last executing test programs: 1m58.089185215s ago: executing program 1 (id=47): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x40842, 0x0) sendfile(r0, r0, 0x0, 0x4) 1m57.92625104s ago: executing program 1 (id=51): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0xa, @sliced={0x2, [0xa64e, 0xce89, 0x72, 0x979, 0x10, 0xff, 0x83, 0x1, 0x800, 0xfffc, 0x0, 0x1, 0x7, 0x6, 0xfffa, 0x0, 0x1, 0x8, 0x0, 0x9, 0x7, 0xff81, 0x8, 0xd2, 0x1ff, 0x45, 0x1, 0x3, 0x4, 0x1, 0x1, 0x8001, 0x6, 0x6, 0x5b, 0xa922, 0x3, 0x5, 0x9, 0xd, 0xfff1, 0x6, 0xa6, 0x2, 0x800, 0x8, 0xfff9, 0x9b6f], 0x3}}) 1m57.870035184s ago: executing program 1 (id=53): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001ac0)=""/14, 0xe}, {0x0}], 0x2) 1m57.69808231s ago: executing program 1 (id=55): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1a, 0x522, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m57.24454041s ago: executing program 1 (id=62): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 1m56.226634871s ago: executing program 1 (id=74): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x100000000, 0xff36, 0x3) 1m55.999801411s ago: executing program 32 (id=74): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x100000000, 0xff36, 0x3) 1m20.096407775s ago: executing program 3 (id=616): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 1m19.893532133s ago: executing program 3 (id=620): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) 1m19.279350038s ago: executing program 3 (id=626): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 1m18.666119292s ago: executing program 3 (id=641): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1a, 0x522, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m18.195936074s ago: executing program 3 (id=635): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade36e9fe672ce5fbebe5b175c12cf16c48c2d4b61ce76443664e69106113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3e3863", 0x4b}], 0x1) 1m17.648380002s ago: executing program 3 (id=636): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m17.369933577s ago: executing program 33 (id=636): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.115080893s ago: executing program 5 (id=1894): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x341, &(0x7f0000001100)="$eJzs3M9LI2cYwPEnMRmTiCaH0tJC8aW9tJdB055LQ1EoDVTUlGpBGHXShkwTyQRLSqnx1GvpvadCD+LRm9D6D3jprb30srdcFvawsiw7y/wyP1djVjeufj8g8+Z93yfzvvNO5Jkhk9bXv35fLtp60ahLNKEkIiJyJpKRqIQiwTbqlTXp1JQPpx79++7K2voXuXx+YVmpxdzqR1ml1MzsXz/8lAy6HU/KaWaj9TD74PTN07dbz1a/K9mqZKtKta4MtVn9v25sWqbaLtllXaklyzRsU5Uqtlnz26t+e9Gq7uw0lFHZnk7t1EzbVkalocpmQ9Wrql5rKONbo1RRuq6r6ZTgEu6CLhu5EaO3rnk0uCG1Ws6YEJFkX0vhYCwDAgAAY9Wb/0fdlH6k/F9mvPzf7dzO/w/fO6lPfXU0c+zGbrSOtUH5/8f/+e/Vlf8nRGSU/P93uUL+358R3S+Fg+XR83/cDrNaX1Wk65Wb/6eCz69n/5vDOa9A/g8AAAAAAAAAAAAAAAAAAAAAwOvgzHHSjuOkw234136EIHiNO+lF6z8pIgl39R3W/y5bWVuXhPfgnrvG1i+7hd2Cvw06nIiIJc2wv3POLYdPHilXRv629rz4J+52wmvJFaUklpgyL2nJ9MY7zuLn+YV55Qvizx9TSnXGZyUtbwyOz3bHu+Pf2y1o8sH7HfG6pOWfLamKJdvePNrxP88r9dmX+Z74pL8TAAAAAADuAF2pSHD5nOm+/vWv33VdqcHt/q+M5IrebSJT5iQtTwdfn88NvD6Ppd+JjXv2AAAAAADcD3bjx7JhWWbtgkJSLu8zeiE2XGetpyZ+UeeJjhkOOx7Nu5EhMvTgtcGd/xjyqHYVwi9SdDUlgsrRDm84/2tbr2ZnTVSGiIr1Dn7WrVBX3Pt+MJHzmvC2kdZ5nOPtfclS//tELzgT4u2a5ssdqLd++/Px9X1APjkKz4DLO+/31ewNEWVZZqL3rPMK8Zv+vwMAAADg1Wsn/WHNp53NkbEMCgAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe+ZGftKvpzDuOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3xfMAAAD//7vV9SM=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) 2.69264033s ago: executing program 5 (id=1901): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000a040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000000a080)={0x400, 0x5, 0x80000000, {0x2af6, 0x3}, 0x40, 0x8}) 2.456679941s ago: executing program 5 (id=1906): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setgroups(0x0, 0x0) 2.269751528s ago: executing program 5 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x62, 0x6, 0x3, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2.169040697s ago: executing program 5 (id=1914): syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905840274"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 2.069679086s ago: executing program 6 (id=1916): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x80, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, {0xfffffffffffffffe, 0x1000000000000000, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tfcpad={0x8, 0x16, 0xa0}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 1.971645325s ago: executing program 6 (id=1917): r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000440)) 1.701621759s ago: executing program 6 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000000001010400000000141a0000020000002400018014000180080001"], 0x80}}, 0x0) 1.643570144s ago: executing program 6 (id=1920): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) 1.514452975s ago: executing program 6 (id=1921): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000006740)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 1.34685713s ago: executing program 4 (id=1923): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x490, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x3c0, 0x238, 0x238, 0x3c0, 0x238, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'veth0_to_team\x00', {0xff}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x5e96, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [0x4e23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [], 0x3, 0x0, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x4000000, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, [0x0, 0xff000000, 0x0, 0xff000000], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0x1, 0x9, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 1.23140288s ago: executing program 4 (id=1926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) 1.069642485s ago: executing program 0 (id=1927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.0064181s ago: executing program 0 (id=1928): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)=0x1) 812.912737ms ago: executing program 0 (id=1930): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 809.056588ms ago: executing program 4 (id=1931): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./cgroup\x00', 0x1000804, &(0x7f0000000200)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") creat(&(0x7f0000000100)='./cgroup\x00', 0x1a8) 560.9003ms ago: executing program 2 (id=1932): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) 519.701134ms ago: executing program 2 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 486.466307ms ago: executing program 2 (id=1934): r0 = socket(0x2a, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4080, 0x0, 0x0) 403.536404ms ago: executing program 4 (id=1935): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x20048014, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback={0xff00000000000000}, 0x2, 0x4002}, 0x20) 341.35938ms ago: executing program 0 (id=1936): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x700, 0x0, [@sadb_sa={0x2, 0x17, 0x0, 0x0, 0x0, 0x2, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) 340.87184ms ago: executing program 2 (id=1937): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000b80)={&(0x7f0000000ac0)=[{0x0, 0x401, 0x47, &(0x7f0000000780)="27d77f27453d9777401ac69c331ee7c31c61c1a19f584e3aacb769fd7a641e0162f038b128a1fe7553935d212eb65126d629df0bc1c009cc5350a6c83c86710db1708794fbf7c5"}], 0x1}) 267.337016ms ago: executing program 4 (id=1938): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\a'], 0x50) 209.299571ms ago: executing program 0 (id=1939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x0, {0x1c, 0x14, 0x0, 0x4, 0xfe, 0x1, 0xc8, 0x1}}, 0x1c}}, 0x0) 201.416142ms ago: executing program 2 (id=1940): r0 = socket$inet6(0xa, 0x3, 0xbe) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000480)) 82.996912ms ago: executing program 4 (id=1941): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 63.391094ms ago: executing program 0 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffff8, 0x100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0xc0) 25.270048ms ago: executing program 5 (id=1943): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@utf8}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 22.344648ms ago: executing program 2 (id=1944): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x0) 0s ago: executing program 6 (id=1945): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000005c0)=""/171) kernel console output (not intermixed with test programs): [ 98.076039][ T1335] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 98.083592][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.083637][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 98.083663][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.097997][ T13] usb 4-1: config 0 descriptor?? [ 98.112716][ T5363] FAT-fs (loop4): Directory bread(block 69) failed [ 98.128536][ T5363] FAT-fs (loop4): Directory bread(block 70) failed [ 98.137072][ T5363] FAT-fs (loop4): Directory bread(block 71) failed [ 98.149600][ T5363] FAT-fs (loop4): Directory bread(block 72) failed [ 98.182883][ T5363] FAT-fs (loop4): Directory bread(block 73) failed [ 98.224107][ T13] smsusb:smsusb_probe: board id=8, interface number 0 [ 98.262157][ T13] smsusb:smsusb_probe: Device initialized with return code -19 [ 98.426420][ T4236] usb 4-1: USB disconnect, device number 3 [ 98.479980][ T5384] __nla_validate_parse: 1 callbacks suppressed [ 98.479997][ T5384] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.393'. [ 98.532282][ T1335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.582193][ T1335] usb 1-1: not running at top speed; connect to a high speed hub [ 98.682084][ T1335] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 98.806878][ T5401] loop2: detected capacity change from 0 to 64 [ 98.852148][ T1335] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 98.858766][ T5404] loop4: detected capacity change from 0 to 64 [ 98.879566][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.888785][ T1335] usb 1-1: Product: syz [ 98.893461][ T1335] usb 1-1: Manufacturer: syz [ 98.898763][ T1335] usb 1-1: SerialNumber: syz [ 99.063764][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 99.121967][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.216243][ T1335] vmk80xx 1-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 99.290745][ T1335] usb 1-1: USB disconnect, device number 5 [ 99.389050][ T5421] netlink: 'syz.4.410': attribute type 13 has an invalid length. [ 99.397648][ T5421] netlink: 144 bytes leftover after parsing attributes in process `syz.4.410'. [ 99.407317][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 99.408324][ T5421] syz_tun: refused to change device tx_queue_len [ 99.420406][ T5423] tc_dump_action: action bad kind [ 99.451896][ T4236] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.547579][ T13] usb 6-1: config 1 has an invalid interface number: 6 but max is 2 [ 99.558719][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.577115][ T13] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.586427][ T13] usb 6-1: config 1 has no interface number 1 [ 99.602553][ T13] usb 6-1: too many endpoints for config 1 interface 6 altsetting 127: 167, using maximum allowed: 30 [ 99.632059][ T13] usb 6-1: config 1 interface 6 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 99.651901][ T13] usb 6-1: config 1 interface 6 has no altsetting 0 [ 99.680868][ T5433] loop2: detected capacity change from 0 to 64 [ 99.712061][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 99.780397][ T5439] loop4: detected capacity change from 0 to 256 [ 99.790412][ T5437] loop0: detected capacity change from 0 to 4096 [ 99.826648][ T5437] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 99.852210][ T13] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.861319][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.872106][ T4236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.894660][ T5439] FAT-fs (loop4): Directory bread(block 64) failed [ 99.901314][ T5439] FAT-fs (loop4): Directory bread(block 65) failed [ 99.911641][ T13] usb 6-1: Product: syz [ 99.915927][ T13] usb 6-1: Manufacturer: syz [ 99.920597][ T13] usb 6-1: SerialNumber: syz [ 99.926885][ T5439] FAT-fs (loop4): Directory bread(block 66) failed [ 99.951234][ T5439] FAT-fs (loop4): Directory bread(block 67) failed [ 99.962278][ T4236] usb 4-1: config 9 has an invalid interface number: 250 but max is 0 [ 100.008864][ T4236] usb 4-1: config 9 has no interface number 0 [ 100.019771][ T5439] FAT-fs (loop4): Directory bread(block 68) failed [ 100.033235][ T4236] usb 4-1: config 9 interface 250 has no altsetting 0 [ 100.055857][ T5439] FAT-fs (loop4): Directory bread(block 69) failed [ 100.079153][ T5439] FAT-fs (loop4): Directory bread(block 70) failed [ 100.094988][ T5439] FAT-fs (loop4): Directory bread(block 71) failed [ 100.122364][ T5439] FAT-fs (loop4): Directory bread(block 72) failed [ 100.128970][ T5439] FAT-fs (loop4): Directory bread(block 73) failed [ 100.147833][ T4186] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 100.177671][ T4186] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 100.218487][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.232035][ T4236] usb 4-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=d7.5b [ 100.260484][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.272178][ T13] usb 6-1: 0:2 : does not exist [ 100.292181][ T4236] usb 4-1: Product: syz [ 100.319702][ T4236] usb 4-1: Manufacturer: syz [ 100.329833][ T4236] usb 4-1: SerialNumber: syz [ 100.346934][ T13] hub 6-1:1.6: Invalid hub with more than one config or interface [ 100.408909][ T13] hub: probe of 6-1:1.6 failed with error -22 [ 100.508354][ T13] usb 6-1: USB disconnect, device number 3 [ 100.528602][ T5450] delete_channel: no stack [ 100.654300][ T4236] sisusb 4-1:9.250: Invalid USB2VGA device [ 100.669173][ T4236] sisusb: probe of 4-1:9.250 failed with error -22 [ 100.726321][ T4236] usb 4-1: USB disconnect, device number 4 [ 100.845997][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.043395][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 101.292134][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 101.644512][ T5520] xt_TCPMSS: Only works on TCP SYN packets [ 102.247282][ T5546] loop2: detected capacity change from 0 to 4096 [ 102.677892][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 102.727989][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 102.851746][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.482'. [ 103.414959][ T5619] loop5: detected capacity change from 0 to 2048 [ 103.479035][ T5619] UDF-fs: bad mount option "shortan$uid˝forget" or missing value [ 103.569524][ T5580] loop4: detected capacity change from 0 to 32768 [ 103.576507][ T5619] cifs: Unknown parameter 'anchor' [ 103.722071][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.053729][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 104.121707][ T5641] loop2: detected capacity change from 0 to 2048 [ 104.132175][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 104.141523][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.199372][ T5600] loop3: detected capacity change from 0 to 40427 [ 104.219615][ T7] pwc: Logitech ViewPort AV 100 webcam detected. [ 104.270394][ T5641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.296561][ T5600] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 104.345516][ T5600] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.420174][ T5600] F2FS-fs (loop3): invalid crc value [ 104.472421][ T5600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.651979][ T7] pwc: send_video_command error -71 [ 104.657243][ T7] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 104.702259][ T7] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 104.749467][ T7] usb 1-1: USB disconnect, device number 6 [ 104.798820][ T5600] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.827216][ T5664] loop4: detected capacity change from 0 to 4096 [ 104.833774][ T5600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.943510][ T5664] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.041052][ T5664] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 105.074211][ T5664] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 105.187682][ T5664] ntfs: volume version 3.1. [ 105.205296][ T5687] loop2: detected capacity change from 0 to 256 [ 105.375895][ T5687] FAT-fs (loop2): Directory bread(block 64) failed [ 105.402537][ T5687] FAT-fs (loop2): Directory bread(block 65) failed [ 105.409193][ T5687] FAT-fs (loop2): Directory bread(block 66) failed [ 105.527640][ T5687] FAT-fs (loop2): Directory bread(block 67) failed [ 105.581956][ T5687] FAT-fs (loop2): Directory bread(block 68) failed [ 105.588558][ T5687] FAT-fs (loop2): Directory bread(block 69) failed [ 105.651401][ T5687] FAT-fs (loop2): Directory bread(block 70) failed [ 105.711927][ T5687] FAT-fs (loop2): Directory bread(block 71) failed [ 105.718597][ T5687] FAT-fs (loop2): Directory bread(block 72) failed [ 105.753929][ T5687] FAT-fs (loop2): Directory bread(block 73) failed [ 106.154507][ T150] block nbd3: Attempted send on invalid socket [ 106.160850][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.175701][ T5729] vxfs: unable to read disk superblock at 1 [ 106.196009][ T263] block nbd3: Attempted send on invalid socket [ 106.202898][ T263] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.214824][ T5729] vxfs: unable to read disk superblock at 8 [ 106.234535][ T5729] vxfs: can't find superblock. [ 106.261913][ T4265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.552849][ T5710] loop5: detected capacity change from 0 to 32768 [ 106.635856][ T4265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.659830][ T4265] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.729285][ T4265] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.942075][ T4265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.980689][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.000909][ T150] block nbd0: Attempted send on invalid socket [ 107.007604][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.010602][ T4265] usb 3-1: Product: syz [ 107.020367][ T5767] vxfs: unable to read disk superblock at 1 [ 107.042191][ T263] block nbd0: Attempted send on invalid socket [ 107.048425][ T263] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.060835][ T5767] vxfs: unable to read disk superblock at 8 [ 107.072058][ T5767] vxfs: can't find superblock. [ 107.076710][ T4265] usb 3-1: Manufacturer: syz [ 107.083191][ T4265] usb 3-1: SerialNumber: syz [ 107.133654][ T4265] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 107.150751][ T4265] cdc_ncm 3-1:1.0: bind() failure [ 107.238580][ T5777] netlink: 'syz.5.545': attribute type 1 has an invalid length. [ 107.390952][ T4265] usb 3-1: USB disconnect, device number 6 [ 107.538927][ T5798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.555'. [ 107.594425][ T5802] loop5: detected capacity change from 0 to 256 [ 107.600750][ T5798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.952015][ T1335] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.063118][ T5825] binfmt_misc: register: failed to install interpreter file ./file0 [ 108.192077][ T1335] usb 1-1: Using ep0 maxpacket: 8 [ 108.352241][ T1335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.442203][ T1335] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.461499][ T1335] usb 1-1: config 1 has no interface number 1 [ 108.498032][ T1335] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 108.541716][ T1335] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 108.628644][ T5851] loop5: detected capacity change from 0 to 4096 [ 108.742102][ T1335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.767928][ T5851] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 108.786352][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.810309][ T5851] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.831419][ T1335] usb 1-1: Product: syz [ 108.847679][ T1335] usb 1-1: Manufacturer: syz [ 108.856311][ T1335] usb 1-1: SerialNumber: syz [ 108.871760][ T5851] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.898262][ T5851] ntfs: volume version 3.1. [ 108.904656][ T5867] loop3: detected capacity change from 0 to 4096 [ 108.928757][ T5851] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 109.074911][ T5867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.117824][ T5867] Quota error (device loop3): find_tree_dqentry: Getting block too big (256 >= 6) [ 109.162246][ T4265] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 109.202710][ T5867] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 109.231980][ T5867] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.582: Failed to acquire dquot type 1 [ 109.303675][ T5892] loop5: detected capacity change from 0 to 64 [ 109.337895][ T1335] usb 1-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 109.455159][ T1335] usb 1-1: USB disconnect, device number 7 [ 109.535966][ T4265] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 109.574787][ T4265] usb 5-1: config 252 has no interface number 0 [ 109.606834][ T4265] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 109.624360][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.646115][ T5901] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 109.678003][ T4265] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 109.723283][ T5901] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 109.841167][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.594'. [ 109.864989][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.882249][ T4265] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 109.891336][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.949441][ T4265] usb 5-1: Product: syz [ 109.974251][ T4265] usb 5-1: Manufacturer: syz [ 109.978909][ T4265] usb 5-1: SerialNumber: syz [ 110.246811][ T5926] loop0: detected capacity change from 0 to 1024 [ 110.273162][ T5930] loop3: detected capacity change from 0 to 164 [ 110.311244][ T4295] usb 5-1: USB disconnect, device number 2 [ 110.407831][ T5926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.566892][ T5926] EXT4-fs warning (device loop0): ext4_rmdir:3243: inode #11: comm syz.0.613: empty directory 'file1' has too many links (111) [ 110.640473][ T5943] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 110.655392][ T5900] loop2: detected capacity change from 0 to 32768 [ 110.998903][ T5959] loop5: detected capacity change from 0 to 64 [ 111.058108][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 111.319889][ T5975] loop3: detected capacity change from 0 to 1024 [ 111.382279][ T5984] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 111.490277][ T5975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.655706][ T5975] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.620: empty directory 'file1' has too many links (111) [ 111.686859][ T5988] loop5: detected capacity change from 0 to 8192 [ 111.786577][ T5988] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 111.807174][ T5988] REISERFS (device loop5): using ordered data mode [ 111.812767][ T1335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.817355][ T5988] reiserfs: using flush barriers [ 111.846717][ T6000] loop4: detected capacity change from 0 to 512 [ 111.860129][ T5988] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.876586][ T7] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.900842][ T5988] REISERFS (device loop5): checking transaction log (loop5) [ 111.914148][ T5988] REISERFS (device loop5): Using r5 hash to sort names [ 111.934357][ T5988] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 111.948940][ T5988] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 112.075699][ T6000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.122012][ T1335] usb 3-1: Using ep0 maxpacket: 32 [ 112.127904][ T6000] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.242330][ T1335] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 112.250485][ T1335] usb 3-1: config 0 has no interface number 0 [ 112.257465][ T6000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.292103][ T7] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 112.310851][ T7] usb 1-1: config 252 has no interface number 0 [ 112.331123][ T7] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 112.369253][ T7] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.426790][ T6016] loop3: detected capacity change from 0 to 512 [ 112.442145][ T1335] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 112.459075][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.470678][ T4187] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 112.492434][ T1335] usb 3-1: Product: syz [ 112.496849][ T4187] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 112.510417][ T1335] usb 3-1: Manufacturer: syz [ 112.521915][ T1335] usb 3-1: SerialNumber: syz [ 112.541445][ T1335] usb 3-1: config 0 descriptor?? [ 112.551959][ T4187] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz-executor: Failed to acquire dquot type 0 [ 112.622175][ T7] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 112.640025][ T6016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.654306][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.705110][ T6016] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.707627][ T7] usb 1-1: Product: syz [ 112.743817][ T6016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.817185][ T7] usb 1-1: Manufacturer: syz [ 112.841053][ T7] usb 1-1: SerialNumber: syz [ 112.874880][ T4196] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 112.912287][ T4196] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.940079][ T4196] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz-executor: Failed to acquire dquot type 0 [ 112.984656][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.042684][ T1335] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 113.051365][ T1335] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 113.144995][ T1335] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 113.174967][ T4265] usb 1-1: USB disconnect, device number 8 [ 113.190370][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.214161][ T1335] usb 3-1: USB disconnect, device number 7 [ 113.300714][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.358019][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.933666][ T6057] loop2: detected capacity change from 0 to 512 [ 114.045633][ T6062] loop5: detected capacity change from 0 to 1024 [ 114.058793][ T6057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.080615][ T6057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.642: bg 0: block 248: padding at end of block bitmap is not set [ 114.164039][ T6057] Quota error (device loop2): write_blk: dquota write failed [ 114.194363][ T6057] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.204909][ T6057] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.642: Failed to acquire dquot type 1 [ 114.247693][ T6057] EXT4-fs (loop2): 1 truncate cleaned up [ 114.254508][ T6062] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.298144][ T6057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.307487][ T6062] EXT4-fs warning (device loop5): ext4_rmdir:3243: inode #11: comm syz.5.640: empty directory 'file1' has too many links (111) [ 114.631262][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 114.959781][ T6064] chnl_net:caif_netlink_parms(): no params data found [ 115.021369][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.092227][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.116974][ T6103] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.151645][ T6047] device bridge_slave_0 entered promiscuous mode [ 115.228218][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop0 [ 115.259823][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.271498][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.313517][ T6110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.340760][ T6047] device bridge_slave_1 entered promiscuous mode [ 115.528739][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.547896][ T6082] set_capacity_and_notify: 1 callbacks suppressed [ 115.547913][ T6082] loop2: detected capacity change from 0 to 32768 [ 115.578248][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.640587][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.731784][ T6064] device bridge_slave_0 entered promiscuous mode [ 115.742024][ T6082] XFS (loop2): Mounting V5 Filesystem [ 115.761929][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 115.783825][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.846849][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.881272][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.889916][ T6064] device bridge_slave_1 entered promiscuous mode [ 115.897713][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.662'. [ 115.922914][ T13] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 115.947876][ T13] XFS (loop2): Unmount and run xfs_repair [ 115.976404][ T13] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 116.002807][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 116.034170][ T13] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 116.069088][ T13] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 116.081995][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.104409][ T13] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.118987][ T6047] team0: Port device team_slave_0 added [ 116.137423][ T6047] team0: Port device team_slave_1 added [ 116.148373][ T13] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.178135][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.198726][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.209818][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.219972][ T6154] loop0: detected capacity change from 0 to 128 [ 116.230827][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.244836][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 116.254870][ T6082] XFS (loop2): metadata I/O error in "xfs_read_agi+0x231/0x530" at daddr 0x2 len 1 error 74 [ 116.294872][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 116.302524][ T6082] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 116.337858][ T6082] XFS (loop2): Failed to read root inode 0x1800, error 117 [ 116.376634][ T6064] team0: Port device team_slave_0 added [ 116.403116][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.423873][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.449892][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.524691][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.555918][ T6064] team0: Port device team_slave_1 added [ 116.608649][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.626599][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.652678][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.660008][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.758461][ T9] device hsr_slave_0 left promiscuous mode [ 116.777156][ T9] device hsr_slave_1 left promiscuous mode [ 116.850225][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.860495][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.900614][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.919238][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.945913][ T6170] loop5: detected capacity change from 0 to 64 [ 116.954306][ T9] device macsec0 left promiscuous mode [ 116.969026][ T9] bridge0: port 3(macsec0) entered disabled state [ 116.995745][ T9] device bridge_slave_1 left promiscuous mode [ 117.015548][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.073968][ T9] device bridge_slave_0 left promiscuous mode [ 117.102037][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.151409][ T9] device veth0_macvtap left promiscuous mode [ 117.162298][ T9] device veth1_vlan left promiscuous mode [ 117.171028][ T9] device veth0_vlan left promiscuous mode [ 117.756862][ T9] team0 (unregistering): Port device team_slave_1 removed [ 117.776311][ T9] team0 (unregistering): Port device team_slave_0 removed [ 117.790894][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.810776][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.833032][ T4295] Bluetooth: hci2: command 0x041b tx timeout [ 117.891616][ T9] bond0 (unregistering): Released all slaves [ 117.938043][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.945460][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.971402][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.977872][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.021594][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 118.031977][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 118.075431][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.086574][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.113322][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.137694][ T6047] device hsr_slave_0 entered promiscuous mode [ 118.150098][ T6047] device hsr_slave_1 entered promiscuous mode [ 118.243217][ T6064] device hsr_slave_0 entered promiscuous mode [ 118.265760][ T6064] device hsr_slave_1 entered promiscuous mode [ 118.300151][ T6064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.310721][ T6209] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.327051][ T6064] Cannot create hsr debugfs directory [ 118.392663][ T4295] Bluetooth: hci4: command 0x041b tx timeout [ 118.630707][ T6218] loop0: detected capacity change from 0 to 512 [ 118.758956][ T6220] xt_CT: No such helper "netbios-ns" [ 118.811383][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.912072][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 120.074703][ T6285] loop5: detected capacity change from 0 to 1764 [ 120.089595][ T6064] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.170618][ T6064] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.239059][ T6064] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.276425][ T6064] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.415836][ T6047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.482177][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 120.513520][ T6047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.556206][ T6047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.607347][ T6047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.789341][ T6326] loop5: detected capacity change from 0 to 4096 [ 120.829722][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.867649][ T6336] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 120.938653][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.949735][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.029783][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.078752][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.120154][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.198573][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.205750][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.289598][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.344749][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.370502][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.377734][ T4814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.417969][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 121.480690][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.512964][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.580645][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.610970][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.744'. [ 121.623550][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.664346][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.675500][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.744'. [ 121.758078][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.766813][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.744'. [ 121.787399][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.820078][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.854870][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.900054][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.932771][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.977212][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.996814][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 122.035119][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.061546][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.137521][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.182432][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.190644][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.253652][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.316231][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.375798][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.383393][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.417665][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.483187][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.512356][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.519479][ T4811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.552483][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 122.587161][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.664759][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.713365][ T6399] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 122.778479][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.840884][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.890510][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.930183][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.952469][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.978904][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.011931][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.041403][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.080003][ T6047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.158500][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.187111][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.209490][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.325847][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.343055][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.394275][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.877867][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.897113][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.944421][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.199402][ T6469] loop0: detected capacity change from 0 to 256 [ 124.300585][ T6469] FAT-fs (loop0): Directory bread(block 64) failed [ 124.307418][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.334112][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.342083][ T6469] FAT-fs (loop0): Directory bread(block 65) failed [ 124.367817][ T6469] FAT-fs (loop0): Directory bread(block 66) failed [ 124.400603][ T6469] FAT-fs (loop0): Directory bread(block 67) failed [ 124.419966][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.432446][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.435719][ T6472] loop5: detected capacity change from 0 to 1764 [ 124.459382][ T6469] FAT-fs (loop0): Directory bread(block 68) failed [ 124.471633][ T6064] device veth0_vlan entered promiscuous mode [ 124.484063][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.491988][ T6469] FAT-fs (loop0): Directory bread(block 69) failed [ 124.498659][ T6469] FAT-fs (loop0): Directory bread(block 70) failed [ 124.513676][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.538899][ T6064] device veth1_vlan entered promiscuous mode [ 124.562877][ T6469] FAT-fs (loop0): Directory bread(block 71) failed [ 124.570484][ T6469] FAT-fs (loop0): Directory bread(block 72) failed [ 124.610796][ T6469] FAT-fs (loop0): Directory bread(block 73) failed [ 124.689139][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.732779][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.781320][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.820766][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.831451][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.782'. [ 124.853703][ T6064] device veth0_macvtap entered promiscuous mode [ 124.913988][ T6064] device veth1_macvtap entered promiscuous mode [ 124.986539][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.010786][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.061322][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.089890][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.130823][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.198187][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.210743][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.225994][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.261734][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.332581][ T6490] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 125.424029][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.439779][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.448261][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.468723][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.483817][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.499699][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.515896][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.568564][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.603890][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.631898][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.642802][ T6504] loop0: detected capacity change from 0 to 4096 [ 125.651083][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.674633][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.695023][ T6504] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 125.707019][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.732624][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.776808][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.847757][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.866645][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.900640][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.954303][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.985946][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.044665][ T6064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.063061][ T6064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.107932][ T6064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.132213][ T6064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.199034][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.251266][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.282673][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.316825][ T6047] device veth0_vlan entered promiscuous mode [ 126.395871][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.449169][ T6047] device veth1_vlan entered promiscuous mode [ 126.487163][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.497363][ T6528] loop0: detected capacity change from 0 to 1024 [ 126.581682][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.645434][ T6528] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 126.735675][ T6528] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 39: comm syz.0.790: bad entry in directory: rec_len is smaller than minimal - offset=7296, inode=0, rec_len=0, size=1024 fake=0 [ 126.769229][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.786538][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.802531][ T6047] device veth0_macvtap entered promiscuous mode [ 126.824213][ T4811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.844598][ T6528] EXT4-fs (loop0): Remounting filesystem read-only [ 126.845626][ T4811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.896247][ T6047] device veth1_macvtap entered promiscuous mode [ 126.918559][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.940656][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.995160][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.089070][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 127.098362][ T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.121465][ T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.130867][ T6545] device vlan0 entered promiscuous mode [ 127.156592][ T6547] loop2: detected capacity change from 0 to 4096 [ 127.174676][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.209803][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.217038][ T6547] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 127.246698][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.291852][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.301726][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.326509][ T6549] loop0: detected capacity change from 0 to 512 [ 127.348340][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.371031][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.385581][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.400889][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.414096][ T6547] ntfs3: loop2: ino=5, "/" directory corrupted [ 127.414237][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.431684][ T6547] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.448480][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.457074][ T6551] loop5: detected capacity change from 0 to 512 [ 127.469872][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.486979][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.496640][ T4185] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 127.504337][ T4185] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 127.506973][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.561499][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.574061][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.585089][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.598525][ T6549] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.610675][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.622218][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.634105][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.644906][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.655639][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.660130][ T6551] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 127.666248][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.691803][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.718602][ T6549] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.734712][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.783910][ T6047] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.792743][ T6047] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.801458][ T6047] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.818197][ T6551] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.830134][ T6047] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.875301][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.888049][ T6558] loop6: detected capacity change from 0 to 1024 [ 127.902880][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.970079][ T6558] hfsplus: Filesystem is marked locked, mounting read-only. [ 128.087140][ T6558] hfsplus: filesystem is marked locked, leaving read-only. [ 128.195238][ T4811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.217380][ T4811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.236090][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 128.298999][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.387240][ T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.419718][ T6579] loop2: detected capacity change from 0 to 512 [ 128.420864][ T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.476292][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.614493][ T6579] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 128.911306][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.810'. [ 129.094497][ T6612] loop5: detected capacity change from 0 to 64 [ 129.409617][ T4251] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 129.842430][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 129.876590][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 129.975720][ T9] device hsr_slave_0 left promiscuous mode [ 129.998290][ T9] device hsr_slave_1 left promiscuous mode [ 130.040539][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.058509][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.066552][ T4251] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 130.082799][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.097394][ T4251] usb 3-1: Product: syz [ 130.105086][ T4251] usb 3-1: Manufacturer: syz [ 130.109811][ T4251] usb 3-1: SerialNumber: syz [ 130.140588][ T4251] usb 3-1: config 0 descriptor?? [ 130.173536][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.192867][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.215523][ T9] device macsec0 left promiscuous mode [ 130.223439][ T4251] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 130.248837][ T9] bridge0: port 3(macsec0) entered disabled state [ 130.319929][ T9] device bridge_slave_1 left promiscuous mode [ 130.338257][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.357090][ T6653] loop5: detected capacity change from 0 to 512 [ 130.399287][ T9] device bridge_slave_0 left promiscuous mode [ 130.419576][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.432738][ T6653] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 130.479227][ T9] device veth0_macvtap left promiscuous mode [ 130.498453][ T6653] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.834: bg 0: block 104: invalid block bitmap [ 130.503484][ T6618] loop0: detected capacity change from 0 to 40427 [ 130.518155][ T9] device veth1_vlan left promiscuous mode [ 130.524081][ T9] device veth0_vlan left promiscuous mode [ 130.530892][ T6653] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 130.545918][ T6653] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.834: invalid indirect mapped block 1 (level 1) [ 130.562689][ T4331] usb 3-1: USB disconnect, device number 8 [ 130.575220][ T6653] EXT4-fs (loop5): 1 truncate cleaned up [ 130.587459][ T6653] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.613593][ T6618] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 130.649344][ T6618] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.772870][ T6618] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.830175][ T6664] cgroup: No subsys list or none specified [ 130.935566][ T6618] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.945348][ T6618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.297860][ T9] team0 (unregistering): Port device team_slave_1 removed [ 131.317403][ T9] team0 (unregistering): Port device team_slave_0 removed [ 131.337868][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.358423][ T4174] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 131.372272][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.464013][ T9] bond0 (unregistering): Released all slaves [ 131.762149][ T4174] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.812145][ T4174] usb 6-1: not running at top speed; connect to a high speed hub [ 131.902318][ T4174] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 131.964970][ T6692] loop6: detected capacity change from 0 to 1024 [ 131.997313][ T6692] EXT4-fs (loop6): Ignoring removed nobh option [ 132.064528][ T6692] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.843: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 132.082789][ T4174] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 132.092780][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.100914][ T4174] usb 6-1: Product: syz [ 132.105437][ T4174] usb 6-1: Manufacturer: syz [ 132.110159][ T4174] usb 6-1: SerialNumber: syz [ 132.220603][ T6703] loop0: detected capacity change from 0 to 4096 [ 132.242270][ T6692] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.843: couldn't read orphan inode 11 (err -117) [ 132.293219][ T6692] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 132.399053][ T4174] vmk80xx 6-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 132.450164][ T4174] usb 6-1: USB disconnect, device number 4 [ 132.796617][ T6714] loop0: detected capacity change from 0 to 2048 [ 132.812002][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818335][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.868820][ T6714] UDF-fs: bad mount option "shortan$uid˝forget" or missing value [ 132.927269][ T6714] cifs: Unknown parameter 'anchor' [ 133.627758][ T6750] loop2: detected capacity change from 0 to 512 [ 133.689957][ T6750] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 133.781916][ T6750] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.866: bg 0: block 104: invalid block bitmap [ 133.818278][ T6750] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 133.871872][ T4244] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.902251][ T6750] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.866: invalid indirect mapped block 1 (level 1) [ 133.976401][ T6750] EXT4-fs (loop2): 1 truncate cleaned up [ 133.996566][ T6750] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.242138][ T4244] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.250224][ T4244] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.300043][ T6719] loop6: detected capacity change from 0 to 40427 [ 134.301199][ T4244] usb 1-1: config 0 has no interface number 0 [ 134.346134][ T4244] usb 1-1: config 0 interface 1 has no altsetting 0 [ 134.363988][ T4244] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.394290][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.422293][ T6719] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 134.441062][ T6719] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 134.458049][ T4244] usb 1-1: config 0 descriptor?? [ 134.559403][ T6719] F2FS-fs (loop6): Found nat_bits in checkpoint [ 134.751932][ T4244] usb 1-1: USB disconnect, device number 9 [ 134.852663][ T6719] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 134.859780][ T6719] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 135.031954][ T4174] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.402101][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.422548][ T4174] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 135.431645][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.434339][ T6801] loop5: detected capacity change from 0 to 256 [ 135.517092][ T4174] usb 3-1: config 0 descriptor?? [ 135.561672][ T6779] loop4: detected capacity change from 0 to 40427 [ 135.574198][ T4174] smsusb:smsusb_probe: board id=8, interface number 0 [ 135.632108][ T4174] smsusb:smsusb_probe: Device initialized with return code -19 [ 135.640633][ T6801] FAT-fs (loop5): Directory bread(block 64) failed [ 135.686542][ T6801] FAT-fs (loop5): Directory bread(block 65) failed [ 135.704852][ T6801] FAT-fs (loop5): Directory bread(block 66) failed [ 135.711535][ T6801] FAT-fs (loop5): Directory bread(block 67) failed [ 135.725299][ T6779] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 135.754023][ T6779] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 135.782224][ T6801] FAT-fs (loop5): Directory bread(block 68) failed [ 135.818553][ T6801] FAT-fs (loop5): Directory bread(block 69) failed [ 135.854685][ T6779] F2FS-fs (loop4): invalid crc value [ 135.885717][ T4174] usb 3-1: USB disconnect, device number 9 [ 135.895430][ T6801] FAT-fs (loop5): Directory bread(block 70) failed [ 135.957780][ T6779] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.960760][ T6801] FAT-fs (loop5): Directory bread(block 71) failed [ 136.051934][ T6801] FAT-fs (loop5): Directory bread(block 72) failed [ 136.112241][ T6801] FAT-fs (loop5): Directory bread(block 73) failed [ 136.210664][ T6779] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.281499][ T6779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.450605][ T6827] loop2: detected capacity change from 0 to 1024 [ 136.485610][ T6827] EXT4-fs (loop2): Ignoring removed nobh option [ 136.515576][ T6827] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.887: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.732293][ T4251] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 136.785466][ T6827] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.887: couldn't read orphan inode 11 (err -117) [ 136.833402][ T6827] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 137.112353][ T4251] usb 7-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 137.137750][ T4251] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.220773][ T4251] pwc: Logitech ViewPort AV 100 webcam detected. [ 137.271330][ T6850] tc_dump_action: action bad kind [ 137.370067][ T6853] loop0: detected capacity change from 0 to 64 [ 137.652053][ T4251] pwc: send_video_command error -71 [ 137.659160][ T4251] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 137.698785][ T4251] Philips webcam: probe of 7-1:127.0 failed with error -71 [ 137.737472][ T4251] usb 7-1: USB disconnect, device number 2 [ 137.969934][ T6871] loop2: detected capacity change from 0 to 4096 [ 138.052972][ T6871] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 138.073452][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.161050][ T6871] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 138.194730][ T6844] loop4: detected capacity change from 0 to 40427 [ 138.231919][ T6871] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 138.288157][ T6844] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 138.306748][ T6844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.389898][ T6871] ntfs: volume version 3.1. [ 138.400455][ T6844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.602208][ T6844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.629914][ T6844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.093450][ T6918] loop0: detected capacity change from 0 to 256 [ 139.535026][ T4265] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 139.596221][ T6937] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 139.621460][ T6937] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 139.634815][ T6935] loop4: detected capacity change from 0 to 4096 [ 139.674169][ T6935] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 139.772032][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 139.923307][ T4265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 139.942185][ T4265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 139.947808][ T6047] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 139.992397][ T6047] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 140.012186][ T6047] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.040772][ T6923] loop5: detected capacity change from 0 to 40427 [ 140.060657][ T6923] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 140.120965][ T6923] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 140.132094][ T4265] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 140.146720][ T4265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.156146][ T4265] usb 7-1: Product: syz [ 140.160354][ T4265] usb 7-1: Manufacturer: syz [ 140.165778][ T4265] usb 7-1: SerialNumber: syz [ 140.172834][ T4265] usb 7-1: config 0 descriptor?? [ 140.179398][ T6923] F2FS-fs (loop5): invalid crc value [ 140.214345][ T6923] F2FS-fs (loop5): Found nat_bits in checkpoint [ 140.235206][ T4265] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12 [ 140.341623][ T6923] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 140.352093][ T6923] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 140.488162][ T4251] usb 7-1: USB disconnect, device number 3 [ 140.752831][ T4174] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.126520][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.163045][ T4174] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 141.189785][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.226947][ T4174] usb 5-1: config 0 descriptor?? [ 141.283969][ T4174] smsusb:smsusb_probe: board id=8, interface number 0 [ 141.307659][ T4174] smsusb:smsusb_probe: Device initialized with return code -19 [ 141.445527][ T6966] loop5: detected capacity change from 0 to 40427 [ 141.468677][ T6966] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 141.491473][ T6966] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 141.493066][ T4174] usb 5-1: USB disconnect, device number 3 [ 141.504820][ T6984] loop2: detected capacity change from 0 to 4096 [ 141.575777][ T6966] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.586377][ T6984] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 141.628434][ T6984] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.655829][ T6984] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.685531][ T6984] ntfs: volume version 3.1. [ 141.722092][ T6984] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 141.768668][ T6966] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 141.786205][ T6966] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 141.812832][ T6969] loop0: detected capacity change from 0 to 32768 [ 141.922758][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 142.029587][ T7001] netlink: 144 bytes leftover after parsing attributes in process `syz.0.941'. [ 142.100240][ T7003] loop4: detected capacity change from 0 to 164 [ 142.201915][ T1108] usb 7-1: Using ep0 maxpacket: 8 [ 142.294833][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 142.402762][ T1108] usb 7-1: unable to get BOS descriptor or descriptor too short [ 142.509749][ T1108] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.542452][ T1108] usb 7-1: config 1 has no interface number 1 [ 142.548603][ T1108] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.601325][ T1108] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 142.802306][ T1108] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.811421][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.844919][ T1108] usb 7-1: Product: syz [ 142.849145][ T1108] usb 7-1: Manufacturer: syz [ 142.892940][ T1108] usb 7-1: SerialNumber: syz [ 142.944232][ T7030] loop4: detected capacity change from 0 to 1024 [ 142.989196][ T7032] netlink: 144 bytes leftover after parsing attributes in process `syz.2.953'. [ 143.029215][ T7030] hfsplus: catalog name length corrupted [ 143.234185][ T7034] loop2: detected capacity change from 0 to 2048 [ 143.260915][ T7034] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.274507][ T7036] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 143.292902][ T7036] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 143.353750][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 143.382365][ T7037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.423983][ T1108] usb 7-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 143.522746][ T1108] usb 7-1: USB disconnect, device number 4 [ 143.614811][ T7024] loop5: detected capacity change from 0 to 32768 [ 143.652842][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 143.869217][ T7057] loop2: detected capacity change from 0 to 164 [ 143.924644][ T7024] XFS (loop5): Mounting V5 Filesystem [ 144.116096][ T4251] XFS (loop5): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 144.160197][ T4251] XFS (loop5): Unmount and run xfs_repair [ 144.199607][ T7068] loop6: detected capacity change from 0 to 1024 [ 144.219179][ T4251] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 144.239322][ T4251] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 144.285637][ T7068] hfsplus: catalog name length corrupted [ 144.331035][ T4251] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 144.351589][ T7075] loop4: detected capacity change from 0 to 2048 [ 144.375554][ T4251] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.390197][ T7077] loop0: detected capacity change from 0 to 64 [ 144.415731][ T4251] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.430435][ T4251] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.445477][ T7075] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.461606][ T4251] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.513560][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop4 [ 144.521940][ T4251] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.532615][ T7078] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.553489][ T4251] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.585353][ T7024] XFS (loop5): metadata I/O error in "xfs_read_agi+0x231/0x530" at daddr 0x2 len 1 error 74 [ 144.606190][ T7024] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 144.660635][ T7024] XFS (loop5): Failed to read root inode 0x1800, error 117 [ 144.935282][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 144.968833][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 145.311742][ T7070] loop2: detected capacity change from 0 to 32768 [ 145.336545][ T7105] loop0: detected capacity change from 0 to 1024 [ 145.380488][ T7107] loop4: detected capacity change from 0 to 512 [ 145.453629][ T7070] (syz.2.968,7070,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.494314][ T7070] (syz.2.968,7070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.508553][ T7107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.558356][ T7070] JBD2: Ignoring recovery information on journal [ 145.795225][ T7070] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 145.877944][ T4289] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 146.093476][ T7070] (syz.2.968,7070,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 146.233503][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 146.385345][ T7135] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.499661][ T7135] Quota error (device loop6): find_tree_dqentry: Getting block too big (256 >= 6) [ 146.580234][ T7135] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 146.631016][ T7135] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.995: Failed to acquire dquot type 1 [ 146.930829][ T7167] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.952833][ T7161] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 147.347386][ T7190] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 147.539201][ T7192] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 147.682355][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.705747][ T7198] Quota error (device loop0): find_tree_dqentry: Getting block too big (256 >= 6) [ 147.768536][ T7198] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 147.778678][ T7198] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1019: Failed to acquire dquot type 1 [ 148.073505][ T7218] netlink: 'syz.5.1030': attribute type 2 has an invalid length. [ 148.081398][ T7218] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1030'. [ 148.162019][ T4244] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.217794][ T7226] set_capacity_and_notify: 7 callbacks suppressed [ 148.217811][ T7226] loop4: detected capacity change from 0 to 512 [ 148.290059][ T7228] loop6: detected capacity change from 0 to 1024 [ 148.319519][ T7226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.402248][ T4244] usb 3-1: Using ep0 maxpacket: 8 [ 148.412980][ T7226] EXT4-fs (loop4): 1 truncate cleaned up [ 148.418684][ T7226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.466873][ C0] sd 0:0:1:0: tag#7108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 148.476874][ C0] sd 0:0:1:0: tag#7108 CDB: opcode=0x2 [ 148.482435][ C0] sd 0:0:1:0: tag#7108 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 148.491512][ C0] sd 0:0:1:0: tag#7108 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 148.500638][ C0] sd 0:0:1:0: tag#7108 CDB[20]: 47 [ 148.511645][ T7242] loop0: detected capacity change from 0 to 1764 [ 148.562070][ T4244] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.583467][ T7247] tipc: Can't bind to reserved service type 0 [ 148.652047][ T4244] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.683684][ T4244] usb 3-1: config 1 has no interface number 1 [ 148.698231][ T4244] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.731519][ T4244] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 148.932683][ T4244] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.962464][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.990939][ T4244] usb 3-1: Product: syz [ 149.008952][ T4244] usb 3-1: Manufacturer: syz [ 149.043935][ T4244] usb 3-1: SerialNumber: syz [ 149.124167][ T7259] loop6: detected capacity change from 0 to 4096 [ 149.516268][ T4244] usb 3-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 149.608022][ T4244] usb 3-1: USB disconnect, device number 10 [ 149.924874][ T4444] udevd[4444]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.511734][ T7331] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 150.534825][ T7334] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 150.619113][ T7334] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1073'. [ 150.820766][ C1] sd 0:0:1:0: tag#7113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 150.830791][ C1] sd 0:0:1:0: tag#7113 CDB: opcode=0x2 [ 150.836359][ C1] sd 0:0:1:0: tag#7113 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 150.845505][ C1] sd 0:0:1:0: tag#7113 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 150.854665][ C1] sd 0:0:1:0: tag#7113 CDB[20]: 47 [ 150.914983][ T4174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 151.060828][ T7298] loop0: detected capacity change from 0 to 40427 [ 151.124757][ T7298] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(167772672) [ 151.146625][ T7298] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 151.172061][ T4174] usb 6-1: Using ep0 maxpacket: 8 [ 151.173697][ T7359] loop2: detected capacity change from 0 to 4096 [ 151.195991][ T7298] F2FS-fs (loop0): invalid crc value [ 151.211176][ T7298] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.234158][ T7359] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 151.344449][ T4174] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.446009][ T4174] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.475331][ T4174] usb 6-1: config 1 has no interface number 1 [ 151.507077][ T4174] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 151.524260][ T7298] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 151.548024][ T4174] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 151.561762][ T7298] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 151.570520][ T7298] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.592469][ T7370] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 151.792242][ T4174] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.811868][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.840588][ T4174] usb 6-1: Product: syz [ 151.850750][ T4174] usb 6-1: Manufacturer: syz [ 151.871030][ T4174] usb 6-1: SerialNumber: syz [ 152.220140][ T4265] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 152.324479][ C1] sd 0:0:1:0: tag#7114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.334475][ C1] sd 0:0:1:0: tag#7114 CDB: opcode=0x2 [ 152.339989][ C1] sd 0:0:1:0: tag#7114 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 152.349158][ C1] sd 0:0:1:0: tag#7114 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 152.358274][ C1] sd 0:0:1:0: tag#7114 CDB[20]: 47 [ 152.442422][ T4174] usb 6-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 152.455830][ T7403] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1111'. [ 152.512172][ T4174] usb 6-1: USB disconnect, device number 5 [ 152.662186][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.782921][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.833316][ T4265] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 152.877703][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.921887][ T4265] usb 3-1: Product: syz [ 152.921912][ T4265] usb 3-1: Manufacturer: syz [ 152.921929][ T4265] usb 3-1: SerialNumber: syz [ 152.953799][ T4265] usb 3-1: config 0 descriptor?? [ 152.975223][ T7413] loop4: detected capacity change from 0 to 4096 [ 152.992927][ T4265] hub 3-1:0.0: bad descriptor, ignoring hub [ 152.992959][ T4265] hub: probe of 3-1:0.0 failed with error -5 [ 152.995614][ T4265] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 153.069862][ T7413] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.069898][ T7413] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 153.122447][ T7413] ntfs: volume version 3.1. [ 153.260589][ T7405] loop0: detected capacity change from 0 to 40427 [ 153.404897][ T7405] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 153.428969][ T7405] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 153.518324][ T7405] F2FS-fs (loop0): invalid crc value [ 153.562974][ T7405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.702409][ T7436] device wlan0 entered promiscuous mode [ 153.769458][ T7436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 153.835163][ T7405] F2FS-fs (loop0): Start checkpoint disabled! [ 153.930559][ T7405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 154.082190][ T7405] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 154.145104][ T7405] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 154.157828][ T7464] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 154.264022][ T7466] QAT: Invalid ioctl 1075883590 [ 154.269556][ T7466] QAT: Invalid ioctl 1075883590 [ 154.295545][ T7466] QAT: Invalid ioctl 1075883590 [ 154.338427][ T7466] QAT: Invalid ioctl 1075883590 [ 154.362068][ T7466] QAT: Invalid ioctl 1075883590 [ 154.371483][ T7466] QAT: Invalid ioctl 1075883590 [ 154.409708][ T7466] QAT: Invalid ioctl 1075883590 [ 154.442937][ T7466] QAT: Invalid ioctl 1075883590 [ 154.447939][ T7466] QAT: Invalid ioctl 1075883590 [ 154.494698][ T7466] QAT: Invalid ioctl 1075883590 [ 154.714078][ T7478] loop6: detected capacity change from 0 to 4096 [ 154.869461][ T7478] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 155.022592][ T7478] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 155.104445][ T7478] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 155.132252][ T7478] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 155.201881][ T7478] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 155.252554][ T7478] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 155.346058][ T7478] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 155.386511][ T7478] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 155.407580][ T4244] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.510658][ T7478] ntfs: volume version 3.1. [ 155.962099][ T4244] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 156.001867][ T4244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.020440][ T4244] usb 1-1: Product: syz [ 156.040592][ T4244] usb 1-1: Manufacturer: syz [ 156.050728][ T4244] usb 1-1: SerialNumber: syz [ 156.084816][ T4244] usb 1-1: config 0 descriptor?? [ 156.352095][ T4244] mos7840 1-1:0.0: required endpoints missing [ 156.552993][ T7580] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1173'. [ 156.565372][ T4174] usb 1-1: USB disconnect, device number 10 [ 156.629163][ T7578] loop2: detected capacity change from 0 to 4096 [ 156.707122][ T4251] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 156.727776][ T7578] ntfs: volume version 3.1. [ 156.834728][ T7588] loop4: detected capacity change from 0 to 64 [ 157.122677][ T4251] usb 6-1: config 1 has an invalid interface number: 3 but max is 1 [ 157.140250][ T4251] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.170519][ T4251] usb 6-1: config 1 has no interface number 0 [ 157.177874][ T4251] usb 6-1: config 1 interface 3 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.188867][ T4251] usb 6-1: config 1 interface 3 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.212548][ T4251] usb 6-1: config 1 interface 3 has no altsetting 0 [ 157.236424][ T4265] usb 3-1: USB disconnect, device number 11 [ 157.242414][ T1108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 157.396376][ T4251] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.414110][ T4251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.425297][ T4251] usb 6-1: Product: syz [ 157.429615][ T4251] usb 6-1: Manufacturer: syz [ 157.435269][ T4251] usb 6-1: SerialNumber: syz [ 157.451857][ T4265] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.479765][ T7612] device wlan0 entered promiscuous mode [ 157.496700][ T7612] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 157.497197][ T4251] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 157.521965][ T1108] usb 7-1: Using ep0 maxpacket: 16 [ 157.550310][ T4251] cdc_ncm 6-1:1.1: bind() failure [ 157.652170][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.665480][ T7623] netlink: 'syz.4.1184': attribute type 10 has an invalid length. [ 157.693221][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.699979][ T4265] usb 3-1: Using ep0 maxpacket: 32 [ 157.709508][ T7623] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1184'. [ 157.729335][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 157.738515][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.772089][ T1108] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 157.791590][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.845492][ T4265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.862006][ T4265] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 157.877421][ T1108] usb 7-1: config 0 descriptor?? [ 157.892209][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.930977][ T4265] usb 3-1: config 0 descriptor?? [ 157.945991][ T1108] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 157.984096][ T4265] gspca_main: spca501-2.14.0 probing 0000:0000 [ 158.023901][ T4236] usb 6-1: USB disconnect, device number 6 [ 158.032573][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.066237][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.078510][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 158.109938][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.180585][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.220896][ T7592] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.249507][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 158.251415][ T4174] usb 7-1: USB disconnect, device number 5 [ 158.273661][ T3546] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 158.412256][ T4265] gspca_spca501: reg write: error -71 [ 158.417935][ T4265] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 158.448142][ T4265] spca501: probe of 3-1:0.0 failed with error -22 [ 158.492740][ T4265] usb 3-1: USB disconnect, device number 12 [ 158.690368][ T7663] loop4: detected capacity change from 0 to 64 [ 158.871885][ T7663] process 'syz.4.1200' launched './file2' with NULL argv: empty string added [ 159.364239][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.441167][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 159.579817][ T7713] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 159.682250][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 159.705894][ T7718] loop4: detected capacity change from 0 to 256 [ 160.002329][ T1108] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 160.013074][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.049952][ T1108] usb 1-1: Product: syz [ 160.072791][ T1108] usb 1-1: Manufacturer: syz [ 160.094253][ T1108] usb 1-1: SerialNumber: syz [ 160.136287][ T1108] r8152-cfgselector 1-1: config 0 descriptor?? [ 160.393688][ T7763] loop2: detected capacity change from 0 to 256 [ 160.403313][ T7762] device netdevsim0 entered promiscuous mode [ 160.438821][ T7762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.542096][ T4251] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 160.673429][ T1108] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.680006][ T1108] r8152-cfgselector 1-1: bad CDC descriptors [ 160.752005][ T1108] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.778928][ T1108] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 160.830053][ T7777] loop2: detected capacity change from 0 to 64 [ 160.982307][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.192355][ T4251] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 161.211712][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.270078][ T4251] usb 5-1: Product: syz [ 161.286011][ T4251] usb 5-1: Manufacturer: syz [ 161.290684][ T4251] usb 5-1: SerialNumber: syz [ 161.300139][ T7767] loop5: detected capacity change from 0 to 40427 [ 161.318241][ T4251] usb 5-1: config 0 descriptor?? [ 161.321615][ T7792] loop0: detected capacity change from 0 to 256 [ 161.372739][ T4251] hub 5-1:0.0: bad descriptor, ignoring hub [ 161.382672][ T4251] hub: probe of 5-1:0.0 failed with error -5 [ 161.397818][ T4251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 161.411512][ T7767] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 161.441387][ T7767] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 161.477704][ T7767] F2FS-fs (loop5): invalid crc value [ 161.514687][ T7767] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.669450][ T7767] F2FS-fs (loop5): Start checkpoint disabled! [ 161.701698][ T7767] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 161.761938][ T4244] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 161.855630][ T7767] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 161.907205][ T7767] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 161.907415][ T7812] x_tables: duplicate underflow at hook 2 [ 162.122119][ T4244] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 162.133054][ T7820] device netdevsim0 entered promiscuous mode [ 162.146142][ T4244] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 162.159485][ T4244] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 162.181292][ T4244] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 162.204582][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 162.225773][ T4244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 162.246992][ T7820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.411942][ T4265] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 162.482112][ T4244] usb 3-1: string descriptor 0 read error: -22 [ 162.488434][ T4244] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 162.501017][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.535966][ T4244] usb 3-1: config 0 descriptor?? [ 162.552540][ T7800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.572921][ T4244] hub 3-1:0.0: bad descriptor, ignoring hub [ 162.578912][ T4244] hub: probe of 3-1:0.0 failed with error -5 [ 162.628773][ T4244] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 162.652022][ T4265] usb 7-1: Using ep0 maxpacket: 16 [ 162.672723][ T7841] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 162.932409][ T4265] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.942280][ T4265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.950629][ T4265] usb 7-1: Product: syz [ 163.007378][ T4265] usb 7-1: Manufacturer: syz [ 163.012726][ T4265] usb 7-1: SerialNumber: syz [ 163.029893][ T4265] r8152-cfgselector 7-1: config 0 descriptor?? [ 163.090840][ T7861] netlink: 'syz.4.1283': attribute type 3 has an invalid length. [ 163.246956][ T4331] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 163.532028][ T4265] r8152-cfgselector 7-1: Unknown version 0x0000 [ 163.538466][ T4265] r8152-cfgselector 7-1: bad CDC descriptors [ 163.571987][ T4265] r8152-cfgselector 7-1: Unknown version 0x0000 [ 163.590903][ T4265] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 163.672300][ T4331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 163.892165][ T4331] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 163.905881][ T4331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.921154][ T4331] usb 6-1: Product: syz [ 163.938076][ T4331] usb 6-1: Manufacturer: syz [ 163.953113][ T4331] usb 6-1: SerialNumber: syz [ 163.990389][ T4331] usb 6-1: config 0 descriptor?? [ 164.062925][ T4331] hub 6-1:0.0: bad descriptor, ignoring hub [ 164.068922][ T4331] hub: probe of 6-1:0.0 failed with error -5 [ 164.095882][ T4331] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 164.114508][ T7874] netlink: 3620 bytes leftover after parsing attributes in process `syz.6.1288'. [ 164.142839][ T7874] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1288'. [ 164.169675][ T7874] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1288'. [ 164.345417][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 164.437967][ T7893] loop0: detected capacity change from 0 to 256 [ 164.528373][ T4331] input: failed to attach handler mousedev to device input20, error: -5 [ 164.572889][ T13] usb 3-1: USB disconnect, device number 13 [ 164.613472][ T4331] usb 6-1: USB disconnect, device number 7 [ 164.751082][ T7907] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1304'. [ 164.912919][ T7909] loop6: detected capacity change from 0 to 2048 [ 165.079280][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 165.117430][ T7928] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 165.181518][ T7930] netlink: 'syz.5.1314': attribute type 1 has an invalid length. [ 165.230682][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1314'. [ 165.249256][ T7937] loop4: detected capacity change from 0 to 64 [ 165.286373][ T7930] netlink: 'syz.5.1314': attribute type 1 has an invalid length. [ 165.325123][ T7939] [U]  [ 165.538850][ T7948] device netdevsim0 entered promiscuous mode [ 165.580184][ T7948] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.739906][ T7962] netlink: 3620 bytes leftover after parsing attributes in process `syz.5.1330'. [ 165.783287][ T7962] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1330'. [ 165.788929][ T7964] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 165.828712][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'. [ 165.836137][ T7962] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1330'. [ 165.882122][ T7968] [U]  [ 165.892621][ T7964] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 166.054906][ T7980] loop6: detected capacity change from 0 to 1024 [ 166.116129][ T7980] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 166.152101][ T7980] JBD2: no valid journal superblock found [ 166.157918][ T7980] EXT4-fs (loop6): error loading journal [ 166.165523][ T7988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.331974][ T4244] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 166.572229][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.598633][ T4174] usb 5-1: USB disconnect, device number 4 [ 166.604632][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 166.625458][ T8012] dlm: non-version read from control device 4096 [ 166.722279][ T4244] usb 1-1: config 237 has an invalid interface number: 221 but max is 0 [ 166.730700][ T4244] usb 1-1: config 237 has no interface number 0 [ 166.773138][ T4244] usb 1-1: config 237 interface 221 has no altsetting 0 [ 166.938448][ T8022] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.962098][ T4244] usb 1-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d3.c3 [ 166.971206][ T4244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.048138][ T4244] usb 1-1: Product: syz [ 167.066944][ T4244] usb 1-1: Manufacturer: syz [ 167.075253][ T4244] usb 1-1: SerialNumber: syz [ 167.129433][ T8029] delete_channel: no stack [ 167.192343][ T13] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 167.210459][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.234408][ T13] usb 6-1: Product: syz [ 167.238662][ T13] usb 6-1: Manufacturer: syz [ 167.261235][ T13] usb 6-1: SerialNumber: syz [ 167.286524][ T13] usb 6-1: config 0 descriptor?? [ 167.424002][ T4244] radio-si470x 1-1:237.221: could not find interrupt in endpoint [ 167.443527][ T4244] radio-si470x: probe of 1-1:237.221 failed with error -5 [ 167.482411][ T4244] usbhid 1-1:237.221: couldn't find an input interrupt endpoint [ 167.514986][ T4244] usb 1-1: USB disconnect, device number 12 [ 167.607003][ T13] mos7840 6-1:0.0: required endpoints missing [ 167.798762][ T8067] loop4: detected capacity change from 0 to 2048 [ 167.816576][ T13] usb 6-1: USB disconnect, device number 8 [ 167.898882][ T8072] affs: No valid root block on device nbd6 [ 167.948231][ T8067] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 168.501522][ T8110] loop2: detected capacity change from 0 to 512 [ 168.652979][ T8110] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 168.660197][ T8110] EXT4-fs (loop2): Ignoring removed nobh option [ 168.758438][ T8110] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 168.788109][ T8110] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 168.960573][ T8132] loop5: detected capacity change from 0 to 256 [ 169.119926][ T8132] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 169.428142][ T8161] loop5: detected capacity change from 0 to 256 [ 169.437693][ T8153] loop4: detected capacity change from 0 to 4096 [ 169.502625][ T8153] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 169.522718][ T8161] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 169.684745][ T4289] ntfs3: loop4: ino=1b, Internal error [ 169.702484][ T4289] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 169.719110][ T4289] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 169.842236][ T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.928069][ T8190] netlink: 'syz.4.1434': attribute type 1 has an invalid length. [ 169.945847][ T8190] netlink: 'syz.4.1434': attribute type 3 has an invalid length. [ 169.961879][ T8190] __nla_validate_parse: 1 callbacks suppressed [ 169.961895][ T8190] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1434'. [ 170.046046][ T8197] damon: min_nr_regions (0) must be at least 3 [ 170.137601][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 170.249185][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1447'. [ 170.278484][ T8209] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 170.508148][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 170.522124][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.561156][ T13] usb 3-1: Product: syz [ 170.578685][ T13] usb 3-1: Manufacturer: syz [ 170.598836][ T13] usb 3-1: SerialNumber: syz [ 170.614431][ T8221] loop6: detected capacity change from 0 to 4096 [ 170.615864][ T13] r8152-cfgselector 3-1: config 0 descriptor?? [ 170.836321][ T8243] loop5: detected capacity change from 0 to 128 [ 170.925367][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 171.152193][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 171.166669][ T13] r8152-cfgselector 3-1: bad CDC descriptors [ 171.237852][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 171.285537][ T13] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 171.544823][ T8274] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 171.678099][ T8277] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 171.744584][ T8278] loop0: detected capacity change from 0 to 1024 [ 171.833643][ T8278] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.894343][ T8278] EXT4-fs (loop0): 1 truncate cleaned up [ 171.958028][ T8278] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.070899][ T8295] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1487'. [ 172.115819][ T8297] overlayfs: conflicting options: userxattr,redirect_dir=off [ 172.280110][ T8310] loop2: detected capacity change from 0 to 8 [ 172.456189][ T8318] nfs4: Bad value for 'source' [ 172.665558][ T8334] loop4: detected capacity change from 0 to 256 [ 172.847015][ T8348] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1515'. [ 172.931868][ T8348] openvswitch: netlink: Key type 541 is out of range max 29 [ 173.329987][ T1108] kernel write not supported for file /643/coredump_filter (pid: 1108 comm: kworker/0:2) [ 174.004729][ T8416] loop6: detected capacity change from 0 to 764 [ 174.106153][ T8426] xt_bpf: check failed: parse error [ 174.126354][ T8416] rock: directory entry would overflow storage [ 174.166272][ T8416] rock: sig=0x4654, size=5, remaining=4 [ 174.189754][ T8429] netlink: 'syz.5.1554': attribute type 1 has an invalid length. [ 174.534622][ T4244] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 174.712036][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 174.762161][ T8468] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 174.912098][ T4244] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 174.957025][ T4244] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 174.984753][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.016411][ T8482] loop0: detected capacity change from 0 to 256 [ 175.066585][ T4244] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 175.119949][ T8482] FAT-fs (loop0): Directory bread(block 64) failed [ 175.131509][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1580'. [ 175.171594][ T8482] FAT-fs (loop0): Directory bread(block 65) failed [ 175.178492][ T1335] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.194393][ T8482] FAT-fs (loop0): Directory bread(block 66) failed [ 175.231667][ T8482] FAT-fs (loop0): Directory bread(block 67) failed [ 175.257249][ T8482] FAT-fs (loop0): Directory bread(block 68) failed [ 175.273300][ T8482] FAT-fs (loop0): Directory bread(block 69) failed [ 175.280096][ T8482] FAT-fs (loop0): Directory bread(block 70) failed [ 175.287369][ T8482] FAT-fs (loop0): Directory bread(block 71) failed [ 175.297205][ T8482] FAT-fs (loop0): Directory bread(block 72) failed [ 175.305617][ T8482] FAT-fs (loop0): Directory bread(block 73) failed [ 175.391753][ T8492] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 175.400148][ T8492] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1584'. [ 175.542236][ T1335] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 175.568681][ T1335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.595279][ T1335] usb 6-1: config 0 descriptor?? [ 175.633413][ T1335] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 175.662574][ T1335] usb 6-1: Detected FT-X [ 175.674470][ T8504] loop4: detected capacity change from 0 to 256 [ 175.740694][ T8504] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 175.854566][ T1335] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 175.868052][ T8511] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1593'. [ 175.905717][ T1335] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 175.934250][ T1335] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 175.965347][ T1335] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 176.019406][ T1335] usb 6-1: USB disconnect, device number 9 [ 176.087160][ T1335] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 176.111703][ T1335] ftdi_sio 6-1:0.0: device disconnected [ 176.198081][ T4244] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 176.402190][ T4244] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 176.411123][ T4244] stv0680 3-1:4.0: last error: 70, command = 0x88 [ 176.439764][ T4244] usb 3-1: USB disconnect, device number 15 [ 176.491212][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1607'. [ 176.521922][ T8541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1607'. [ 177.008503][ T8580] mmap: syz.2.1626 (8580): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 177.318220][ T8602] overlayfs: missing 'lowerdir' [ 177.524154][ T8610] loop6: detected capacity change from 0 to 512 [ 177.538691][ T8614] xt_connbytes: Forcing CT accounting to be enabled [ 177.560709][ T8614] xt_bpf: check failed: parse error [ 177.575550][ T8610] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 177.662531][ T8610] EXT4-fs (loop6): invalid journal inode [ 177.668583][ T8610] EXT4-fs (loop6): can't get journal size [ 177.764169][ T8627] loop0: detected capacity change from 0 to 64 [ 177.772331][ T8623] gfs2: not a GFS2 filesystem [ 177.788506][ T8610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 177.813675][ T8629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1651'. [ 177.823668][ T8610] System zones: 1-12, 13-13 [ 177.847691][ T8610] EXT4-fs (loop6): 1 truncate cleaned up [ 177.906170][ T8610] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 178.058303][ T8636] loop2: detected capacity change from 0 to 2048 [ 178.175330][ T8636] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 178.228055][ T8636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.623889][ T8676] netlink: 'syz.0.1674': attribute type 32 has an invalid length. [ 178.866816][ T8687] loop2: detected capacity change from 0 to 4096 [ 178.909944][ T8687] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 178.943223][ T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 178.981041][ T8687] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 179.061978][ T1335] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 179.102616][ T8687] ntfs3: loop2: failed to read volume at offset 0x201800 [ 179.109769][ T8687] ntfs3: loop2: failed to read volume at offset 0x201800 [ 179.133292][ T8687] ntfs3: loop2: failed to read volume at offset 0x201800 [ 179.161495][ T8687] ntfs3: loop2: failed to read volume at offset 0x201800 [ 179.217750][ T8687] ntfs3: loop2: failed to read volume at offset 0x202800 [ 179.241223][ T8687] ntfs3: loop2: failed to read volume at offset 0x203800 [ 179.292285][ T8687] ntfs3: loop2: failed to read volume at offset 0x205800 [ 179.332573][ T8687] ntfs3: loop2: failed to read volume at offset 0x209800 [ 179.392190][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.428927][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.442165][ T1335] usb 7-1: config 8 has an invalid interface number: 85 but max is 0 [ 179.460824][ T1335] usb 7-1: config 8 has no interface number 0 [ 179.490637][ T1335] usb 7-1: config 8 interface 85 has no altsetting 0 [ 179.519859][ T1335] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=88.34 [ 179.572179][ T13] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.581298][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 179.589777][ T1335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.635376][ T13] usb 6-1: SerialNumber: syz [ 179.802720][ T8720] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.908190][ T1335] usb 7-1: string descriptor 0 read error: -71 [ 179.923341][ T1335] kvaser_usb 7-1:8.85: Cannot get usb endpoint(s) [ 179.936497][ T13] usb 6-1: 0:2 : does not exist [ 179.970846][ T1335] usb 7-1: USB disconnect, device number 7 [ 180.027732][ T8728] xt_connbytes: Forcing CT accounting to be enabled [ 180.046875][ T13] usb 6-1: USB disconnect, device number 10 [ 180.087501][ T8728] xt_bpf: check failed: parse error [ 180.313825][ T4440] udevd[4440]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.484512][ T8748] tipc: Trying to set illegal importance in message [ 180.541723][ T8752] device wlan0 entered promiscuous mode [ 180.579347][ T8754] tmpfs: Bad value for 'mpol' [ 180.689099][ T8760] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 180.986883][ T8776] loop5: detected capacity change from 0 to 128 [ 181.163177][ T8776] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.374538][ T8747] loop4: detected capacity change from 0 to 32768 [ 181.389771][ T8800] loop0: detected capacity change from 0 to 128 [ 181.449381][ T8747] [ 181.449381][ T8747] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.449381][ T8747] [ 181.482117][ T8800] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.509696][ T8747] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 181.509696][ T8747] [ 181.559646][ T8747] xtLookup: xtSearch returned -5 [ 181.565528][ T8747] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 181.565528][ T8747] [ 181.626280][ T4289] [ 181.626280][ T4289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.626280][ T4289] [ 181.641548][ T4289] [ 181.641548][ T4289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.641548][ T4289] [ 181.699927][ T6047] [ 181.699927][ T6047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.699927][ T6047] [ 181.751106][ T276] [ 181.751106][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.751106][ T276] [ 181.814426][ T6047] [ 181.814426][ T6047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.814426][ T6047] [ 181.909586][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'. [ 181.981579][ T8828] netlink: 'syz.2.1749': attribute type 2 has an invalid length. [ 181.982191][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1748'. [ 182.044376][ T8828] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 182.159166][ T8835] loop0: detected capacity change from 0 to 512 [ 182.208267][ T8840] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.218980][ T8839] syz.5.1756 uses obsolete (PF_INET,SOCK_PACKET) [ 182.233359][ T8835] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 182.255867][ T8835] EXT4-fs (loop0): Ignoring removed nobh option [ 182.284327][ T8835] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 182.309036][ T8835] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 182.433070][ T8851] netlink: 'syz.5.1758': attribute type 1 has an invalid length. [ 182.442108][ T4236] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 182.482302][ T8851] netlink: 'syz.5.1758': attribute type 3 has an invalid length. [ 182.536977][ T8851] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1758'. [ 182.662051][ T13] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.761541][ T8861] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 182.802162][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 182.825334][ T8861] openvswitch: netlink: Flow key attr not present in new flow. [ 182.936810][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 182.960035][ T8871] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.972111][ T4236] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 182.981238][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.032152][ T4236] usb 7-1: Product: syz [ 183.036474][ T4236] usb 7-1: Manufacturer: syz [ 183.061558][ T4236] usb 7-1: SerialNumber: syz [ 183.072345][ T13] usb 3-1: config 237 has an invalid interface number: 221 but max is 0 [ 183.089348][ T13] usb 3-1: config 237 has no interface number 0 [ 183.090575][ T4236] usb 7-1: config 0 descriptor?? [ 183.111931][ T13] usb 3-1: config 237 interface 221 has no altsetting 0 [ 183.203121][ T4236] hub 7-1:0.0: bad descriptor, ignoring hub [ 183.209197][ T4236] hub: probe of 7-1:0.0 failed with error -5 [ 183.263217][ T4236] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 183.300334][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 183.310210][ T13] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d3.c3 [ 183.329025][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.349824][ T13] usb 3-1: Product: syz [ 183.368237][ T13] usb 3-1: Manufacturer: syz [ 183.384028][ T13] usb 3-1: SerialNumber: syz [ 183.418433][ T8893] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 183.570959][ T8900] loop4: detected capacity change from 0 to 256 [ 183.632448][ T4174] usb 7-1: USB disconnect, device number 8 [ 183.760182][ T13] radio-si470x 3-1:237.221: could not find interrupt in endpoint [ 183.782986][ T13] radio-si470x: probe of 3-1:237.221 failed with error -5 [ 183.793360][ T13] usbhid 3-1:237.221: couldn't find an input interrupt endpoint [ 183.814261][ T13] usb 3-1: USB disconnect, device number 16 [ 183.874806][ T8912] binder: 8909:8912 ioctl 40046210 0 returned -14 [ 184.275772][ T8936] nfs4: Bad value for 'source' [ 184.297766][ T8938] loop0: detected capacity change from 0 to 128 [ 184.548017][ T8952] loop6: detected capacity change from 0 to 256 [ 184.629949][ T8952] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 184.852098][ T13] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 184.946319][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1820'. [ 184.995535][ T8982] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1824'. [ 185.084541][ T8986] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 185.125510][ T8990] overlayfs: conflicting options: userxattr,redirect_dir=off [ 185.258111][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 185.465764][ T13] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 185.486014][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.510249][ T13] usb 6-1: Product: syz [ 185.525019][ T13] usb 6-1: Manufacturer: syz [ 185.535874][ T13] usb 6-1: SerialNumber: syz [ 185.570180][ T13] usb 6-1: config 0 descriptor?? [ 185.730851][ T9027] loop4: detected capacity change from 0 to 256 [ 185.734072][ T1335] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 185.885571][ T9027] FAT-fs (loop4): Directory bread(block 64) failed [ 185.940335][ T9027] FAT-fs (loop4): Directory bread(block 65) failed [ 185.988628][ T9027] FAT-fs (loop4): Directory bread(block 66) failed [ 186.022095][ T9027] FAT-fs (loop4): Directory bread(block 67) failed [ 186.055018][ T9027] FAT-fs (loop4): Directory bread(block 68) failed [ 186.061646][ T9027] FAT-fs (loop4): Directory bread(block 69) failed [ 186.078742][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 186.095419][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 186.107647][ T4331] usb 6-1: USB disconnect, device number 11 [ 186.122054][ T1335] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 186.130296][ T1335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.195324][ T9027] FAT-fs (loop4): Directory bread(block 70) failed [ 186.202221][ T1335] usb 3-1: config 0 has no interface number 0 [ 186.209131][ T1335] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 186.230407][ T9027] FAT-fs (loop4): Directory bread(block 71) failed [ 186.286353][ T9027] FAT-fs (loop4): Directory bread(block 72) failed [ 186.293541][ T1335] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.320218][ T9027] FAT-fs (loop4): Directory bread(block 73) failed [ 186.453153][ T9042] udevd[9042]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.482266][ T1335] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 186.491414][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.544825][ T1335] usb 3-1: Product: syz [ 186.549347][ T1335] usb 3-1: Manufacturer: syz [ 186.601840][ T1335] usb 3-1: SerialNumber: syz [ 186.621542][ T1335] usb 3-1: config 0 descriptor?? [ 186.947935][ T9070] loop6: detected capacity change from 0 to 512 [ 186.989094][ T9072] netlink: 'syz.5.1867': attribute type 2 has an invalid length. [ 187.003477][ T9072] netlink: 'syz.5.1867': attribute type 1 has an invalid length. [ 187.024285][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 187.098588][ T1335] usb 3-1: USB disconnect, device number 17 [ 187.184638][ T9070] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,i_version,,errors=continue. Quota mode: writeback. [ 187.286094][ T9070] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.1866: invalid size [ 187.839739][ T9121] delete_channel: no stack [ 187.986386][ T9127] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1893'. [ 188.054257][ T9132] loop5: detected capacity change from 0 to 128 [ 188.060784][ T9117] loop0: detected capacity change from 0 to 8192 [ 188.157518][ T9132] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 188.191679][ T9117] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 188.201975][ T9117] REISERFS (device loop0): using ordered data mode [ 188.208541][ T9117] reiserfs: using flush barriers [ 188.266790][ T9117] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.404164][ T9117] REISERFS (device loop0): checking transaction log (loop0) [ 188.465232][ T9117] REISERFS (device loop0): Using rupasov hash to sort names [ 188.523249][ T9117] REISERFS (device loop0): using 3.5.x disk format [ 188.530211][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.601934][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.652499][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.717390][ T9117] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 188.820827][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.928257][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.989656][ T9117] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 189.045164][ T9175] loop4: detected capacity change from 0 to 512 [ 189.148915][ T9175] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,i_version,,errors=continue. Quota mode: writeback. [ 189.192768][ T4174] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 189.311307][ T9175] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.1915: invalid size [ 189.348587][ T9181] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1919'. [ 189.358734][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1919'. [ 189.367923][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 189.378327][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 189.552087][ T4174] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 189.560482][ T4174] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 189.589352][ T4174] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 189.631830][ T4174] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 189.653268][ T4174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 189.689479][ T4174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 189.948582][ T9169] loop2: detected capacity change from 0 to 32768 [ 189.983286][ T4174] usb 6-1: string descriptor 0 read error: -22 [ 189.995774][ T4174] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 190.025498][ T9169] jfs_strtoUCS: char2uni returned -22. [ 190.046794][ T9169] charset = cp936, char = 0xd4 [ 190.051936][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.083974][ T4174] usb 6-1: config 0 descriptor?? [ 190.102322][ T9171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.126175][ T4174] hub 6-1:0.0: bad descriptor, ignoring hub [ 190.137360][ T4174] hub: probe of 6-1:0.0 failed with error -5 [ 190.171973][ T4174] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 190.297759][ T9210] loop4: detected capacity change from 0 to 64 [ 190.307526][ T9211] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 190.364106][ T9211] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 190.456398][ T4251] usb 6-1: USB disconnect, device number 12 [ 190.462569][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -19 [ 190.677231][ T9188] loop6: detected capacity change from 0 to 32768 [ 190.796141][ T9188] [ 190.796141][ T9188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.796141][ T9188] [ 190.855511][ T9188] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 190.855511][ T9188] [ 190.917185][ T9188] xtLookup: xtSearch returned -5 [ 190.940509][ T9188] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt [ 190.940509][ T9188] [ 191.056901][ T4817] [ 191.056901][ T4817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.056901][ T4817] [ 191.109814][ T9237] loop5: detected capacity change from 0 to 256 [ 191.117600][ T4817] [ 191.117600][ T4817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.117600][ T4817] [ 191.129241][ T6064] [ 191.129241][ T6064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.129241][ T6064] [ 191.146273][ T6064] [ 191.146273][ T6064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.146273][ T6064] [ 191.167542][ T277] ================================================================== [ 191.176211][ T277] BUG: KASAN: use-after-free in __mutex_lock_common+0xd0f/0x2400 [ 191.183989][ T277] Read of size 8 at addr ffff88802330c108 by task jfsCommit/277 [ 191.191660][ T277] [ 191.194033][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 191.201281][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.211405][ T277] Call Trace: [ 191.214724][ T277] [ 191.217709][ T277] dump_stack_lvl+0x188/0x250 [ 191.222443][ T277] ? show_regs_print_info+0x20/0x20 [ 191.227773][ T277] ? load_image+0x400/0x400 [ 191.232317][ T277] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 191.237835][ T277] ? release_firmware_map_entry+0x190/0x190 [ 191.243918][ T277] print_address_description+0x60/0x2d0 [ 191.249523][ T277] ? __mutex_lock_common+0xd0f/0x2400 [ 191.254948][ T277] kasan_report+0xdf/0x130 [ 191.259416][ T277] ? __mutex_lock_common+0xd0f/0x2400 [ 191.264951][ T277] __mutex_lock_common+0xd0f/0x2400 [ 191.270228][ T277] ? jfs_syncpt+0x21/0x90 [ 191.274648][ T277] ? mutex_lock_io_nested+0x60/0x60 [ 191.279896][ T277] ? __lock_acquire+0x7d10/0x7d10 [ 191.284961][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 191.290036][ T277] ? __rwlock_init+0x140/0x140 [ 191.294843][ T277] mutex_lock_nested+0x17/0x20 [ 191.299650][ T277] jfs_syncpt+0x21/0x90 [ 191.303861][ T277] txEnd+0x2e1/0x520 [ 191.307806][ T277] jfs_lazycommit+0x5b8/0xb40 [ 191.312528][ T277] ? txFreelock+0x5a0/0x5a0 [ 191.317065][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 191.322993][ T277] ? sched_dynamic_update+0x210/0x210 [ 191.328419][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.334416][ T277] ? __kthread_parkme+0x157/0x1b0 [ 191.339477][ T277] kthread+0x436/0x520 [ 191.343600][ T277] ? txFreelock+0x5a0/0x5a0 [ 191.348132][ T277] ? kthread_blkcg+0xd0/0xd0 [ 191.352767][ T277] ret_from_fork+0x1f/0x30 [ 191.357232][ T277] [ 191.360271][ T277] [ 191.362610][ T277] Allocated by task 9188: [ 191.366956][ T277] __kasan_kmalloc+0xb5/0xf0 [ 191.372054][ T277] lmLogOpen+0x2c0/0xf90 [ 191.376349][ T277] jfs_mount_rw+0xf8/0x5c0 [ 191.380800][ T277] jfs_fill_super+0x5c1/0xb00 [ 191.385500][ T277] mount_bdev+0x287/0x3c0 [ 191.389866][ T277] legacy_get_tree+0xe6/0x180 [ 191.394580][ T277] vfs_get_tree+0x88/0x270 [ 191.399039][ T277] do_new_mount+0x24a/0xa40 [ 191.404094][ T277] __se_sys_mount+0x2e3/0x3d0 [ 191.409178][ T277] do_syscall_64+0x4c/0xa0 [ 191.413638][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.419552][ T277] [ 191.421890][ T277] Freed by task 6064: [ 191.425888][ T277] kasan_set_track+0x4b/0x70 [ 191.430515][ T277] kasan_set_free_info+0x1f/0x40 [ 191.435473][ T277] ____kasan_slab_free+0xd5/0x110 [ 191.440710][ T277] slab_free_freelist_hook+0xea/0x170 [ 191.446182][ T277] kfree+0xef/0x2a0 [ 191.450026][ T277] lmLogClose+0x293/0x520 [ 191.454383][ T277] jfs_umount+0x28f/0x360 [ 191.458727][ T277] jfs_put_super+0x88/0x190 [ 191.463368][ T277] generic_shutdown_super+0x130/0x300 [ 191.468798][ T277] kill_block_super+0x7c/0xe0 [ 191.473516][ T277] deactivate_locked_super+0x93/0xf0 [ 191.478850][ T277] cleanup_mnt+0x42d/0x4e0 [ 191.483329][ T277] task_work_run+0x125/0x1a0 [ 191.487961][ T277] exit_to_user_mode_loop+0x10f/0x130 [ 191.493354][ T277] exit_to_user_mode_prepare+0xee/0x180 [ 191.498934][ T277] syscall_exit_to_user_mode+0x16/0x40 [ 191.504444][ T277] do_syscall_64+0x58/0xa0 [ 191.508898][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.514837][ T277] [ 191.517188][ T277] Last potentially related work creation: [ 191.522916][ T277] kasan_save_stack+0x35/0x60 [ 191.527625][ T277] kasan_record_aux_stack+0xb8/0x100 [ 191.532941][ T277] call_rcu+0x189/0x950 [ 191.537136][ T277] dev_shutdown+0x5e6/0x710 [ 191.541668][ T277] unregister_netdevice_many+0xa2c/0x19f0 [ 191.547428][ T277] ip6gre_exit_batch_net+0x44d/0x4a0 [ 191.552760][ T277] cleanup_net+0x791/0xba0 [ 191.557206][ T277] process_one_work+0x85f/0x1010 [ 191.562179][ T277] worker_thread+0xaa6/0x1290 [ 191.566901][ T277] kthread+0x436/0x520 [ 191.570979][ T277] ret_from_fork+0x1f/0x30 [ 191.575411][ T277] [ 191.577771][ T277] The buggy address belongs to the object at ffff88802330c000 [ 191.577771][ T277] which belongs to the cache kmalloc-1k of size 1024 [ 191.591871][ T277] The buggy address is located 264 bytes inside of [ 191.591871][ T277] 1024-byte region [ffff88802330c000, ffff88802330c400) [ 191.605275][ T277] The buggy address belongs to the page: [ 191.610937][ T277] page:ffffea00008cc200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23308 [ 191.621107][ T277] head:ffffea00008cc200 order:3 compound_mapcount:0 compound_pincount:0 [ 191.629475][ T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 191.637492][ T277] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0 [ 191.646102][ T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 191.654707][ T277] page dumped because: kasan: bad access detected [ 191.661145][ T277] page_owner tracks the page as allocated [ 191.666876][ T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1108, ts 67088125180, free_ts 67067091813 [ 191.684090][ T277] get_page_from_freelist+0x1bbd/0x1ca0 [ 191.689682][ T277] __alloc_pages+0x1ee/0x480 [ 191.694313][ T277] new_slab+0xc0/0x4b0 [ 191.698406][ T277] ___slab_alloc+0x80a/0xdd0 [ 191.703018][ T277] __kmalloc+0x1cd/0x330 [ 191.707291][ T277] ___neigh_create+0x6d2/0x2250 [ 191.712180][ T277] ip6_finish_output2+0x9f6/0x1510 [ 191.717311][ T277] NF_HOOK+0x163/0x460 [ 191.721405][ T277] mld_sendpack+0x6f2/0xc00 [ 191.725928][ T277] mld_ifc_work+0x836/0xb40 [ 191.730559][ T277] process_one_work+0x85f/0x1010 [ 191.735531][ T277] worker_thread+0xaa6/0x1290 [ 191.740261][ T277] kthread+0x436/0x520 [ 191.744374][ T277] ret_from_fork+0x1f/0x30 [ 191.748832][ T277] page last free stack trace: [ 191.753527][ T277] free_unref_page_prepare+0x637/0x6c0 [ 191.759040][ T277] free_unref_page+0x8f/0x2a0 [ 191.763749][ T277] __unfreeze_partials+0x1a5/0x200 [ 191.768885][ T277] put_cpu_partial+0x12d/0x190 [ 191.773670][ T277] qlist_free_all+0x35/0x90 [ 191.778194][ T277] kasan_quarantine_reduce+0x150/0x160 [ 191.783671][ T277] __kasan_slab_alloc+0x2f/0xd0 [ 191.788546][ T277] slab_post_alloc_hook+0x4c/0x380 [ 191.793678][ T277] kmem_cache_alloc+0x100/0x290 [ 191.798550][ T277] vm_area_dup+0x1e/0xb0 [ 191.802919][ T277] __split_vma+0xb1/0x410 [ 191.807291][ T277] __do_munmap+0x3fe/0xdf0 [ 191.811723][ T277] mmap_region+0x8b4/0x1650 [ 191.816258][ T277] do_mmap+0x819/0xe90 [ 191.820352][ T277] vm_mmap_pgoff+0x1c1/0x2d0 [ 191.824977][ T277] ksys_mmap_pgoff+0x54b/0x790 [ 191.829769][ T277] [ 191.832113][ T277] Memory state around the buggy address: [ 191.837776][ T277] ffff88802330c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.845879][ T277] ffff88802330c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.853955][ T277] >ffff88802330c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.862036][ T277] ^ [ 191.866401][ T277] ffff88802330c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.874492][ T277] ffff88802330c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.882575][ T277] ================================================================== [ 191.890789][ T277] Disabling lock debugging due to kernel taint [ 191.898143][ T277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.905385][ T277] CPU: 1 PID: 277 Comm: jfsCommit Tainted: G B syzkaller #0 [ 191.914018][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.924124][ T277] Call Trace: [ 191.927415][ T277] [ 191.930364][ T277] dump_stack_lvl+0x188/0x250 [ 191.935095][ T277] ? show_regs_print_info+0x20/0x20 [ 191.940344][ T277] ? load_image+0x400/0x400 [ 191.944895][ T277] panic+0x2e5/0x810 [ 191.948832][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 191.953373][ T277] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 191.959314][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.965341][ T277] ? _raw_spin_unlock+0x40/0x40 [ 191.970249][ T277] ? __mutex_lock_common+0xd0f/0x2400 [ 191.975657][ T277] check_panic_on_warn+0x80/0xa0 [ 191.980630][ T277] ? __mutex_lock_common+0xd0f/0x2400 [ 191.986076][ T277] end_report+0x6d/0xf0 [ 191.990267][ T277] kasan_report+0x102/0x130 [ 191.994818][ T277] ? __mutex_lock_common+0xd0f/0x2400 [ 192.000238][ T277] __mutex_lock_common+0xd0f/0x2400 [ 192.005494][ T277] ? jfs_syncpt+0x21/0x90 [ 192.009985][ T277] ? mutex_lock_io_nested+0x60/0x60 [ 192.015224][ T277] ? __lock_acquire+0x7d10/0x7d10 [ 192.020282][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 192.025341][ T277] ? __rwlock_init+0x140/0x140 [ 192.030252][ T277] mutex_lock_nested+0x17/0x20 [ 192.035072][ T277] jfs_syncpt+0x21/0x90 [ 192.039465][ T277] txEnd+0x2e1/0x520 [ 192.043399][ T277] jfs_lazycommit+0x5b8/0xb40 [ 192.048116][ T277] ? txFreelock+0x5a0/0x5a0 [ 192.052653][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 192.058595][ T277] ? sched_dynamic_update+0x210/0x210 [ 192.064012][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.069952][ T277] ? __kthread_parkme+0x157/0x1b0 [ 192.075195][ T277] kthread+0x436/0x520 [ 192.079308][ T277] ? txFreelock+0x5a0/0x5a0 [ 192.083846][ T277] ? kthread_blkcg+0xd0/0xd0 [ 192.088478][ T277] ret_from_fork+0x1f/0x30 [ 192.092943][ T277] [ 192.096248][ T277] Kernel Offset: disabled [ 192.100599][ T277] Rebooting in 86400 seconds..