00007fbcc91e3da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 741.280796][T19094] RAX: ffffffffffffffda RBX: 00007fbcc91e46c0 RCX: 00007fbcc835e7ce [ 741.288809][T19094] RDX: 0000000001000000 RSI: 00007fbcbe1f7000 RDI: 0000000000000003 [ 741.296819][T19094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.304828][T19094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 741.312831][T19094] R13: 00007fbcc91e3ee0 R14: 00007fbcc91e3ea0 R15: 00007fbcbe1f7000 [ 741.320854][T19094] [ 741.894730][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4879'. [ 741.937165][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4879'. [ 742.574102][ T5763] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 742.760750][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 742.792534][ T5763] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 742.834133][ T5763] usb 5-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 742.843331][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.860355][T19147] loop3: detected capacity change from 0 to 512 [ 742.881081][ T5763] usb 5-1: config 0 descriptor?? [ 742.917393][T19132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 742.963239][T19147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.169546][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.440557][ T5763] hid (null): usage index exceeded [ 743.464569][ T5763] hid (null): unknown global tag 0xc [ 743.469938][ T5763] hid (null): usage index exceeded [ 743.477216][T19157] Invalid argument reading file caps for ./file0 [ 743.492004][ T5763] hid-generic 0003:0B05:184A.0021: unknown main item tag 0x2 [ 743.505759][ T5763] hid-generic 0003:0B05:184A.0021: unknown main item tag 0xd [ 743.513581][ T5763] hid-generic 0003:0B05:184A.0021: item 0 0 0 11 parsing failed [ 743.535410][ T5763] hid-generic: probe of 0003:0B05:184A.0021 failed with error -22 [ 743.691108][ T788] usb 5-1: USB disconnect, device number 20 [ 743.695080][T19161] loop5: detected capacity change from 0 to 512 [ 743.764808][T19161] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.4897: inode has both inline data and extents flags [ 743.815792][T19161] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.4897: couldn't read orphan inode 15 (err -117) [ 743.871288][T19161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.030293][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.223270][T19178] 9pnet_fd: Insufficient options for proto=fd [ 744.676943][T19192] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 744.687636][T19192] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 744.714807][ T176] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 744.940765][T19198] "syz.3.4913" (19198) uses obsolete ecb(arc4) skcipher [ 744.948592][ T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.965652][ T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.001375][ T176] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 745.033932][ T176] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 745.043025][ T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.088117][ T176] usb 5-1: config 0 descriptor?? [ 745.510434][ T176] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 745.538871][ T176] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 745.554217][ T176] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 745.575548][ T176] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 745.583098][ T176] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 745.627193][ T176] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 745.662949][ T176] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 746.304205][T19225] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.386674][T19226] loop5: detected capacity change from 0 to 4096 [ 746.509658][T19226] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 746.516994][T19226] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 746.677528][T16327] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 746.706229][T17128] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 746.718022][T17128] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 746.734512][T19218] loop3: detected capacity change from 0 to 32768 [ 746.746229][T17128] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 746.757155][ T49] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 746.828181][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 746.828198][ T27] audit: type=1800 audit(1785550053.334:193): pid=19218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4922" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 747.243794][ T5763] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 747.392814][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.400959][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.410591][ T1291] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.469355][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 747.499658][ T5763] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 747.528477][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.550476][ T5763] usb 6-1: Product: syz [ 747.576632][ T5763] usb 6-1: Manufacturer: syz [ 747.586832][ T5763] usb 6-1: SerialNumber: syz [ 747.598561][ T5763] usb 6-1: config 0 descriptor?? [ 747.695649][ T28] usb 5-1: USB disconnect, device number 21 [ 748.050776][ T5763] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 748.067675][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.078283][ T5763] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 748.091800][ T5763] usb 6-1: media controller created [ 748.130620][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.704897][T19231] dtv5100: wlen = 0, aborting. [ 748.712157][ T5763] zl10353_read_register: readreg error (reg=127, ret==0) [ 748.723313][T19251] loop4: detected capacity change from 0 to 32768 [ 748.730281][ T5763] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 748.750517][ T5763] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 748.766170][T19251] [ 748.766170][T19251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 748.766170][T19251] [ 748.789203][ T5763] usb 6-1: USB disconnect, device number 7 [ 748.889412][T19251] JFS: metapage_get_blocks failed [ 748.899533][ T5763] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 748.926070][T19251] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 748.926070][T19251] [ 748.964957][T19251] ERROR: (device loop4): diWrite: ixpxd invalid [ 748.964957][T19251] [ 748.973609][ T28] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 748.994413][T19251] ERROR: (device loop4): txCommit: [ 748.994413][T19251] [ 749.013883][T19258] [ 749.013883][T19258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.013883][T19258] [ 749.044902][T19258] [ 749.044902][T19258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.044902][T19258] [ 749.078744][T19258] [ 749.078744][T19258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.078744][T19258] [ 749.110482][T19258] [ 749.110482][T19258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.110482][T19258] [ 749.157823][T19258] [ 749.157823][T19258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.157823][T19258] [ 749.186116][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.203749][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 749.215211][ T112] [ 749.215211][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.215211][ T112] [ 749.233671][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 749.253823][T19251] ERROR: (device loop4): diWrite: ixpxd invalid [ 749.253823][T19251] [ 749.274514][T19251] ERROR: (device loop4): txCommit: [ 749.274514][T19251] [ 749.282214][ T28] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 749.283164][T19259] ERROR: (device loop4): diWrite: ixpxd invalid [ 749.283164][T19259] [ 749.304227][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.334692][T19259] ERROR: (device loop4): txCommit: [ 749.334692][T19259] [ 749.353982][ T28] usb 4-1: config 0 descriptor?? [ 749.380540][T19257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 749.433491][T16327] [ 749.433491][T16327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.433491][T16327] [ 749.444156][T16327] [ 749.444156][T16327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.444156][T16327] [ 749.456768][T16281] [ 749.456768][T16281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.456768][T16281] [ 749.468357][ T113] [ 749.468357][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.468357][ T113] [ 749.488211][T16281] [ 749.488211][T16281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 749.488211][T16281] [ 749.847048][ T28] holtek_mouse 0003:04D9:A070.0023: ignoring exceeding usage max [ 749.875138][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0x0 [ 749.913461][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0x0 [ 749.921009][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0x0 [ 749.953399][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0xe [ 749.961414][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0x0 [ 749.969040][ T28] holtek_mouse 0003:04D9:A070.0023: unknown main item tag 0x0 [ 749.981405][ T28] holtek_mouse 0003:04D9:A070.0023: hidraw0: USB HID v0.08 Device [HID 04d9:a070] on usb-dummy_hcd.3-1/input0 [ 750.132895][ T176] usb 4-1: USB disconnect, device number 43 [ 750.170195][T19267] loop5: detected capacity change from 0 to 256 [ 750.190247][T19264] fido_id[19264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 750.244744][T19267] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 750.353363][ T28] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 750.563464][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 750.596801][ T28] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 750.612109][ T28] usb 5-1: config 0 has no interface number 0 [ 750.618798][ T28] usb 5-1: config 0 interface 12 has no altsetting 0 [ 750.630892][ T28] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 750.643332][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.651906][ T28] usb 5-1: Product: syz [ 750.666542][ T28] usb 5-1: Manufacturer: syz [ 750.671316][ T28] usb 5-1: SerialNumber: syz [ 750.698797][ T28] usb 5-1: config 0 descriptor?? [ 751.092868][T19285] loop3: detected capacity change from 0 to 1024 [ 751.122695][T19285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 751.206180][T19285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.337908][T19292] loop5: detected capacity change from 0 to 1764 [ 751.376364][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.773244][ T28] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 751.800518][ T28] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 751.819858][ T28] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 751.839740][ T28] f81534: probe of 5-1:0.12 failed with error -71 [ 751.880574][ T28] usb 5-1: USB disconnect, device number 22 [ 751.919982][T19301] loop3: detected capacity change from 0 to 2048 [ 751.998267][T19301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.077181][ T27] audit: type=1800 audit(1785550058.584:194): pid=19301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4954" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 752.127501][T19301] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 752.144414][T19301] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 752.157152][T19301] EXT4-fs (loop3): This should not happen!! Data will be lost [ 752.157152][T19301] [ 752.175963][T19301] EXT4-fs (loop3): Total free blocks count 0 [ 752.184288][T19301] EXT4-fs (loop3): Free/Dirty block details [ 752.190242][T19301] EXT4-fs (loop3): free_blocks=4096 [ 752.195810][T19301] EXT4-fs (loop3): dirty_blocks=256 [ 752.201058][T19301] EXT4-fs (loop3): Block reservation details [ 752.209602][T19301] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 752.405444][ T60] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 753.081051][ T27] audit: type=1326 audit(1785550059.584:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.5.4965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffe7a9b4ac9 code=0x0 [ 753.285175][T19336] input: syz1 as /devices/virtual/input/input39 [ 753.983021][ T788] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 753.990982][T19354] input: syz1 as /devices/virtual/input/input40 [ 754.205265][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 754.219862][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.237460][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.262285][ T788] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 754.289076][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.315745][ T788] usb 4-1: config 0 descriptor?? [ 754.784558][ T788] savu 0003:1E7D:2D5A.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 754.802722][T19371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4984'. [ 755.045712][ T788] usb 4-1: USB disconnect, device number 44 [ 755.118868][T19375] fido_id[19375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 755.858664][ T5818] IPVS: starting estimator thread 0... [ 755.953035][T19391] IPVS: using max 6 ests per chain, 14400 per kthread [ 756.390092][T19385] loop4: detected capacity change from 0 to 32768 [ 756.456925][T19385] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 756.704358][T19385] XFS (loop4): Ending clean mount [ 756.829211][T16281] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 757.472020][T19430] loop5: detected capacity change from 0 to 512 [ 757.478780][ T176] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 757.611878][T19430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.675936][ T176] usb 4-1: config 0 interface 0 has no altsetting 0 [ 757.682779][ T176] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 757.692394][ T176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.703912][ T176] usb 4-1: config 0 descriptor?? [ 757.985755][T17128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.189618][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x1 [ 758.211484][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x5 [ 758.223216][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x6 [ 758.240137][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.253783][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.260886][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.292452][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.312779][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.319888][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.344150][ T176] hid-led 0003:0FC5:B080.0025: unknown main item tag 0x0 [ 758.849944][ T176] usb 4-1: USB disconnect, device number 45 [ 758.878552][T19449] loop5: detected capacity change from 0 to 32768 [ 758.990751][T19449] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 759.165105][T19449] XFS (loop5): Ending clean mount [ 759.237729][ T27] audit: type=1800 audit(1785550065.743:196): pid=19449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5011" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 759.336813][T17128] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 759.822580][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 760.005684][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.021178][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.038922][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 760.057996][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 760.068231][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.089395][ T8] usb 4-1: config 0 descriptor?? [ 760.526306][ T8] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x4 [ 760.535500][ T8] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 760.548442][ T8] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 760.794172][ T8] usb 4-1: USB disconnect, device number 46 [ 761.223001][T14850] Bluetooth: hci3: command 0x1003 tx timeout [ 761.231186][ T5084] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 761.652048][T19506] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 761.667356][ T28] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 761.862320][ T28] usb 6-1: Using ep0 maxpacket: 32 [ 761.875251][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5038'. [ 761.893230][ T28] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 761.901366][ T28] usb 6-1: config 0 has no interface number 0 [ 761.917495][ T28] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 761.927195][ T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.937594][ T28] usb 6-1: Product: syz [ 761.941920][ T28] usb 6-1: Manufacturer: syz [ 761.947207][ T28] usb 6-1: SerialNumber: syz [ 761.961863][ T28] usb 6-1: config 0 descriptor?? [ 761.979421][ T28] smsc95xx v2.0.0 [ 762.103275][T19520] loop3: detected capacity change from 0 to 64 [ 762.248645][T19520] hfs: walked past end of dir [ 762.254720][T19520] hfs: walked past end of dir [ 762.659256][ T5084] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 763.010057][ T28] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 763.067050][ T28] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 763.084358][ T28] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 763.111106][ T28] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 763.151918][T19538] tipc: New replicast peer: 127.0.0.1 [ 763.162644][ T28] usb 6-1: USB disconnect, device number 8 [ 763.190941][T19538] tipc: Enabled bearer , priority 10 [ 763.216150][T19538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5048'. [ 763.480674][T19544] loop3: detected capacity change from 0 to 4096 [ 763.576343][T19544] ntfs: volume version 3.1. [ 764.282191][ T5763] tipc: Node number set to 3827669345 [ 764.663184][ T5763] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 764.683194][T19569] syzkaller1: entered promiscuous mode [ 764.688688][T19569] syzkaller1: entered allmulticast mode [ 764.858521][ T5763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.869801][T19571] loop4: detected capacity change from 0 to 512 [ 764.886842][ T5763] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 764.905913][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.910303][T19571] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 764.935101][ T5763] usb 6-1: config 0 descriptor?? [ 764.946521][ T5763] pwc: Askey VC010 type 2 USB webcam detected. [ 764.977517][T19571] System zones: 0-2, 18-18, 34-35 [ 764.996575][T19571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.018118][T19571] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.160238][ T5763] pwc: send_video_command error -71 [ 765.165830][ T5763] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 765.189727][ T5763] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 765.213895][ T5763] usb 6-1: USB disconnect, device number 9 [ 765.292255][T16281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.803044][ T5763] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 766.039449][ T5763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.081889][ T5763] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 766.091033][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.133144][ T5763] usb 6-1: config 0 descriptor?? [ 766.156748][ T5763] pwc: Askey VC010 type 2 USB webcam detected. [ 766.370564][T19612] loop4: detected capacity change from 0 to 8 [ 766.623351][T19614] input: syz1 as /devices/virtual/input/input41 [ 766.722649][T19618] loop5: detected capacity change from 0 to 127 [ 766.761285][T19618] loop5: unable to read partition table [ 766.774974][ T5763] pwc: recv_control_msg error -71 req 02 val 2700 [ 766.791494][T19618] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5) [ 766.793412][ T5763] pwc: recv_control_msg error -71 req 02 val 2c00 [ 766.826362][ T5763] pwc: recv_control_msg error -71 req 04 val 1000 [ 766.866759][ T5763] pwc: recv_control_msg error -71 req 04 val 1300 [ 766.874893][ T5763] pwc: recv_control_msg error -71 req 04 val 1400 [ 766.902677][ T5763] pwc: recv_control_msg error -71 req 02 val 2000 [ 766.910228][ T5763] pwc: recv_control_msg error -71 req 02 val 2100 [ 766.920752][ T5763] pwc: recv_control_msg error -71 req 04 val 1500 [ 766.946428][ T5763] pwc: recv_control_msg error -71 req 02 val 2500 [ 766.984784][ T5763] pwc: recv_control_msg error -71 req 02 val 2400 [ 767.009732][ T5763] pwc: recv_control_msg error -71 req 02 val 2600 [ 767.022325][ T5763] pwc: recv_control_msg error -71 req 02 val 2900 [ 767.040863][ T5763] pwc: recv_control_msg error -71 req 02 val 2800 [ 767.059790][ T5763] pwc: recv_control_msg error -71 req 04 val 1100 [ 767.082379][ T5763] pwc: recv_control_msg error -71 req 04 val 1200 [ 767.111242][ T5763] pwc: Registered as video103. [ 767.123868][ T5763] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42 [ 767.165918][ T5763] usb 6-1: USB disconnect, device number 10 [ 767.594557][T19641] syz_tun: entered allmulticast mode [ 767.602056][ T176] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 767.642229][T19641] dvmrp8: entered allmulticast mode [ 767.654957][T19640] syz_tun: left allmulticast mode [ 767.824688][ T176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.845310][ T176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.889365][ T176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 767.909020][ T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.081869][ T5818] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 768.202607][ T176] usb 5-1: usb_control_msg returned -32 [ 768.208289][ T176] usbtmc 5-1:16.0: can't read capabilities [ 768.284512][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.301768][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 768.317596][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 768.348476][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 768.367230][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 768.395284][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 768.414640][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 768.418797][T19654] loop5: detected capacity change from 0 to 2048 [ 768.451145][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 768.481993][ T176] usb 5-1: USB disconnect, device number 23 [ 768.493868][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 768.561509][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 768.592864][T19655] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 768.602110][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 768.638596][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 768.675510][ T5818] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 768.705428][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.729042][ T5818] usb 4-1: Product: syz [ 768.735831][ T5818] usb 4-1: Manufacturer: syz [ 768.750800][ T5818] usb 4-1: SerialNumber: syz [ 768.768713][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.803051][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.841304][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.861883][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.869388][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.896277][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.932108][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.948902][T19647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.977174][ T5818] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 769.003122][ T5818] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 769.023145][ T5818] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 769.053797][ T5818] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 769.083441][ T5818] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 769.091122][ T5818] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 769.152004][ T5818] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 769.188355][ T5818] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 769.248014][T19657] loop4: detected capacity change from 0 to 8 [ 769.340317][T19655] NILFS (loop5): writing node/leaf block does not appear in b-tree (ino=16) at key=28, level=0 [ 769.363569][T19657] [ 769.365948][T19657] ====================================================== [ 769.372990][T19657] WARNING: possible circular locking dependency detected [ 769.380038][T19657] syzkaller #0 Not tainted [ 769.384645][T19657] ------------------------------------------------------ [ 769.391726][T19657] syz.4.5096/19657 is trying to acquire lock: [ 769.397811][T19657] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 769.406896][T19657] [ 769.406896][T19657] but task is already holding lock: [ 769.414277][T19657] ffff88802024e790 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1fe0/0x2580 [ 769.424752][T19657] [ 769.424752][T19657] which lock already depends on the new lock. [ 769.424752][T19657] [ 769.435169][T19657] [ 769.435169][T19657] the existing dependency chain (in reverse order) is: [ 769.444206][T19657] [ 769.444206][T19657] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 769.452599][T19657] down_write+0x97/0x200 [ 769.457396][T19657] set_blocksize+0x247/0x4b0 [ 769.462532][T19657] sb_min_blocksize+0xbe/0x190 [ 769.467837][T19657] ext4_fill_super+0x6e7/0x6870 [ 769.473263][T19657] get_tree_bdev+0x3e5/0x520 [ 769.478398][T19657] vfs_get_tree+0x8c/0x280 [ 769.483354][T19657] do_new_mount+0x24a/0xa40 [ 769.488397][T19657] init_mount+0xde/0x130 [ 769.493306][T19657] do_mount_root+0x97/0x230 [ 769.498436][T19657] mount_root_generic+0x1a6/0x3e0 [ 769.504015][T19657] prepare_namespace+0xc2/0x100 [ 769.509419][T19657] kernel_init_freeable+0x41a/0x560 [ 769.515169][T19657] kernel_init+0x1d/0x1c0 [ 769.520062][T19657] ret_from_fork+0x48/0x80 [ 769.525054][T19657] ret_from_fork_asm+0x11/0x20 [ 769.530395][T19657] [ 769.530395][T19657] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 769.539028][T19657] down_write+0x97/0x200 [ 769.543833][T19657] set_blocksize+0x1ff/0x4b0 [ 769.548979][T19657] sb_min_blocksize+0xbe/0x190 [ 769.554289][T19657] ext4_fill_super+0x6e7/0x6870 [ 769.559701][T19657] get_tree_bdev+0x3e5/0x520 [ 769.564846][T19657] vfs_get_tree+0x8c/0x280 [ 769.569811][T19657] do_new_mount+0x24a/0xa40 [ 769.574865][T19657] init_mount+0xde/0x130 [ 769.579661][T19657] do_mount_root+0x97/0x230 [ 769.584720][T19657] mount_root_generic+0x1a6/0x3e0 [ 769.590303][T19657] prepare_namespace+0xc2/0x100 [ 769.595711][T19657] kernel_init_freeable+0x41a/0x560 [ 769.601493][T19657] kernel_init+0x1d/0x1c0 [ 769.606493][T19657] ret_from_fork+0x48/0x80 [ 769.611484][T19657] ret_from_fork_asm+0x11/0x20 [ 769.616824][T19657] [ 769.616824][T19657] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 769.625112][T19657] down_read+0x46/0x2e0 [ 769.629817][T19657] super_lock+0x189/0x390 [ 769.634688][T19657] fs_bdev_sync+0xa4/0x170 [ 769.639648][T19657] blkdev_common_ioctl+0x8a9/0x2580 [ 769.645392][T19657] blkdev_ioctl+0x512/0x730 [ 769.650442][T19657] __se_sys_ioctl+0xfd/0x170 [ 769.655583][T19657] do_syscall_64+0x55/0xb0 [ 769.660541][T19657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.666982][T19657] [ 769.666982][T19657] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 769.675170][T19657] __mutex_lock+0x135/0xc80 [ 769.680242][T19657] bd_finish_claiming+0x229/0x3f0 [ 769.685909][T19657] blkdev_get_by_dev+0x469/0x610 [ 769.691392][T19657] bdev_open_by_dev+0x77/0x100 [ 769.696700][T19657] setup_bdev_super+0x59/0x660 [ 769.702007][T19657] mount_bdev+0x1ce/0x2c0 [ 769.706903][T19657] legacy_get_tree+0xea/0x180 [ 769.712133][T19657] vfs_get_tree+0x8c/0x280 [ 769.717092][T19657] do_new_mount+0x24a/0xa40 [ 769.722137][T19657] init_mount+0xde/0x130 [ 769.726925][T19657] do_mount_root+0x97/0x230 [ 769.731978][T19657] mount_root_generic+0x1a6/0x3e0 [ 769.737548][T19657] prepare_namespace+0xc2/0x100 [ 769.742947][T19657] kernel_init_freeable+0x41a/0x560 [ 769.748690][T19657] kernel_init+0x1d/0x1c0 [ 769.753571][T19657] ret_from_fork+0x48/0x80 [ 769.758530][T19657] ret_from_fork_asm+0x11/0x20 [ 769.763844][T19657] [ 769.763844][T19657] -> #0 (bdev_lock){+.+.}-{3:3}: [ 769.770991][T19657] __lock_acquire+0x37ef/0x7d80 [ 769.776499][T19657] lock_acquire+0x19e/0x420 [ 769.781551][T19657] __mutex_lock+0x135/0xc80 [ 769.786609][T19657] bd_prepare_to_claim+0x1d9/0x4a0 [ 769.792268][T19657] truncate_bdev_range+0x4e/0x260 [ 769.797838][T19657] blkdev_common_ioctl+0x1ff9/0x2580 [ 769.803674][T19657] blkdev_ioctl+0x512/0x730 [ 769.808723][T19657] __se_sys_ioctl+0xfd/0x170 [ 769.813861][T19657] do_syscall_64+0x55/0xb0 [ 769.818821][T19657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.825263][T19657] [ 769.825263][T19657] other info that might help us debug this: [ 769.825263][T19657] [ 769.835510][T19657] Chain exists of: [ 769.835510][T19657] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 769.835510][T19657] [ 769.849706][T19657] Possible unsafe locking scenario: [ 769.849706][T19657] [ 769.857175][T19657] CPU0 CPU1 [ 769.862557][T19657] ---- ---- [ 769.867934][T19657] lock(mapping.invalidate_lock); [ 769.873063][T19657] lock(&sb->s_type->i_mutex_key#8); [ 769.880996][T19657] lock(mapping.invalidate_lock); [ 769.888652][T19657] lock(bdev_lock); [ 769.892575][T19657] [ 769.892575][T19657] *** DEADLOCK *** [ 769.892575][T19657] [ 769.900735][T19657] 2 locks held by syz.4.5096/19657: [ 769.905948][T19657] #0: ffff88802024e600 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1fa7/0x2580 [ 769.917126][T19657] #1: ffff88802024e790 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1fe0/0x2580 [ 769.928051][T19657] [ 769.928051][T19657] stack backtrace: [ 769.933956][T19657] CPU: 1 PID: 19657 Comm: syz.4.5096 Not tainted syzkaller #0 [ 769.941455][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.951550][T19657] Call Trace: [ 769.954849][T19657] [ 769.957803][T19657] dump_stack_lvl+0x18c/0x250 [ 769.962509][T19657] ? load_image+0x420/0x420 [ 769.967070][T19657] ? show_regs_print_info+0x20/0x20 [ 769.972303][T19657] ? print_circular_bug+0x12b/0x1a0 [ 769.977530][T19657] check_noncircular+0x2fc/0x400 [ 769.982500][T19657] ? print_deadlock_bug+0x5d0/0x5d0 [ 769.987742][T19657] ? lockdep_lock+0xf5/0x230 [ 769.992363][T19657] ? _find_first_zero_bit+0xd6/0x100 [ 769.997693][T19657] __lock_acquire+0x37ef/0x7d80 [ 770.002593][T19657] ? deref_stack_reg+0x1ab/0x230 [ 770.007557][T19657] ? verify_lock_unused+0x140/0x140 [ 770.012794][T19657] ? __read_once_word_nocheck+0x9/0x10 [ 770.018286][T19657] ? is_bpf_text_address+0x28f/0x2a0 [ 770.023634][T19657] lock_acquire+0x19e/0x420 [ 770.028182][T19657] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 770.033499][T19657] ? __might_sleep+0xe0/0xe0 [ 770.038136][T19657] ? read_lock_is_recursive+0x20/0x20 [ 770.043539][T19657] __mutex_lock+0x135/0xc80 [ 770.048068][T19657] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 770.053376][T19657] ? verify_lock_unused+0x140/0x140 [ 770.058598][T19657] ? slab_free_freelist_hook+0x130/0x1a0 [ 770.064261][T19657] ? __kmem_cache_free+0xba/0x1f0 [ 770.069314][T19657] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 770.074998][T19657] ? security_file_ioctl+0x70/0xa0 [ 770.080137][T19657] ? __se_sys_ioctl+0x48/0x170 [ 770.084933][T19657] ? do_syscall_64+0x55/0xb0 [ 770.089548][T19657] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 770.094858][T19657] ? mutex_lock_nested+0x20/0x20 [ 770.099890][T19657] bd_prepare_to_claim+0x1d9/0x4a0 [ 770.105036][T19657] ? invalidate_bdev+0xc0/0xc0 [ 770.109826][T19657] ? truncate_bdev_range+0x260/0x260 [ 770.115141][T19657] ? __might_fault+0xaa/0x120 [ 770.119855][T19657] ? down_write+0x16e/0x200 [ 770.124388][T19657] ? down_read_killable+0x340/0x340 [ 770.129611][T19657] ? __might_fault+0xaa/0x120 [ 770.134313][T19657] truncate_bdev_range+0x4e/0x260 [ 770.139363][T19657] blkdev_common_ioctl+0x1ff9/0x2580 [ 770.144683][T19657] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 770.150351][T19657] ? blkdev_bszset+0x1f0/0x1f0 [ 770.155138][T19657] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 770.160640][T19657] blkdev_ioctl+0x512/0x730 [ 770.165173][T19657] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 770.170663][T19657] ? bpf_lsm_file_ioctl+0x9/0x10 [ 770.175619][T19657] ? security_file_ioctl+0x80/0xa0 [ 770.180760][T19657] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 770.186260][T19657] __se_sys_ioctl+0xfd/0x170 [ 770.190885][T19657] do_syscall_64+0x55/0xb0 [ 770.195328][T19657] ? clear_bhb_loop+0x40/0x90 [ 770.200032][T19657] ? clear_bhb_loop+0x40/0x90 [ 770.204736][T19657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.211091][T19657] RIP: 0033:0x7f272639df99 [ 770.215530][T19657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.235250][T19657] RSP: 002b:00007f2727204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.243686][T19657] RAX: ffffffffffffffda RBX: 00007f2726625fa0 RCX: 00007f272639df99 [ 770.251680][T19657] RDX: 0000200000000040 RSI: 0000000000001277 RDI: 0000000000000004 [ 770.259673][T19657] RBP: 00007f2726434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 770.267666][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.275664][T19657] R13: 00007f2726626038 R14: 00007f2726625fa0 R15: 00007fff0539a0b8 [ 770.283665][T19657] [ 770.286812][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.310415][T19655] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 770.378658][T19655] Remounting filesystem read-only [ 770.405598][T16327] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 770.415564][T16327] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 770.431652][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.458828][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.489272][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 770.508958][T16327] NILFS (loop5): discard dirty page: offset=28672, ino=16 [ 770.518018][ T28] usb 4-1: USB disconnect, device number 47 [ 770.537556][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.545425][ T28] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 770.550186][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.564023][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.574213][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.586289][T16327] NILFS (loop5): discard dirty page: offset=32768, ino=16 [ 770.589228][ T28] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 770.597667][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.614117][ T28] keyspan 4-1:1.0: device disconnected [ 770.616177][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.631192][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.645621][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.653358][T16327] NILFS (loop5): discard dirty page: offset=36864, ino=16 [ 770.660554][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.668848][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.676544][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.684786][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.692754][T16327] NILFS (loop5): discard dirty page: offset=40960, ino=16 [ 770.699884][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.708348][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.716158][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.724509][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.732887][T16327] NILFS (loop5): discard dirty page: offset=45056, ino=16 [ 770.740028][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.748414][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.756862][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.764210][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.771631][T16327] NILFS (loop5): discard dirty page: offset=49152, ino=16 [ 770.778771][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.786081][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.793706][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.800959][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.808294][T16327] NILFS (loop5): discard dirty page: offset=53248, ino=16 [ 770.815522][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.823344][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.830569][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.837919][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.846044][T16327] NILFS (loop5): discard dirty page: offset=57344, ino=16 [ 770.854465][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.861849][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.869070][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.876508][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.883810][T16327] NILFS (loop5): discard dirty page: offset=61440, ino=16 [ 770.890931][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.898490][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.905984][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.913320][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.920958][T16327] NILFS (loop5): discard dirty page: offset=65536, ino=16 [ 770.928220][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.935533][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.942870][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.950111][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.957517][T16327] NILFS (loop5): discard dirty page: offset=69632, ino=16 [ 770.964858][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.974070][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.984179][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.992509][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 770.999985][T16327] NILFS (loop5): discard dirty page: offset=73728, ino=16 [ 771.007243][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.014680][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.022711][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.029945][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.037304][T16327] NILFS (loop5): discard dirty page: offset=77824, ino=16 [ 771.044555][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.051854][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.059076][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.066608][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.074104][T16327] NILFS (loop5): discard dirty page: offset=81920, ino=16 [ 771.081263][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.088644][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.096066][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.103664][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.110904][T16327] NILFS (loop5): discard dirty page: offset=86016, ino=16 [ 771.118167][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.125891][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.134080][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.141470][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.149125][T16327] NILFS (loop5): discard dirty page: offset=90112, ino=16 [ 771.156484][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.165352][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.172664][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.179892][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.188945][T16327] NILFS (loop5): discard dirty page: offset=94208, ino=16 [ 771.196246][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.206356][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.214543][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.229228][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.237298][T16327] NILFS (loop5): discard dirty page: offset=98304, ino=16 [ 771.244627][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.252011][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.259238][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.266561][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.274301][T16327] NILFS (loop5): discard dirty page: offset=102400, ino=16 [ 771.281647][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.288868][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.296266][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.303589][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.311070][T16327] NILFS (loop5): discard dirty page: offset=106496, ino=16 [ 771.318470][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.325832][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.333600][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.340832][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.348210][T16327] NILFS (loop5): discard dirty page: offset=110592, ino=16 [ 771.355585][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.362965][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.370199][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.377590][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.388311][T16327] NILFS (loop5): discard dirty page: offset=114688, ino=16 [ 771.395685][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.403048][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.410497][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.417811][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.425099][T16327] NILFS (loop5): discard dirty page: offset=118784, ino=16 [ 771.432824][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.440053][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.447368][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.454662][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.462765][T16327] NILFS (loop5): discard dirty page: offset=122880, ino=16 [ 771.469998][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.477351][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.484643][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.491939][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.499186][T16327] NILFS (loop5): discard dirty page: offset=126976, ino=16 [ 771.506543][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.514244][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.521569][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.528794][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.536517][T16327] NILFS (loop5): discard dirty page: offset=131072, ino=16 [ 771.543864][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.551088][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.558453][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.565790][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.573112][T16327] NILFS (loop5): discard dirty page: offset=135168, ino=16 [ 771.580348][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.587695][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.595116][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.602443][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.609679][T16327] NILFS (loop5): discard dirty page: offset=139264, ino=16 [ 771.617283][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.625075][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.632443][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.640097][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.647406][T16327] NILFS (loop5): discard dirty page: offset=143360, ino=16 [ 771.654709][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.662024][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.669267][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.676624][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.683930][T16327] NILFS (loop5): discard dirty page: offset=147456, ino=16 [ 771.691135][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.698449][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.705989][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.713358][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.720879][T16327] NILFS (loop5): discard dirty page: offset=151552, ino=16 [ 771.728210][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.735552][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.743246][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.750472][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.757852][T16327] NILFS (loop5): discard dirty page: offset=155648, ino=16 [ 771.765173][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.772488][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.779818][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.787204][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.794650][T16327] NILFS (loop5): discard dirty page: offset=159744, ino=16 [ 771.802044][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.809370][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.817034][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.824378][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.831770][T16327] NILFS (loop5): discard dirty page: offset=163840, ino=16 [ 771.839022][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.846863][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.854141][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.861455][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.868687][T16327] NILFS (loop5): discard dirty page: offset=167936, ino=16 [ 771.876055][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.883345][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.890634][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.897922][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.905276][T16327] NILFS (loop5): discard dirty page: offset=172032, ino=16 [ 771.912632][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.920168][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.927507][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.934818][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.942173][T16327] NILFS (loop5): discard dirty page: offset=176128, ino=16 [ 771.949784][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.957344][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.964656][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.972007][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.979305][T16327] NILFS (loop5): discard dirty page: offset=180224, ino=16 [ 771.986683][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 771.994073][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.001373][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.008610][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.015928][T16327] NILFS (loop5): discard dirty page: offset=184320, ino=16 [ 772.025302][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.032639][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.039866][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.047664][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.054948][T16327] NILFS (loop5): discard dirty page: offset=188416, ino=16 [ 772.062747][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.069960][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.077286][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.084687][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.092019][T16327] NILFS (loop5): discard dirty page: offset=192512, ino=16 [ 772.099252][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.106573][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.113910][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.121131][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.128740][T16327] NILFS (loop5): discard dirty page: offset=196608, ino=16 [ 772.136648][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.143983][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.151770][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.159014][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.166384][T16327] NILFS (loop5): discard dirty page: offset=200704, ino=16 [ 772.173774][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.181013][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.188378][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.195728][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.203097][T16327] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 772.209799][T16327] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 772.217193][T16327] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 772.224622][T16327] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 772.232311][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.239569][T16327] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 772.246721][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.254553][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.261994][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.269222][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.276976][T16327] NILFS (loop5): discard dirty page: offset=8192, ino=3 [ 772.284187][T16327] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 772.291500][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.300375][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.309350][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.318370][T16327] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 772.325155][T16327] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 772.332844][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.341938][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.351004][T16327] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 772.360853][T17128] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer