last executing test programs: 8.048844657s ago: executing program 1 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r1, 0xb3c8ac16511349d1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) 7.811537903s ago: executing program 1 (id=777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 7.625194427s ago: executing program 1 (id=783): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 7.50796073s ago: executing program 1 (id=788): mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='file devio.* +', 0xe) 7.254069666s ago: executing program 1 (id=793): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x1000000, 0x0, 0x4}, 0x4800) 6.941777544s ago: executing program 1 (id=797): sync() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) sync() 3.864783938s ago: executing program 3 (id=821): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='ff', 0x2) 3.596754654s ago: executing program 3 (id=826): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0xff, 0x6109, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 3.065517077s ago: executing program 0 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 2.92228601s ago: executing program 0 (id=839): r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="25803c000000bc66189500000000", 0xe, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 2.819583163s ago: executing program 2 (id=841): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="170ae11f6fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x712, &(0x7f0000001240)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2.716799145s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0x0, 0x3, 0x100000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb8}}, 0x0) 2.682858036s ago: executing program 4 (id=843): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.658388526s ago: executing program 0 (id=844): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.51410366s ago: executing program 3 (id=845): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19e, 0x0, &(0x7f0000000180)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70ed5c912892bf266449c11e04358fe044bd0a0b442c1b77214b25c8b3af9b1228184dea49bf9a1ce305c307d04359d36d82eb73831e60655d8d9cf32944ba083d99b79ebe84f98877586f25ae28edd13c1d6a89a059dd96895d3d3b4e2670f11302c5fffd356d01235199011ebcdd2d7acdb8f6f2ad2da0ef1ffac4a687847680c3d1d8b78dc3cb1bd4c31f235bb382b04f8fd18697d03baa36c0a05a3f7ac22760485efa4044351a5ad0a4b720b123025a5d0d566a6e5a65e24f9211ed34007ccf27d7efbf59d0182e5298cede8ab4dce1b29cc194557b4c426000073fbe6d35728c6ff025e4dd5fa4c575e0ed372ece9e1d48e893e0ded8159eb46", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.51316974s ago: executing program 0 (id=846): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000340)={[{@compress_force}, {@datasum}, {@flushoncommit}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x36, 0x6b, 0x0, 0x32, 0x74, 0x34, 0x6d]}}, {@space_cache_v1}, {@commit={'commit', 0x3d, 0x7b}}, {@barrier}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000000000000000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x32, 0x37, 0x64, 0x64, 0x35, 0x33], 0x2d, [0x34, 0x34, 0x39, 0x62], 0x2d, [0x65, 0x30, 0x65, 0x65], 0x2d, [0x38, 0x39, 0x0, 0x37], 0x2d, [0x32, 0x5c, 0x37, 0x32, 0x65, 0x23af041328f1ad84, 0x65, 0x63]}}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0xc0c09425, 0x0) 2.477552041s ago: executing program 2 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, "85"}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.457287511s ago: executing program 4 (id=848): unshare(0x22020400) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f0000000300)="a450", 0x2}], 0x1, 0x0) 2.286809196s ago: executing program 4 (id=849): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.195337278s ago: executing program 3 (id=850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0x200}, &(0x7f00000002c0)=0x8) 2.11507931s ago: executing program 3 (id=851): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xa, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000006b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x0, 0x7fffffe) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 1.450194026s ago: executing program 0 (id=853): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) 1.325976629s ago: executing program 4 (id=854): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.087024404s ago: executing program 4 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="60005e80080006640002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 941.242888ms ago: executing program 4 (id=856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 517.801458ms ago: executing program 3 (id=857): ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 330.065453ms ago: executing program 2 (id=858): setresuid(0xee00, 0xee01, 0xee01) r0 = epoll_create(0x5) r1 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000}) 247.864375ms ago: executing program 2 (id=859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x4, 0xc, 0x100, 0xffffffffffffffff, 0x92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 119.830578ms ago: executing program 2 (id=860): unshare(0x400) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) 0s ago: executing program 2 (id=861): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000001040)={0x8000, 0x8fef, 0x8, 0x9, 0x19, "923dd9a36b5c0a50"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): timeout [ 74.417014][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.425934][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.452096][ T4204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.463725][ T3519] Bluetooth: hci3: command 0x0409 tx timeout [ 74.469865][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 74.469936][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 74.524044][ T4187] device hsr_slave_0 entered promiscuous mode [ 74.531291][ T4187] device hsr_slave_1 entered promiscuous mode [ 74.538334][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.547151][ T4187] Cannot create hsr debugfs directory [ 74.683122][ T4204] device hsr_slave_0 entered promiscuous mode [ 74.690227][ T4204] device hsr_slave_1 entered promiscuous mode [ 74.696968][ T4204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.705309][ T4204] Cannot create hsr debugfs directory [ 74.892335][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.921136][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.941149][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.965118][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.976409][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.986451][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.996703][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.024567][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.041390][ T4204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.058533][ T4204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.071772][ T4204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.092589][ T4204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.173533][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.209846][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.222050][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.251136][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.319995][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.339013][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.352357][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.366305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.376316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.391688][ T4204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.399109][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.421761][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.440328][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.455746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.464366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.492168][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.506137][ T4204] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.514200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.525283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.533858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.543469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.553145][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.560622][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.570200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.579075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.587914][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.595040][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.604013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.619082][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.634427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.643870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.654795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.664444][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.671758][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.681859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.692642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.729238][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.743394][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.752725][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.760140][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.771797][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.781291][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.790350][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.797448][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.805975][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.817588][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.826553][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.833788][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.843027][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.853921][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.863979][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.872829][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.909739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.921310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.935976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.946232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.956091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.965266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.984295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.995481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.004975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.016303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.025408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.035566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.044586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.056271][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.094815][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.106947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.116807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.126378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.135607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.171139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.188922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.206716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.216777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.233558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.242834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.251597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.260580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.269515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.297588][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.319926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.328674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.345821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.356379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.372836][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.393494][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.434878][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.446154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.460027][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 76.466234][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 76.480469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.500693][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.507816][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.539853][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 76.550786][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 76.560198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.578000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.583458][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 76.589265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.621131][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.628958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.648295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.657459][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.664619][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.679815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.688922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.705397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.715180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.734241][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.771225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.791511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.810015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.818858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.827760][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.835083][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.845626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.856344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.866618][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.873795][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.883385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.892051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.935094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.944763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.959196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.967197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.975187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.983699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.002376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.011947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.031251][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.040935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.052424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.066085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.076035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.087059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.096814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.107722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.123263][ T4204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.148157][ T4192] device veth0_vlan entered promiscuous mode [ 77.167417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.177916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.196461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.207510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.224309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.235408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.246496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.256141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.270817][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.306190][ T4192] device veth1_vlan entered promiscuous mode [ 77.328874][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.352483][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.372463][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.393548][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.414661][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.433871][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.450406][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.487509][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.500543][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.562881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.580768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.589509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.607424][ T4192] device veth0_macvtap entered promiscuous mode [ 77.638137][ T4192] device veth1_macvtap entered promiscuous mode [ 77.655836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.681039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.689270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.708952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.725747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.734584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.746665][ T4189] device veth0_vlan entered promiscuous mode [ 77.769330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.777064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.800781][ T4189] device veth1_vlan entered promiscuous mode [ 77.815404][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.826398][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.835610][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.844328][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.864827][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.877217][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.889270][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.900396][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.909733][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.919361][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.929449][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.939043][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.952564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.962116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.974505][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.984482][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993588][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.002767][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.053754][ T4189] device veth0_macvtap entered promiscuous mode [ 78.098666][ T4204] device veth0_vlan entered promiscuous mode [ 78.106929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.118064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.127865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.137018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.146977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.155930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.165479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.174163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.182424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.193463][ T4189] device veth1_macvtap entered promiscuous mode [ 78.213444][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.222729][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.233727][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.280880][ T4204] device veth1_vlan entered promiscuous mode [ 78.297108][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.315490][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.327755][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.357012][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.367908][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.380428][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.388225][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.397767][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.408853][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.418613][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.428733][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.437945][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.446815][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.457002][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.465641][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.478419][ T4197] device veth0_vlan entered promiscuous mode [ 78.515430][ T4197] device veth1_vlan entered promiscuous mode [ 78.541980][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.551959][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 78.558120][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 78.564914][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575471][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.586367][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.597410][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.606853][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.615716][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.625019][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.632742][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 78.632792][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 78.632818][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 78.654202][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.663698][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.672020][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.687384][ T4187] device veth0_vlan entered promiscuous mode [ 78.729165][ T4204] device veth0_macvtap entered promiscuous mode [ 78.738358][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.747924][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.765790][ T4197] device veth0_macvtap entered promiscuous mode [ 78.782874][ T4187] device veth1_vlan entered promiscuous mode [ 78.792937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.803762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.812437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.821837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.830856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.840329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.849154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.857897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.869949][ T4204] device veth1_macvtap entered promiscuous mode [ 78.884394][ T4197] device veth1_macvtap entered promiscuous mode [ 78.914490][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.925182][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.935314][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.946871][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.959115][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.969397][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.980220][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.991282][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.002504][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.014935][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.035771][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.045814][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056624][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.065753][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.076645][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.086150][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.095245][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.105751][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.115362][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.124642][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.134086][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.183435][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.193461][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.211012][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.225652][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.234921][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.246650][ T4187] device veth0_macvtap entered promiscuous mode [ 79.275932][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.295156][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.306216][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.316988][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.328532][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.340183][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.355180][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.375007][ T4187] device veth1_macvtap entered promiscuous mode [ 79.399325][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.400547][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.420643][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432291][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.441921][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.451705][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.461855][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.472795][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.487878][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.498522][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.509759][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.519834][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.530429][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.542313][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.614748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.630856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.648503][ T4204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.658616][ T4204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.670305][ T4204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.680262][ T4204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.693571][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.704237][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.714950][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.727731][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.737947][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.749238][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.761822][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.772773][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.784459][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.813310][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.828504][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.885387][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.896891][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.897366][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.919063][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.929214][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.940203][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.950457][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.963435][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.973550][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.988227][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.001552][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.021652][ T4277] tipc: Started in network mode [ 80.027241][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.027244][ T4277] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 80.027264][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.037443][ T4277] tipc: Enabled bearer , priority 0 [ 80.058310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.071850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.086003][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.097035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.136370][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.155076][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169275][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.183160][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.295148][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.321348][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.353868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.409758][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.425765][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.454344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.489057][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.507459][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.538402][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.569351][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.603136][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.609726][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.620653][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 80.626760][ T4239] Bluetooth: hci1: command 0x0419 tx timeout [ 80.648173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.662352][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.699105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.707230][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 80.713875][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 80.729675][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 80.949817][ T3519] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.161014][ T4234] tipc: Node number set to 43690 [ 81.185266][ T4313] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 81.199666][ T3519] usb 2-1: Using ep0 maxpacket: 16 [ 81.238832][ T4315] program syz.0.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.257389][ T4313] program syz.2.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.275738][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.329864][ T3519] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.374483][ T3519] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 81.405153][ T3519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.443675][ T3519] usb 2-1: config 0 descriptor?? [ 81.629017][ T4334] loop2: detected capacity change from 0 to 256 [ 81.743304][ T4334] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.819110][ T4334] exFAT-fs (loop2): hint_cluster is invalid (17) [ 81.847386][ T4334] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 81.863579][ T4334] exFAT-fs (loop2): Filesystem has been set read-only [ 81.950521][ T3519] hid (null): report_id 0 is invalid [ 81.981738][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0xd [ 82.008853][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 82.028489][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 82.055707][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 82.103479][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 82.147822][ T3519] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 82.187542][ T3519] nzxt-kraken2 0003:1E71:170E.0001: report_id 0 is invalid [ 82.198743][ T3519] nzxt-kraken2 0003:1E71:170E.0001: item 0 0 1 8 parsing failed [ 82.233995][ T3519] nzxt-kraken2 0003:1E71:170E.0001: hid parse failed with -22 [ 82.260536][ T3519] nzxt-kraken2: probe of 0003:1E71:170E.0001 failed with error -22 [ 82.314119][ T3519] usb 2-1: USB disconnect, device number 2 [ 82.336788][ T4355] loop4: detected capacity change from 0 to 1024 [ 82.616142][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 83.099476][ T4393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.53'. [ 83.293641][ T4406] loop4: detected capacity change from 0 to 16 [ 83.384123][ T4406] erofs: (device loop4): mounted with root inode @ nid 36. [ 83.429743][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.463256][ T4410] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.669693][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 83.748298][ T4425] loop2: detected capacity change from 0 to 512 [ 83.765076][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 83.789978][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.813390][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.823861][ T4418] loop4: detected capacity change from 0 to 4096 [ 83.830633][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.840636][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.851251][ T1111] usb 4-1: config 0 descriptor?? [ 83.891733][ T1111] hub 4-1:0.0: USB hub found [ 83.910151][ T4418] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 84.099917][ T1111] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 84.146349][ T4433] loop1: detected capacity change from 0 to 8 [ 84.154219][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 84.317933][ T4433] SQUASHFS error: zlib decompression failed, data probably corrupt [ 84.359030][ T4441] udc-core: couldn't find an available UDC or it's busy [ 84.383930][ T4433] SQUASHFS error: Failed to read block 0x4e8: -5 [ 84.390724][ T4441] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.415081][ T4433] SQUASHFS error: zlib decompression failed, data probably corrupt [ 84.424195][ T4433] SQUASHFS error: Failed to read block 0x4ee: -5 [ 84.435110][ T26] audit: type=1800 audit(1786649508.192:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 84.532563][ T1111] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 84.548988][ T4448] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 84.585538][ T1111] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 84.879713][ T4234] usb 4-1: USB disconnect, device number 2 [ 85.503896][ T4484] udc-core: couldn't find an available UDC or it's busy [ 85.586382][ T4484] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.882878][ T4501] loop1: detected capacity change from 0 to 512 [ 86.009284][ T4501] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 86.069978][ T4501] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 86.109614][ T4501] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 86.142911][ T4501] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 86.187899][ T4517] loop2: detected capacity change from 0 to 128 [ 86.195965][ T4501] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.291189][ T4501] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.303281][ T4528] loop0: detected capacity change from 0 to 1024 [ 86.315563][ T4522] bcache: register_bcache() error : failed to open device [ 86.345087][ T4501] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.103: bg 0: block 34: padding at end of block bitmap is not set [ 86.370328][ T4501] Quota error (device loop1): write_blk: dquota write failed [ 86.378139][ T4501] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.489688][ T4501] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.103: Failed to acquire dquot type 1 [ 86.556234][ T4501] EXT4-fs (loop1): 1 truncate cleaned up [ 86.608530][ T4501] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 86.751907][ T4543] kAFS: Invalid Command on /proc/fs/afs/cells file [ 86.794395][ T13] cfg80211: failed to load regulatory.db [ 87.336678][ T4555] loop1: detected capacity change from 0 to 128 [ 87.477706][ T4555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.592082][ T4555] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.873948][ T4569] loop2: detected capacity change from 0 to 512 [ 88.038409][ T4569] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.133: inode has both inline data and extents flags [ 88.080992][ T4569] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.133: couldn't read orphan inode 15 (err -117) [ 88.116719][ T4545] loop4: detected capacity change from 0 to 32768 [ 88.158433][ T4582] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 88.167315][ T4569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.168991][ T4582] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 88.270362][ T4569] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 88.340694][ T26] audit: type=1800 audit(1786649512.102:3): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.124" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 88.407980][ T4585] loop1: detected capacity change from 0 to 1024 [ 88.632396][ T9] hfsplus: b-tree write err: -5, ino 25 [ 88.689870][ T9] hfsplus: b-tree write err: -5, ino 4 [ 88.731527][ T9] hfsplus: b-tree write err: -5, ino 2 [ 88.740284][ T4595] loop3: detected capacity change from 0 to 512 [ 88.762319][ T4598] program syz.2.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.881095][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 88.970534][ T4595] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.123557][ T4595] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.143: invalid size [ 89.229800][ T4595] EXT4-fs (loop3): Remounting filesystem read-only [ 89.938656][ T4630] loop1: detected capacity change from 0 to 1024 [ 90.049668][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.469896][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 90.502669][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.520721][ T4640] loop3: detected capacity change from 0 to 1024 [ 90.543763][ T7] usb 5-1: config 0 descriptor?? [ 90.611538][ T7] cp210x 5-1:0.0: cp210x converter detected [ 90.618994][ T4644] loop1: detected capacity change from 0 to 2048 [ 90.647810][ T4640] EXT4-fs (loop3): Ignoring removed bh option [ 90.680901][ T4640] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.736742][ T4644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.830698][ T4640] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 90.957737][ T4652] ======================================================= [ 90.957737][ T4652] WARNING: The mand mount option has been deprecated and [ 90.957737][ T4652] and is ignored by this kernel. Remove the mand [ 90.957737][ T4652] option from the mount to silence this warning. [ 90.957737][ T4652] ======================================================= [ 91.079861][ T7] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 91.152258][ T4657] loop0: detected capacity change from 0 to 256 [ 91.206301][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 91.268454][ T4659] loop1: detected capacity change from 0 to 1024 [ 91.406951][ T4657] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 91.421799][ T7] usb 5-1: USB disconnect, device number 2 [ 91.484865][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.562032][ T7] cp210x 5-1:0.0: device disconnected [ 92.029825][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.319659][ T26] audit: type=1800 audit(1786649516.052:4): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.184" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 92.433149][ T4699] set_capacity_and_notify: 1 callbacks suppressed [ 92.433160][ T4699] loop4: detected capacity change from 0 to 32768 [ 92.440445][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.461696][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.474863][ T4234] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 92.513688][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.535648][ T4706] udc-core: couldn't find an available UDC or it's busy [ 92.546889][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.576572][ T4234] usb 4-1: config 0 descriptor?? [ 92.628425][ T4699] XFS (loop4): Mounting V5 Filesystem [ 92.684138][ T4699] XFS (loop4): Ending clean mount [ 92.698993][ T4699] XFS (loop4): Quotacheck needed: Please wait. [ 92.742986][ T4699] XFS (loop4): Quotacheck: Done. [ 92.789966][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.886937][ T4204] XFS (loop4): Unmounting Filesystem [ 92.947721][ T4715] loop2: detected capacity change from 0 to 256 [ 92.968918][ T4715] exfat: Deprecated parameter 'utf8' [ 92.979991][ T4715] exfat: Deprecated parameter 'utf8' [ 92.986029][ T4715] exfat: Deprecated parameter 'namecase' [ 93.034268][ T4715] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 93.068163][ T4234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 93.075724][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 93.103553][ T4234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 93.118803][ T4234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 93.127075][ T4234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 93.134829][ T4234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 93.177752][ T4234] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 93.208038][ T4717] loop0: detected capacity change from 0 to 512 [ 93.299373][ T4717] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.316727][ T4717] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.399855][ T4234] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 22 [ 93.409834][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 93.418926][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.428615][ T4234] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 93.440795][ T13] usb 2-1: Product: syz [ 93.445125][ T4234] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 93.459978][ T13] usb 2-1: Manufacturer: syz [ 93.464623][ T13] usb 2-1: SerialNumber: syz [ 93.471667][ T4234] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 93.478740][ T4726] loop4: detected capacity change from 0 to 128 [ 93.489203][ T13] usb 2-1: config 0 descriptor?? [ 93.511166][ T4234] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 93.548026][ T13] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 93.577362][ T4726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.598574][ T4728] Zero length message leads to an empty skb [ 93.626617][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 93.663319][ T4726] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.694210][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.712500][ T4237] usb 4-1: USB disconnect, device number 3 [ 93.775517][ T13] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 93.827185][ T13] usb 2-1: media controller created [ 93.866820][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.908321][ T4735] fido_id[4735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.928263][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 93.960937][ T13] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 94.012113][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 94.038935][ T13] dvb-usb: schedule remote query interval to 50 msecs. [ 94.046407][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 94.052818][ T13] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 94.090857][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.104705][ T13] usb 2-1: USB disconnect, device number 3 [ 94.200945][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 94.258448][ T13] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 94.318882][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 94.339706][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 94.352521][ T4752] binder: 4750:4752 ioctl c0306201 2000000004c0 returned -14 [ 94.458037][ T4757] udc-core: couldn't find an available UDC or it's busy [ 94.466494][ T23] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 94.492235][ T4757] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.618654][ T4764] input: syz1 as /devices/virtual/input/input6 [ 94.646748][ T3519] kernel write not supported for file /sysvipc/shm (pid: 3519 comm: kworker/1:3) [ 94.660125][ T23] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.681888][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.711889][ T23] usb 3-1: Product: syz [ 94.721862][ T23] usb 3-1: Manufacturer: syz [ 94.732592][ T23] usb 3-1: SerialNumber: syz [ 94.747527][ T23] usb 3-1: config 0 descriptor?? [ 94.802135][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.840871][ T23] usb 3-1: setting power ON [ 94.862975][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 94.885475][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.931820][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.955007][ T23] usb 3-1: media controller created [ 95.012462][ T4733] dvb-usb: bulk message failed: -22 (3/0) [ 95.024204][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.056878][ T4733] dvb-usb: bulk message failed: -22 (5/0) [ 95.071192][ T23] usb 3-1: selecting invalid altsetting 6 [ 95.086754][ T23] usb 3-1: digital interface selection failed (-22) [ 95.094561][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 95.139261][ T4784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 95.150119][ T23] usb 3-1: setting power OFF [ 95.155214][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 95.177780][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 95.197951][ T23] (NULL device *): no alternate interface [ 95.209724][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.278683][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 95.325267][ T23] usb 3-1: USB disconnect, device number 2 [ 95.529703][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 95.624397][ T26] audit: type=1326 audit(1786649519.382:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.3.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7841d850d9 code=0x0 [ 95.709848][ T13] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 95.721536][ T13] usb 2-1: config 0 has no interface number 0 [ 95.740007][ T13] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 95.775646][ T4782] loop4: detected capacity change from 0 to 32768 [ 95.841419][ T4808] netlink: 56 bytes leftover after parsing attributes in process `syz.2.225'. [ 95.919062][ T4782] XFS (loop4): Mounting V5 Filesystem [ 95.952830][ T4814] loop2: detected capacity change from 0 to 512 [ 95.960271][ T13] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 95.969894][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.978451][ T13] usb 2-1: Product: syz [ 95.983441][ T13] usb 2-1: Manufacturer: syz [ 95.988297][ T13] usb 2-1: SerialNumber: syz [ 96.004394][ T13] usb 2-1: config 0 descriptor?? [ 96.030816][ T4776] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.072145][ T4814] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 96.161478][ T4782] XFS (loop4): Ending clean mount [ 96.176596][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,. Quota mode: writeback. [ 96.199973][ T4782] XFS (loop4): Quotacheck needed: Please wait. [ 96.249837][ T4814] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.273096][ T4776] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.294853][ T4782] XFS (loop4): Quotacheck: Done. [ 96.423862][ T4782] XFS (loop4): User initiated shutdown received. [ 96.440419][ T4782] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 96.566926][ T4782] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 96.667999][ T4204] XFS (loop4): Unmounting Filesystem [ 96.854654][ T4818] loop3: detected capacity change from 0 to 40427 [ 96.944525][ T4818] F2FS-fs (loop3): invalid crc value [ 96.994366][ T4818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.011271][ T13] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 97.046643][ T13] asix: probe of 2-1:0.188 failed with error -71 [ 97.085002][ T13] usb 2-1: USB disconnect, device number 4 [ 97.287517][ T4818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.287695][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 97.642741][ T4197] attempt to access beyond end of device [ 97.642741][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 97.693331][ T4862] loop2: detected capacity change from 0 to 256 [ 97.729449][ T4864] tap0: tun_chr_ioctl cmd 1074025680 [ 97.966793][ T23] kernel write not supported for file /uinput (pid: 23 comm: kworker/1:1) [ 98.116561][ T4882] loop0: detected capacity change from 0 to 128 [ 98.119277][ T4883] loop2: detected capacity change from 0 to 512 [ 98.149449][ T4885] loop1: detected capacity change from 0 to 256 [ 98.202028][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.219958][ T4882] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.234630][ T4885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 98.682634][ T4897] program syz.1.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.747647][ T4899] loop2: detected capacity change from 0 to 256 [ 98.823455][ T4902] loop4: detected capacity change from 0 to 1024 [ 99.050771][ T4204] hfsplus: xattr search failed [ 99.104030][ T4204] hfsplus: xattr search failed [ 99.116297][ T4204] hfsplus: xattr search failed [ 99.130867][ T4913] loop2: detected capacity change from 0 to 64 [ 99.186049][ T4204] hfsplus: xattr search failed [ 99.208499][ T4204] hfsplus: xattr search failed [ 99.250610][ T4204] hfsplus: xattr search failed [ 99.264719][ T4913] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 99.265044][ T4204] hfsplus: xattr search failed [ 99.286408][ T4913] hfs: get root inode failed [ 99.309277][ T4204] hfsplus: xattr search failed [ 99.353944][ T4204] hfsplus: xattr search failed [ 99.816454][ T4925] loop0: detected capacity change from 0 to 4096 [ 100.206598][ T4906] loop1: detected capacity change from 0 to 32768 [ 100.332437][ T26] audit: type=1800 audit(1786649524.092:6): pid=4906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.264" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 100.355974][ T4909] loop3: detected capacity change from 0 to 40427 [ 100.462079][ T4909] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 100.510750][ T4909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.553087][ T4909] F2FS-fs (loop3): invalid crc value [ 100.581157][ T4909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.766578][ T4909] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.787028][ T4909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.790315][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.915139][ T4909] attempt to access beyond end of device [ 100.915139][ T4909] loop3: rw=2049, want=77960, limit=40427 [ 101.007887][ T4197] attempt to access beyond end of device [ 101.007887][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 101.119658][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 101.250876][ T13] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 101.259192][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 101.289046][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.314101][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 101.331544][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 101.347211][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.371412][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.396109][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.740118][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 101.745777][ T13] usbtmc 5-1:16.0: can't read capabilities [ 101.984202][ T13] usb 5-1: USB disconnect, device number 3 [ 102.100320][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 102.141748][ T4989] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.242746][ T4983] (syz.2.297,4983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.267211][ T4983] (syz.2.297,4983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.352456][ T4983] JBD2: Ignoring recovery information on journal [ 102.484388][ T4983] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.577773][ T4983] (syz.2.297,4983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 102.601774][ T5001] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 102.768403][ T4197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 102.858057][ T5006] capability: warning: `syz.4.308' uses deprecated v2 capabilities in a way that may be insecure [ 102.884063][ T5006] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 102.903327][ T5006] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 102.922423][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 103.340940][ T5019] set_capacity_and_notify: 4 callbacks suppressed [ 103.340957][ T5019] loop1: detected capacity change from 0 to 2048 [ 104.134009][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 104.541151][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.560640][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.665663][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.724395][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.985671][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 105.041522][ T13] usb 3-1: GET_CAPABILITIES returned 0 [ 105.047231][ T13] usbtmc 3-1:16.0: can't read capabilities [ 105.290801][ T7] usb 3-1: USB disconnect, device number 3 [ 105.603356][ T5102] pimreg1: tun_chr_ioctl cmd 1074025677 [ 105.619482][ T5102] pimreg1: linktype set to 0 [ 105.929177][ T5114] loop3: detected capacity change from 0 to 512 [ 106.000054][ T5114] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.168922][ T5118] loop1: detected capacity change from 0 to 1024 [ 106.189831][ T26] audit: type=1804 audit(1786649529.942:7): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.338" name="/newroot/56/file0/bus" dev="loop3" ino=1048598 res=1 errno=0 [ 106.217616][ T5120] loop4: detected capacity change from 0 to 512 [ 106.244175][ T5120] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.299194][ T5099] loop0: detected capacity change from 0 to 32768 [ 106.351477][ T5120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.440748][ T5099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.335 (5099) [ 106.461568][ T5120] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.341: invalid indirect mapped block 9 (level 0) [ 106.614099][ T5120] EXT4-fs (loop4): Remounting filesystem read-only [ 106.679250][ T1325] hid-generic 0005:0B57:0000.0004: item fetching failed at offset 0/1 [ 106.691338][ T1325] hid-generic: probe of 0005:0B57:0000.0004 failed with error -22 [ 106.700208][ T5120] EXT4-fs (loop4): 1 truncate cleaned up [ 106.706517][ T5120] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,init_itable=0x0000000000000001,. Quota mode: none. [ 106.734962][ T5099] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.750986][ T5144] loop2: detected capacity change from 0 to 256 [ 106.797840][ T5144] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.827485][ T5144] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 106.872432][ T26] audit: type=1800 audit(1786649530.632:8): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 106.897733][ T5144] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 106.937734][ T5099] BTRFS info (device loop0): force clearing of disk cache [ 106.971892][ T5099] BTRFS info (device loop0): enabling auto defrag [ 106.986138][ T5099] BTRFS info (device loop0): max_inline at 428 [ 107.026061][ T5099] BTRFS info (device loop0): enabling disk space caching [ 107.072372][ T5099] BTRFS info (device loop0): disk space caching is enabled [ 107.097421][ T5099] BTRFS info (device loop0): has skinny extents [ 107.198867][ T5157] program syz.3.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.696545][ T5099] BTRFS info (device loop0): enabling ssd optimizations [ 107.759662][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.816101][ T5099] BTRFS info (device loop0): clearing free space tree [ 107.854632][ T5193] Line length is too long: Should be less than 4094 [ 107.894016][ T5099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.972792][ T5099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.006241][ T5169] loop1: detected capacity change from 0 to 32768 [ 108.019972][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 108.159911][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 108.213344][ T5169] XFS (loop1): Mounting V5 Filesystem [ 108.370048][ T1325] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 108.409587][ T1325] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 108.477220][ T1325] usb 5-1: Product: syz [ 108.491892][ T1325] usb 5-1: Manufacturer: syz [ 108.496564][ T1325] usb 5-1: SerialNumber: syz [ 108.503448][ T5202] loop2: detected capacity change from 0 to 32768 [ 108.553965][ T5169] XFS (loop1): Ending clean mount [ 108.554338][ T5202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.362 (5202) [ 108.672470][ T5202] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.729853][ T5202] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.760668][ T5202] BTRFS info (device loop2): force zstd compression, level 15 [ 108.760743][ T5202] BTRFS info (device loop2): using free space tree [ 108.826492][ T5202] BTRFS info (device loop2): has skinny extents [ 108.851759][ T4192] XFS (loop1): Unmounting Filesystem [ 108.869863][ T1325] usb 5-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 108.869923][ T1325] usb 5-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 108.869944][ T1325] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 109.089804][ T1325] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 109.106589][ T1325] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 109.156783][ T1325] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 109.200098][ T1325] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 109.228898][ T1325] usb 5-1: USB disconnect, device number 4 [ 109.269398][ T1325] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 109.315433][ T1325] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 109.334845][ T1325] visor 5-1:1.0: device disconnected [ 109.457935][ T5202] BTRFS info (device loop2): enabling ssd optimizations [ 110.011198][ T5279] loop4: detected capacity change from 0 to 512 [ 110.087911][ T5279] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 110.088805][ T5279] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.594612][ T5296] loop1: detected capacity change from 0 to 2048 [ 110.708008][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 110.717031][ T5302] netlink: 68 bytes leftover after parsing attributes in process `syz.4.375'. [ 110.717150][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 110.891641][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 111.151787][ T5316] overlayfs: unrecognized mount option "contextÀÊŸ˜ÿ7¦tÆUpIjÖ3-<_Þð®¬qB«`…ic7¦ÍãÏl17æ)T–=ramfs%\bM:6OŽàÖ¯äÁž¡Ä‹" or missing value [ 111.322552][ T5321] loop4: detected capacity change from 0 to 1024 [ 111.364147][ T5321] EXT4-fs (loop4): Ignoring removed oldalloc option [ 111.409916][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 111.520674][ T5321] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.542887][ T5321] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.386: lblock 3 mapped to illegal pblock 3 (length 3) [ 111.585245][ T5321] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 111.585282][ T5321] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.585282][ T5321] [ 111.597281][ T5321] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.386: lblock 0 mapped to illegal pblock 0 (length 1) [ 111.713070][ T155] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 111.722460][ T155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 111.722496][ T155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.722496][ T155] [ 111.942180][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 111.972454][ T5342] netlink: 'syz.4.394': attribute type 6 has an invalid length. [ 111.990523][ T5344] loop0: detected capacity change from 0 to 512 [ 112.090800][ T5344] EXT4-fs (loop0): Ignoring removed oldalloc option [ 112.160908][ T5344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 112.217980][ T5344] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.233867][ T5344] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 112.254917][ T5344] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 112.309767][ T5344] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.395: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.361700][ T5344] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.395: couldn't read orphan inode 13 (err -117) [ 112.390807][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,nobarrier,debug,oldalloc,journal_ioprio=0x0000000000000006,grpid,,errors=continue. Quota mode: writeback. [ 112.436291][ T5333] loop1: detected capacity change from 0 to 40427 [ 112.487964][ T5333] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 112.498939][ T5344] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 112.511936][ T5333] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 112.533627][ T5344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 112.550662][ T5333] F2FS-fs (loop1): invalid crc value [ 112.575644][ T5333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.587175][ T5344] System zones: 0-2, 18-18, 34-34 [ 112.614923][ T5344] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 112.616027][ T5359] loop4: detected capacity change from 0 to 256 [ 112.658004][ T5337] loop2: detected capacity change from 0 to 32768 [ 112.711690][ T5333] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 112.795694][ T5333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.913925][ T5337] XFS (loop2): Mounting V5 Filesystem [ 112.943693][ T5359] FAT-fs (loop4): Directory bread(block 64) failed [ 112.974971][ T5333] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 112.988087][ T5359] FAT-fs (loop4): Directory bread(block 65) failed [ 113.002792][ T5333] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0 [ 113.030121][ T5359] FAT-fs (loop4): Directory bread(block 66) failed [ 113.043751][ T5359] FAT-fs (loop4): Directory bread(block 67) failed [ 113.078081][ T5359] FAT-fs (loop4): Directory bread(block 68) failed [ 113.099744][ T5359] FAT-fs (loop4): Directory bread(block 69) failed [ 113.106652][ T5359] FAT-fs (loop4): Directory bread(block 70) failed [ 113.114387][ T5359] FAT-fs (loop4): Directory bread(block 71) failed [ 113.121415][ T5359] FAT-fs (loop4): Directory bread(block 72) failed [ 113.128040][ T5359] FAT-fs (loop4): Directory bread(block 73) failed [ 113.151588][ T5337] XFS (loop2): Ending clean mount [ 113.240886][ T26] audit: type=1800 audit(1786649537.002:9): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.392" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 113.390234][ T4189] XFS (loop2): Unmounting Filesystem [ 113.398000][ T26] audit: type=1800 audit(1786649537.152:10): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="bus" dev="loop4" ino=1048601 res=0 errno=0 [ 113.465475][ T5379] netlink: 76 bytes leftover after parsing attributes in process `syz.0.406'. [ 113.619653][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.855408][ T5387] vhci_hcd: not connected 4 [ 113.938295][ T5391] loop2: detected capacity change from 0 to 64 [ 114.004600][ T5393] loop0: detected capacity change from 0 to 512 [ 114.054558][ T4233] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 114.065783][ T4233] usb 4-1: config 0 has no interface number 0 [ 114.106845][ T4233] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 114.157780][ T4233] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.190163][ T4233] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 114.421363][ T4233] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 114.443532][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 114.472746][ T4233] usb 4-1: Product: syz [ 114.477021][ T4233] usb 4-1: Manufacturer: syz [ 114.504489][ T4233] usb 4-1: SerialNumber: syz [ 114.532862][ T4233] usb 4-1: config 0 descriptor?? [ 114.603628][ T4233] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.655605][ T4233] xpad: probe of 4-1:0.237 failed with error -5 [ 114.856457][ T4233] usb 4-1: USB disconnect, device number 4 [ 115.105929][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 115.128850][ T5405] loop0: detected capacity change from 0 to 32768 [ 115.233717][ T5417] loop1: detected capacity change from 0 to 32768 [ 115.459958][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 115.506263][ T5417] XFS (loop1): Mounting V5 Filesystem [ 115.564721][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.600249][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 115.674199][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.747185][ T5295] hid-generic 0005:0C45:0008.0005: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 115.758356][ T5417] XFS (loop1): Ending clean mount [ 115.791208][ T5417] XFS (loop1): Quotacheck needed: Please wait. [ 115.800210][ T7] usb 3-1: Found UVC 1.00 device (046d:0825) [ 115.855672][ T5455] loop3: detected capacity change from 0 to 164 [ 115.876291][ T26] audit: type=1326 audit(1786649539.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 115.932704][ T5417] XFS (loop1): Quotacheck: Done. [ 116.029621][ T26] audit: type=1326 audit(1786649539.632:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.119584][ T26] audit: type=1326 audit(1786649539.692:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.147108][ T4192] XFS (loop1): Unmounting Filesystem [ 116.282094][ T5464] loop0: detected capacity change from 0 to 512 [ 116.289809][ T26] audit: type=1326 audit(1786649539.692:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.398460][ T26] audit: type=1326 audit(1786649539.692:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.429122][ T26] audit: type=1326 audit(1786649539.692:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.464132][ T5431] loop4: detected capacity change from 0 to 32768 [ 116.531465][ T26] audit: type=1326 audit(1786649539.692:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.570487][ T5431] xfs: Unknown parameter 'smackfstransmute' [ 116.579782][ T26] audit: type=1326 audit(1786649539.692:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92708570d9 code=0x7ffc0000 [ 116.631298][ T5464] EXT4-fs (loop0): 1 truncate cleaned up [ 116.637421][ T5464] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none. [ 116.682526][ T5464] EXT4-fs (loop0): shut down requested (2) [ 116.709848][ T7] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 116.731820][ T7] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 116.819838][ T7] usb 3-1: USB disconnect, device number 4 [ 117.144930][ T5476] loop0: detected capacity change from 0 to 24 [ 117.443645][ T5487] loop3: detected capacity change from 0 to 1024 [ 117.486826][ T5491] loop1: detected capacity change from 0 to 256 [ 117.506221][ T5487] EXT4-fs (loop3): Ignoring removed bh option [ 117.581176][ T5491] exfat: Deprecated parameter 'utf8' [ 117.609886][ T5487] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noload,barrier=0x0000000000000804,nolazytime,abort,lazytime,grpquota,stripe=0x0000000000000005,bh,init_itable,min_batch_time=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 117.657224][ T5491] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 117.724303][ T5487] EXT4-fs (loop3): shut down requested (2) [ 118.010690][ T5506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.096339][ T5506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 118.145810][ T5506] System zones: 1-12 [ 118.203720][ T5506] EXT4-fs (loop3): 1 truncate cleaned up [ 118.217435][ T5509] netlink: 27 bytes leftover after parsing attributes in process `syz.1.450'. [ 118.247381][ T5506] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none. [ 118.683556][ T5519] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 118.719826][ T5518] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.804815][ T5518] attempt to access beyond end of device [ 118.804815][ T5518] loop0: rw=524288, want=1072, limit=16 [ 118.806150][ T5498] XFS (loop4): Mounting V5 Filesystem [ 118.830295][ T4203] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -47 in[61, 4035] out[9000] [ 118.860281][ T5518] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 118.869664][ T5518] attempt to access beyond end of device [ 118.869664][ T5518] loop0: rw=524288, want=56, limit=16 [ 118.881808][ T5518] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -47 in[61, 4035] out[8192] [ 118.941247][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 118.941263][ T26] audit: type=1800 audit(1786649542.702:22): pid=5518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.453" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 118.992028][ T5498] XFS (loop4): Ending clean mount [ 119.101332][ T5536] set_capacity_and_notify: 4 callbacks suppressed [ 119.101354][ T5536] loop2: detected capacity change from 0 to 2048 [ 119.164366][ T5540] loop3: detected capacity change from 0 to 256 [ 119.216498][ T4204] XFS (loop4): Unmounting Filesystem [ 119.248295][ T26] audit: type=1400 audit(1786649543.002:23): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=5541 comm="syz.0.462" [ 119.370049][ T5536] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: none. [ 119.431309][ T5536] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.641391][ T5536] fs-verity (loop2, inode 18): Unknown hash algorithm number: 0 [ 120.189823][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.457992][ T5576] loop3: detected capacity change from 0 to 2048 [ 120.490193][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 120.510602][ T5556] loop1: detected capacity change from 0 to 32768 [ 120.570805][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.663136][ T4197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.831319][ T13] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 120.858680][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 120.887608][ T13] usb 5-1: Product: syz [ 120.901404][ T13] usb 5-1: Manufacturer: syz [ 120.909479][ T13] usb 5-1: SerialNumber: syz [ 120.945205][ T13] usb 5-1: config 0 descriptor?? [ 120.996840][ T13] gspca_main: sq905-2.14.0 probing 2770:9120 [ 121.074089][ T5588] loop1: detected capacity change from 0 to 1024 [ 121.329122][ T5594] loop1: detected capacity change from 0 to 2048 [ 121.422949][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.639973][ T13] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 121.647304][ T13] sq905: probe of 5-1:0.0 failed with error -71 [ 121.685244][ T13] usb 5-1: USB disconnect, device number 5 [ 121.778495][ T5582] loop0: detected capacity change from 0 to 32768 [ 121.842517][ T5598] loop3: detected capacity change from 0 to 32768 [ 121.988606][ T5609] loop1: detected capacity change from 0 to 512 [ 121.999720][ T5598] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.025334][ T5582] XFS (loop0): Mounting V5 Filesystem [ 122.054159][ T5590] loop2: detected capacity change from 0 to 40427 [ 122.080778][ T5609] EXT4-fs (loop1): inline encryption not supported [ 122.089806][ T5598] (syz.3.486,5598,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 122.120658][ T5609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.148414][ T5590] F2FS-fs (loop2): invalid crc value [ 122.235283][ T5609] EXT4-fs (loop1): 1 truncate cleaned up [ 122.255850][ T5582] XFS (loop0): Ending clean mount [ 122.264164][ T5609] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 122.347231][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 122.371867][ T5590] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.410933][ T5620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 122.663210][ T5590] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 122.690224][ T4187] XFS (loop0): Unmounting Filesystem [ 122.752299][ T5590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.981351][ T4189] attempt to access beyond end of device [ 122.981351][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 123.251566][ T5634] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 123.347110][ T5634] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 123.367314][ T5634] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 123.381658][ T5634] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.381658][ T5634] [ 123.394162][ T5634] EXT4-fs (loop3): Total free blocks count 0 [ 123.401292][ T5634] EXT4-fs (loop3): Free/Dirty block details [ 123.407369][ T5634] EXT4-fs (loop3): free_blocks=2415919504 [ 123.413587][ T5634] EXT4-fs (loop3): dirty_blocks=32 [ 123.418851][ T5634] EXT4-fs (loop3): Block reservation details [ 123.425335][ T5634] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 123.433684][ T5644] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 3 with error 28 [ 123.501963][ T5644] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.501963][ T5644] [ 123.943285][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 124.191450][ T5667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.209812][ T5667] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.214728][ T5673] set_capacity_and_notify: 3 callbacks suppressed [ 124.214770][ T5673] loop3: detected capacity change from 0 to 8192 [ 124.287058][ T5673] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 124.326659][ T5682] loop4: detected capacity change from 0 to 256 [ 124.345581][ T5673] REISERFS (device loop3): using ordered data mode [ 124.355397][ T5673] reiserfs: using flush barriers [ 124.370428][ T5682] exfat: Deprecated parameter 'utf8' [ 124.379804][ T5673] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.379852][ T5682] exfat: Deprecated parameter 'namecase' [ 124.418526][ T5682] exfat: Deprecated parameter 'namecase' [ 124.425999][ T5682] exfat: Deprecated parameter 'utf8' [ 124.430770][ T5684] trusted_key: encrypted_key: key user:syz not found [ 124.441998][ T5682] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 124.622190][ T5673] REISERFS (device loop3): checking transaction log (loop3) [ 124.726476][ T5673] REISERFS (device loop3): Using r5 hash to sort names [ 124.857281][ T5696] loop0: detected capacity change from 0 to 1024 [ 124.981538][ T26] audit: type=1326 audit(1786649548.742:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.525" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52567a80d9 code=0x0 [ 125.043800][ T5703] loop4: detected capacity change from 0 to 764 [ 125.385322][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.392409][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.415779][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.422311][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.431717][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.438207][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.449560][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.456079][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.464040][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.470551][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.501248][ T5717] loop0: detected capacity change from 0 to 128 [ 125.519498][ T5716] loop4: detected capacity change from 0 to 2048 [ 125.599194][ T5716] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 125.623624][ T5716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.639833][ T5717] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 125.711535][ T5717] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.769215][ T26] audit: type=1800 audit(1786649549.522:25): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.532" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 126.034179][ T5728] loop1: detected capacity change from 0 to 2048 [ 126.139179][ T5738] loop3: detected capacity change from 0 to 16 [ 126.167394][ T5728] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,user_xattr,sb=0x0000000000000001,,errors=continue. Quota mode: none. [ 126.241074][ T5728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.280093][ T5738] erofs: (device loop3): mounted with root inode @ nid 36. [ 126.288457][ T5728] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 126.340859][ T5738] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.389142][ T5728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.389142][ T5728] [ 126.441810][ T5738] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 126.459670][ T5728] EXT4-fs (loop1): Total free blocks count 0 [ 126.483034][ T5728] EXT4-fs (loop1): Free/Dirty block details [ 126.527997][ T5728] EXT4-fs (loop1): free_blocks=2415919104 [ 126.543032][ T5738] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 126.568746][ T5728] EXT4-fs (loop1): dirty_blocks=16 [ 126.600938][ T5728] EXT4-fs (loop1): Block reservation details [ 126.631877][ T5728] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 127.129168][ T5773] loop1: detected capacity change from 0 to 512 [ 127.218689][ T5778] kAFS: bad VL server IP address [ 127.289370][ T5773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.347262][ T5773] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.444630][ T5773] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 127.568541][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 128.238494][ T5822] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 128.298608][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 128.719157][ T5836] loop4: detected capacity change from 0 to 1024 [ 128.863442][ T5836] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.903363][ T5796] XFS (loop1): Mounting V5 Filesystem [ 128.918922][ T26] audit: type=1800 audit(1786649552.672:26): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.585" name="file2" dev="loop0" ino=1048606 res=0 errno=0 [ 128.993104][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.011313][ T5841] FAT-fs (loop0): Filesystem has been set read-only [ 129.018223][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.159966][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.230201][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.272185][ T5858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 129.299576][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.332409][ T5796] XFS (loop1): Ending clean mount [ 129.362451][ T5796] XFS (loop1): Quotacheck needed: Please wait. [ 129.389893][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.442413][ T5230] XFS (loop1): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 129.461149][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.519666][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.552502][ T5230] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 129.567591][ T5841] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.600099][ T5837] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 129.606415][ T5230] XFS (loop1): Unmount and run xfs_repair [ 129.626602][ T5230] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 129.650021][ T5230] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 129.690890][ T5230] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 129.729747][ T5230] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 129.763483][ T5230] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 129.799668][ T5230] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 129.839624][ T5230] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.889700][ T5230] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.915353][ T5230] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.945237][ T144] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 130.008986][ T5796] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 130.116616][ T5874] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.159958][ T5876] udc-core: couldn't find an available UDC or it's busy [ 130.167133][ T5876] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.212426][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.292004][ T5230] XFS (loop1): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 130.332005][ T5230] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 130.364171][ T5230] XFS (loop1): Unmount and run xfs_repair [ 130.382305][ T5230] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 130.419632][ T5230] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 130.428685][ T5230] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 130.469567][ T5230] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 130.478524][ T5230] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 130.509589][ T5230] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 130.525609][ T5230] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.567346][ T5230] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.590085][ T5230] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.599084][ T5796] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 130.643154][ T5796] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 130.670987][ T5881] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 130.689739][ T5796] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 130.739734][ T4192] XFS (loop1): Unmounting Filesystem [ 130.753955][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.763661][ T5866] set_capacity_and_notify: 2 callbacks suppressed [ 130.763680][ T5866] loop3: detected capacity change from 0 to 40427 [ 130.764827][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.905454][ T5866] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 130.938649][ T5866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 130.956790][ T5866] F2FS-fs (loop3): invalid crc value [ 131.009204][ T5866] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 131.228362][ T5866] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 131.243995][ T5866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.368763][ T26] audit: type=1800 audit(1786649555.122:27): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.592" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 131.382587][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 131.562815][ T5896] loop0: detected capacity change from 0 to 256 [ 131.582262][ T4197] attempt to access beyond end of device [ 131.582262][ T4197] loop3: rw=2049, want=40992, limit=40427 [ 131.634223][ T5896] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 131.659852][ T5896] FAT-fs (loop0): Filesystem has been set read-only [ 131.673016][ T5896] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 131.728705][ T5896] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 131.780410][ T5897] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 131.837534][ T26] audit: type=1800 audit(1786649555.592:28): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.605" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 131.884761][ T5896] syz.0.605 (5896) used greatest stack depth: 20112 bytes left [ 132.096177][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 132.150051][ T4234] Bluetooth: hci5: command 0x1003 tx timeout [ 132.164066][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 132.450911][ T5915] loop2: detected capacity change from 0 to 512 [ 132.492892][ T5918] loop1: detected capacity change from 0 to 64 [ 132.855806][ T5915] EXT4-fs (loop2): 1 truncate cleaned up [ 132.866379][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.946400][ T5915] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 133.176769][ T5931] net_ratelimit: 1990 callbacks suppressed [ 133.176789][ T5931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.390365][ T5938] program syz.1.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.647042][ T5950] block2mtd: illegal erase size [ 134.019683][ T5957] nbd0: detected capacity change from 0 to 549764202496 [ 134.098267][ T4199] block nbd0: Receive control failed (result -104) [ 134.219673][ T4234] Bluetooth: hci5: command 0x1001 tx timeout [ 134.229646][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 134.852722][ T5996] loop0: detected capacity change from 0 to 256 [ 134.936866][ T6002] loop3: detected capacity change from 0 to 128 [ 135.042595][ T6002] FAT-fs (loop3): Unrecognized mount option "1844674407370955161501777777777777777777777" or missing value [ 135.164456][ T6006] loop0: detected capacity change from 0 to 2048 [ 135.209835][ T5230] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.253094][ T6006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.576473][ T6010] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 135.615301][ T6010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.654'. [ 135.639895][ T5230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.660380][ T5230] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.686317][ T5230] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 135.715162][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.761492][ T5230] usb 2-1: config 0 descriptor?? [ 135.816099][ T6002] loop3: detected capacity change from 0 to 32768 [ 135.877086][ T6002] JBD2: Ignoring recovery information on journal [ 135.938164][ T6002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 135.977980][ T6000] loop2: detected capacity change from 0 to 40427 [ 136.033874][ T5230] usb 2-1: USB disconnect, device number 5 [ 136.068303][ T6000] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 136.169791][ T6000] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 136.224330][ T6000] F2FS-fs (loop2): invalid crc value [ 136.246484][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 136.309596][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 136.317593][ T6000] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 136.425804][ T6000] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 136.434471][ T6000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.537017][ T26] audit: type=1800 audit(1786649560.292:29): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 136.637224][ T6012] loop0: detected capacity change from 0 to 40427 [ 136.655348][ T4189] attempt to access beyond end of device [ 136.655348][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 136.742144][ T6012] F2FS-fs (loop0): invalid crc value [ 136.819184][ T6012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.019198][ T6012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.201674][ T4187] attempt to access beyond end of device [ 137.201674][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 137.320996][ T6038] loop1: detected capacity change from 0 to 1024 [ 137.382937][ T6040] loop2: detected capacity change from 0 to 256 [ 137.482176][ T6020] loop3: detected capacity change from 0 to 40427 [ 137.560210][ T6020] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64) [ 137.568010][ T6020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 137.632961][ T6020] F2FS-fs (loop3): invalid crc value [ 137.706264][ T6020] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.963227][ T6020] F2FS-fs (loop3): recover fsync data on readonly fs [ 137.987674][ T6020] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 138.007294][ T6020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.064866][ T6054] udc-core: couldn't find an available UDC or it's busy [ 138.082450][ T6054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.093749][ T6056] loop2: detected capacity change from 0 to 512 [ 138.118916][ T6020] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 138.132521][ T6020] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 138.155893][ T6056] EXT4-fs (loop2): Ignoring removed orlov option [ 138.291240][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 138.427102][ T6063] loop3: detected capacity change from 0 to 4096 [ 138.586898][ T6063] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 138.624168][ T6044] loop1: detected capacity change from 0 to 32768 [ 138.749019][ T6044] XFS (loop1): Mounting V5 Filesystem [ 138.949961][ T6044] XFS (loop1): Ending clean mount [ 139.059226][ T26] audit: type=1800 audit(1786649562.812:30): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.666" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 139.179089][ T4192] XFS (loop1): Unmounting Filesystem [ 139.495426][ T6084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.772744][ T6078] loop3: detected capacity change from 0 to 32768 [ 139.843258][ T6078] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.676 (6078) [ 139.912475][ T6078] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 139.951361][ T6078] BTRFS info (device loop3): using free space tree [ 139.969106][ T6078] BTRFS info (device loop3): has skinny extents [ 140.156448][ T6078] BTRFS info (device loop3): enabling ssd optimizations [ 140.458620][ T1325] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 140.885503][ T1325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.895586][ T1325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.917248][ T1325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.927950][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.255464][ T1325] usb 3-1: GET_CAPABILITIES returned 0 [ 141.262345][ T1325] usbtmc 3-1:16.0: can't read capabilities [ 141.467714][ T6157] usb 3-1: USB disconnect, device number 5 [ 141.561665][ T6184] loop1: detected capacity change from 0 to 128 [ 141.608336][ T6148] loop0: detected capacity change from 0 to 40427 [ 141.661996][ T6189] loop4: detected capacity change from 0 to 512 [ 141.675471][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.686927][ T6184] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.793809][ T6148] F2FS-fs (loop0): invalid crc value [ 141.818399][ T6148] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.842309][ T6189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.915156][ T6189] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.980508][ T6192] loop3: detected capacity change from 0 to 32768 [ 142.075809][ T6189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 142.129963][ T6148] F2FS-fs (loop0): Start checkpoint disabled! [ 142.177153][ T6203] loop2: detected capacity change from 0 to 2048 [ 142.266510][ T6148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 142.279289][ T6203] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.294417][ T6203] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 142.312239][ T6192] XFS (loop3): Mounting V5 Filesystem [ 142.361019][ T6203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.398872][ T6192] XFS (loop3): Ending clean mount [ 142.412720][ T6192] XFS (loop3): Quotacheck needed: Please wait. [ 142.506193][ T6192] XFS (loop3): Quotacheck: Done. [ 142.689010][ T26] audit: type=1807 audit(1786649566.442:31): action=measure func=FILE_CHECK res=1 [ 142.712223][ T4197] XFS (loop3): Unmounting Filesystem [ 142.751862][ T6214] ima: policy update completed [ 142.782132][ T26] audit: type=1802 audit(1786649566.512:32): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.716" res=1 errno=0 [ 142.877969][ T4591] attempt to access beyond end of device [ 142.877969][ T4591] loop0: rw=2049, want=40976, limit=40427 [ 142.896165][ T26] audit: type=1800 audit(1786649566.572:33): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 143.058088][ T26] audit: type=1800 audit(1786649566.572:34): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 143.218408][ T26] audit: type=1800 audit(1786649566.572:35): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 143.281607][ T26] audit: type=1800 audit(1786649566.622:36): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 143.430364][ T26] audit: type=1800 audit(1786649566.712:37): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 143.536310][ T26] audit: type=1800 audit(1786649566.732:38): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13640 res=0 errno=0 [ 143.587585][ T26] audit: type=1800 audit(1786649566.782:39): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 143.640514][ T26] audit: type=1800 audit(1786649566.842:40): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 143.820251][ T6245] program syz.1.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.848415][ T6248] program syz.4.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.065243][ T6257] loop1: detected capacity change from 0 to 256 [ 144.235060][ T6257] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 144.459035][ T6263] loop0: detected capacity change from 0 to 8192 [ 144.566558][ T6263] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 144.577691][ T6263] REISERFS (device loop0): using ordered data mode [ 144.584756][ T6263] reiserfs: using flush barriers [ 144.591488][ T6263] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.624108][ T6284] loop1: detected capacity change from 0 to 1024 [ 144.631921][ T6263] REISERFS (device loop0): checking transaction log (loop0) [ 144.686282][ T6284] EXT4-fs (loop1): Ignoring removed bh option [ 144.718253][ T6284] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.750033][ T6290] mmap: syz.4.751 (6290) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 144.773901][ T6263] REISERFS (device loop0): Using r5 hash to sort names [ 144.815434][ T6263] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 144.887856][ T6284] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 145.054030][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 145.458832][ T6312] loop1: detected capacity change from 0 to 256 [ 145.576842][ T6312] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.931213][ T6328] loop2: detected capacity change from 0 to 1024 [ 146.047983][ T6323] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 146.056390][ T6334] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 146.056956][ T6334] hfsplus: failed to load root directory [ 146.069888][ T6323] F2FS-fs (loop0): invalid crc value [ 146.071060][ T6323] F2FS-fs (loop0): invalid crc value [ 146.080735][ T6323] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 146.480532][ T6346] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 146.516493][ T6346] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.661904][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 146.840573][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 147.028069][ T6380] set_capacity_and_notify: 3 callbacks suppressed [ 147.028088][ T6380] loop0: detected capacity change from 0 to 2048 [ 147.210780][ T6380] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 147.264270][ T6380] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.427109][ T6380] fs-verity: sha512 using implementation "sha512-avx2" [ 147.723019][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 147.723033][ T26] audit: type=1800 audit(1786649571.482:116): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 147.897781][ T26] audit: type=1800 audit(1786649571.652:117): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 147.920123][ T6386] loop3: detected capacity change from 0 to 32768 [ 147.968503][ T26] audit: type=1800 audit(1786649571.722:118): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 147.995529][ T6413] loop4: detected capacity change from 0 to 16 [ 148.026230][ T6415] netlink: 984 bytes leftover after parsing attributes in process `syz.0.802'. [ 148.042970][ T6410] loop2: detected capacity change from 0 to 8192 [ 148.058253][ T26] audit: type=1800 audit(1786649571.812:119): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 148.113118][ T6421] loop0: detected capacity change from 0 to 16 [ 148.147495][ T6386] XFS (loop3): Mounting V5 Filesystem [ 148.166351][ T6421] erofs: (device loop0): mounted with root inode @ nid 36. [ 148.174453][ T6410] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 148.193885][ T26] audit: type=1800 audit(1786649571.952:120): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 148.224321][ T6410] REISERFS (device loop2): using ordered data mode [ 148.230957][ T6410] reiserfs: using flush barriers [ 148.247153][ T6410] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.264045][ T6410] REISERFS (device loop2): checking transaction log (loop2) [ 148.307681][ T26] audit: type=1800 audit(1786649572.062:121): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 148.334487][ T6421] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 148.367328][ T6421] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 148.376726][ T6421] attempt to access beyond end of device [ 148.376726][ T6421] loop0: rw=524288, want=34359738368, limit=16 [ 148.393214][ T6421] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 148.403290][ T26] audit: type=1800 audit(1786649572.162:122): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 148.511551][ T6421] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 148.546189][ T26] audit: type=1800 audit(1786649572.212:123): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 148.590408][ T6410] REISERFS (device loop2): Using tea hash to sort names [ 148.626912][ T6410] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 148.636804][ T26] audit: type=1800 audit(1786649572.292:124): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.803" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 148.739760][ T6386] XFS (loop3): Ending clean mount [ 148.865434][ T26] audit: type=1800 audit(1786649572.622:125): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 148.977724][ T4197] XFS (loop3): Unmounting Filesystem [ 149.407271][ T6433] loop0: detected capacity change from 0 to 64 [ 149.832042][ T6447] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 149.889673][ T6447] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 150.042269][ T6454] loop4: detected capacity change from 0 to 512 [ 150.141620][ T6454] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 150.186045][ T6454] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 150.249915][ T6460] loop3: detected capacity change from 0 to 128 [ 150.280827][ T6454] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 150.307733][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.324239][ T6454] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 150.345616][ T6460] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.396856][ T6454] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 150.427256][ T6454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.480887][ T6454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.815: bg 0: block 34: padding at end of block bitmap is not set [ 150.565752][ T6454] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.815: Failed to acquire dquot type 1 [ 150.591896][ T6454] EXT4-fs (loop4): 1 truncate cleaned up [ 150.604072][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 150.873885][ T6487] loop2: detected capacity change from 0 to 256 [ 150.973123][ T6487] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 151.319292][ T6501] CUSE: unknown device info "" [ 151.324679][ T6501] CUSE: unknown device info "" [ 151.339768][ T6501] CUSE: unknown device info "ÿ" [ 151.351048][ T6501] CUSE: unknown device info "" [ 151.369823][ T6501] CUSE: unknown device info "ÿ" [ 151.380272][ T6501] CUSE: unknown device info "" [ 151.404917][ T6501] CUSE: unknown device info "" [ 151.420252][ T6501] CUSE: unknown device info "" [ 151.425758][ T6501] CUSE: DEVNAME unspecified [ 151.522105][ T6507] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 151.529469][ T6507] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 151.662652][ T6513] loop2: detected capacity change from 0 to 1024 [ 151.707747][ T6517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.852'. [ 151.817189][ T155] hfsplus: b-tree write err: -5, ino 25 [ 151.830087][ T155] hfsplus: b-tree write err: -5, ino 4 [ 151.835907][ T155] hfsplus: b-tree write err: -5, ino 2 [ 152.053224][ T6528] program syz.3.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.359659][ T6157] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.453407][ T6524] set_capacity_and_notify: 1 callbacks suppressed [ 152.453425][ T6524] loop0: detected capacity change from 0 to 32768 [ 152.496796][ T6524] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.846 (6524) [ 152.523303][ T6524] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.547239][ T6524] BTRFS info (device loop0): force zlib compression, level 3 [ 152.572252][ T6524] BTRFS info (device loop0): turning on flush-on-commit [ 152.596300][ T6524] BTRFS info (device loop0): max_inline at 4096 [ 152.611901][ T6524] BTRFS info (device loop0): using free space tree [ 152.619821][ T6524] BTRFS info (device loop0): has skinny extents [ 152.735299][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 152.735316][ T26] audit: type=1800 audit(1786649576.492:184): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=33599 res=0 errno=0 [ 152.765605][ T26] audit: type=1800 audit(1786649576.492:185): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=36044 res=0 errno=0 [ 152.787785][ T6157] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 152.813062][ T6157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.824706][ T6524] BTRFS info (device loop0): enabling ssd optimizations [ 152.833612][ T6536] loop3: detected capacity change from 0 to 40427 [ 152.845071][ T6157] usb 3-1: config 0 descriptor?? [ 152.870085][ T26] audit: type=1800 audit(1786649576.522:186): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=38702 res=0 errno=0 [ 152.890672][ T6536] F2FS-fs (loop3): invalid crc value [ 152.933966][ T6536] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 152.975903][ T26] audit: type=1800 audit(1786649576.532:187): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=40070 res=0 errno=0 [ 153.047267][ T26] audit: type=1800 audit(1786649576.552:188): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=37846 res=0 errno=0 [ 153.121449][ T26] audit: type=1800 audit(1786649576.562:189): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=34491 res=0 errno=0 [ 153.211159][ T26] audit: type=1800 audit(1786649576.562:190): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=36786 res=0 errno=0 [ 153.250528][ T6157] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 153.266746][ T6157] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 153.283997][ T26] audit: type=1800 audit(1786649576.562:191): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 153.329335][ T4547] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4547) [ 153.366531][ T6561] netlink: 48 bytes leftover after parsing attributes in process `syz.4.855'. [ 153.394911][ T26] audit: type=1800 audit(1786649576.562:192): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=39842 res=0 errno=0 [ 153.447104][ T6536] F2FS-fs (loop3): Start checkpoint disabled! [ 153.469811][ T6157] [drm:udl_init] *ERROR* Selecting channel failed [ 153.485700][ T26] audit: type=1800 audit(1786649576.562:193): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=34986 res=0 errno=0 [ 153.590127][ T6157] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 153.608337][ T6157] [drm] Initialized udl on minor 2 [ 153.614145][ T6536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e7 [ 153.650333][ T6157] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 153.689860][ T6157] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 153.738123][ T6157] usb 3-1: USB disconnect, device number 6 [ 153.789467][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 153.846293][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 153.863574][ T4233] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 153.878340][ T154] attempt to access beyond end of device [ 153.878340][ T154] loop3: rw=2049, want=45104, limit=40427 [ 154.454914][ T6577] ================================================================== [ 154.455043][ T6577] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 154.455080][ T6577] Write of size 4 at addr ffffc90004ef83a0 by task syz.2.861/6577 [ 154.455102][ T6577] [ 154.455117][ T6577] CPU: 0 PID: 6577 Comm: syz.2.861 Not tainted syzkaller #0 [ 154.455141][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.455161][ T6577] Call Trace: [ 154.455170][ T6577] [ 154.455181][ T6577] dump_stack_lvl+0x188/0x250 [ 154.455219][ T6577] ? show_regs_print_info+0x20/0x20 [ 154.455260][ T6577] ? load_image+0x410/0x410 [ 154.455287][ T6577] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 154.455325][ T6577] print_address_description+0x60/0x2d0 [ 154.455352][ T6577] ? sys_imageblit+0x1ba8/0x25d0 [ 154.455376][ T6577] kasan_report+0xdf/0x130 [ 154.455406][ T6577] ? sys_imageblit+0x1ba8/0x25d0 [ 154.455437][ T6577] sys_imageblit+0x1ba8/0x25d0 [ 154.455480][ T6577] ? sys_copyarea+0x2530/0x2530 [ 154.455518][ T6577] ? kasan_quarantine_put+0xd4/0x210 [ 154.455542][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 154.455573][ T6577] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 154.455598][ T6577] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 154.455627][ T6577] soft_cursor+0x9fd/0xc30 [ 154.455662][ T6577] bit_cursor+0x1699/0x1f00 [ 154.455711][ T6577] ? bit_clear_margins+0x550/0x550 [ 154.455747][ T6577] ? get_color+0x2d8/0x440 [ 154.455769][ T6577] ? bit_clear_margins+0x550/0x550 [ 154.455796][ T6577] ? fbcon_cursor+0x396/0x570 [ 154.455824][ T6577] hide_cursor+0x7f/0x320 [ 154.455853][ T6577] do_con_write+0x1dd/0x6c40 [ 154.455922][ T6577] ? __mutex_trylock_common+0x15c/0x260 [ 154.455954][ T6577] ? rcu_lock_release+0x20/0x20 [ 154.455992][ T6577] ? vt_resize+0xc0/0xc0 [ 154.456016][ T6577] ? __mutex_lock_common+0x435/0x2400 [ 154.456049][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.456081][ T6577] ? lock_chain_count+0x20/0x20 [ 154.456108][ T6577] ? n_tty_write+0x66a/0x1220 [ 154.456135][ T6577] ? lockdep_hardirqs_off+0x70/0x100 [ 154.456164][ T6577] ? mutex_lock_io_nested+0x60/0x60 [ 154.456190][ T6577] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 154.456222][ T6577] ? _raw_spin_unlock+0x40/0x40 [ 154.456261][ T6577] con_write+0x1f/0x40 [ 154.456287][ T6577] n_tty_write+0xd19/0x1220 [ 154.456341][ T6577] ? n_tty_read+0x1a50/0x1a50 [ 154.456368][ T6577] ? wait_woken+0x1b0/0x1b0 [ 154.456402][ T6577] ? __virt_addr_valid+0x3c6/0x470 [ 154.456427][ T6577] ? __phys_addr_symbol+0x2b/0x70 [ 154.456450][ T6577] ? __check_object_size+0x30c/0x410 [ 154.456483][ T6577] file_tty_write+0x50c/0x8a0 [ 154.456517][ T6577] ? n_tty_read+0x1a50/0x1a50 [ 154.456547][ T6577] vfs_write+0x748/0xd70 [ 154.456582][ T6577] ? file_end_write+0x250/0x250 [ 154.456615][ T6577] ? __fget_files+0x402/0x470 [ 154.456650][ T6577] ? __fdget_pos+0x1e2/0x370 [ 154.456671][ T6577] ? ksys_write+0x70/0x260 [ 154.456698][ T6577] ksys_write+0x153/0x260 [ 154.456724][ T6577] ? __ia32_sys_read+0x80/0x80 [ 154.456753][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 154.456784][ T6577] do_syscall_64+0x4c/0xa0 [ 154.456805][ T6577] ? clear_bhb_loop+0x30/0x80 [ 154.456828][ T6577] ? clear_bhb_loop+0x30/0x80 [ 154.456854][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.456885][ T6577] RIP: 0033:0x7fa4163910d9 [ 154.456907][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.456929][ T6577] RSP: 002b:00007fa4145e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.456957][ T6577] RAX: ffffffffffffffda RBX: 00007fa416618fa0 RCX: 00007fa4163910d9 [ 154.456976][ T6577] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 154.456994][ T6577] RBP: 00007fa416428024 R08: 0000000000000000 R09: 0000000000000000 [ 154.457010][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.457025][ T6577] R13: 00007fa416619038 R14: 00007fa416618fa0 R15: 00007ffd5fa900f8 [ 154.457064][ T6577] [ 154.457073][ T6577] [ 154.457079][ T6577] [ 154.457084][ T6577] Memory state around the buggy address: [ 154.457097][ T6577] ffffc90004ef8280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.457113][ T6577] ffffc90004ef8300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.457129][ T6577] >ffffc90004ef8380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.457141][ T6577] ^ [ 154.457154][ T6577] ffffc90004ef8400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.457170][ T6577] ffffc90004ef8480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.457183][ T6577] ================================================================== [ 154.457192][ T6577] Disabling lock debugging due to kernel taint [ 154.457212][ T6577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.457224][ T6577] CPU: 0 PID: 6577 Comm: syz.2.861 Tainted: G B syzkaller #0 [ 154.457246][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.457265][ T6577] Call Trace: [ 154.457273][ T6577] [ 154.457280][ T6577] dump_stack_lvl+0x188/0x250 [ 154.457307][ T6577] ? show_regs_print_info+0x20/0x20 [ 154.457333][ T6577] ? load_image+0x410/0x410 [ 154.457363][ T6577] panic+0x2f8/0x850 [ 154.457389][ T6577] ? bpf_jit_dump+0xd0/0xd0 [ 154.457413][ T6577] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.457435][ T6577] ? _raw_spin_unlock+0x40/0x40 [ 154.457458][ T6577] ? sys_imageblit+0x1ba8/0x25d0 [ 154.457481][ T6577] check_panic_on_warn+0x80/0xa0 [ 154.457505][ T6577] ? sys_imageblit+0x1ba8/0x25d0 [ 154.457528][ T6577] end_report+0x6d/0xf0 [ 154.457550][ T6577] kasan_report+0x102/0x130 [ 154.457574][ T6577] ? sys_imageblit+0x1ba8/0x25d0 [ 154.457598][ T6577] sys_imageblit+0x1ba8/0x25d0 [ 154.457628][ T6577] ? sys_copyarea+0x2530/0x2530 [ 154.457655][ T6577] ? kasan_quarantine_put+0xd4/0x210 [ 154.457675][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 154.457700][ T6577] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 154.457723][ T6577] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 154.457747][ T6577] soft_cursor+0x9fd/0xc30 [ 154.457773][ T6577] bit_cursor+0x1699/0x1f00 [ 154.457809][ T6577] ? bit_clear_margins+0x550/0x550 [ 154.457836][ T6577] ? get_color+0x2d8/0x440 [ 154.457855][ T6577] ? bit_clear_margins+0x550/0x550 [ 154.457878][ T6577] ? fbcon_cursor+0x396/0x570 [ 154.457900][ T6577] hide_cursor+0x7f/0x320 [ 154.457922][ T6577] do_con_write+0x1dd/0x6c40 [ 154.457963][ T6577] ? __mutex_trylock_common+0x15c/0x260 [ 154.457989][ T6577] ? rcu_lock_release+0x20/0x20 [ 154.458016][ T6577] ? vt_resize+0xc0/0xc0 [ 154.458037][ T6577] ? __mutex_lock_common+0x435/0x2400 [ 154.458064][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.458092][ T6577] ? lock_chain_count+0x20/0x20 [ 154.458115][ T6577] ? n_tty_write+0x66a/0x1220 [ 154.458139][ T6577] ? lockdep_hardirqs_off+0x70/0x100 [ 154.458164][ T6577] ? mutex_lock_io_nested+0x60/0x60 [ 154.458187][ T6577] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 154.458212][ T6577] ? _raw_spin_unlock+0x40/0x40 [ 154.458236][ T6577] con_write+0x1f/0x40 [ 154.458266][ T6577] n_tty_write+0xd19/0x1220 [ 154.458300][ T6577] ? n_tty_read+0x1a50/0x1a50 [ 154.458324][ T6577] ? wait_woken+0x1b0/0x1b0 [ 154.458350][ T6577] ? __virt_addr_valid+0x3c6/0x470 [ 154.458371][ T6577] ? __phys_addr_symbol+0x2b/0x70 [ 154.458392][ T6577] ? __check_object_size+0x30c/0x410 [ 154.458417][ T6577] file_tty_write+0x50c/0x8a0 [ 154.458443][ T6577] ? n_tty_read+0x1a50/0x1a50 [ 154.458469][ T6577] vfs_write+0x748/0xd70 [ 154.458494][ T6577] ? file_end_write+0x250/0x250 [ 154.458518][ T6577] ? __fget_files+0x402/0x470 [ 154.458543][ T6577] ? __fdget_pos+0x1e2/0x370 [ 154.458562][ T6577] ? ksys_write+0x70/0x260 [ 154.458584][ T6577] ksys_write+0x153/0x260 [ 154.458605][ T6577] ? __ia32_sys_read+0x80/0x80 [ 154.458628][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 154.458653][ T6577] do_syscall_64+0x4c/0xa0 [ 154.458672][ T6577] ? clear_bhb_loop+0x30/0x80 [ 154.458693][ T6577] ? clear_bhb_loop+0x30/0x80 [ 154.458716][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.458739][ T6577] RIP: 0033:0x7fa4163910d9 [ 154.458756][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.458775][ T6577] RSP: 002b:00007fa4145e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.458799][ T6577] RAX: ffffffffffffffda RBX: 00007fa416618fa0 RCX: 00007fa4163910d9 [ 154.458816][ T6577] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 154.458831][ T6577] RBP: 00007fa416428024 R08: 0000000000000000 R09: 0000000000000000 [ 154.458846][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.458860][ T6577] R13: 00007fa416619038 R14: 00007fa416618fa0 R15: 00007ffd5fa900f8 [ 154.458885][ T6577] [ 154.459207][ T6577] Kernel Offset: disabled [ 155.324024][ T6577] Rebooting in 86400 seconds..