last executing test programs: 26.868132775s ago: executing program 2 (id=705): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@umask={'umask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "c831c95c"}}, {@gid}, {@nls={'nls', 0x3d, 'macromanian'}}, {@part={'part', 0x3d, 0x200006}}]}, 0x1, 0x6f4, &(0x7f0000000c80)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x15098, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) 26.483473825s ago: executing program 2 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0xfffffffffffffebc, &(0x7f0000000280), 0x1}}], 0x2, 0x0) 26.056872837s ago: executing program 2 (id=714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 25.720134965s ago: executing program 2 (id=719): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 24.964200395s ago: executing program 2 (id=723): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0)=0xa, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 24.347833107s ago: executing program 2 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e3affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) 23.858847803s ago: executing program 32 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e3affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) 6.278659582s ago: executing program 1 (id=832): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.734212712s ago: executing program 1 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x44000) 4.306116605s ago: executing program 1 (id=842): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000300599ff448"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.028639649s ago: executing program 1 (id=846): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x446c, &(0x7f00000044c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40186f02, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 3.965446502s ago: executing program 0 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.842819709s ago: executing program 0 (id=848): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) 3.735071185s ago: executing program 0 (id=850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000001600)='GPL\x00', 0x2, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0xd9, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.731704985s ago: executing program 4 (id=851): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 3.428441761s ago: executing program 4 (id=854): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000000c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 3.289328118s ago: executing program 0 (id=855): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001f6000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.756099406s ago: executing program 0 (id=857): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 2.660675571s ago: executing program 4 (id=859): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) 2.48729896s ago: executing program 0 (id=860): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000007c0)={0x14, 0x0, 0x0}, &(0x7f0000000d40)={0x1c, &(0x7f0000000800)={0x0, 0x14, 0xd, "9cf01397ede331b6f2f1cb6d3f"}, 0x0, 0x0}) 2.429439053s ago: executing program 4 (id=861): r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "bba9831bf3004f08c624a00bec03ba415481080afe256982b915d2381cf09ec00050e80f0c39ab0de6305c03701a880c5b14e2b5f69b0595a016e5279d6a67e7", 0x28}, 0x48, 0xfffffffffffffffd) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/153, 0x99) 2.192055695s ago: executing program 4 (id=863): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.952139458s ago: executing program 5 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x6, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.788328056s ago: executing program 1 (id=867): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) 1.656556983s ago: executing program 3 (id=868): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffe3f, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) 1.614885385s ago: executing program 5 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.426075695s ago: executing program 3 (id=870): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1.414302816s ago: executing program 5 (id=871): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r1, @in={{0x2, 0x4e20, @empty}}, 0x4}, &(0x7f0000000380)=0x90) 1.216095476s ago: executing program 4 (id=872): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 1.215330137s ago: executing program 1 (id=873): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106d042bc50000000000010902240001000040000904004081030000000921f900000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "dc2ed8ec"}]}}, 0x0}, 0x0) 1.199162768s ago: executing program 3 (id=874): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setreuid(0x0, 0xee00) fchmod(r0, 0x0) 1.173010719s ago: executing program 5 (id=875): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 972.041429ms ago: executing program 5 (id=876): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 971.723129ms ago: executing program 3 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 830.897246ms ago: executing program 5 (id=878): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x4c9, &(0x7f00000000c0), 0xfe, 0x10f3, &(0x7f0000001300)="$eJzs2DGLE0EYBuB3dk/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2x/VeEbBXNmtIkIBIFgPyPLDszsvMfDvlfAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSfKtJGdNUjdZk6QkXXczu0vSbfJHX9omJW/ezRYvP0xfLYZp6bMmpV+1HterJ7VO67Re1Rdn10/r4uOn9+1OyZIut6vl/PT1/ahH6Wu3o+4IAAAA/4cfB5scuT4AAADwJ6M1EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGUDcfTZKSdN3N7C5Jd9zfAgAAAA5U0uTtZF8+tAG2nufrpKQ83CbfSz/nMp/3rAcAAAD+Tn8XLw+G+/iznObxTn6ek1xcDONfr9xfJ22Sy9/2uV0t5+vnfDkv//IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxkB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAwVQAAAP//HdHSDQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 355.944512ms ago: executing program 3 (id=879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 3 (id=880): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002fc0)=""/4096, 0x1000) kernel console output (not intermixed with test programs): s ready [ 89.035601][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.071681][ T4278] device veth1_macvtap entered promiscuous mode [ 89.093174][ T4272] device veth0_macvtap entered promiscuous mode [ 89.136744][ T4272] device veth1_macvtap entered promiscuous mode [ 89.187048][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.213751][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.228093][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.239016][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250357][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.261314][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.274003][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.305147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.314681][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 89.321041][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 89.327117][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 89.328012][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 89.334190][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 89.355974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.367596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.409491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.432206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.444918][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.456879][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.467706][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.480642][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.491489][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.502367][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.515321][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.540186][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.548090][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.570909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.585640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.615822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.634947][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.695508][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.696986][ T4359] ======================================================= [ 89.696986][ T4359] WARNING: The mand mount option has been deprecated and [ 89.696986][ T4359] and is ignored by this kernel. Remove the mand [ 89.696986][ T4359] option from the mount to silence this warning. [ 89.696986][ T4359] ======================================================= [ 89.740275][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.763040][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.777116][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.795827][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.808909][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.829989][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.843017][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.858793][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.869435][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.895935][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906706][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.933779][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.980921][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.005717][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.017615][ T4363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 90.026561][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.053488][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.064538][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.075123][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.087477][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.104682][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.119511][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.132344][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.176951][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.201606][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.228824][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.239028][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.248997][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.258692][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.285575][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.299837][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.344235][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.576954][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.606654][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.656835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.713217][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.747257][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.811536][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.873347][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.891894][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.908020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.929458][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.942395][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.963807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.253542][ T4387] loop2: detected capacity change from 0 to 2048 [ 91.307875][ T4391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16'. [ 91.347641][ T4387] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.400505][ T4387] NILFS (loop2): mounting unchecked fs [ 91.496699][ T4395] loop1: detected capacity change from 0 to 16 [ 91.521377][ T4387] NILFS (loop2): recovery complete [ 91.547160][ T4395] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 91.590924][ T4398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.191695][ T14] cfg80211: failed to load regulatory.db [ 92.545866][ T4427] capability: warning: `syz.4.33' uses deprecated v2 capabilities in a way that may be insecure [ 92.670709][ T4433] loop2: detected capacity change from 0 to 256 [ 92.709529][ T4435] capability: warning: `syz.3.37' uses 32-bit capabilities (legacy support in use) [ 92.806407][ T4433] FAT-fs (loop2): Directory bread(block 64) failed [ 92.831559][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 92.867982][ T4433] FAT-fs (loop2): Directory bread(block 65) failed [ 92.915990][ T4433] FAT-fs (loop2): Directory bread(block 66) failed [ 92.954384][ T4433] FAT-fs (loop2): Directory bread(block 67) failed [ 93.018453][ T4433] FAT-fs (loop2): Directory bread(block 68) failed [ 93.062279][ T4433] FAT-fs (loop2): Directory bread(block 69) failed [ 93.089427][ T4433] FAT-fs (loop2): Directory bread(block 70) failed [ 93.139046][ T4433] FAT-fs (loop2): Directory bread(block 71) failed [ 93.163459][ T4433] FAT-fs (loop2): Directory bread(block 72) failed [ 93.190193][ T4433] FAT-fs (loop2): Directory bread(block 73) failed [ 93.443247][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 93.607890][ T4456] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.48'. [ 93.846490][ T4456] syz.1.48 (4456) used greatest stack depth: 18096 bytes left [ 94.709879][ T4495] netlink: 220 bytes leftover after parsing attributes in process `syz.1.65'. [ 94.728207][ T4497] loop3: detected capacity change from 0 to 512 [ 94.754054][ T4497] EXT4-fs: Ignoring removed oldalloc option [ 94.760536][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 94.868862][ T4497] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.67: invalid block [ 94.913157][ T4505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.922702][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.933205][ T4505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.943298][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.961708][ T4505] Zero length message leads to an empty skb [ 95.019964][ T4497] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.67: invalid indirect mapped block 4294967295 (level 1) [ 95.092700][ T4497] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.67: invalid indirect mapped block 4294967295 (level 1) [ 95.157151][ T4497] EXT4-fs (loop3): 2 truncates cleaned up [ 95.165318][ T4497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.293331][ T4497] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 95.349334][ T4510] loop1: detected capacity change from 0 to 4096 [ 95.481418][ T4517] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.497277][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 95.576731][ T4510] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 95.769166][ T4521] netlink: 'syz.2.76': attribute type 2 has an invalid length. [ 95.796117][ T4510] Remounting filesystem read-only [ 95.816335][ T4510] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 95.840039][ T4521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 96.020344][ T4525] netlink: 'syz.3.78': attribute type 5 has an invalid length. [ 96.172287][ T4528] loop1: detected capacity change from 0 to 128 [ 96.403944][ T4534] loop3: detected capacity change from 0 to 1024 [ 96.570977][ T4534] hfsplus: bad catalog entry type [ 96.599515][ T4508] loop0: detected capacity change from 0 to 40427 [ 96.734008][ T4508] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.776074][ T9] hfsplus: b-tree write err: -5, ino 25 [ 96.787554][ T9] hfsplus: b-tree write err: -5, ino 4 [ 96.810833][ T9] hfsplus: b-tree write err: -5, ino 2 [ 96.939371][ T4508] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 96.968605][ T4528] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.993105][ T4528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 97.007836][ T4508] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.053359][ T4528] System zones: 1-3, 19-19, 35-36 [ 97.120110][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.194492][ T4528] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.273170][ T4551] netlink: 'syz.4.87': attribute type 29 has an invalid length. [ 97.329014][ T4548] loop3: detected capacity change from 0 to 8192 [ 97.369104][ T4551] netlink: 'syz.4.87': attribute type 29 has an invalid length. [ 97.378741][ T4548] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.420827][ T4552] netlink: 'syz.4.87': attribute type 29 has an invalid length. [ 97.566424][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 97.790127][ T4558] tipc: Invalid UDP bearer configuration [ 97.790175][ T4558] tipc: Enabling of bearer rejected, failed to enable media [ 97.837228][ T4536] loop2: detected capacity change from 0 to 32768 [ 98.688354][ T27] audit: type=1400 audit(1776899238.782:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=4580 comm="syz.4.101" [ 99.179978][ T27] audit: type=1326 audit(1776899239.272:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4571 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7fc00000 [ 99.294942][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 99.382377][ T4599] loop4: detected capacity change from 0 to 1024 [ 99.591457][ T11] hfsplus: b-tree write err: -5, ino 25 [ 99.597472][ T11] hfsplus: b-tree write err: -5, ino 4 [ 99.639179][ T11] hfsplus: b-tree write err: -5, ino 2 [ 99.684401][ T11] hfsplus: b-tree write err: -5, ino 17 [ 99.852905][ T4611] loop4: detected capacity change from 0 to 1024 [ 100.161150][ T4589] loop3: detected capacity change from 0 to 32768 [ 100.190071][ T4285] Bluetooth: hci4: command 0x0411 tx timeout [ 100.347234][ T4589] ialloc: diAlloc returned -5! [ 100.532153][ T4628] loop1: detected capacity change from 0 to 1024 [ 101.598972][ T4660] loop0: detected capacity change from 0 to 4096 [ 101.719868][ T4663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.753517][ T4660] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 101.784042][ T4660] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 103.343935][ T4682] loop1: detected capacity change from 0 to 40427 [ 103.387836][ T4682] F2FS-fs (loop1): invalid crc value [ 103.407886][ T4682] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.468841][ T4691] loop3: detected capacity change from 0 to 32768 [ 103.566313][ T4682] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 103.611114][ T4682] F2FS-fs (loop1): Start checkpoint disabled! [ 103.651349][ T4713] loop4: detected capacity change from 0 to 8 [ 103.693492][ T4682] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 103.896390][ T4695] loop0: detected capacity change from 0 to 32768 [ 104.012718][ T4695] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 104.044504][ T4695] JBD2: Ignoring recovery information on journal [ 104.207025][ T4695] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.250228][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 104.521824][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 105.178537][ T4741] Bluetooth: MGMT ver 1.22 [ 105.574714][ T27] audit: type=1326 audit(1776899245.672:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 105.665354][ T27] audit: type=1326 audit(1776899245.702:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 105.762827][ T4749] loop3: detected capacity change from 0 to 4096 [ 105.780323][ T27] audit: type=1326 audit(1776899245.702:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 105.837193][ T4749] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 105.906008][ T27] audit: type=1326 audit(1776899245.702:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffa2dd9b687 code=0x7ffc0000 [ 106.013668][ T27] audit: type=1326 audit(1776899245.702:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.116879][ T27] audit: type=1326 audit(1776899245.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.206652][ T27] audit: type=1326 audit(1776899245.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.239000][ T4770] loop4: detected capacity change from 0 to 256 [ 106.306041][ T27] audit: type=1326 audit(1776899245.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.314211][ T4770] exfat: Deprecated parameter 'utf8' [ 106.368953][ T4775] netlink: 'syz.2.191': attribute type 28 has an invalid length. [ 106.451484][ T27] audit: type=1326 audit(1776899245.702:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.495983][ T4770] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 106.512672][ T4777] loop3: detected capacity change from 0 to 1024 [ 106.561367][ T4777] EXT4-fs: Ignoring removed i_version option [ 106.594071][ T27] audit: type=1326 audit(1776899245.732:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2dd9c819 code=0x7ffc0000 [ 106.603539][ T4777] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.770156][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.941564][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 107.079916][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.283009][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 107.303163][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.334409][ T4316] usb 3-1: config 0 has no interface number 0 [ 107.366439][ T4316] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 107.407472][ T4316] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 107.449898][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.479510][ T4316] usb 3-1: config 0 has no interface number 0 [ 107.529758][ T4316] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 107.570016][ T4316] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 107.620114][ T4316] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 107.651430][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.667616][ T4316] usb 3-1: Product: syz [ 107.672460][ T4316] usb 3-1: Manufacturer: syz [ 107.677125][ T4316] usb 3-1: SerialNumber: syz [ 107.691973][ T4779] loop0: detected capacity change from 0 to 32768 [ 107.745174][ T4316] usb 3-1: config 0 descriptor?? [ 107.788523][ T4779] add_index: next_index = 0. Resetting! [ 107.817447][ T4779] non-latin1 character 0x3ff found in JFS file name [ 107.853184][ T4779] mount with iocharset=utf8 to access [ 108.110009][ T4316] usb 3-1: USB disconnect, device number 2 [ 108.293221][ T4817] loop3: detected capacity change from 0 to 128 [ 108.442436][ T4821] loop0: detected capacity change from 0 to 128 [ 108.469478][ T4821] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 108.823001][ T4829] loop0: detected capacity change from 0 to 64 [ 109.743547][ T4859] loop3: detected capacity change from 0 to 1024 [ 110.210560][ T4869] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 110.576088][ T4881] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.642417][ T4884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.242'. [ 110.666516][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 110.736385][ T4861] loop2: detected capacity change from 0 to 40427 [ 110.761452][ T4861] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 110.811436][ T4861] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.840540][ T4861] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 110.874801][ T4861] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 110.931705][ T4861] F2FS-fs (loop2): invalid crc value [ 110.985767][ T4861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.153339][ T4861] F2FS-fs (loop2): Start checkpoint disabled! [ 111.178241][ T4861] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.189263][ T4861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.559576][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 111.559595][ T27] audit: type=1326 audit(1776899251.652:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f782eb9c819 code=0x0 [ 111.627161][ T4326] kworker/u4:7: attempt to access beyond end of device [ 111.627161][ T4326] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.705138][ T4908] overlayfs: workdir and upperdir must be separate subtrees [ 112.053555][ T4890] loop0: detected capacity change from 0 to 40427 [ 112.084250][ T4890] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.121256][ T4890] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.175228][ T4890] F2FS-fs (loop0): invalid crc value [ 112.214813][ T4890] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.394861][ T4924] loop1: detected capacity change from 0 to 64 [ 112.468764][ T4890] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.509869][ T4890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.691635][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 112.709163][ T4932] loop2: detected capacity change from 0 to 256 [ 112.723711][ T4932] exfat: Deprecated parameter 'utf8' [ 112.729142][ T4932] exfat: Deprecated parameter 'utf8' [ 112.736020][ T4932] exfat: Deprecated parameter 'utf8' [ 112.806052][ T4932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 112.855529][ T4934] loop3: detected capacity change from 0 to 1024 [ 112.965068][ T4322] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.010185][ T4934] hfsplus: bad catalog entry type [ 113.027454][ T4322] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 113.193304][ T9] hfsplus: b-tree write err: -5, ino 25 [ 113.250011][ T9] hfsplus: b-tree write err: -5, ino 4 [ 113.256642][ T9] hfsplus: b-tree write err: -5, ino 2 [ 113.482711][ T4948] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 113.529342][ T4948] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 113.551477][ T4948] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.268'. [ 113.928176][ T4958] loop2: detected capacity change from 0 to 736 [ 114.046605][ T4940] loop4: detected capacity change from 0 to 32768 [ 114.097079][ T4961] loop1: detected capacity change from 0 to 128 [ 114.156794][ T4958] rock: directory entry would overflow storage [ 114.166871][ T4961] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 114.180187][ T4958] rock: sig=0x3b10, size=4, remaining=3 [ 114.215429][ T4940] JBD2: Ignoring recovery information on journal [ 114.393457][ T4940] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 114.405713][ T4961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.522649][ T4969] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 114.541933][ T4969] netlink: 666 bytes leftover after parsing attributes in process `syz.0.277'. [ 114.622142][ T27] audit: type=1800 audit(1776899254.722:19): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 114.653892][ T4961] overlayfs: upper fs needs to support d_type. [ 114.694104][ T4961] overlayfs: upper fs does not support tmpfile. [ 114.811178][ T4975] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 114.854792][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 115.357409][ T4988] process 'syz.4.281' launched '/dev/fd/3' with NULL argv: empty string added [ 115.450663][ T4995] loop0: detected capacity change from 0 to 2048 [ 115.469270][ T4995] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.525833][ T4996] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.526878][ T4995] syz.0.288: attempt to access beyond end of device [ 115.526878][ T4995] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 115.639868][ T4334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.839784][ T4334] usb 2-1: Using ep0 maxpacket: 16 [ 115.850880][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.872868][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.889713][ T4334] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.925357][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.932462][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.961838][ T4334] usb 2-1: config 0 descriptor?? [ 116.136335][ T5009] loop3: detected capacity change from 0 to 512 [ 116.147462][ T4317] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 116.160035][ T952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.175180][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.195968][ T5009] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.207249][ T4317] usb 5-1: config 0 has no interface number 0 [ 116.218875][ T5009] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 116.238501][ T4317] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 116.269109][ T4317] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.308101][ T4317] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 116.338054][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.374717][ T4317] usb 5-1: Product: syz [ 116.378981][ T4317] usb 5-1: Manufacturer: syz [ 116.386251][ T4317] usb 5-1: SerialNumber: syz [ 116.400003][ T952] usb 3-1: Using ep0 maxpacket: 8 [ 116.408501][ T952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.426135][ T4317] usb 5-1: config 0 descriptor?? [ 116.466198][ T952] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 116.487820][ T4334] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 116.513975][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.551345][ T952] usb 3-1: config 0 descriptor?? [ 116.572207][ T952] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 116.684733][ T14] usb 2-1: USB disconnect, device number 2 [ 116.836454][ T5016] fido_id[5016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 117.103754][ T4334] usb 5-1: USB disconnect, device number 2 [ 117.178735][ T952] gspca_vc032x: reg_r err -71 [ 117.183973][ T952] vc032x: probe of 3-1:0.0 failed with error -71 [ 117.203059][ T952] usb 3-1: USB disconnect, device number 3 [ 118.434507][ T5033] loop0: detected capacity change from 0 to 40427 [ 118.481044][ T5033] F2FS-fs (loop0): invalid crc value [ 118.492763][ T5033] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.647784][ T5033] F2FS-fs (loop0): Start checkpoint disabled! [ 118.694080][ T5033] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 118.705672][ T5039] loop4: detected capacity change from 0 to 32768 [ 118.888508][ T5040] loop1: detected capacity change from 0 to 32768 [ 118.988981][ T5040] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 119.013962][ T5040] JBD2: Ignoring recovery information on journal [ 119.117860][ T5040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.130124][ T4334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.232202][ T4285] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 119.241200][ T4285] Bluetooth: hci2: Injecting HCI hardware error event [ 119.251565][ T75] kworker/u4:4: attempt to access beyond end of device [ 119.251565][ T75] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 119.262810][ T4279] Bluetooth: hci2: hardware error 0x00 [ 119.284623][ T5063] loop2: detected capacity change from 0 to 512 [ 119.388135][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.406947][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 119.436126][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.520262][ T4334] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 119.529413][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.632095][ T4334] usb 4-1: config 0 descriptor?? [ 120.065856][ T4334] wacom 0003:056A:030C.0002: unknown main item tag 0x0 [ 120.084014][ T4334] wacom 0003:056A:030C.0002: unknown main item tag 0x0 [ 120.169301][ T4334] wacom 0003:056A:030C.0002: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 120.184122][ T5071] loop1: detected capacity change from 0 to 512 [ 120.252366][ T5061] loop4: detected capacity change from 0 to 32768 [ 120.273124][ T4334] usb 4-1: USB disconnect, device number 2 [ 120.312879][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.372728][ T5071] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.427484][ T5077] fido_id[5077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 120.486133][ T5083] binder: 5082:5083 ioctl 541b 0 returned -22 [ 120.493241][ T5061] JBD2: Ignoring recovery information on journal [ 120.552217][ T5071] EXT4-fs warning (device loop1): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 120.689184][ T5061] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.707979][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 120.889119][ T5091] loop0: detected capacity change from 0 to 512 [ 120.989036][ T5091] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 121.034130][ T5091] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.324: corrupted in-inode xattr [ 121.048771][ T5091] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.324: couldn't read orphan inode 15 (err -117) [ 121.061558][ T5091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.163934][ T5091] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 121.309999][ T4279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 121.336774][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 121.355550][ T5103] loop1: detected capacity change from 0 to 2048 [ 121.376576][ T5103] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.414632][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 121.519734][ T5107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.819000][ T5115] loop0: detected capacity change from 0 to 256 [ 122.794430][ T5144] loop4: detected capacity change from 0 to 512 [ 122.881425][ T4353] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.966084][ T5150] comedi comedi3: 8255: I/O port conflict (0x1004f27,4) [ 123.004198][ T5150] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 123.027769][ T5150] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 123.070367][ T5150] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 123.077704][ T5150] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 123.120146][ T5150] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 123.127331][ T5150] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.194510][ T5150] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 123.517879][ T5164] loop4: detected capacity change from 0 to 512 [ 123.591153][ T5164] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.673779][ T5168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.360'. [ 123.719380][ T5164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.750042][ T5164] ext4 filesystem being mounted at /72/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 123.984789][ T5174] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.358: corrupted xattr block 6 [ 124.067024][ T5174] overlayfs: failed to get origin (-117) [ 124.085667][ T5174] EXT4-fs error (device loop4): ext4_xattr_block_find:1826: inode #12: comm syz.4.358: corrupted xattr block 6 [ 124.110897][ T5149] loop3: detected capacity change from 0 to 32768 [ 124.139483][ T5174] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 124.148733][ T5149] XFS: ikeep mount option is deprecated. [ 124.169961][ T5174] overlayfs: failed to verify upper root origin [ 124.381332][ T5149] XFS (loop3): Mounting V5 Filesystem [ 124.406903][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 124.611207][ T5201] team0: Device vlan2 is already an upper device of the team interface [ 124.644683][ T5149] XFS (loop3): Ending clean mount [ 124.682895][ T5149] XFS (loop3): Quotacheck needed: Please wait. [ 124.765456][ T5149] XFS (loop3): Quotacheck: Done. [ 125.178854][ T4275] XFS (loop3): Unmounting Filesystem [ 125.579918][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.769780][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 125.783684][ T22] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.805833][ T22] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.816445][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.825849][ T22] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 125.838643][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.864121][ T22] usb 5-1: config 0 descriptor?? [ 125.899907][ T4334] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.990050][ T5229] loop1: detected capacity change from 0 to 32768 [ 126.027108][ T5229] XFS (loop1): Mounting V5 Filesystem [ 126.060064][ T952] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.084785][ T5229] XFS (loop1): Ending clean mount [ 126.090278][ T4334] usb 3-1: Using ep0 maxpacket: 8 [ 126.099692][ T4334] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 126.115486][ T5229] XFS (loop1): Quotacheck needed: Please wait. [ 126.125228][ T4334] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 126.135701][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.144110][ T4334] usb 3-1: Product: syz [ 126.149587][ T4334] usb 3-1: Manufacturer: syz [ 126.155431][ T4334] usb 3-1: SerialNumber: syz [ 126.163353][ T4334] usb 3-1: config 0 descriptor?? [ 126.174569][ T4334] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 126.183071][ T4334] usb 3-1: setting power ON [ 126.188372][ T4334] dvb-usb: bulk message failed: -22 (2/0) [ 126.215210][ T4334] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.235363][ T4334] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 126.247671][ T5229] XFS (loop1): Quotacheck: Done. [ 126.256468][ T952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.277123][ T952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 126.291132][ T22] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 4/5 [ 126.307662][ T4334] usb 3-1: media controller created [ 126.319268][ T22] mcp2221 0003:04D8:00DD.0003: can't parse reports [ 126.329947][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.359076][ T22] mcp2221: probe of 0003:04D8:00DD.0003 failed with error -22 [ 126.370440][ T952] usb 4-1: config 0 descriptor?? [ 126.382860][ T5231] dvb-usb: bulk message failed: -22 (3/0) [ 126.397009][ T4334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.437970][ T4268] XFS (loop1): Unmounting Filesystem [ 126.456359][ T4334] usb 3-1: selecting invalid altsetting 6 [ 126.464543][ T4334] usb 3-1: digital interface selection failed (-22) [ 126.472354][ T4334] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 126.483613][ T4334] usb 3-1: setting power OFF [ 126.498833][ T4334] dvb-usb: bulk message failed: -22 (2/0) [ 126.518418][ T4334] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 126.530252][ T4334] (NULL device *): no alternate interface [ 126.533551][ T14] usb 5-1: USB disconnect, device number 3 [ 126.606479][ T4334] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.622340][ T4334] usb 3-1: USB disconnect, device number 4 [ 126.849699][ T952] ath6kl: Unsupported hardware version: 0x0 [ 126.861267][ T952] ath6kl: Failed to init ath6kl core: -22 [ 126.907938][ T952] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 126.953654][ T5244] loop1: detected capacity change from 0 to 4096 [ 127.005596][ T5244] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.112061][ T4316] usb 4-1: USB disconnect, device number 3 [ 127.256972][ T5248] loop4: detected capacity change from 0 to 1024 [ 127.297550][ T5248] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 127.645311][ T5254] loop2: detected capacity change from 0 to 256 [ 127.677165][ T5254] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 127.692105][ T5253] loop4: detected capacity change from 0 to 512 [ 127.829005][ T5253] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.390: invalid block [ 127.860436][ T5254] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 127.895578][ T5254] exFAT-fs (loop2): Filesystem has been set read-only [ 127.902971][ T5254] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880550f8e60 iblock : 8, err : -5) [ 127.916432][ T5254] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 127.926313][ T5254] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 127.948077][ T5253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.390: invalid indirect mapped block 10 (level 1) [ 128.006515][ T5253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.390: invalid indirect mapped block 8 (level 1) [ 128.066083][ T5253] EXT4-fs (loop4): 1 truncate cleaned up [ 128.091207][ T5253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.306708][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 128.421575][ T5268] netlink: 'syz.1.397': attribute type 29 has an invalid length. [ 128.469765][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 128.502640][ T5268] netlink: 'syz.1.397': attribute type 29 has an invalid length. [ 128.521608][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 128.585440][ T5273] netlink: 'syz.1.397': attribute type 29 has an invalid length. [ 128.612874][ T5266] loop2: detected capacity change from 0 to 4096 [ 128.629799][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 128.645361][ T5266] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.688067][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 128.888426][ T5266] ntfs3: loop2: failed to convert "c46c" to macinuit [ 128.971943][ T5280] loop1: detected capacity change from 0 to 256 [ 129.077345][ T5280] FAT-fs (loop1): Directory bread(block 64) failed [ 129.108040][ T5280] FAT-fs (loop1): Directory bread(block 65) failed [ 129.133991][ T5280] FAT-fs (loop1): Directory bread(block 66) failed [ 129.164844][ T5280] FAT-fs (loop1): Directory bread(block 67) failed [ 129.204123][ T5280] FAT-fs (loop1): Directory bread(block 68) failed [ 129.229900][ T5280] FAT-fs (loop1): Directory bread(block 69) failed [ 129.264575][ T5280] FAT-fs (loop1): Directory bread(block 70) failed [ 129.292220][ T5280] FAT-fs (loop1): Directory bread(block 71) failed [ 129.298984][ T5280] FAT-fs (loop1): Directory bread(block 72) failed [ 129.394475][ T5280] FAT-fs (loop1): Directory bread(block 73) failed [ 129.496507][ T5290] device ip6gretap0 entered promiscuous mode [ 129.524260][ T5290] device macvtap1 entered promiscuous mode [ 129.560958][ T5290] device ip6gretap0 left promiscuous mode [ 129.689331][ T5270] loop3: detected capacity change from 0 to 32768 [ 129.756175][ T5298] loop1: detected capacity change from 0 to 128 [ 129.769423][ T5298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.778848][ T5298] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.881697][ T5270] XFS (loop3): Mounting V5 Filesystem [ 129.917904][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 129.942456][ T5308] loop2: detected capacity change from 0 to 64 [ 129.980019][ T5308] hfs: unable to locate alternate MDB [ 129.986073][ T5308] hfs: continuing without an alternate MDB [ 130.020372][ T5305] loop0: detected capacity change from 0 to 8192 [ 130.075458][ T5305] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.153205][ T5270] XFS (loop3): Ending clean mount [ 130.203890][ T4275] XFS (loop3): Unmounting Filesystem [ 130.248951][ T5305] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 130.297903][ T5305] REISERFS (device loop0): using ordered data mode [ 130.310373][ T5305] reiserfs: using flush barriers [ 130.347099][ T5305] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.430951][ T5305] REISERFS (device loop0): checking transaction log (loop0) [ 130.942472][ T5305] REISERFS (device loop0): Using tea hash to sort names [ 130.993200][ T5305] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 131.126757][ T5329] Bluetooth: MGMT ver 1.22 [ 131.607518][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 131.639864][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.859804][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 131.874064][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.922908][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.949856][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 131.991941][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 132.026714][ T22] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.060030][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.112168][ T22] hub 4-1:1.0: bad descriptor, ignoring hub [ 132.125968][ T22] hub: probe of 4-1:1.0 failed with error -5 [ 132.143379][ T22] cdc_wdm 4-1:1.0: skipping garbage [ 132.160159][ T22] cdc_wdm 4-1:1.0: skipping garbage [ 132.206537][ T22] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 132.226386][ T22] cdc_wdm 4-1:1.0: Unknown control protocol [ 132.371050][ T5337] loop2: detected capacity change from 0 to 40427 [ 132.415153][ T5337] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 132.427612][ T5337] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 132.439140][ T5337] F2FS-fs (loop2): invalid crc value [ 132.449229][ T5337] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 132.468009][ T5337] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.517103][ T5354] tipc: Enabling of bearer rejected, failed to enable media [ 132.573537][ T5337] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 132.591939][ T5337] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 132.630479][ T5337] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 132.637949][ T5337] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.692776][ T4334] usb 4-1: USB disconnect, device number 4 [ 132.937628][ T4278] syz-executor: attempt to access beyond end of device [ 132.937628][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.094931][ T5348] loop1: detected capacity change from 0 to 32768 [ 133.156001][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.209468][ T5348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.430 (5348) [ 133.342751][ T5348] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.428569][ T5348] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 133.469945][ T5348] BTRFS info (device loop1): using free space tree [ 133.615754][ T5380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 133.757678][ T5387] loop3: detected capacity change from 0 to 64 [ 133.817303][ T5348] BTRFS info (device loop1): enabling ssd optimizations [ 133.982897][ T5399] loop0: detected capacity change from 0 to 2048 [ 134.090659][ T5399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.492281][ T5405] loop2: detected capacity change from 0 to 4096 [ 134.567430][ T5405] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 134.693316][ T4268] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.804755][ T5415] loop0: detected capacity change from 0 to 512 [ 134.889808][ T5415] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.976495][ T5411] loop3: detected capacity change from 0 to 8192 [ 134.985613][ T5415] EXT4-fs (loop0): invalid journal inode [ 135.014419][ T5415] EXT4-fs (loop0): can't get journal size [ 135.067822][ T5411] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.094548][ T5415] EXT4-fs (loop0): 1 truncate cleaned up [ 135.149386][ T5415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.199593][ T5411] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 135.260047][ T5411] REISERFS (device loop3): using ordered data mode [ 135.267187][ T5411] reiserfs: using flush barriers [ 135.318535][ T5415] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 135.347383][ T5411] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.419180][ T5411] REISERFS (device loop3): checking transaction log (loop3) [ 135.442997][ T5411] REISERFS (device loop3): Using r5 hash to sort names [ 135.480295][ T5411] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 135.541709][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 135.645456][ T5411] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 135.805905][ T5443] loop4: detected capacity change from 0 to 256 [ 136.129145][ T5445] loop1: detected capacity change from 0 to 2048 [ 136.209995][ T5445] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 136.306631][ T5445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.898591][ T5457] loop1: detected capacity change from 0 to 512 [ 136.949098][ T5457] EXT4-fs: Ignoring removed oldalloc option [ 137.050722][ T5457] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.474: invalid indirect mapped block 4294967295 (level 1) [ 137.180041][ T5457] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.474: invalid indirect mapped block 4294967295 (level 1) [ 137.218746][ T5468] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.468'. [ 137.242152][ T5457] EXT4-fs (loop1): 2 truncates cleaned up [ 137.248009][ T5457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.337212][ T5447] loop2: detected capacity change from 0 to 32768 [ 137.357083][ T5457] EXT4-fs warning (device loop1): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 137.385083][ T5470] loop0: detected capacity change from 0 to 512 [ 137.454543][ T5470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.572860][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.590700][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 137.623737][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 137.636969][ T5470] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.685881][ T5449] XFS (loop4): Mounting V5 Filesystem [ 137.794129][ T5470] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 137.887266][ T5470] overlayfs: conflicting lowerdir path [ 137.895821][ T5449] XFS (loop4): Ending clean mount [ 137.953495][ T5449] XFS (loop4): Quotacheck needed: Please wait. [ 138.077879][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 138.130328][ T5449] XFS (loop4): Quotacheck: Done. [ 138.490832][ T4272] XFS (loop4): Unmounting Filesystem [ 138.829486][ T5507] set_capacity_and_notify: 1 callbacks suppressed [ 138.829507][ T5507] loop0: detected capacity change from 0 to 64 [ 139.033120][ T5508] loop1: detected capacity change from 0 to 8192 [ 139.066147][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 139.089535][ T5508] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.109759][ T5510] netlink: 5 bytes leftover after parsing attributes in process `syz.3.487'. [ 139.129982][ T5508] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 139.139402][ T5508] REISERFS (device loop1): using ordered data mode [ 139.156685][ T5508] reiserfs: using flush barriers [ 139.163392][ T5508] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.180325][ T5508] REISERFS (device loop1): checking transaction log (loop1) [ 139.233221][ T5508] REISERFS (device loop1): Using r5 hash to sort names [ 139.288470][ T5508] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 139.409572][ T27] audit: type=1804 audit(1776899279.502:20): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.486" name="/newroot/102/file1/file1" dev="loop1" ino=2 res=1 errno=0 [ 139.906656][ T5529] device ipvlan2 entered promiscuous mode [ 139.958417][ T5529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.997662][ T5535] loop4: detected capacity change from 0 to 1024 [ 140.110700][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.317332][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 141.024286][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.059864][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.070254][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.084426][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.093459][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.107839][ T5572] loop3: detected capacity change from 0 to 16 [ 141.119570][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.135373][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.154626][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.168949][ T5572] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.177254][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.190917][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.198515][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.212502][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.222729][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.238297][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.248748][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.258345][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.265977][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.274477][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.282176][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.290263][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.297817][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.307875][ T5572] syz.3.513: attempt to access beyond end of device [ 141.307875][ T5572] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 141.327441][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.336143][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.348341][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.359111][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.373822][ T5572] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4 in[62, 4034] out[4096] [ 141.389224][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.406554][ T27] audit: type=1800 audit(1776899281.502:21): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.513" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 141.433510][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.446919][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.458516][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.472839][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.490405][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.504928][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.520636][ T5577] loop0: detected capacity change from 0 to 4096 [ 141.527356][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.535095][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.543458][ T5577] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 141.553680][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.569889][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.585825][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.599102][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.607297][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.620916][ T5577] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.631849][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.639997][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.647795][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.657258][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.665186][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.685408][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.714240][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.739748][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.760041][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.767552][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.776048][ T5579] loop3: detected capacity change from 0 to 4096 [ 141.793340][ T5579] ntfs3: loop3: ino=3, Correct links count -> 2. [ 141.799842][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.799922][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.799946][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.799968][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.799990][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.800012][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.800173][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.869201][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.877080][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.885010][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.892894][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.900410][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.908081][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.916215][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.931849][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.945978][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.969902][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.987815][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 141.995875][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.009808][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.027733][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.037884][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.058308][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.080620][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.088135][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.097116][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.104840][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.115959][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.125287][ T5579] ntfs3: loop3: failed to convert "0080" to cp874 [ 142.146244][ T5579] ntfs3: loop3: failed to convert name for inode 1e. [ 142.155590][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.167570][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.179042][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.192589][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.215675][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.223518][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.255392][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.263059][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.279895][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.287654][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.302511][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.310226][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.317701][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.328604][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.346760][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.364959][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.373092][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.382312][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.390006][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.397586][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.405592][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.422963][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.433001][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.447328][ T5428] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 142.492981][ T5428] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 143.207909][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 143.499493][ T5616] loop2: detected capacity change from 0 to 4096 [ 143.780048][ T5619] fido_id[5619]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.879853][ T4355] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.082019][ T4355] usb 4-1: Using ep0 maxpacket: 32 [ 144.089579][ T4355] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.126074][ T4355] usb 4-1: config 0 has no interface number 0 [ 144.168575][ T4355] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.210986][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.219085][ T4355] usb 4-1: Product: syz [ 144.244361][ T4355] usb 4-1: Manufacturer: syz [ 144.249069][ T4355] usb 4-1: SerialNumber: syz [ 144.283541][ T5640] binder_alloc: binder_alloc_mmap_handler: 5639 200000ffe000-200000fff000 already mapped failed -16 [ 144.303639][ T4355] usb 4-1: config 0 descriptor?? [ 144.316356][ T4355] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.529149][ T4355] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.610205][ T4355] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.783937][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 144.925745][ T5656] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.553'. [ 144.984922][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.004938][ T5430] usb 4-1: USB disconnect, device number 5 [ 145.045741][ T5430] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.104151][ T5430] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.147441][ T5430] quatech2 4-1:0.51: device disconnected [ 145.271237][ T5667] loop1: detected capacity change from 0 to 512 [ 145.401718][ T5667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.420010][ T5667] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.461068][ T5667] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 145.658931][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 145.704961][ T5681] loop0: detected capacity change from 0 to 128 [ 145.801972][ T5685] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 145.829848][ T5685] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.836447][ T5685] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.850076][ T5681] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 145.890010][ T5685] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.919390][ T5681] hpfs: filesystem error: improperly stopped [ 145.926482][ T5685] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 145.942251][ T5685] comedi comedi3: 8255: I/O port conflict (0xf8,4) [ 145.949174][ T5681] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 145.971249][ T5685] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 145.990571][ T5681] hpfs: You really don't want any checks? You are crazy... [ 145.998004][ T5681] hpfs: Code page index out of array [ 146.023777][ T5685] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 146.026175][ T5681] hpfs: code page support is disabled [ 146.066915][ T5685] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 146.087967][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 146.108624][ T5685] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 146.151651][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 146.163655][ T5681] hpfs: filesystem error: unable to find root dir [ 146.210106][ T5685] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 146.217995][ T5685] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 146.253008][ T5681] hpfs: hpfs_map_sector(): read error [ 146.265471][ T5685] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.280054][ T5685] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.327233][ T5695] loop3: detected capacity change from 0 to 512 [ 146.337845][ T5685] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffbff,4) [ 146.350504][ T5685] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 146.372477][ T5695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.390180][ T5685] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 146.397150][ T5685] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 146.417430][ T5695] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 146.448242][ T5685] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 146.519815][ T5685] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 146.527214][ T5685] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 146.567510][ T5685] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 146.669886][ T5701] loop4: detected capacity change from 0 to 256 [ 146.744906][ T5703] loop1: detected capacity change from 0 to 1024 [ 146.777427][ T5701] FAT-fs (loop4): Directory bread(block 64) failed [ 146.805537][ T5701] FAT-fs (loop4): Directory bread(block 65) failed [ 146.845679][ T5701] FAT-fs (loop4): Directory bread(block 66) failed [ 146.869345][ T27] audit: type=1800 audit(1776899286.962:22): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.576" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=25 res=0 errno=0 [ 146.910825][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.926207][ T5701] FAT-fs (loop4): Directory bread(block 67) failed [ 146.933693][ T5701] FAT-fs (loop4): Directory bread(block 68) failed [ 146.945342][ T5701] FAT-fs (loop4): Directory bread(block 69) failed [ 146.952536][ T5701] FAT-fs (loop4): Directory bread(block 70) failed [ 146.959389][ T5701] FAT-fs (loop4): Directory bread(block 71) failed [ 146.966637][ T5701] FAT-fs (loop4): Directory bread(block 72) failed [ 146.989954][ T5701] FAT-fs (loop4): Directory bread(block 73) failed [ 147.275156][ T5716] tmpfs: Bad value for 'size' [ 147.432402][ T5720] loop1: detected capacity change from 0 to 512 [ 147.484656][ T5720] EXT4-fs: Ignoring removed orlov option [ 147.517713][ T5720] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 147.588092][ T5720] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.583: corrupted in-inode xattr [ 147.639377][ T5720] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.583: couldn't read orphan inode 15 (err -117) [ 147.774062][ T5720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.837290][ T5729] loop4: detected capacity change from 0 to 128 [ 147.879142][ T5729] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 147.930669][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.957351][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 148.031014][ T5729] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.588: checksumming directory block 0 [ 148.108508][ T5738] device macsec1 entered promiscuous mode [ 148.204398][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 148.399234][ T5726] loop3: detected capacity change from 0 to 32768 [ 148.698357][ T5749] loop4: detected capacity change from 0 to 512 [ 148.786657][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.848296][ T5749] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.030666][ T5749] EXT4-fs: Ignoring removed orlov option [ 149.036428][ T5749] EXT4-fs: Ignoring removed bh option [ 149.075246][ T5749] EXT4-fs: can't change dax mount option while remounting [ 149.172950][ T5756] loop0: detected capacity change from 0 to 2048 [ 149.264333][ T5756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.360866][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 149.456969][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 149.481351][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 149.585193][ T5768] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.944474][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.611'. [ 150.124083][ T5783] EXT4-fs (loop1): 1 truncate cleaned up [ 150.139849][ T5783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.353513][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 150.593461][ T5796] set_capacity_and_notify: 1 callbacks suppressed [ 150.593480][ T5796] loop4: detected capacity change from 0 to 256 [ 150.696210][ T5796] FAT-fs (loop4): Directory bread(block 64) failed [ 150.750118][ T5796] FAT-fs (loop4): Directory bread(block 65) failed [ 150.770316][ T5796] FAT-fs (loop4): Directory bread(block 66) failed [ 150.776969][ T5796] FAT-fs (loop4): Directory bread(block 67) failed [ 150.838207][ T5796] FAT-fs (loop4): Directory bread(block 68) failed [ 150.879893][ T5796] FAT-fs (loop4): Directory bread(block 69) failed [ 150.886781][ T5796] FAT-fs (loop4): Directory bread(block 70) failed [ 150.950299][ T5796] FAT-fs (loop4): Directory bread(block 71) failed [ 150.958765][ T5796] FAT-fs (loop4): Directory bread(block 72) failed [ 150.979924][ T5796] FAT-fs (loop4): Directory bread(block 73) failed [ 151.056090][ T5777] loop2: detected capacity change from 0 to 32768 [ 151.137501][ T5780] loop3: detected capacity change from 0 to 32768 [ 151.154390][ T5777] JBD2: Ignoring recovery information on journal [ 151.209426][ T5796] syz.4.617: attempt to access beyond end of device [ 151.209426][ T5796] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 151.365655][ T5777] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 151.398217][ T5792] loop0: detected capacity change from 0 to 32768 [ 151.442670][ T5792] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.615 (5792) [ 151.527527][ T27] audit: type=1800 audit(1776899291.622:23): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.609" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 151.566122][ T5792] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.617877][ T5807] loop1: detected capacity change from 0 to 128 [ 151.640503][ T5792] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 151.680871][ T5792] BTRFS info (device loop0): using free space tree [ 151.768296][ T5812] loop4: detected capacity change from 0 to 1024 [ 151.853851][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 152.073792][ T46] hfsplus: b-tree write err: -5, ino 25 [ 152.092936][ T5823] loop3: detected capacity change from 0 to 2048 [ 152.107931][ T5823] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.111329][ T46] hfsplus: b-tree write err: -5, ino 4 [ 152.168334][ T5828] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.233240][ T5792] BTRFS info (device loop0): enabling ssd optimizations [ 152.249900][ T46] hfsplus: b-tree write err: -5, ino 2 [ 152.286822][ T5830] loop1: detected capacity change from 0 to 1024 [ 152.555955][ T75] hfsplus: b-tree write err: -5, ino 25 [ 152.611341][ T75] hfsplus: b-tree write err: -5, ino 4 [ 152.617006][ T75] hfsplus: b-tree write err: -5, ino 2 [ 152.712864][ T4273] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 153.017392][ T5844] loop1: detected capacity change from 0 to 2048 [ 153.219195][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.321697][ T5844] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.626: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 153.409370][ T4514] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop0 scanned by udevd (4514) [ 153.440918][ T5844] EXT4-fs (loop1): Remounting filesystem read-only [ 153.607989][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 153.655851][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 153.889426][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 153.939915][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 153.947540][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 153.993245][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.015763][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.055505][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.075278][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.096135][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.134426][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.157336][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.195414][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.219846][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.227374][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.227861][ T5891] loop2: detected capacity change from 0 to 512 [ 154.280678][ T5891] EXT4-fs: Ignoring removed nobh option [ 154.293240][ T4313] hid-generic 0009:0401:0004.0005: unknown main item tag 0x0 [ 154.304723][ T4313] hid-generic 0009:0401:0004.0005: hidraw0: HID v0.07 Device [syz1] on syz0 [ 154.345410][ T5891] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 154.398001][ T5891] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 154.450202][ T5891] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.644: inode has both inline data and extents flags [ 154.516931][ T5891] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.644: couldn't read orphan inode 13 (err -117) [ 154.555243][ T5891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.616429][ T5904] tipc: Enabling of bearer rejected, failed to enable media [ 154.752171][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 154.819836][ T5428] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.967420][ T5905] fido_id[5905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.021829][ T5428] usb 4-1: Using ep0 maxpacket: 16 [ 155.038595][ T5428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.083935][ T5428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.117184][ T5428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.146905][ T5428] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.178186][ T5428] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.214580][ T5428] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.231144][ T5428] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.249524][ T5428] usb 4-1: Manufacturer: syz [ 155.256999][ T5428] usb 4-1: config 0 descriptor?? [ 155.320080][ T5916] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.369879][ T5429] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.575691][ T5429] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.607943][ T5429] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 155.635818][ T5429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.693438][ T5429] usb 2-1: Product: syz [ 155.697710][ T5429] usb 2-1: Manufacturer: syz [ 155.720225][ T5429] usb 2-1: SerialNumber: syz [ 155.739877][ T5428] rc_core: IR keymap rc-hauppauge not found [ 155.747243][ T5428] Registered IR keymap rc-empty [ 155.772352][ T5429] usb 2-1: selecting invalid altsetting 1 [ 155.778921][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.796668][ T5429] usb 2-1: unit 6 not found! [ 155.803741][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 155.851686][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.892746][ T5428] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 155.928906][ T5428] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 155.985105][ T5429] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 155.997812][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.016935][ T5429] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 156.040012][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.056094][ T5429] usb 2-1: selecting invalid altsetting 1 [ 156.076193][ T5910] set_capacity_and_notify: 1 callbacks suppressed [ 156.076211][ T5910] loop0: detected capacity change from 0 to 40427 [ 156.081826][ T5429] usb 2-1: unit 6 not found! [ 156.096726][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.140038][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.150070][ T5910] F2FS-fs (loop0): invalid crc value [ 156.190536][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.200075][ T5910] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.208132][ T5429] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 156.220734][ T5429] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 156.231024][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.276968][ T5429] usb 2-1: selecting invalid altsetting 1 [ 156.289917][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.317532][ T5429] usb 2-1: unit 6 not found! [ 156.324245][ T5429] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 156.332806][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.369791][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.399236][ T5910] F2FS-fs (loop0): Start checkpoint disabled! [ 156.408408][ T5429] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 156.415986][ T5428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.426418][ T5910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.454690][ T5429] usb 2-1: USB disconnect, device number 3 [ 156.471316][ T5428] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 156.509782][ T5428] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.534450][ T5019] udevd[5019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.573036][ T4369] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.592088][ T5428] usb 4-1: USB disconnect, device number 6 [ 156.768225][ T11] kworker/u4:1: attempt to access beyond end of device [ 156.768225][ T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 156.783656][ T4369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.794297][ T11] kworker/u4:1: attempt to access beyond end of device [ 156.794297][ T11] loop0: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 156.809787][ T4369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.835893][ T4369] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 156.846475][ T4369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.886832][ T4369] usb 3-1: config 0 descriptor?? [ 157.324406][ T4369] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 157.353560][ T4369] sony 0003:054C:0BA0.0006: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 157.384008][ T4369] sony 0003:054C:0BA0.0006: failed to claim input [ 157.525765][ T4317] usb 3-1: USB disconnect, device number 5 [ 157.763131][ T5959] loop4: detected capacity change from 0 to 64 [ 157.798754][ T5953] fido_id[5953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 158.245175][ T5945] loop1: detected capacity change from 0 to 32768 [ 158.296034][ T5945] JBD2: Ignoring recovery information on journal [ 158.379701][ T5945] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.423523][ T5975] loop0: detected capacity change from 0 to 2048 [ 158.461280][ T5975] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 158.482348][ T5971] loop2: detected capacity change from 0 to 4096 [ 158.499728][ T5975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.574972][ T5971] NILFS (loop2): invalid segment: Checksum error in segment payload [ 158.600226][ T5971] NILFS (loop2): trying rollback from an earlier position [ 158.658481][ T5971] NILFS (loop2): recovery complete [ 158.731078][ T5979] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.828601][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 159.349307][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 159.490078][ T5992] loop0: detected capacity change from 0 to 1024 [ 159.696734][ T5994] loop3: detected capacity change from 0 to 2048 [ 159.751168][ T5994] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.835328][ T5999] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.836289][ T5994] syz.3.689: attempt to access beyond end of device [ 159.836289][ T5994] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 160.038938][ T6004] syz.3.689: attempt to access beyond end of device [ 160.038938][ T6004] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 160.154634][ T6004] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 160.179186][ T5977] loop4: detected capacity change from 0 to 40427 [ 160.186127][ T5994] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 160.225405][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 160.235185][ T6004] NILFS (loop3): error -5 reading inode: ino=12 [ 160.257504][ T5994] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 160.279104][ T5977] F2FS-fs (loop4): invalid crc value [ 160.307423][ T5977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.345709][ T5994] Remounting filesystem read-only [ 160.379800][ T5994] NILFS (loop3): error -5 truncating bmap (ino=16) [ 160.481905][ T4275] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 160.571149][ T5977] F2FS-fs (loop4): Start checkpoint disabled! [ 160.579465][ T5977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 160.678191][ T6012] loop0: detected capacity change from 0 to 128 [ 160.760705][ T6012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.809825][ T5998] loop1: detected capacity change from 0 to 32768 [ 160.847073][ T5998] [ 160.847073][ T5998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.847073][ T5998] [ 160.877763][ T6012] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.910904][ T5998] ERROR: (device loop1): diWrite: ixpxd invalid [ 160.910904][ T5998] [ 160.942445][ T11] kworker/u4:1: attempt to access beyond end of device [ 160.942445][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 160.956886][ T5998] ERROR: (device loop1): txCommit: [ 160.956886][ T5998] [ 161.144007][ T4268] [ 161.144007][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.144007][ T4268] [ 161.167479][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 161.196094][ T4268] [ 161.196094][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.196094][ T4268] [ 161.448012][ T27] audit: type=1326 audit(1776899301.542:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f779c819 code=0x7ffc0000 [ 161.504011][ T6031] loop2: detected capacity change from 0 to 1024 [ 161.510856][ T27] audit: type=1326 audit(1776899301.542:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f779c819 code=0x7ffc0000 [ 161.600893][ T27] audit: type=1326 audit(1776899301.552:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f39f779c819 code=0x7ffc0000 [ 161.740633][ T27] audit: type=1326 audit(1776899301.552:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f779c819 code=0x7ffc0000 [ 161.833551][ T9] hfsplus: b-tree write err: -5, ino 25 [ 161.839395][ T9] hfsplus: b-tree write err: -5, ino 4 [ 161.870033][ T9] hfsplus: b-tree write err: -5, ino 2 [ 161.875692][ T9] hfsplus: b-tree write err: -5, ino 26 [ 161.886964][ T27] audit: type=1326 audit(1776899301.552:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f779c819 code=0x7ffc0000 [ 162.616277][ T6061] loop2: detected capacity change from 0 to 512 [ 162.662428][ T6061] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.724028][ T6061] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.742730][ T6061] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 162.759838][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.788887][ T6061] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.719: attempt to clear invalid blocks 2 len 1 [ 162.865695][ T6061] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 162.890347][ T6061] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.719: invalid indirect mapped block 1819239214 (level 0) [ 162.930505][ T6061] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.719: invalid indirect mapped block 1819239214 (level 1) [ 162.957558][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.974761][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.001101][ T6061] EXT4-fs (loop2): 1 truncate cleaned up [ 163.005745][ T5852] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 163.006860][ T6061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.039531][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.067927][ T5852] usb 5-1: config 0 descriptor?? [ 163.108684][ T27] audit: type=1326 audit(1776899303.202:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361a99c819 code=0x7ffc0000 [ 163.219389][ T27] audit: type=1326 audit(1776899303.232:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f361a99c819 code=0x7ffc0000 [ 163.261792][ T4278] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 163.350851][ T27] audit: type=1326 audit(1776899303.232:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361a99c819 code=0x7ffc0000 [ 163.387654][ T4278] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 163.419959][ T27] audit: type=1326 audit(1776899303.232:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361a99c819 code=0x7ffc0000 [ 163.443612][ T4278] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 163.466464][ T27] audit: type=1326 audit(1776899303.232:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f361a99c819 code=0x7ffc0000 [ 163.575612][ T5852] wacom 0003:056A:030C.0007: unknown main item tag 0x0 [ 163.606674][ T5852] wacom 0003:056A:030C.0007: unknown main item tag 0x0 [ 163.646212][ T5852] wacom 0003:056A:030C.0007: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 163.709241][ T6059] loop1: detected capacity change from 0 to 32768 [ 163.803430][ T5852] usb 5-1: USB disconnect, device number 4 [ 163.806054][ T6059] JBD2: Ignoring recovery information on journal [ 163.850698][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 164.023874][ T6059] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 164.153400][ T6073] fido_id[6073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.199787][ T6059] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 4106 [ 164.223060][ T4322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.315048][ T6059] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 164.350272][ T6059] OCFS2: File system is now read-only. [ 164.360003][ T6059] (syz.1.718,6059,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 164.406534][ T6059] (syz.1.718,6059,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 164.441078][ T6059] (syz.1.718,6059,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 164.470733][ T4322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.530503][ T6059] (syz.1.718,6059,1):ocfs2_mknod:306 ERROR: status = -30 [ 164.562796][ T6059] (syz.1.718,6059,1):ocfs2_mknod:502 ERROR: status = -30 [ 164.579915][ T6059] (syz.1.718,6059,1):ocfs2_create:676 ERROR: status = -30 [ 164.601491][ T6082] loop4: detected capacity change from 0 to 64 [ 164.667044][ T6068] loop0: detected capacity change from 0 to 32768 [ 164.678137][ T6068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.722 (6068) [ 164.708830][ T4322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.756506][ T6068] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.850592][ T6068] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 164.880959][ T6068] BTRFS warning (device loop0): excessive commit interval 65536 [ 164.895366][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 164.906051][ T4322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.910858][ T6068] BTRFS info (device loop0): using free space tree [ 165.201085][ T6068] BTRFS info (device loop0): enabling ssd optimizations [ 165.560047][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.576335][ T6114] can0: slcan on ptm0. [ 165.801091][ T6111] can0 (unregistered): slcan off ptm0. [ 166.001030][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.013919][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.034900][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.043432][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.054197][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.063275][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.099904][ T5852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.303701][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.341327][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.376936][ T5852] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.426209][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.456427][ T5852] usb 4-1: SerialNumber: syz [ 166.674713][ T6137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 166.696265][ T5852] usb 4-1: 0:2 : does not exist [ 166.769966][ T5852] usb 4-1: USB disconnect, device number 7 [ 167.004307][ T6143] loop1: detected capacity change from 0 to 512 [ 167.034109][ T6143] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.095404][ T6143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.110309][ T4514] udevd[4514]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.209986][ T6143] EXT4-fs (loop1): 1 truncate cleaned up [ 167.219950][ T6143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.291470][ T6143] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.744: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 167.439463][ T6143] EXT4-fs (loop1): Remounting filesystem read-only [ 167.500940][ T6143] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 167.553107][ T6143] EXT4-fs (loop1): Remounting filesystem read-only [ 167.562153][ T6127] loop4: detected capacity change from 0 to 40427 [ 167.604149][ T6156] loop3: detected capacity change from 0 to 1024 [ 167.635428][ T6143] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.744: Deleting old file: nlink 5, error=-117 [ 167.694712][ T6127] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 167.777923][ T6127] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 167.836281][ T6127] F2FS-fs (loop4): invalid crc value [ 167.901444][ T6127] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.949539][ T4295] hfsplus: b-tree write err: -5, ino 25 [ 167.969326][ T4295] hfsplus: b-tree write err: -5, ino 4 [ 167.980307][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 168.001107][ T4295] hfsplus: b-tree write err: -5, ino 2 [ 168.103270][ T6120] chnl_net:caif_netlink_parms(): no params data found [ 168.110386][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 168.172071][ T6127] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 168.179219][ T6127] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 168.265533][ T6165] loop3: detected capacity change from 0 to 4096 [ 168.298253][ T6165] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.523975][ T6175] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 168.783543][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 168.850712][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 169.328622][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.375279][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.421303][ T6120] device bridge_slave_0 entered promiscuous mode [ 169.433821][ T6196] loop1: detected capacity change from 0 to 2048 [ 169.565196][ T6203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.592651][ T6198] loop0: detected capacity change from 0 to 2048 [ 169.640783][ T6198] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.739082][ T6204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.870180][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.880141][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.900578][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 169.900596][ T27] audit: type=1326 audit(1776899310.002:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 169.920230][ T6120] device bridge_slave_1 entered promiscuous mode [ 170.075925][ T27] audit: type=1326 audit(1776899310.042:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.189942][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 170.235582][ T27] audit: type=1326 audit(1776899310.042:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.269572][ T4322] device hsr_slave_0 left promiscuous mode [ 170.310118][ T4322] device hsr_slave_1 left promiscuous mode [ 170.338561][ T27] audit: type=1326 audit(1776899310.042:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.361597][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.386180][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.412058][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.439840][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.447188][ T27] audit: type=1326 audit(1776899310.052:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.489329][ T4322] device bridge_slave_1 left promiscuous mode [ 170.505644][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.536982][ T27] audit: type=1326 audit(1776899310.052:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.579022][ T4322] device bridge_slave_0 left promiscuous mode [ 170.610001][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.619082][ T6222] loop1: detected capacity change from 0 to 2048 [ 170.634712][ T27] audit: type=1326 audit(1776899310.052:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8328f9c819 code=0x7ffc0000 [ 170.696050][ T6222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.778026][ T4322] device veth1_macvtap left promiscuous mode [ 170.798792][ T4322] device veth0_macvtap left promiscuous mode [ 170.846379][ T4322] device veth1_vlan left promiscuous mode [ 170.872196][ T4322] device veth0_vlan left promiscuous mode [ 171.638071][ T6233] loop1: detected capacity change from 0 to 32768 [ 171.683531][ T6233] JBD2: Ignoring recovery information on journal [ 171.746230][ T6233] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.905355][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 172.276512][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 172.334062][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 172.408875][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 172.521678][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.528471][ T6250] loop0: detected capacity change from 0 to 8192 [ 172.558064][ T6250] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.694367][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.305360][ T4322] bond0 (unregistering): Released all slaves [ 173.432545][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.507564][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.758067][ T6120] team0: Port device team_slave_0 added [ 173.786243][ T6120] team0: Port device team_slave_1 added [ 173.961790][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.969560][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.119875][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.154917][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.211324][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.324081][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.350078][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 174.424194][ T6120] device hsr_slave_0 entered promiscuous mode [ 174.450431][ T6120] device hsr_slave_1 entered promiscuous mode [ 174.467145][ T6120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.506054][ T6120] Cannot create hsr debugfs directory [ 174.582761][ T6274] loop3: detected capacity change from 0 to 8192 [ 174.626122][ T6274] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.217823][ T6267] loop4: detected capacity change from 0 to 32768 [ 175.257506][ T6267] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.785 (6267) [ 175.301550][ T6295] loop0: detected capacity change from 0 to 4096 [ 175.324327][ T6295] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 175.360482][ T6267] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.397579][ T6267] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 175.445682][ T6295] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 175.467521][ T6120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.474730][ T6267] BTRFS info (device loop4): using free space tree [ 175.517288][ T6120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.591462][ T6120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.772108][ T6120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.788283][ T6267] BTRFS info (device loop4): enabling ssd optimizations [ 176.132920][ T4272] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.160902][ T6331] team0: Device vlan2 is already an upper device of the team interface [ 176.369543][ T6336] loop1: detected capacity change from 0 to 512 [ 176.430979][ T4279] Bluetooth: hci4: command 0x0411 tx timeout [ 176.484288][ T6336] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.804: inode has both inline data and extents flags [ 176.531541][ T6340] loop0: detected capacity change from 0 to 256 [ 176.561530][ T6340] exfat: Deprecated parameter 'namecase' [ 176.585545][ T6336] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.804: couldn't read orphan inode 15 (err -117) [ 176.619098][ T6340] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 176.642433][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.695292][ T6336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.760148][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.769145][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.832010][ T6120] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.861071][ T6338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 176.913160][ T6343] loop3: detected capacity change from 0 to 256 [ 176.921093][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.950092][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.959035][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.966281][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.063168][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.117337][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 177.124304][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.127840][ T6343] FAT-fs (loop3): Directory bread(block 64) failed [ 177.161583][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.168780][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.176211][ T6343] FAT-fs (loop3): Directory bread(block 65) failed [ 177.205927][ T6343] FAT-fs (loop3): Directory bread(block 66) failed [ 177.240942][ T6343] FAT-fs (loop3): Directory bread(block 67) failed [ 177.288197][ T6343] FAT-fs (loop3): Directory bread(block 68) failed [ 177.343424][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.363633][ T6343] FAT-fs (loop3): Directory bread(block 69) failed [ 177.371203][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.389970][ T6343] FAT-fs (loop3): Directory bread(block 70) failed [ 177.396600][ T6343] FAT-fs (loop3): Directory bread(block 71) failed [ 177.408496][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.458370][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.485444][ T6343] FAT-fs (loop3): Directory bread(block 72) failed [ 177.524797][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.536607][ T6343] FAT-fs (loop3): Directory bread(block 73) failed [ 177.571437][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.599959][ T5420] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.610900][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.668406][ T6120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.720517][ T6120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.752363][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.786437][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.811163][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.812634][ T5420] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 177.889925][ T5420] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 177.908377][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.935334][ T5420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.950349][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.970671][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.061156][ T5420] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 178.858492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.867358][ T6358] loop0: detected capacity change from 0 to 32768 [ 178.876361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.905627][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.963451][ T6358] JBD2: Ignoring recovery information on journal [ 178.974012][ T6364] loop3: detected capacity change from 0 to 32768 [ 179.056163][ T6358] (syz.0.811,6358,0):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 179.070069][ T6358] (syz.0.811,6358,1):ocfs2_clear_journal_error:1116 ERROR: File system on device loop0 needs checking. [ 179.115137][ T6358] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.133945][ T6364] JBD2: Ignoring recovery information on journal [ 179.172177][ T11] (kworker/u4:1,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 179.347755][ T6364] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.364705][ T5420] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 179.386233][ T5420] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 179.417639][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 179.431142][ T5420] usb 5-1: USB disconnect, device number 5 [ 179.652478][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 180.567125][ T6378] loop1: detected capacity change from 0 to 32768 [ 180.604699][ T6413] loop3: detected capacity change from 0 to 128 [ 180.684507][ T6415] loop0: detected capacity change from 0 to 512 [ 180.711272][ T6378] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 180.753818][ T4353] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.763209][ T6378] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 180.797981][ T6415] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.931423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.962500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.010881][ T6415] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #17: comm syz.0.825: inode has both inline data and extents flags [ 181.079059][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.088754][ T6415] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.825: couldn't read orphan inode 17 (err -117) [ 181.115495][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.126545][ T6415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.194515][ T6378] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 181.210583][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.250647][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.280788][ T5428] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.301180][ T6120] device veth0_vlan entered promiscuous mode [ 181.335072][ T5428] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 181.369229][ T6120] device veth1_vlan entered promiscuous mode [ 181.439253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.439855][ T6429] loop3: detected capacity change from 0 to 136 [ 181.468809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.470996][ T5428] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 135ms [ 181.513381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.523961][ T6429] Attempt to read inode for relocated directory [ 181.532120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.554478][ T6120] device veth0_macvtap entered promiscuous mode [ 181.568027][ T5428] gfs2: fsid=syz:syz.0: jid=0: Done [ 181.583429][ T6120] device veth1_macvtap entered promiscuous mode [ 181.594780][ T6378] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 181.631474][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 181.676872][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.784983][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.835547][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.868517][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.908065][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.953809][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.965476][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.976386][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.034038][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.092280][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.143381][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.185044][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.240672][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.311513][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.349265][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.388827][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.449839][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.479786][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.551036][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.610603][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.642363][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.677284][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.730024][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.752567][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.803890][ T6120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.847239][ T6120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.893007][ T6120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.926494][ T6120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.977975][ T6455] loop0: detected capacity change from 0 to 512 [ 183.089541][ T6453] loop4: detected capacity change from 0 to 4096 [ 183.115716][ T6453] ntfs3: loop4: ino=3, Correct links count -> 2. [ 183.127360][ T6455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.167483][ T6455] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.267052][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.295347][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.307454][ T6453] ntfs3: loop4: failed to convert "0080" to cp874 [ 183.329081][ T6455] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 183.361108][ T6453] ntfs3: loop4: failed to convert name for inode 1e. [ 183.371269][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.418887][ T6455] Quota error (device loop0): write_blk: dquota write failed [ 183.460514][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.481140][ T6455] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 183.506580][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.546677][ T6455] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.837: Failed to acquire dquot type 0 [ 183.588950][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.803894][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 184.103769][ T6449] loop3: detected capacity change from 0 to 32768 [ 184.156422][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 184.314817][ T6449] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 184.742389][ T4275] XFS (loop3): Unmounting Filesystem [ 185.012492][ T6509] loop4: detected capacity change from 0 to 128 [ 185.158778][ T6509] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.235855][ T6509] hpfs: filesystem error: improperly stopped [ 185.268343][ T6509] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.278490][ T6509] hpfs: You really don't want any checks? You are crazy... [ 185.297057][ T6509] hpfs: hpfs_map_sector(): read error [ 185.319748][ T6509] hpfs: code page support is disabled [ 185.345744][ T6509] hpfs: hpfs_map_4sectors(): unaligned read [ 185.380054][ T6509] hpfs: hpfs_map_4sectors(): unaligned read [ 185.386064][ T6509] hpfs: filesystem error: unable to find root dir [ 185.698714][ T6493] loop1: detected capacity change from 0 to 32768 [ 185.837821][ T6493] JBD2: Ignoring recovery information on journal [ 185.883009][ T6526] loop5: detected capacity change from 0 to 128 [ 185.891396][ T6526] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.977230][ T6533] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 186.007553][ T6493] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 186.118468][ T6526] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.227467][ T6493] (syz.1.846,6493,1):ocfs2_verify_group_and_input:422 ERROR: input chain exceeds the limit. [ 186.289952][ T6493] (syz.1.846,6493,0):ocfs2_group_add:503 ERROR: status = -22 [ 186.335960][ T4326] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.496391][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 187.445456][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.459815][ T5854] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 187.577814][ T6578] loop5: detected capacity change from 0 to 8192 [ 187.601256][ T6578] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.629930][ T6578] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 187.639271][ T6578] REISERFS (device loop5): using ordered data mode [ 187.649715][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 187.657934][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.675009][ T5852] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 187.684039][ T6578] reiserfs: using flush barriers [ 187.687815][ T5854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.702747][ T5852] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.714932][ T5854] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.724447][ T5852] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.734939][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.743404][ T5852] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 187.759862][ T5854] usb 5-1: config 0 descriptor?? [ 187.765060][ T5852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.775044][ T5854] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.782820][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 187.790165][ T6578] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.803575][ T5854] dvb-usb: bulk message failed: -22 (3/0) [ 187.816601][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.828890][ T5854] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.849032][ T5852] usb 2-1: config 0 descriptor?? [ 187.856412][ T5854] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.870945][ T5854] usb 5-1: media controller created [ 187.879557][ T6578] REISERFS (device loop5): checking transaction log (loop5) [ 187.894835][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.956610][ T5854] dvb-usb: bulk message failed: -22 (6/0) [ 187.964203][ T5854] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 187.979022][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 188.007116][ T6565] dvb-usb: bulk message failed: -22 (2/0) [ 188.025791][ T5854] dvb-usb: schedule remote query interval to 150 msecs. [ 188.064688][ T5854] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.126952][ T5854] usb 5-1: USB disconnect, device number 6 [ 188.206088][ T5854] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.308838][ T6578] REISERFS (device loop5): Using tea hash to sort names [ 188.367490][ T6578] [ 188.369997][ T6578] ====================================================== [ 188.377070][ T6578] WARNING: possible circular locking dependency detected [ 188.384159][ T6578] syzkaller #0 Not tainted [ 188.388625][ T6578] ------------------------------------------------------ [ 188.395692][ T6578] syz.5.878/6578 is trying to acquire lock: [ 188.401630][ T6578] ffff888054c7c460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 188.411147][ T6578] [ 188.411147][ T6578] but task is already holding lock: [ 188.418739][ T6578] ffff888055430090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 188.427807][ T6578] [ 188.427807][ T6578] which lock already depends on the new lock. [ 188.427807][ T6578] [ 188.438244][ T6578] [ 188.438244][ T6578] the existing dependency chain (in reverse order) is: [ 188.447311][ T6578] [ 188.447311][ T6578] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 188.454561][ T6578] __mutex_lock+0x12d/0xaf0 [ 188.459661][ T6578] reiserfs_write_lock+0x75/0xd0 [ 188.465160][ T6578] reiserfs_lookup+0x18a/0x480 [ 188.470485][ T6578] __lookup_slow+0x29d/0x3f0 [ 188.475675][ T6578] lookup_one_len+0x19d/0x2d0 [ 188.480993][ T6578] reiserfs_lookup_privroot+0x85/0x1e0 [ 188.487011][ T6578] reiserfs_fill_super+0x1fae/0x23b0 [ 188.492855][ T6578] mount_bdev+0x287/0x3c0 [ 188.497735][ T6578] legacy_get_tree+0xe6/0x180 [ 188.502976][ T6578] vfs_get_tree+0x88/0x270 [ 188.508045][ T6578] do_new_mount+0x24a/0xa40 [ 188.513115][ T6578] __se_sys_mount+0x2e3/0x3d0 [ 188.518355][ T6578] do_syscall_64+0x4c/0xa0 [ 188.523366][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.529827][ T6578] [ 188.529827][ T6578] -> #1 (&type->i_mutex_dir_key#19){+.+.}-{3:3}: [ 188.538381][ T6578] down_write+0x36/0x60 [ 188.543183][ T6578] path_openat+0x7d2/0x2ee0 [ 188.548259][ T6578] do_filp_open+0x1f1/0x430 [ 188.553334][ T6578] do_sys_openat2+0x150/0x4b0 [ 188.558605][ T6578] __x64_sys_openat+0x135/0x160 [ 188.564029][ T6578] do_syscall_64+0x4c/0xa0 [ 188.569014][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.575465][ T6578] [ 188.575465][ T6578] -> #0 (sb_writers#26){.+.+}-{0:0}: [ 188.582977][ T6578] __lock_acquire+0x2d07/0x7d10 [ 188.588477][ T6578] lock_acquire+0x1bb/0x4a0 [ 188.593534][ T6578] sb_start_write+0x4d/0x1c0 [ 188.598682][ T6578] mnt_want_write_file+0x5c/0x200 [ 188.604263][ T6578] reiserfs_ioctl+0x10a/0x330 [ 188.609498][ T6578] __se_sys_ioctl+0xfa/0x170 [ 188.614666][ T6578] do_syscall_64+0x4c/0xa0 [ 188.619657][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.626117][ T6578] [ 188.626117][ T6578] other info that might help us debug this: [ 188.626117][ T6578] [ 188.636408][ T6578] Chain exists of: [ 188.636408][ T6578] sb_writers#26 --> &type->i_mutex_dir_key#19 --> &sbi->lock [ 188.636408][ T6578] [ 188.649787][ T6578] Possible unsafe locking scenario: [ 188.649787][ T6578] [ 188.657260][ T6578] CPU0 CPU1 [ 188.662651][ T6578] ---- ---- [ 188.668050][ T6578] lock(&sbi->lock); [ 188.672149][ T6578] lock(&type->i_mutex_dir_key#19); [ 188.680099][ T6578] lock(&sbi->lock); [ 188.686675][ T6578] lock(sb_writers#26); [ 188.690983][ T6578] [ 188.690983][ T6578] *** DEADLOCK *** [ 188.690983][ T6578] [ 188.699249][ T6578] 1 lock held by syz.5.878/6578: [ 188.704207][ T6578] #0: ffff888055430090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 188.713666][ T6578] [ 188.713666][ T6578] stack backtrace: [ 188.719601][ T6578] CPU: 0 PID: 6578 Comm: syz.5.878 Not tainted syzkaller #0 [ 188.726917][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 188.737110][ T6578] Call Trace: [ 188.740461][ T6578] [ 188.743416][ T6578] dump_stack_lvl+0x188/0x24e [ 188.748278][ T6578] ? load_image+0x400/0x400 [ 188.752836][ T6578] ? show_regs_print_info+0x12/0x12 [ 188.758107][ T6578] ? print_circular_bug+0x12b/0x1a0 [ 188.763381][ T6578] check_noncircular+0x296/0x330 [ 188.768461][ T6578] ? look_up_lock_class+0x75/0x140 [ 188.773888][ T6578] ? add_chain_block+0x940/0x940 [ 188.778877][ T6578] ? lockdep_lock+0xf1/0x1f0 [ 188.783520][ T6578] ? _find_first_zero_bit+0xcf/0x100 [ 188.788857][ T6578] __lock_acquire+0x2d07/0x7d10 [ 188.793775][ T6578] ? verify_lock_unused+0x140/0x140 [ 188.799081][ T6578] ? verify_lock_unused+0x140/0x140 [ 188.804370][ T6578] ? __mutex_trylock_common+0x155/0x260 [ 188.809965][ T6578] ? trace_raw_output_contention_end+0xd0/0xd0 [ 188.816177][ T6578] lock_acquire+0x1bb/0x4a0 [ 188.820742][ T6578] ? mnt_want_write_file+0x5c/0x200 [ 188.826423][ T6578] ? __might_sleep+0xd0/0xd0 [ 188.831051][ T6578] ? read_lock_is_recursive+0x10/0x10 [ 188.836579][ T6578] ? mutex_lock_nested+0x10/0x10 [ 188.841563][ T6578] ? __fget_files+0x28/0x4b0 [ 188.846193][ T6578] sb_start_write+0x4d/0x1c0 [ 188.850828][ T6578] ? mnt_want_write_file+0x5c/0x200 [ 188.856057][ T6578] mnt_want_write_file+0x5c/0x200 [ 188.861130][ T6578] reiserfs_ioctl+0x10a/0x330 [ 188.865843][ T6578] ? reiserfs_unpack+0x600/0x600 [ 188.870818][ T6578] __se_sys_ioctl+0xfa/0x170 [ 188.875454][ T6578] do_syscall_64+0x4c/0xa0 [ 188.880425][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 188.885150][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 188.889867][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.895884][ T6578] RIP: 0033:0x7fc050b9c819 [ 188.900345][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.920087][ T6578] RSP: 002b:00007fc0519d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.928633][ T6578] RAX: ffffffffffffffda RBX: 00007fc050e15fa0 RCX: 00007fc050b9c819 [ 188.936648][ T6578] RDX: 0000000000000000 RSI: 0000000040087602 RDI: 0000000000000004 [ 188.945088][ T6578] RBP: 00007fc050c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 188.953083][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.961341][ T6578] R13: 00007fc050e16038 R14: 00007fc050e15fa0 R15: 00007ffd0c4ba008 [ 188.969360][ T6578] [ 188.989880][ T5424] usb 2-1: USB disconnect, device number 4 [ 188.998190][ T6586] loop3: detected capacity change from 0 to 64 [ 189.043994][ T6586] hfs: unable to locate alternate MDB [ 189.089173][ T6586] hfs: continuing without an alternate MDB [ 189.162335][ T27] audit: type=1800 audit(1776899329.262:43): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.880" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 189.209212][ T4322] hfs: new node 0 already hashed? [ 189.218220][ T4322] ------------[ cut here ]------------ [ 189.224366][ T4322] WARNING: CPU: 1 PID: 4322 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 189.234263][ T4322] Modules linked in: [ 189.238217][ T4322] CPU: 1 PID: 4322 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 189.245997][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.256346][ T4322] Workqueue: writeback wb_workfn (flush-7:3) [ 189.262468][ T4322] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 189.268184][ T4322] Code: ad a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 80 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 189.287964][ T4322] RSP: 0018:ffffc900043c6e80 EFLAGS: 00010246 [ 189.294128][ T4322] RAX: 000000000000001f RBX: ffff88807cd1c0e0 RCX: 287e9d352a0d3300 [ 189.302205][ T4322] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 189.310266][ T4322] RBP: 0000000000000000 R08: ffffc900043c6b87 R09: 1ffff92000878d70 [ 189.318300][ T4322] R10: dffffc0000000000 R11: fffff52000878d71 R12: 0000000000000000 [ 189.326944][ T4322] R13: ffff88807cd1c000 R14: ffff88801d2aba00 R15: dffffc0000000000 [ 189.335013][ T4322] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 189.344059][ T4322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.350771][ T4322] CR2: 00007fe95ffdc286 CR3: 000000002a0b3000 CR4: 00000000003506e0 [ 189.358807][ T4322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.366873][ T4322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.375025][ T4322] Call Trace: [ 189.378449][ T4322] [ 189.381526][ T4322] hfs_bmap_alloc+0x53d/0x5d0 [ 189.386284][ T4322] ? hfs_bmap_reserve+0x420/0x420 [ 189.391430][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.396274][ T4322] hfs_btree_inc_height+0xfd/0xac0 [ 189.401495][ T4322] ? hfs_brec_insert+0x6f6/0xbd0 [ 189.406512][ T4322] ? hfs_brec_insert+0xbd0/0xbd0 [ 189.411554][ T4322] ? do_raw_spin_unlock+0x11d/0x230 [ 189.416819][ T4322] hfs_brec_insert+0x744/0xbd0 [ 189.422083][ T4322] ? hfs_brec_keylen+0x350/0x350 [ 189.427085][ T4322] __hfs_ext_write_extent+0x2a1/0x470 [ 189.432651][ T4322] hfs_ext_write_extent+0x17b/0x200 [ 189.437928][ T4322] ? hfs_ext_keycmp+0x310/0x310 [ 189.442858][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.447705][ T4322] hfs_write_inode+0xd8/0xa20 [ 189.452461][ T4322] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 189.457891][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.462757][ T4322] ? lock_release+0xcf/0x920 [ 189.467421][ T4322] ? __writeback_single_inode+0x4ae/0x1160 [ 189.473309][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.478144][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 189.483248][ T4322] ? do_raw_spin_lock+0x128/0x2f0 [ 189.488331][ T4322] ? __rwlock_init+0x140/0x140 [ 189.493191][ T4322] __writeback_single_inode+0x75b/0x1160 [ 189.498984][ T4322] writeback_sb_inodes+0xb30/0x1850 [ 189.504297][ T4322] ? queue_io+0x5a0/0x5a0 [ 189.508711][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.513588][ T4322] wb_writeback+0x482/0xd50 [ 189.518158][ T4322] ? percpu_ref_tryget+0x250/0x250 [ 189.523368][ T4322] ? set_worker_desc+0x1ba/0x1f0 [ 189.528360][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 189.533616][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.538451][ T4322] wb_workfn+0x423/0xee0 [ 189.542804][ T4322] ? inode_wait_for_writeback+0x220/0x220 [ 189.548598][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.553469][ T4322] ? lock_acquire+0xe3/0x4a0 [ 189.558128][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 189.563269][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 189.568705][ T4322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.574839][ T4322] ? _raw_spin_unlock+0x40/0x40 [ 189.579834][ T4322] ? process_one_work+0x7b0/0x1160 [ 189.585021][ T4322] process_one_work+0x8a2/0x1160 [ 189.590059][ T4322] ? worker_detach_from_pool+0x240/0x240 [ 189.595754][ T4322] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 189.601844][ T4322] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.606932][ T4322] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.612717][ T4322] ? kthread_data+0x4b/0xc0 [ 189.617463][ T4322] worker_thread+0xaa2/0x1270 [ 189.622260][ T4322] ? __kthread_parkme+0x162/0x1c0 [ 189.627357][ T4322] kthread+0x29d/0x330 [ 189.631516][ T4322] ? worker_clr_flags+0x1a0/0x1a0 [ 189.636595][ T4322] ? kthread_blkcg+0xd0/0xd0 [ 189.641378][ T4322] ret_from_fork+0x1f/0x30 [ 189.645870][ T4322] [ 189.648944][ T4322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.656266][ T4322] CPU: 1 PID: 4322 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 189.663951][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.674060][ T4322] Workqueue: writeback wb_workfn (flush-7:3) [ 189.680117][ T4322] Call Trace: [ 189.683435][ T4322] [ 189.686421][ T4322] dump_stack_lvl+0x188/0x24e [ 189.691202][ T4322] ? memcpy+0x3c/0x60 [ 189.695229][ T4322] ? show_regs_print_info+0x12/0x12 [ 189.700483][ T4322] ? load_image+0x400/0x400 [ 189.705050][ T4322] panic+0x2e5/0x730 [ 189.709026][ T4322] ? bpf_jit_dump+0xd0/0xd0 [ 189.713678][ T4322] ? ret_from_fork+0x1f/0x30 [ 189.718334][ T4322] __warn+0x2f8/0x4f0 [ 189.722471][ T4322] ? hfs_bnode_create+0x37a/0x400 [ 189.727659][ T4322] ? hfs_bnode_create+0x37a/0x400 [ 189.732755][ T4322] report_bug+0x2ba/0x4f0 [ 189.737280][ T4322] ? hfs_bnode_create+0x37a/0x400 [ 189.742378][ T4322] handle_bug+0x3a/0x70 [ 189.746689][ T4322] exc_invalid_op+0x16/0x40 [ 189.751262][ T4322] asm_exc_invalid_op+0x16/0x20 [ 189.756166][ T4322] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 189.761852][ T4322] Code: ad a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 80 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 189.781511][ T4322] RSP: 0018:ffffc900043c6e80 EFLAGS: 00010246 [ 189.787815][ T4322] RAX: 000000000000001f RBX: ffff88807cd1c0e0 RCX: 287e9d352a0d3300 [ 189.795932][ T4322] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 189.803948][ T4322] RBP: 0000000000000000 R08: ffffc900043c6b87 R09: 1ffff92000878d70 [ 189.812080][ T4322] R10: dffffc0000000000 R11: fffff52000878d71 R12: 0000000000000000 [ 189.820231][ T4322] R13: ffff88807cd1c000 R14: ffff88801d2aba00 R15: dffffc0000000000 [ 189.828260][ T4322] hfs_bmap_alloc+0x53d/0x5d0 [ 189.833015][ T4322] ? hfs_bmap_reserve+0x420/0x420 [ 189.838105][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.842936][ T4322] hfs_btree_inc_height+0xfd/0xac0 [ 189.848109][ T4322] ? hfs_brec_insert+0x6f6/0xbd0 [ 189.853285][ T4322] ? hfs_brec_insert+0xbd0/0xbd0 [ 189.858291][ T4322] ? do_raw_spin_unlock+0x11d/0x230 [ 189.863633][ T4322] hfs_brec_insert+0x744/0xbd0 [ 189.868466][ T4322] ? hfs_brec_keylen+0x350/0x350 [ 189.873462][ T4322] __hfs_ext_write_extent+0x2a1/0x470 [ 189.878899][ T4322] hfs_ext_write_extent+0x17b/0x200 [ 189.884169][ T4322] ? hfs_ext_keycmp+0x310/0x310 [ 189.889091][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.893928][ T4322] hfs_write_inode+0xd8/0xa20 [ 189.898704][ T4322] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 189.904124][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.908950][ T4322] ? lock_release+0xcf/0x920 [ 189.913601][ T4322] ? __writeback_single_inode+0x4ae/0x1160 [ 189.919561][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.924398][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 189.929522][ T4322] ? do_raw_spin_lock+0x128/0x2f0 [ 189.934606][ T4322] ? __rwlock_init+0x140/0x140 [ 189.939428][ T4322] __writeback_single_inode+0x75b/0x1160 [ 189.945131][ T4322] writeback_sb_inodes+0xb30/0x1850 [ 189.950501][ T4322] ? queue_io+0x5a0/0x5a0 [ 189.954906][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.959735][ T4322] wb_writeback+0x482/0xd50 [ 189.964310][ T4322] ? percpu_ref_tryget+0x250/0x250 [ 189.969567][ T4322] ? set_worker_desc+0x1ba/0x1f0 [ 189.974554][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 189.979639][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.984471][ T4322] wb_workfn+0x423/0xee0 [ 189.988783][ T4322] ? inode_wait_for_writeback+0x220/0x220 [ 189.994605][ T4322] ? rcu_is_watching+0x11/0xa0 [ 189.999423][ T4322] ? lock_acquire+0xe3/0x4a0 [ 190.004062][ T4322] ? __lock_acquire+0x7d10/0x7d10 [ 190.009144][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 190.014580][ T4322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 190.020533][ T4322] ? _raw_spin_unlock+0x40/0x40 [ 190.025443][ T4322] ? process_one_work+0x7b0/0x1160 [ 190.030768][ T4322] process_one_work+0x8a2/0x1160 [ 190.035960][ T4322] ? worker_detach_from_pool+0x240/0x240 [ 190.041652][ T4322] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.047709][ T4322] ? _raw_spin_lock_irq+0xb7/0xf0 [ 190.052808][ T4322] ? _raw_spin_lock_irqsave+0x100/0x100 [ 190.058446][ T4322] ? kthread_data+0x4b/0xc0 [ 190.063025][ T4322] worker_thread+0xaa2/0x1270 [ 190.067768][ T4322] ? __kthread_parkme+0x162/0x1c0 [ 190.072955][ T4322] kthread+0x29d/0x330 [ 190.077072][ T4322] ? worker_clr_flags+0x1a0/0x1a0 [ 190.082144][ T4322] ? kthread_blkcg+0xd0/0xd0 [ 190.086777][ T4322] ret_from_fork+0x1f/0x30 [ 190.091254][ T4322] [ 190.094893][ T4322] Kernel Offset: disabled [ 190.099252][ T4322] Rebooting in 86400 seconds..