last executing test programs: 1m12.941204233s ago: executing program 0 (id=197): r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) 1m12.785061547s ago: executing program 0 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m12.611555841s ago: executing program 0 (id=201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) 1m12.389974187s ago: executing program 0 (id=202): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000080)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@nodiscard}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1m11.008237462s ago: executing program 0 (id=209): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x200}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x101002) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 1m9.572233358s ago: executing program 0 (id=215): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) 1m8.874026146s ago: executing program 32 (id=215): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) 2.521699816s ago: executing program 3 (id=703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r0, 0x0, r0}, 0x5) 2.520599726s ago: executing program 1 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010300000007000000", @ANYRES32=r1, @ANYBLOB="1c0001"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) 2.230435933s ago: executing program 3 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) 2.229488663s ago: executing program 1 (id=707): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001900)='./bus\x00', 0x40000, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) 2.103053657s ago: executing program 2 (id=708): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x65c, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800) 1.97869594s ago: executing program 1 (id=710): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.968040019s ago: executing program 3 (id=711): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000fb22f50583000000000000000000000000000000000000ffffffff0000000009000000000000000a00"/183]) 1.724526556s ago: executing program 2 (id=712): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe2f, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1.668147138s ago: executing program 4 (id=713): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) 1.426279824s ago: executing program 4 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r0, 0xc00, 0x100000000000000}, 0x38) 1.421589454s ago: executing program 2 (id=715): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.345114786s ago: executing program 1 (id=716): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x20044000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 1.298852757s ago: executing program 3 (id=717): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) 1.16703372s ago: executing program 2 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.139202911s ago: executing program 4 (id=719): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 1.016549415s ago: executing program 1 (id=720): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x20) 983.331415ms ago: executing program 2 (id=721): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 844.162309ms ago: executing program 4 (id=722): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) recvmsg(r0, 0x0, 0x10100) 834.122839ms ago: executing program 3 (id=723): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 624.852445ms ago: executing program 4 (id=724): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000ae3000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7, 0x1) 441.928839ms ago: executing program 1 (id=725): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRESOCT=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, 0x0) 311.599922ms ago: executing program 2 (id=726): lstat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x3, 0x3) 133.72µs ago: executing program 3 (id=727): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 79.078491][ T5762] cgroup: Unknown subsys name 'net' [ 79.247822][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.997912][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.604681][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.614361][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.619550][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.622821][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.638832][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.647567][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.647567][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.656637][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.670841][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.678801][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.686954][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.688157][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.701234][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.704509][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.710101][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.720198][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.728802][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.733028][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.737437][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.744937][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.751014][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.759314][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.790929][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.799583][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.258127][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.296683][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.400408][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.475929][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.485794][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.493456][ T5773] bridge_slave_0: entered allmulticast mode [ 83.501229][ T5773] bridge_slave_0: entered promiscuous mode [ 83.510220][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.549036][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.556530][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.565925][ T5773] bridge_slave_1: entered allmulticast mode [ 83.573283][ T5773] bridge_slave_1: entered promiscuous mode [ 83.589022][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.596930][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.604836][ T5774] bridge_slave_0: entered allmulticast mode [ 83.612785][ T5774] bridge_slave_0: entered promiscuous mode [ 83.622062][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.629607][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.637329][ T5774] bridge_slave_1: entered allmulticast mode [ 83.645034][ T5774] bridge_slave_1: entered promiscuous mode [ 83.705010][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.717445][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.784887][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.798272][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.815827][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.823401][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.831033][ T5775] bridge_slave_0: entered allmulticast mode [ 83.838327][ T5775] bridge_slave_0: entered promiscuous mode [ 83.872652][ T5773] team0: Port device team_slave_0 added [ 83.879206][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.886823][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.894705][ T5775] bridge_slave_1: entered allmulticast mode [ 83.902020][ T5775] bridge_slave_1: entered promiscuous mode [ 83.928734][ T5773] team0: Port device team_slave_1 added [ 83.957589][ T5774] team0: Port device team_slave_0 added [ 83.968320][ T5774] team0: Port device team_slave_1 added [ 84.005085][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.012910][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.020872][ T5776] bridge_slave_0: entered allmulticast mode [ 84.028000][ T5776] bridge_slave_0: entered promiscuous mode [ 84.036225][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.043704][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.051469][ T5776] bridge_slave_1: entered allmulticast mode [ 84.061177][ T5776] bridge_slave_1: entered promiscuous mode [ 84.098589][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.109562][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.117029][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.146595][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.169616][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.177165][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.203930][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.217569][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.226124][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.253466][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.268560][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.289115][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.296743][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.324086][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.338249][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.381017][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.443340][ T5774] hsr_slave_0: entered promiscuous mode [ 84.452118][ T5774] hsr_slave_1: entered promiscuous mode [ 84.482489][ T5775] team0: Port device team_slave_0 added [ 84.493601][ T5776] team0: Port device team_slave_0 added [ 84.515085][ T5775] team0: Port device team_slave_1 added [ 84.547052][ T5776] team0: Port device team_slave_1 added [ 84.557860][ T5773] hsr_slave_0: entered promiscuous mode [ 84.564556][ T5773] hsr_slave_1: entered promiscuous mode [ 84.571122][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.580793][ T5773] Cannot create hsr debugfs directory [ 84.595506][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.602606][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.629603][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.643187][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.650431][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.677596][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.715521][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.722581][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.749056][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.779494][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.789732][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.801312][ T51] Bluetooth: hci0: command tx timeout [ 84.816831][ T5778] Bluetooth: hci3: command tx timeout [ 84.827211][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.890115][ T5778] Bluetooth: hci1: command tx timeout [ 84.890134][ T51] Bluetooth: hci2: command tx timeout [ 84.948196][ T5775] hsr_slave_0: entered promiscuous mode [ 84.955357][ T5775] hsr_slave_1: entered promiscuous mode [ 84.962084][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.969693][ T5775] Cannot create hsr debugfs directory [ 85.060935][ T5776] hsr_slave_0: entered promiscuous mode [ 85.067635][ T5776] hsr_slave_1: entered promiscuous mode [ 85.074823][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.082769][ T5776] Cannot create hsr debugfs directory [ 85.308680][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.351630][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.368816][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.424039][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.507867][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.519084][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.546689][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.559099][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.643318][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.654144][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.666401][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.709550][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.758912][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.769662][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.795991][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.809339][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.842613][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.923139][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.996187][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.003711][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.044575][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.052088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.067997][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.113513][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.146072][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.153494][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.175116][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.182611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.213891][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.305923][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.329156][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.352557][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.360050][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.378622][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.386317][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.457651][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.583861][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.591646][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.651608][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.659020][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.735348][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.881783][ T5778] Bluetooth: hci3: command tx timeout [ 86.884393][ T51] Bluetooth: hci0: command tx timeout [ 86.936421][ T5774] veth0_vlan: entered promiscuous mode [ 86.961102][ T51] Bluetooth: hci2: command tx timeout [ 86.970301][ T51] Bluetooth: hci1: command tx timeout [ 86.999292][ T5774] veth1_vlan: entered promiscuous mode [ 87.039103][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.154930][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.174775][ T5773] veth0_vlan: entered promiscuous mode [ 87.215630][ T5773] veth1_vlan: entered promiscuous mode [ 87.234965][ T5774] veth0_macvtap: entered promiscuous mode [ 87.263078][ T5774] veth1_macvtap: entered promiscuous mode [ 87.288052][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.355876][ T5775] veth0_vlan: entered promiscuous mode [ 87.388452][ T5773] veth0_macvtap: entered promiscuous mode [ 87.415410][ T5775] veth1_vlan: entered promiscuous mode [ 87.432596][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.453170][ T5773] veth1_macvtap: entered promiscuous mode [ 87.502597][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.537331][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.551989][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.565515][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.579348][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.590798][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.601143][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.610665][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.650473][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.662989][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.676573][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.700101][ T5776] veth0_vlan: entered promiscuous mode [ 87.741232][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.751296][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761504][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.771371][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.815361][ T5775] veth0_macvtap: entered promiscuous mode [ 87.854235][ T5775] veth1_macvtap: entered promiscuous mode [ 87.894841][ T5776] veth1_vlan: entered promiscuous mode [ 87.927405][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.960299][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.972345][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.983792][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.013970][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.089280][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.108959][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.121703][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.133560][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.147254][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.168407][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.188814][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.200890][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216762][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.228540][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.241639][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.326947][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.336248][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.367223][ T5776] veth0_macvtap: entered promiscuous mode [ 88.403245][ T5776] veth1_macvtap: entered promiscuous mode [ 88.435838][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.452168][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.504224][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.533229][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.562541][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.577336][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.589263][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.601262][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.614133][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.659344][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.673638][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.685655][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.697057][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.708136][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.739972][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.757382][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.768242][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.789446][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.793059][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.811655][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.821485][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831000][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.883784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.924470][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.971400][ T51] Bluetooth: hci0: command tx timeout [ 88.972245][ T5778] Bluetooth: hci3: command tx timeout [ 89.037647][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.046186][ T5778] Bluetooth: hci1: command tx timeout [ 89.046319][ T51] Bluetooth: hci2: command tx timeout [ 89.094801][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.124631][ T5850] syz.3.7[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.192115][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.219001][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.242379][ T5852] Dead loop on virtual device ip6_vti0, fix it urgently! [ 89.331636][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.374321][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.779257][ T5860] ======================================================= [ 89.779257][ T5860] WARNING: The mand mount option has been deprecated and [ 89.779257][ T5860] and is ignored by this kernel. Remove the mand [ 89.779257][ T5860] option from the mount to silence this warning. [ 89.779257][ T5860] ======================================================= [ 90.017706][ T5864] loop1: detected capacity change from 0 to 1024 [ 90.109048][ T5868] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.149540][ T5850] loop3: detected capacity change from 0 to 32768 [ 90.179583][ T5866] loop0: detected capacity change from 0 to 4096 [ 90.202711][ T5864] hfsplus: bad catalog entry type [ 90.258305][ T5866] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 90.332205][ T34] hfsplus: b-tree write err: -5, ino 25 [ 90.339613][ T34] hfsplus: b-tree write err: -5, ino 4 [ 90.353228][ T5850] JBD2: Ignoring recovery information on journal [ 90.391408][ T34] hfsplus: b-tree write err: -5, ino 2 [ 90.496499][ T5850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.526163][ T5866] ntfs: volume version 3.1. [ 90.831731][ T5866] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 90.888123][ T5866] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 90.938306][ T5866] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 90.971593][ T5866] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 91.010389][ T5866] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 91.019878][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 91.041220][ T51] Bluetooth: hci0: command tx timeout [ 91.042192][ T5778] Bluetooth: hci3: command tx timeout [ 91.083403][ T5866] ntfs: (device loop0): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 91.125850][ T5778] Bluetooth: hci1: command tx timeout [ 91.131483][ T5778] Bluetooth: hci2: command tx timeout [ 91.139141][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 91.288164][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 91.582135][ T5892] loop0: detected capacity change from 0 to 2048 [ 91.679804][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 91.683805][ T5892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.061808][ T5886] loop2: detected capacity change from 0 to 32768 [ 92.185308][ T5886] JBD2: Ignoring recovery information on journal [ 92.341531][ T5908] loop3: detected capacity change from 0 to 2048 [ 92.377209][ T5886] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.390179][ T5908] loop3: p1 < > p4 [ 92.390179][ T5908] p4: [ 92.419249][ T5908] loop3: p4 size 722688 extends beyond EOD, truncated [ 92.429185][ T8] cfg80211: failed to load regulatory.db [ 92.481444][ T5138] loop3: p1 < > p4 [ 92.481444][ T5138] p4: [ 92.521197][ T5138] loop3: p4 size 722688 extends beyond EOD, truncated [ 92.584299][ T5915] loop0: detected capacity change from 0 to 256 [ 92.695598][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 92.850428][ T5915] FAT-fs (loop0): Directory bread(block 64) failed [ 92.881397][ T5915] FAT-fs (loop0): Directory bread(block 65) failed [ 92.896582][ T5915] FAT-fs (loop0): Directory bread(block 66) failed [ 92.935887][ T5915] FAT-fs (loop0): Directory bread(block 67) failed [ 92.965963][ T5915] FAT-fs (loop0): Directory bread(block 68) failed [ 92.990535][ T5915] FAT-fs (loop0): Directory bread(block 69) failed [ 92.997500][ T5915] FAT-fs (loop0): Directory bread(block 70) failed [ 93.024326][ T5915] FAT-fs (loop0): Directory bread(block 71) failed [ 93.026567][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.036723][ T5915] FAT-fs (loop0): Directory bread(block 72) failed [ 93.060303][ T5915] FAT-fs (loop0): Directory bread(block 73) failed [ 93.161970][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.607723][ T5934] loop0: detected capacity change from 0 to 1024 [ 93.632476][ T5934] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 94.035638][ T5816] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.139223][ T5950] overlayfs: missing 'lowerdir' [ 94.210292][ T5783] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.277414][ T5816] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 94.300338][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.308425][ T5816] usb 4-1: Product: syz [ 94.320203][ T5816] usb 4-1: Manufacturer: syz [ 94.326589][ T5816] usb 4-1: SerialNumber: syz [ 94.353533][ T5816] usb 4-1: config 0 descriptor?? [ 94.370929][ T5816] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 94.402264][ T5783] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.418359][ T5783] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.437676][ T5783] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.446979][ T5783] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 94.462339][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.485251][ T5783] usb 2-1: config 0 descriptor?? [ 94.495189][ T5946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.977232][ T5783] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 94.991712][ T5816] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 94.993706][ T5783] holtek_kbd 0003:04D9:A055.0001: unbalanced collection at end of report description [ 94.999364][ T5816] sq905c: probe of 4-1:0.0 failed with error -71 [ 95.018526][ T5783] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22 [ 95.054533][ T5816] usb 4-1: USB disconnect, device number 2 [ 95.085874][ T5953] sp0: Synchronizing with TNC [ 95.134348][ T5952] [U] è [ 95.240053][ T1189] usb 2-1: USB disconnect, device number 2 [ 95.478459][ T5966] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 95.489546][ T5966] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 95.931672][ T5975] loop1: detected capacity change from 0 to 64 [ 95.997804][ T5971] loop0: detected capacity change from 0 to 32768 [ 96.062503][ T5975] syz.1.60: attempt to access beyond end of device [ 96.062503][ T5975] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 96.066497][ T5971] JBD2: Ignoring recovery information on journal [ 96.077804][ T5975] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 96.096029][ T5975] syz.1.60: attempt to access beyond end of device [ 96.096029][ T5975] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 96.111183][ T5975] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 96.202224][ T5971] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 96.254480][ T5971] JBD2: bad block at offset 32 [ 96.304556][ T5971] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.469567][ T5971] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 96.501695][ T5971] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 96.530213][ T5971] OCFS2: File system is now read-only. [ 96.535760][ T5971] (syz.0.58,5971,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 96.565332][ T5971] (syz.0.58,5971,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 96.580195][ T5971] (syz.0.58,5971,1):ocfs2_fiemap:782 ERROR: status = -30 [ 96.582745][ T5985] loop1: detected capacity change from 0 to 4096 [ 96.641458][ T5985] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 96.751910][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 96.795899][ T5985] ntfs3: loop1: Inode r=19 is not in use! [ 96.820606][ T5985] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.114812][ T5985] ntfs3: loop1: ino=1d, "file1" attr_set_size [ 97.340802][ T5997] Bluetooth: MGMT ver 1.22 [ 97.352844][ T5987] loop2: detected capacity change from 0 to 32768 [ 97.399379][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 97.426145][ T5987] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 97.435649][ T6000] netlink: 'syz.3.72': attribute type 22 has an invalid length. [ 97.456446][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 97.465804][ T5987] JBD2: Ignoring recovery information on journal [ 97.559253][ T6006] netlink: 'syz.0.74': attribute type 11 has an invalid length. [ 97.638463][ T6008] can0: slcan on ptm0. [ 97.677348][ T5987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 97.811786][ T6007] can0 (unregistered): slcan off ptm0. [ 97.993281][ T6016] process 'syz.2.65' launched './file1' with NULL argv: empty string added [ 98.168945][ T6023] loop0: detected capacity change from 0 to 512 [ 98.286752][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.300759][ T6023] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.322999][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 98.438005][ T6023] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 637 (only 1 groups) [ 98.536578][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.008114][ T6021] loop1: detected capacity change from 0 to 32768 [ 99.046409][ T6021] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (6021) [ 99.151660][ T6021] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 99.212789][ T6021] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 99.235764][ T6021] BTRFS info (device loop1): enabling auto defrag [ 99.250027][ T6021] BTRFS info (device loop1): force clearing of disk cache [ 99.268972][ T6021] BTRFS info (device loop1): ignoring data csums [ 99.278387][ T6021] BTRFS info (device loop1): turning on async discard [ 99.300628][ T6021] BTRFS info (device loop1): setting nodatacow, compression disabled [ 99.350325][ T6021] BTRFS info (device loop1): turning off async discard [ 99.357425][ T6021] BTRFS info (device loop1): disabling free space tree [ 99.501927][ T6049] loop3: detected capacity change from 0 to 8192 [ 99.516514][ T6049] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.520636][ T51] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 99.530954][ T5778] Bluetooth: hci0: command 0x0401 tx timeout [ 99.538612][ T6049] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 99.568945][ T6049] REISERFS (device loop3): using ordered data mode [ 99.603021][ T6049] reiserfs: using flush barriers [ 99.651923][ T6049] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.752167][ T6049] REISERFS (device loop3): checking transaction log (loop3) [ 99.817231][ T6049] REISERFS (device loop3): Using r5 hash to sort names [ 99.837229][ T6049] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 100.052914][ T5776] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.362646][ T6081] loop2: detected capacity change from 0 to 1024 [ 100.439631][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.673536][ T5791] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (5791) [ 100.820759][ T5773] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 100.914622][ T5773] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 101.005367][ T5773] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 101.098368][ T6056] loop0: detected capacity change from 0 to 32768 [ 101.189117][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.760263][ T1189] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.960665][ T1189] usb 3-1: Using ep0 maxpacket: 32 [ 102.012163][ T1189] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 102.041851][ T1189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.070439][ T1189] usb 3-1: Product: syz [ 102.085199][ T1189] usb 3-1: Manufacturer: syz [ 102.103564][ T1189] usb 3-1: SerialNumber: syz [ 102.142723][ T1189] usb 3-1: config 0 descriptor?? [ 102.608213][ T1189] airspy 3-1:0.0: Board ID: 00 [ 102.617254][ T1189] airspy 3-1:0.0: Firmware version: [ 102.815139][ T1189] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 102.855617][ T1189] airspy 3-1:0.0: Registered as swradio24 [ 102.865130][ T6122] loop1: detected capacity change from 0 to 32768 [ 102.873467][ T1189] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 102.903825][ T1189] usb 3-1: USB disconnect, device number 2 [ 103.067214][ T6124] loop3: detected capacity change from 0 to 32768 [ 103.116022][ T6124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.107 (6124) [ 103.204051][ T6124] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.254564][ T6124] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.281422][ T6124] BTRFS info (device loop3): setting nodatacow, compression disabled [ 103.303457][ T6124] BTRFS info (device loop3): force clearing of disk cache [ 103.346129][ T6124] BTRFS info (device loop3): turning on sync discard [ 103.368562][ T6124] BTRFS info (device loop3): turning off barriers [ 103.388247][ T6124] BTRFS info (device loop3): use no compression [ 103.395945][ T6124] BTRFS info (device loop3): disabling free space tree [ 103.409714][ T6124] BTRFS info (device loop3): enabling ssd optimizations [ 103.419579][ T6124] BTRFS info (device loop3): using spread ssd allocation scheme [ 103.451517][ T6124] BTRFS info (device loop3): not using ssd optimizations [ 103.459349][ T6124] BTRFS info (device loop3): not using spread ssd allocation scheme [ 103.516101][ T6128] loop0: detected capacity change from 0 to 32768 [ 103.693670][ T6128] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.803995][ T6124] BTRFS info (device loop3): rebuilding free space tree [ 103.826742][ T6128] XFS (loop0): Ending clean mount [ 103.953364][ T6124] BTRFS info (device loop3): disabling free space tree [ 103.972125][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.994560][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.232239][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.269107][ T6124] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.551704][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.003781][ T6160] loop1: detected capacity change from 0 to 32768 [ 105.055053][ T6160] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 105.106382][ T6160] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.424524][ T6160] XFS (loop1): Ending clean mount [ 105.690647][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.028193][ T6197] loop0: detected capacity change from 0 to 512 [ 106.127299][ T6197] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.127: corrupted in-inode xattr: overlapping e_value [ 106.143336][ T6197] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.127: couldn't read orphan inode 15 (err -117) [ 106.159839][ T6197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.208466][ T6203] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 106.517633][ T6210] loop1: detected capacity change from 0 to 512 [ 106.537043][ T6184] loop3: detected capacity change from 0 to 40427 [ 106.566971][ T6210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.600611][ T6184] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 106.618070][ T6212] loop2: detected capacity change from 0 to 1024 [ 106.624856][ T6184] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 106.640934][ T6184] F2FS-fs (loop3): Image doesn't support compression [ 106.676331][ T6184] F2FS-fs (loop3): invalid crc value [ 106.684664][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.716703][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.725143][ T6184] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.061251][ T6184] F2FS-fs (loop3): Start checkpoint disabled! [ 107.116808][ T6184] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.173170][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.184981][ T6184] syz.3.118: attempt to access beyond end of device [ 107.184981][ T6184] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.233234][ T6222] netlink: 268 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.273386][ T6222] netlink: 136 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.354152][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.565977][ T3459] kworker/u4:8: attempt to access beyond end of device [ 107.565977][ T3459] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 107.629227][ T3459] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.655449][ T3459] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.955477][ T6241] capability: warning: `syz.2.145' uses 32-bit capabilities (legacy support in use) [ 108.003462][ T6241] program syz.2.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.434845][ T6252] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 108.434845][ T6252] program syz.1.150 not setting count and/or reply_len properly [ 108.466285][ T6254] netlink: 92 bytes leftover after parsing attributes in process `syz.3.137'. [ 108.504075][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 108.771770][ T6256] loop2: detected capacity change from 0 to 8192 [ 108.800336][ T6256] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.896303][ T6256] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 108.958072][ T6256] REISERFS (device loop2): using ordered data mode [ 108.971088][ T6256] reiserfs: using flush barriers [ 109.037555][ T6256] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 109.077102][ T6256] REISERFS (device loop2): checking transaction log (loop2) [ 109.096088][ T6256] REISERFS (device loop2): Using r5 hash to sort names [ 109.105169][ T6256] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 109.143335][ T6256] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 109.343080][ T6262] loop3: detected capacity change from 0 to 32768 [ 109.451139][ T6262] JBD2: Ignoring recovery information on journal [ 109.658799][ T6265] loop1: detected capacity change from 0 to 32768 [ 109.707989][ T6262] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.997872][ T6279] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 110.019052][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 110.024807][ T6277] loop2: detected capacity change from 0 to 4096 [ 110.070041][ T6277] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 110.121951][ T6281] loop1: detected capacity change from 0 to 128 [ 110.148217][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 110.168555][ T6281] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.213464][ T6281] hpfs: filesystem error: improperly stopped [ 110.242475][ T6281] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.285809][ T6281] hpfs: You really don't want any checks? You are crazy... [ 110.317461][ T6281] hpfs: hpfs_map_sector(): read error [ 110.339684][ T6277] ntfs3: loop2: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 110.344787][ T6281] hpfs: code page support is disabled [ 110.406475][ T6277] ntfs3: loop2: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 110.419989][ T6281] hpfs: hpfs_map_4sectors(): unaligned read [ 110.453165][ T6281] hpfs: hpfs_map_4sectors(): unaligned read [ 110.476403][ T6281] hpfs: filesystem error: unable to find root dir [ 110.904004][ T6293] capability: warning: `syz.0.169' uses deprecated v2 capabilities in a way that may be insecure [ 111.073332][ T6291] loop3: detected capacity change from 0 to 4096 [ 111.189294][ T6298] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.210338][ T6291] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 111.233458][ T6297] loop2: detected capacity change from 0 to 4096 [ 111.248608][ T6291] NILFS (loop3): mounting fs with errors [ 111.274853][ T6297] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 111.320300][ T6302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.172'. [ 111.368212][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 111.435759][ T6291] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 111.480264][ T6291] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 111.520554][ T6291] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 111.540319][ T5816] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.623979][ T28] audit: type=1326 audit(1777712649.866:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 111.719527][ T28] audit: type=1326 audit(1777712649.896:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 111.789525][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.822466][ T28] audit: type=1326 audit(1777712649.906:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 111.864759][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.886704][ T5816] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 111.898053][ T6309] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 111.906727][ T28] audit: type=1326 audit(1777712649.916:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9972b5d60e code=0x7ffc0000 [ 111.931661][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.944569][ T6309] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 111.957048][ T5816] usb 1-1: config 0 descriptor?? [ 111.995701][ T6309] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.176'. [ 112.006983][ T28] audit: type=1326 audit(1777712649.916:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9972b5d60e code=0x7ffc0000 [ 112.036476][ T28] audit: type=1326 audit(1777712649.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 112.062469][ T28] audit: type=1326 audit(1777712649.916:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 112.140082][ T28] audit: type=1326 audit(1777712649.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 112.181934][ T28] audit: type=1326 audit(1777712649.916:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 112.246679][ T28] audit: type=1326 audit(1777712649.916:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 112.282417][ T6319] loop1: detected capacity change from 0 to 256 [ 112.306686][ T6319] exfat: Deprecated parameter 'utf8' [ 112.322569][ T6319] exfat: Deprecated parameter 'namecase' [ 112.360148][ T6319] exfat: Deprecated parameter 'namecase' [ 112.366778][ T6319] exfat: Deprecated parameter 'utf8' [ 112.425192][ T6319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 112.486819][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x3 [ 112.530045][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.540512][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.548072][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.595647][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.630065][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.660204][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.668371][ T5816] sigmamicro 0003:1C4F:0059.0002: unknown main item tag 0x0 [ 112.727056][ T5816] sigmamicro 0003:1C4F:0059.0002: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 112.732890][ T6325] loop3: detected capacity change from 0 to 1024 [ 112.775832][ T5816] usb 1-1: USB disconnect, device number 2 [ 112.932933][ T6330] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 113.009871][ T6328] fido_id[6328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.043075][ T34] hfsplus: b-tree write err: -5, ino 25 [ 113.069479][ T34] hfsplus: b-tree write err: -5, ino 4 [ 113.088199][ T34] hfsplus: b-tree write err: -5, ino 2 [ 113.100160][ T34] hfsplus: b-tree write err: -5, ino 26 [ 113.232468][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.254077][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.595846][ T6348] loop0: detected capacity change from 0 to 512 [ 113.677632][ T6348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1) [ 113.712006][ T6348] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.742984][ T6352] ipvlan2: entered promiscuous mode [ 113.751115][ T6347] loop3: detected capacity change from 0 to 4096 [ 113.768297][ T6352] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.839490][ T6347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.093637][ T6347] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 114.132866][ T6347] EXT4-fs: Cannot change journaled quota options when quota turned on [ 114.275832][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.431107][ T6362] Bluetooth: MGMT ver 1.22 [ 114.639504][ T6350] loop2: detected capacity change from 0 to 32768 [ 114.765537][ T6368] loop3: detected capacity change from 0 to 256 [ 114.783955][ T6368] exfat: Deprecated parameter 'utf8' [ 114.789457][ T6368] exfat: Deprecated parameter 'namecase' [ 114.889617][ T6368] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 115.085560][ T6370] loop2: detected capacity change from 0 to 2048 [ 115.175916][ T6370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.445995][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.538097][ T6360] loop1: detected capacity change from 0 to 32768 [ 115.636640][ T6360] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.711550][ T6366] loop0: detected capacity change from 0 to 32768 [ 115.795264][ T6360] XFS (loop1): Ending clean mount [ 115.835494][ T1189] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 115.879997][ T1189] XFS (loop1): Unmount and run xfs_repair [ 115.898412][ T1189] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 115.927816][ T5775] read_mapping_page failed! [ 115.934679][ T1189] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 115.965324][ T1189] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 115.990086][ T5775] ERROR: (device loop0): txCommit: [ 115.990086][ T5775] [ 115.998374][ T1189] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 116.028079][ T1189] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 116.049620][ T5775] ERROR: (device loop0): remounting filesystem as read-only [ 116.062971][ T1189] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 116.073483][ T1189] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.093167][ T1189] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 116.104115][ T1189] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.119397][ T6360] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 116.141434][ T6360] XFS (loop1): Failed to initialize disk quotas. [ 116.299085][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.316008][ T6375] loop3: detected capacity change from 0 to 32768 [ 116.347302][ T6375] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.206 (6375) [ 116.411554][ T6375] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.450052][ T6375] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 116.470541][ T6375] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.504651][ T6375] BTRFS info (device loop3): use zstd compression, level 3 [ 116.522327][ T6375] BTRFS info (device loop3): using free space tree [ 116.658918][ T3459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.708585][ T6403] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.741730][ T6375] BTRFS info (device loop3): enabling ssd optimizations [ 116.749774][ T6403] hpfs: filesystem error: improperly stopped [ 116.790174][ T6375] BTRFS info (device loop3): auto enabling async discard [ 116.801476][ T6403] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 116.887074][ T6403] hpfs: You really don't want any checks? You are crazy... [ 116.939311][ T6403] hpfs: hpfs_map_sector(): read error [ 116.955373][ T3459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.969327][ T6403] hpfs: code page support is disabled [ 116.985436][ T6403] hpfs: hpfs_map_4sectors(): unaligned read [ 117.009051][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 117.009066][ T28] audit: type=1800 audit(1777712655.246:17): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.206" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 117.051381][ T6403] hpfs: hpfs_map_4sectors(): unaligned read [ 117.068048][ T6403] hpfs: filesystem error: unable to find root dir [ 117.227366][ T5774] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 117.245061][ T3459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.493018][ T3459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.228314][ T6425] set_capacity_and_notify: 1 callbacks suppressed [ 118.228331][ T6425] loop2: detected capacity change from 0 to 512 [ 118.604124][ T6425] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 118.620182][ T6425] FAT-fs (loop2): Filesystem has been set read-only [ 119.172363][ T6445] loop2: detected capacity change from 0 to 1024 [ 119.408008][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.419727][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.430059][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.470343][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.498110][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.508918][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.716585][ T6455] loop2: detected capacity change from 0 to 256 [ 119.783622][ T6430] loop1: detected capacity change from 0 to 32768 [ 119.872775][ T6455] FAT-fs (loop2): Directory bread(block 64) failed [ 119.904432][ T6455] FAT-fs (loop2): Directory bread(block 65) failed [ 119.923612][ T6455] FAT-fs (loop2): Directory bread(block 66) failed [ 119.927968][ T6430] JBD2: Ignoring recovery information on journal [ 119.982098][ T6455] FAT-fs (loop2): Directory bread(block 67) failed [ 119.996387][ T6455] FAT-fs (loop2): Directory bread(block 68) failed [ 120.024352][ T6455] FAT-fs (loop2): Directory bread(block 69) failed [ 120.052381][ T6455] FAT-fs (loop2): Directory bread(block 70) failed [ 120.078362][ T6455] FAT-fs (loop2): Directory bread(block 71) failed [ 120.109122][ T6455] FAT-fs (loop2): Directory bread(block 72) failed [ 120.110260][ T6430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.117541][ T6455] FAT-fs (loop2): Directory bread(block 73) failed [ 120.334962][ T6430] (syz.1.220,6430,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 120.497948][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 120.960911][ T6460] loop3: detected capacity change from 0 to 32768 [ 121.002388][ T6460] (syz.3.228,6460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.041530][ T6460] (syz.3.228,6460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.134470][ T6460] JBD2: Ignoring recovery information on journal [ 121.354014][ T6460] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.377768][ T3459] hsr_slave_0: left promiscuous mode [ 121.401386][ T3459] hsr_slave_1: left promiscuous mode [ 121.439361][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.468020][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.502376][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.550197][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.574577][ T3459] bridge_slave_1: left allmulticast mode [ 121.598538][ T3459] bridge_slave_1: left promiscuous mode [ 121.610228][ T5778] Bluetooth: hci1: command tx timeout [ 121.633280][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.750586][ T3459] bridge_slave_0: left allmulticast mode [ 121.756587][ T3459] bridge_slave_0: left promiscuous mode [ 121.788588][ T6494] loop2: detected capacity change from 0 to 256 [ 121.796519][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.881931][ T3459] veth1_macvtap: left promiscuous mode [ 121.893016][ T3459] veth0_macvtap: left promiscuous mode [ 121.905746][ T3459] veth1_vlan: left promiscuous mode [ 121.912929][ T6494] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d) [ 121.929733][ T3459] veth0_vlan: left promiscuous mode [ 122.004213][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 122.267162][ T6474] loop1: detected capacity change from 0 to 32768 [ 123.301733][ T6499] loop2: detected capacity change from 0 to 32768 [ 123.681191][ T5778] Bluetooth: hci1: command tx timeout [ 124.185737][ T6519] loop2: detected capacity change from 0 to 16 [ 124.220149][ T6519] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.391457][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 124.497073][ T6521] loop2: detected capacity change from 0 to 16 [ 124.501151][ T6517] loop3: detected capacity change from 0 to 32768 [ 124.509263][ T6521] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.521879][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 124.574739][ T6517] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.622559][ T6521] syz.2.245: attempt to access beyond end of device [ 124.622559][ T6521] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 124.667042][ T6521] syz.2.245: attempt to access beyond end of device [ 124.667042][ T6521] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 124.670350][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.714631][ T6521] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 124.726640][ T6517] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 124.738275][ T28] audit: type=1800 audit(1777712662.966:18): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.245" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 124.768185][ T6521] syz.2.245 (6521) used greatest stack depth: 19312 bytes left [ 124.855795][ T6517] XFS (loop3): Ending clean mount [ 124.881232][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.038940][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.565355][ T3459] bond0 (unregistering): Released all slaves [ 125.736553][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 125.760326][ T5778] Bluetooth: hci1: command tx timeout [ 125.957592][ T6542] tipc: Started in network mode [ 125.968356][ T6542] tipc: Node identity , cluster identity 4711 [ 125.976604][ T6542] tipc: Failed to obtain node identity [ 125.987106][ T6542] tipc: Enabling of bearer rejected, failed to enable media [ 126.013029][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.021436][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.028935][ T6450] bridge_slave_0: entered allmulticast mode [ 126.038391][ T6450] bridge_slave_0: entered promiscuous mode [ 126.048956][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.057539][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.078098][ T6450] bridge_slave_1: entered allmulticast mode [ 126.105017][ T6450] bridge_slave_1: entered promiscuous mode [ 126.274668][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.306423][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.465978][ T6450] team0: Port device team_slave_0 added [ 126.526470][ T6450] team0: Port device team_slave_1 added [ 126.686954][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.706927][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.761990][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.787657][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.840477][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.886979][ T6569] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.908290][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.660347][ T6450] hsr_slave_0: entered promiscuous mode [ 127.682941][ T6450] hsr_slave_1: entered promiscuous mode [ 127.711259][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.719613][ T6450] Cannot create hsr debugfs directory [ 127.855359][ T5778] Bluetooth: hci1: command tx timeout [ 128.077809][ T6594] loop2: detected capacity change from 0 to 4096 [ 128.273137][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.311584][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.404291][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.444130][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.475908][ T6594] EXT4-fs: Ignoring removed orlov option [ 128.546298][ T6594] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.672648][ T6594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.847568][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.965964][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.992510][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.999965][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.058614][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.105824][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.113386][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.238993][ T6604] loop3: detected capacity change from 0 to 32768 [ 129.398417][ T6626] loop2: detected capacity change from 0 to 2048 [ 129.472465][ T12] read_mapping_page failed! [ 129.490237][ T12] ERROR: (device loop3): txCommit: [ 129.490237][ T12] [ 129.514846][ T12] jfs_write_inode: jfs_commit_inode failed! [ 129.524667][ T6626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.042888][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.150267][ T6632] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 130.637298][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.922141][ T6450] veth0_vlan: entered promiscuous mode [ 130.983554][ T6450] veth1_vlan: entered promiscuous mode [ 131.110930][ T6450] veth0_macvtap: entered promiscuous mode [ 131.133310][ T6450] veth1_macvtap: entered promiscuous mode [ 131.228869][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.266306][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.300114][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.323871][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.349027][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.386642][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.411876][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.439494][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.458014][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.475635][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.532376][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.549942][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.570057][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.599611][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.635396][ T6450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.663935][ T6450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.690541][ T6450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.710529][ T6450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.938905][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.975002][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.977875][ T6658] loop3: detected capacity change from 0 to 32768 [ 132.053257][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.082543][ T6658] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 132.102651][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.105318][ T6658] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.318164][ T6658] XFS (loop3): Ending clean mount [ 132.403071][ T6658] XFS (loop3): Quotacheck needed: Please wait. [ 132.464472][ T6671] loop2: detected capacity change from 0 to 32768 [ 132.538847][ T6658] XFS (loop3): Quotacheck: Done. [ 132.557017][ T6696] loop4: detected capacity change from 0 to 128 [ 132.583241][ T6671] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 132.669059][ T6696] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.716182][ T6671] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.745724][ T6696] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.923627][ T6675] loop1: detected capacity change from 0 to 32768 [ 132.950885][ T6671] XFS (loop2): Ending clean mount [ 132.976633][ T6671] XFS (loop2): Quotacheck needed: Please wait. [ 133.009346][ T6450] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.038013][ T6675] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.061348][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.155358][ T6671] XFS (loop2): Quotacheck: Done. [ 133.380636][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.393415][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.548036][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.570453][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 134.662493][ T6713] loop4: detected capacity change from 0 to 32768 [ 134.712943][ T6713] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 134.805141][ T6713] XFS (loop4): Ending clean mount [ 134.946020][ T2179] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 134.986137][ T2179] XFS (loop4): Unmount and run xfs_repair [ 135.029692][ T2179] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 135.060321][ T2179] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 135.069797][ T2179] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 135.100059][ T2179] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 135.119960][ T2179] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 135.144388][ T2179] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 135.171430][ T2179] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.204716][ T2179] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.219221][ T6717] loop1: detected capacity change from 0 to 40427 [ 135.250127][ T2179] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.268532][ T6717] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 135.288191][ T6713] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 135.301335][ T6717] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.312056][ T6713] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 135.329668][ T6717] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 135.348660][ T6717] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 135.359206][ T6713] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 135.374825][ T6717] F2FS-fs (loop1): Image doesn't support compression [ 135.384708][ T6717] F2FS-fs (loop1): invalid crc value [ 135.404917][ T6717] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.581425][ T6717] F2FS-fs (loop1): Start checkpoint disabled! [ 135.582462][ T6759] loop2: detected capacity change from 0 to 64 [ 135.599134][ T6717] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 135.608659][ T6717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 136.170962][ T6450] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 136.459193][ T70] kworker/u4:5: attempt to access beyond end of device [ 136.459193][ T70] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.530450][ T70] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 136.556157][ T70] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 136.631491][ T6779] netlink: 'syz.3.298': attribute type 4 has an invalid length. [ 136.895255][ T6785] loop3: detected capacity change from 0 to 256 [ 137.762118][ T6777] loop2: detected capacity change from 0 to 32768 [ 137.776342][ T6806] xt_HMARK: proto mask must be zero with L3 mode [ 137.838690][ T6777] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.146690][ T6777] XFS (loop2): Ending clean mount [ 138.351220][ T28] audit: type=1800 audit(1777712676.576:19): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.296" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 138.371250][ T6831] loop4: detected capacity change from 0 to 1024 [ 138.452805][ T6831] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 138.582310][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.126793][ T6847] loop4: detected capacity change from 0 to 1024 [ 139.210492][ T6847] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.297504][ T6847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.387943][ T6847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.319: missing EA_INODE flag [ 139.434672][ T6847] EXT4-fs (loop4): Remounting filesystem read-only [ 139.450283][ T5783] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.520944][ T6864] loop1: detected capacity change from 0 to 512 [ 139.564480][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.594711][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.636004][ T6864] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.660017][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 139.673050][ T5783] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 139.689972][ T5783] usb 4-1: config 0 has no interface number 0 [ 139.703336][ T5783] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 139.720278][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.739068][ T5783] usb 4-1: Product: syz [ 139.760909][ T5783] usb 4-1: Manufacturer: syz [ 139.766250][ T5783] usb 4-1: SerialNumber: syz [ 139.781201][ T5783] usb 4-1: config 0 descriptor?? [ 139.792808][ T6864] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.324: corrupted xattr block 33: invalid header [ 139.822185][ T5783] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.855152][ T6864] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.324: corrupted xattr block 33: invalid header [ 139.894383][ T6864] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 140.024712][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.093276][ T5783] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 140.128283][ T5783] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 140.217794][ T6876] loop1: detected capacity change from 0 to 512 [ 140.267287][ T6876] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.362718][ T6876] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.393569][ T6876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.424557][ T6878] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 140.454900][ T6878] team0: Device ipvlan2 is already an upper device of the team interface [ 140.459652][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.478729][ T6876] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.625849][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 140.627882][ T2179] usb 4-1: USB disconnect, device number 3 [ 140.668298][ T6868] loop2: detected capacity change from 0 to 32768 [ 140.689734][ T6868] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.326 (6868) [ 140.694158][ T2179] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 140.737262][ T6868] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.767177][ T6868] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 140.777166][ T2179] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 140.789339][ T6868] BTRFS info (device loop2): using free space tree [ 140.797058][ T2179] quatech2 4-1:0.51: device disconnected [ 140.915178][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.331'. [ 140.925086][ T6892] Zero length message leads to an empty skb [ 140.984995][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.014127][ T6868] BTRFS info (device loop2): enabling ssd optimizations [ 141.053108][ T6868] BTRFS info (device loop2): auto enabling async discard [ 141.580384][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.667002][ T6913] loop1: detected capacity change from 0 to 1024 [ 141.929653][ T3459] hfsplus: b-tree write err: -5, ino 25 [ 141.960274][ T3459] hfsplus: b-tree write err: -5, ino 4 [ 141.966019][ T3459] hfsplus: b-tree write err: -5, ino 2 [ 142.350355][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.573699][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.610175][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.644179][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.660439][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.689172][ T8] usb 4-1: SerialNumber: syz [ 142.945337][ T8] usb 4-1: 0:2 : does not exist [ 143.044635][ T8] usb 4-1: USB disconnect, device number 4 [ 143.171362][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.696706][ T6946] loop1: detected capacity change from 0 to 32768 [ 143.780567][ T6946] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.045739][ T6946] XFS (loop1): Ending clean mount [ 144.086218][ T6946] XFS (loop1): Quotacheck needed: Please wait. [ 144.099625][ T6950] loop4: detected capacity change from 0 to 40427 [ 144.123826][ T6950] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x7ffff [ 144.139191][ T6950] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 144.179525][ T6946] XFS (loop1): Quotacheck: Done. [ 144.185328][ T6950] F2FS-fs (loop4): Image doesn't support compression [ 144.221004][ T6950] F2FS-fs (loop4): invalid crc value [ 144.263081][ T6950] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.443212][ T6950] F2FS-fs (loop4): Start checkpoint disabled! [ 144.471882][ T6950] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 144.488305][ T6977] loop3: detected capacity change from 0 to 256 [ 144.497945][ T6977] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.574956][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.930670][ T3508] kworker/u4:9: attempt to access beyond end of device [ 144.930670][ T3508] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.947253][ T3508] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 144.955507][ T3508] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 145.414196][ T6987] loop2: detected capacity change from 0 to 2048 [ 145.512510][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.688800][ T7000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.367'. [ 145.712667][ T6987] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 145.863261][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.414034][ T6996] loop1: detected capacity change from 0 to 32768 [ 146.421586][ T6986] loop3: detected capacity change from 0 to 32768 [ 146.452091][ T6986] (syz.3.363,6986,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.489249][ T6986] (syz.3.363,6986,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.559804][ T6986] JBD2: Ignoring recovery information on journal [ 146.649713][ T7016] loop2: detected capacity change from 0 to 1024 [ 146.658999][ T7016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.669629][ T7016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.682751][ T7016] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.701516][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.762757][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.779500][ T6986] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.065213][ T7020] loop2: detected capacity change from 0 to 4096 [ 147.268055][ T7020] ntfs: volume version 3.1. [ 147.350968][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 148.198270][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.392886][ T5816] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.421130][ T5816] usb 5-1: config 0 has no interface number 0 [ 148.427754][ T5816] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.471947][ T5816] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.490010][ T5816] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 148.528622][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.579580][ T5816] usb 5-1: config 0 descriptor?? [ 148.608103][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 148.672332][ T7063] nbd: illegal input index 10237952 [ 148.753947][ T23] IPVS: starting estimator thread 0... [ 148.930347][ T7067] IPVS: using max 20 ests per chain, 48000 per kthread [ 149.035765][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.067295][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.090006][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.091802][ T7069] loop3: detected capacity change from 0 to 4096 [ 149.119087][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.158880][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.190043][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.229298][ T7077] trusted_key: encrypted_key: insufficient parameters specified [ 149.249012][ T5816] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 149.291166][ T5816] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 149.318267][ T7069] ntfs: volume version 3.1. [ 149.353119][ T5816] hid_prodikeys: hid-prodikeys: failed to find output report [ 149.353119][ T5816] [ 149.510413][ T5816] usb 5-1: USB disconnect, device number 2 [ 149.614873][ T7081] fido_id[7081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 151.503155][ T7132] loop1: detected capacity change from 0 to 512 [ 151.610264][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 151.624706][ T5816] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 151.825982][ T7139] loop4: detected capacity change from 0 to 512 [ 151.875431][ T5816] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.904692][ T5816] usb 3-1: config 0 has no interface number 0 [ 151.906240][ T7115] loop3: detected capacity change from 0 to 32768 [ 151.931935][ T5816] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 151.967482][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.977240][ T5816] usb 3-1: Product: syz [ 151.981616][ T5816] usb 3-1: Manufacturer: syz [ 151.986558][ T5816] usb 3-1: SerialNumber: syz [ 152.003430][ T5816] usb 3-1: config 0 descriptor?? [ 152.009761][ T7115] JBD2: Ignoring recovery information on journal [ 152.024516][ T7139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.024840][ T5816] usb 3-1: selecting invalid altsetting 1 [ 152.046837][ T5816] dvb_ttusb_budget: ttusb_init_controller: error [ 152.053628][ T5816] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 152.080273][ T7139] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.240697][ T5816] DVB: Unable to find symbol stv0299_attach() [ 152.248454][ T7115] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.349729][ T7153] loop1: detected capacity change from 0 to 1764 [ 152.452172][ T5816] DVB: Unable to find symbol tda8083_attach() [ 152.472221][ T5816] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 152.519573][ T5816] usb 3-1: USB disconnect, device number 3 [ 152.695392][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 152.892594][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.606041][ T7182] loop4: detected capacity change from 0 to 256 [ 153.619146][ T7182] exfat: Deprecated parameter 'utf8' [ 153.639652][ T7178] loop3: detected capacity change from 0 to 2048 [ 153.667039][ T7182] exfat: Deprecated parameter 'utf8' [ 153.683345][ T7182] exfat: Deprecated parameter 'namecase' [ 153.699141][ T7178] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 153.750752][ T7178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.786953][ T7182] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 154.317811][ T7201] loop3: detected capacity change from 0 to 1024 [ 154.688450][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 154.767629][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 154.900258][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.983285][ T7217] sp0: Synchronizing with TNC [ 154.987997][ T7220] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 155.005508][ T7220] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 155.012993][ T7220] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 155.051165][ T7221] sp0: Found TNC [ 155.072281][ T7193] loop2: detected capacity change from 0 to 32768 [ 155.110425][ T7193] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.427 (7193) [ 155.122155][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.151008][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.172811][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.202660][ T23] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 155.232068][ T7193] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.234774][ T23] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 155.300547][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 155.302651][ T7193] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 155.335415][ T23] usb 2-1: config 1 interface 1 has no altsetting 0 [ 155.340034][ T7193] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.368662][ T23] usb 2-1: string descriptor 0 read error: -22 [ 155.380107][ T23] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 155.400367][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.420047][ T7193] BTRFS info (device loop2): use zstd compression, level 3 [ 155.427621][ T7193] BTRFS info (device loop2): using free space tree [ 155.535034][ T28] audit: type=1326 audit(1777712693.776:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.3.440" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2bf9cdd9 code=0x0 [ 155.707248][ T23] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 155.720163][ T7193] BTRFS info (device loop2): enabling ssd optimizations [ 155.742409][ T7193] BTRFS info (device loop2): auto enabling async discard [ 155.847003][ T7253] netlink: 100 bytes leftover after parsing attributes in process `syz.4.441'. [ 155.928848][ T23] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 155.940496][ T5773] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 156.026397][ T23] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 156.071859][ T23] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 156.158886][ T23] usb 2-1: USB disconnect, device number 3 [ 156.344043][ T5791] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (5791) [ 156.607113][ T28] audit: type=1326 audit(1777712694.846:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2bf9cdd9 code=0x0 [ 156.952627][ T7278] vlan1: entered promiscuous mode [ 156.957756][ T7278] macvtap0: entered promiscuous mode [ 157.465855][ T7291] loop4: detected capacity change from 0 to 4096 [ 157.563138][ T7294] loop1: detected capacity change from 0 to 512 [ 157.600710][ T7294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.651856][ T7296] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.740345][ T7294] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.452: couldn't read orphan inode 26 (err -116) [ 157.796523][ T7294] EXT4-fs (loop1): Remounting filesystem read-only [ 157.835617][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.891495][ T7294] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.122857][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.727184][ T7288] loop2: detected capacity change from 0 to 32768 [ 158.851521][ T7288] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.873080][ T7335] loop4: detected capacity change from 0 to 512 [ 158.901845][ T7335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.005253][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.058142][ T7288] XFS (loop2): Ending clean mount [ 159.090030][ T1189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.147665][ T7288] XFS (loop2): Quotacheck needed: Please wait. [ 159.292322][ T7288] XFS (loop2): Quotacheck: Done. [ 159.320118][ T1189] usb 4-1: Using ep0 maxpacket: 32 [ 159.342875][ T1189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.393614][ T1189] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.417819][ T1189] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.447515][ T1189] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.461685][ T1189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.480349][ T1189] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 159.489558][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.511724][ T1189] usb 4-1: config 0 descriptor?? [ 159.541952][ T7353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.467'. [ 159.559005][ T7353] netlink: 'syz.1.467': attribute type 6 has an invalid length. [ 159.569442][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 159.614060][ T7353] netlink: 'syz.1.467': attribute type 5 has an invalid length. [ 159.622994][ T7353] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 159.989275][ T1189] corsair-cpro 0003:1B1C:0C10.0004: item fetching failed at offset 3/5 [ 160.033440][ T1189] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -22 [ 160.269333][ T787] usb 4-1: USB disconnect, device number 5 [ 160.329177][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.532320][ T23] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 160.553721][ T23] usb 3-1: config 0 has no interface number 0 [ 160.582120][ T23] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.629728][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 160.657214][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.672920][ T23] usb 3-1: Product: syz [ 160.677380][ T23] usb 3-1: Manufacturer: syz [ 160.688384][ T23] usb 3-1: SerialNumber: syz [ 160.704967][ T23] usb 3-1: config 0 descriptor?? [ 160.759824][ T23] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 161.088209][ T23] usb 3-1: USB disconnect, device number 4 [ 161.141203][ T23] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 161.500862][ T7377] loop1: detected capacity change from 0 to 32768 [ 161.564293][ T7377] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.701975][ T7377] XFS (loop1): Ending clean mount [ 161.736229][ T7377] XFS (loop1): Quotacheck needed: Please wait. [ 161.903502][ T7377] XFS (loop1): Quotacheck: Done. [ 162.108289][ T7422] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 162.127790][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.345349][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.376152][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.417085][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.429028][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.446554][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.476107][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.496094][ T7430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.507352][ T7430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.521597][ T7430] batadv_slave_1: entered promiscuous mode [ 162.727267][ T7440] netlink: 'syz.4.493': attribute type 2 has an invalid length. [ 163.003306][ T7448] loop2: detected capacity change from 0 to 1024 [ 163.037484][ T7448] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 163.067424][ T7450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.305969][ T7456] loop2: detected capacity change from 0 to 1024 [ 163.546314][ T7460] loop4: detected capacity change from 0 to 256 [ 163.743022][ T7460] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 163.781126][ T7460] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 164.363657][ T7483] loop3: detected capacity change from 0 to 64 [ 164.446063][ T7483] syz.3.514: attempt to access beyond end of device [ 164.446063][ T7483] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 164.503030][ T7483] Buffer I/O error on dev loop3, logical block 512, async page read [ 164.565169][ T7483] syz.3.514: attempt to access beyond end of device [ 164.565169][ T7483] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 164.588102][ T7488] loop4: detected capacity change from 0 to 1024 [ 164.600682][ T7483] Buffer I/O error on dev loop3, logical block 56576, async page read [ 164.658555][ T7491] loop1: detected capacity change from 0 to 1024 [ 164.690638][ T7491] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 165.286777][ T5951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.370359][ T5778] Bluetooth: hci2: command tx timeout [ 165.406133][ T7509] loop4: detected capacity change from 0 to 16 [ 165.454631][ T7509] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.504112][ T5951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.551298][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.579058][ T7515] tipc: Started in network mode [ 165.586302][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.590010][ T7515] tipc: Node identity , cluster identity 4711 [ 165.604068][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.630324][ T5951] usb 3-1: SerialNumber: syz [ 165.905505][ T5951] usb 3-1: 0:2 : does not exist [ 165.973181][ T5951] usb 3-1: USB disconnect, device number 5 [ 166.118729][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.181940][ T7533] loop3: detected capacity change from 0 to 32768 [ 167.214650][ T7533] JBD2: Ignoring recovery information on journal [ 167.318568][ T7533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 167.710963][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 167.812376][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 167.831228][ T7570] binder: 7569:7570 ioctl c00c620f 200000000500 returned -22 [ 168.022282][ T23] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.044137][ T23] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.077194][ T23] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.129434][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.149710][ T23] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 168.175023][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.217217][ T23] usb 2-1: config 0 descriptor?? [ 168.277437][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'. [ 168.342647][ T7562] loop4: detected capacity change from 0 to 40427 [ 168.361143][ T7562] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 168.370233][ T7562] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 168.390935][ T7562] F2FS-fs (loop4): invalid crc value [ 168.445302][ T7562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.540668][ T7562] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 168.634647][ T7562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 168.670428][ T23] holtek 0003:1241:5015.0005: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 168.699178][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 168.724220][ T23] holtek 0003:1241:5015.0005: no inputs found [ 168.737744][ T7587] tipc: MTU too low for tipc bearer [ 168.944041][ T2179] usb 2-1: USB disconnect, device number 4 [ 169.020316][ T7594] loop2: detected capacity change from 0 to 256 [ 169.071781][ T7594] exfat: Deprecated parameter 'namecase' [ 169.125592][ T7594] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 169.669240][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 169.685603][ T7611] loop3: detected capacity change from 0 to 1024 [ 169.711329][ T7611] EXT4-fs: inline encryption not supported [ 169.775881][ T7611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.836056][ T7611] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.048054][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.700755][ T7647] loop3: detected capacity change from 0 to 512 [ 170.726835][ T7643] loop2: detected capacity change from 0 to 4096 [ 170.782862][ T7647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.801674][ T7650] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.902473][ T7647] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.960224][ T28] audit: type=1800 audit(1777712709.196:22): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.586" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 171.188743][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.251238][ T7654] loop1: detected capacity change from 0 to 4096 [ 171.366953][ T7654] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 171.491720][ T7664] loop4: detected capacity change from 0 to 128 [ 171.542242][ T7664] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.665256][ T7664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.764753][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 171.774836][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 171.801840][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 171.815154][ T7670] loop1: detected capacity change from 0 to 512 [ 171.857527][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.888297][ T7670] EXT4-fs (loop1): 1 truncate cleaned up [ 171.899070][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.033266][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.145309][ T7666] bridge_slave_1 (unregistering): left allmulticast mode [ 172.159254][ T7666] bridge_slave_1 (unregistering): left promiscuous mode [ 172.170339][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.321337][ T7679] loop4: detected capacity change from 0 to 2048 [ 172.358802][ T7679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.619951][ T28] audit: type=1326 audit(1777712710.856:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 172.654784][ T7683] loop1: detected capacity change from 0 to 256 [ 172.710956][ T7683] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 172.725633][ T28] audit: type=1326 audit(1777712710.856:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 172.756021][ T7683] FAT-fs (loop1): Filesystem has been set read-only [ 172.780173][ T28] audit: type=1326 audit(1777712710.886:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 172.833757][ T28] audit: type=1326 audit(1777712710.886:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 172.920332][ T28] audit: type=1326 audit(1777712710.886:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9972b9cb42 code=0x7ffc0000 [ 172.960810][ T5951] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 172.983967][ T28] audit: type=1326 audit(1777712710.886:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9972b5d60e code=0x7ffc0000 [ 173.029310][ T28] audit: type=1326 audit(1777712710.896:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9972b9cdd9 code=0x7ffc0000 [ 173.071256][ T28] audit: type=1326 audit(1777712710.896:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9972b9cc07 code=0x7ffc0000 [ 173.097961][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 173.110831][ T28] audit: type=1326 audit(1777712710.896:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.1.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9972b5d60e code=0x7ffc0000 [ 173.156298][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.188728][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.236198][ T5951] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 173.246964][ T5951] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 173.266275][ T5951] usb 4-1: Manufacturer: syz [ 173.303776][ T5951] usb 4-1: config 0 descriptor?? [ 173.354592][ T7697] netlink: 240 bytes leftover after parsing attributes in process `syz.1.612'. [ 173.364339][ T7697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.612'. [ 173.788981][ T5951] cougar 0003:060B:700A.0006: item fetching failed at offset 3/5 [ 173.826770][ T5951] cougar 0003:060B:700A.0006: parse failed [ 173.840692][ T5951] cougar: probe of 0003:060B:700A.0006 failed with error -22 [ 173.956742][ T7695] set_capacity_and_notify: 1 callbacks suppressed [ 173.956759][ T7695] loop4: detected capacity change from 0 to 32768 [ 174.038935][ T5951] usb 4-1: USB disconnect, device number 6 [ 174.297824][ T7710] loop1: detected capacity change from 0 to 4096 [ 174.325218][ T7710] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 174.547976][ T7715] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 175.110638][ T7723] sit0: entered promiscuous mode [ 175.141773][ T7723] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 175.180191][ T7723] netlink: 1 bytes leftover after parsing attributes in process `syz.3.624'. [ 175.269808][ T7725] mkiss: ax0: crc mode is auto. [ 175.275241][ T7711] loop2: detected capacity change from 0 to 32768 [ 175.323320][ T7711] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.514887][ T7718] loop4: detected capacity change from 0 to 32768 [ 175.572314][ T7711] XFS (loop2): Ending clean mount [ 175.584472][ T7718] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.625193][ T7718] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 175.660129][ T7718] BTRFS info (device loop4): using free space tree [ 175.684935][ T7711] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 175.890786][ T7718] BTRFS info (device loop4): enabling ssd optimizations [ 175.897908][ T7718] BTRFS info (device loop4): auto enabling async discard [ 176.021231][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.431006][ T6450] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.507030][ T7745] loop1: detected capacity change from 0 to 32768 [ 176.609735][ T7745] JBD2: Ignoring recovery information on journal [ 176.616287][ T7766] loop2: detected capacity change from 0 to 16 [ 176.716187][ T5791] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (5791) [ 176.766188][ T7745] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.087493][ T7745] (syz.1.627,7745,0):ocfs2_verify_group_and_input:426 ERROR: input chain exceeds the limit. [ 177.160045][ T7745] (syz.1.627,7745,1):ocfs2_group_add:507 ERROR: status = -22 [ 177.364315][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 177.710574][ T7789] loop2: detected capacity change from 0 to 64 [ 178.341827][ T7801] loop3: detected capacity change from 0 to 8192 [ 178.390421][ T7801] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.400517][ T7809] loop2: detected capacity change from 0 to 64 [ 178.417275][ T7801] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 178.428483][ T7801] REISERFS (device loop3): using ordered data mode [ 178.436037][ T7801] reiserfs: using flush barriers [ 178.489978][ T7801] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.608351][ T7801] REISERFS (device loop3): checking transaction log (loop3) [ 178.942365][ T7818] netlink: 52 bytes leftover after parsing attributes in process `syz.1.654'. [ 178.959343][ T7801] REISERFS (device loop3): Using tea hash to sort names [ 178.959414][ T7818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.654'. [ 178.994274][ T7801] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 179.344880][ T7826] loop1: detected capacity change from 0 to 256 [ 179.379155][ T7826] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.419574][ T7826] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 179.463747][ T7826] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 180.254490][ T7847] loop1: detected capacity change from 0 to 4096 [ 180.270280][ T7847] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 180.364870][ T7847] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 180.388776][ T7847] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 180.445418][ T7839] loop3: detected capacity change from 0 to 32768 [ 180.450111][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 180.450125][ T28] audit: type=1326 audit(1777712718.676:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.4.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284e19cdd9 code=0x7fc00000 [ 180.493632][ T7839] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 180.745820][ T5919] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 180.794342][ T7853] loop4: detected capacity change from 0 to 2048 [ 180.958660][ T7853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.323412][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 181.337821][ T7871] loop1: detected capacity change from 0 to 128 [ 181.392932][ T7871] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.432746][ T7871] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.560289][ T5783] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.586157][ T7871] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 181.593299][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 181.630121][ T7881] netlink: 'syz.3.680': attribute type 2 has an invalid length. [ 181.639210][ T7881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.680'. [ 181.732027][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.770658][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 181.783989][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 181.802898][ T5783] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 181.824166][ T5783] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 181.838163][ T5783] usb 3-1: Product: syz [ 181.845579][ T5783] usb 3-1: Manufacturer: syz [ 181.854820][ T5783] usb 3-1: SerialNumber: syz [ 181.889551][ T7887] loop4: detected capacity change from 0 to 512 [ 181.898136][ T7887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.922206][ T7887] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.958217][ T7887] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 181.982246][ T7887] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 182.070367][ T7887] EXT4-fs (loop4): 1 truncate cleaned up [ 182.077568][ T7887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.091697][ T5783] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 182.100260][ T5783] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 182.108496][ T5783] usb 3-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 182.117996][ T5783] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 182.225370][ T7887] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 182.232303][ T7894] loop3: detected capacity change from 0 to 2048 [ 182.254836][ T7894] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.290114][ T7895] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.306828][ T5783] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 182.312798][ T5791] udevd[5791]: incorrect nilfs2 checksum on /dev/loop3 [ 182.323446][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 182.352340][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.388213][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 182.406379][ T5951] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 182.516757][ T7897] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.602318][ T5951] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 182.619003][ T5783] usb 3-1: USB disconnect, device number 6 [ 182.652181][ T5951] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.668854][ T5783] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 182.690175][ T5951] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.724760][ T5783] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 182.735183][ T5951] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 182.771326][ T5783] visor 3-1:1.0: device disconnected [ 182.790481][ T5951] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.797371][ T5951] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 182.830360][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.867980][ T5951] usb 2-1: config 0 descriptor?? [ 183.317830][ T5951] hid-alps 0003:044E:120C.0007: unknown main item tag 0x6 [ 183.352253][ T7912] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 183.421297][ T5951] hid-alps 0003:044E:120C.0007: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 183.478114][ T7914] loop2: detected capacity change from 0 to 512 [ 183.619472][ T5951] usb 2-1: USB disconnect, device number 5 [ 183.675709][ T7914] EXT4-fs: Ignoring removed nobh option [ 183.812151][ T7914] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 1: comm syz.2.696: invalid block [ 183.889631][ T7914] EXT4-fs (loop2): Remounting filesystem read-only [ 183.941677][ T7914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.303458][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.570666][ T7933] loop2: detected capacity change from 0 to 1024 [ 184.815014][ T3508] hfsplus: b-tree write err: -5, ino 25 [ 184.854662][ T3508] hfsplus: b-tree write err: -5, ino 4 [ 184.880084][ T3508] hfsplus: b-tree write err: -5, ino 2 [ 185.027358][ T7945] loop4: detected capacity change from 0 to 512 [ 185.066334][ T7945] FAT-fs (loop4): Unrecognized mount option "ÿ0xffffffffffffffff" or missing value [ 185.083979][ T7950] loop1: detected capacity change from 0 to 512 [ 185.084461][ T7949] loop3: detected capacity change from 0 to 512 [ 185.160646][ T7949] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.711: invalid block [ 185.163988][ T7950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.260205][ T7949] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.711: invalid indirect mapped block 10 (level 1) [ 185.277964][ T7950] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.320061][ T7949] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.711: invalid indirect mapped block 8 (level 1) [ 185.393315][ T7949] EXT4-fs (loop3): 1 truncate cleaned up [ 185.434613][ T7949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.593463][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.626064][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.911435][ T7970] use of bytesused == 0 is deprecated and will be removed in the future, [ 185.937854][ T7970] use the actual size instead. [ 186.013784][ T7975] loop2: detected capacity change from 0 to 512 [ 186.055818][ T7975] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 186.124715][ T7975] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 186.204951][ T7982] loop3: detected capacity change from 0 to 8192 [ 186.223887][ T7975] EXT4-fs (loop2): 1 truncate cleaned up [ 186.234057][ T7982] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.243704][ T7975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.261158][ T7982] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 186.298715][ T7982] REISERFS (device loop3): using ordered data mode [ 186.306781][ T7982] reiserfs: using flush barriers [ 186.334891][ T7982] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.370667][ T7982] REISERFS (device loop3): checking transaction log (loop3) [ 186.393978][ T7982] REISERFS (device loop3): Using r5 hash to sort names [ 186.415950][ T7982] reiserfs: enabling write barrier flush mode [ 186.452025][ T7982] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.480698][ T7975] EXT4-fs: group quota file already specified [ 186.500087][ T7982] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.570940][ T7982] REISERFS (device loop3): Remounting filesystem read-only [ 186.601467][ T7982] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 186.624343][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.643397][ T7982] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.661667][ T7982] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.675799][ T7982] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 186.707069][ T7982] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.725078][ T7982] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.740571][ T7982] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 186.755478][ T7982] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 186.879134][ T5774] ------------[ cut here ]------------ [ 186.885865][ T5774] kernel BUG at fs/reiserfs/journal.c:1916! [ 186.961343][ T5774] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 186.967782][ T5774] CPU: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 186.975824][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.986773][ T5774] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 186.993340][ T5774] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 187.014249][ T5774] RSP: 0018:ffffc900045dfb00 EFLAGS: 00010293 [ 187.020715][ T5774] RAX: ffffffff82297e06 RBX: 1ffff920008bbf64 RCX: ffff88802d74da00 [ 187.029354][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.038255][ T5774] RBP: ffffc900045dfbf8 R08: ffffc900045dfb77 R09: 0000000000000000 [ 187.047412][ T5774] R10: ffffc900045dfb40 R11: fffff520008bbf6f R12: ffffc9000c8a9000 [ 187.055815][ T5774] R13: dffffc0000000000 R14: ffff888064e6a630 R15: 0000000000000000 [ 187.063983][ T5774] FS: 000055556b3cd500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.073527][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.080500][ T5774] CR2: 00007f99696b7000 CR3: 0000000061a92000 CR4: 00000000003506f0 [ 187.088950][ T5774] Call Trace: [ 187.092373][ T5774] [ 187.095415][ T5774] ? journal_release+0x30/0x30 [ 187.100524][ T5774] journal_release+0x1f/0x30 [ 187.105563][ T5774] reiserfs_put_super+0x26b/0x510 [ 187.111046][ T5774] ? hook_inode_free_security+0xb0/0xb0 [ 187.116952][ T5774] ? evict_inodes+0x63c/0x6a0 [ 187.121918][ T5774] ? reiserfs_dirty_inode+0x270/0x270 [ 187.127653][ T5774] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 187.134093][ T5774] ? reiserfs_dirty_inode+0x270/0x270 [ 187.139503][ T5774] generic_shutdown_super+0x134/0x2b0 [ 187.145080][ T5774] kill_block_super+0x44/0x90 [ 187.149779][ T5774] deactivate_locked_super+0x97/0x100 [ 187.155162][ T5774] cleanup_mnt+0x43b/0x4d0 [ 187.159596][ T5774] task_work_run+0x1d4/0x260 [ 187.164212][ T5774] ? task_work_cancel+0x220/0x220 [ 187.169429][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.174996][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 187.180747][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 187.186716][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 187.192206][ T5774] do_syscall_64+0x61/0xa0 [ 187.196805][ T5774] ? clear_bhb_loop+0x40/0x90 [ 187.202036][ T5774] ? clear_bhb_loop+0x40/0x90 [ 187.207164][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.213328][ T5774] RIP: 0033:0x7fcf2bf9e017 [ 187.218062][ T5774] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.238947][ T5774] RSP: 002b:00007fff7252a458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.249390][ T5774] RAX: 0000000000000000 RBX: 00007fcf2c032120 RCX: 00007fcf2bf9e017 [ 187.258277][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7252a510 [ 187.269520][ T5774] RBP: 00007fff7252a510 R08: 00007fff7252b510 R09: 00000000ffffffff [ 187.278986][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7252b5a0 [ 187.288890][ T5774] R13: 00007fcf2c032120 R14: 000000000002d97a R15: 00007fff7252b5e0 [ 187.297912][ T5774] [ 187.301488][ T5774] Modules linked in: [ 187.323302][ T5774] ---[ end trace 0000000000000000 ]--- [ 187.333319][ T5774] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 187.340963][ T5774] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 187.364631][ T5774] RSP: 0018:ffffc900045dfb00 EFLAGS: 00010293 [ 187.372027][ T5774] RAX: ffffffff82297e06 RBX: 1ffff920008bbf64 RCX: ffff88802d74da00 [ 187.391453][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.403384][ T5774] RBP: ffffc900045dfbf8 R08: ffffc900045dfb77 R09: 0000000000000000 [ 187.414478][ T5774] R10: ffffc900045dfb40 R11: fffff520008bbf6f R12: ffffc9000c8a9000 [ 187.424643][ T5774] R13: dffffc0000000000 R14: ffff888064e6a630 R15: 0000000000000000 [ 187.438690][ T5774] FS: 000055556b3cd500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.451874][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.462395][ T5774] CR2: 0000200000000200 CR3: 0000000061a92000 CR4: 00000000003506f0 [ 187.473699][ T5774] Kernel panic - not syncing: Fatal exception [ 187.480350][ T5774] Kernel Offset: disabled [ 187.485026][ T5774] Rebooting in 86400 seconds..