last executing test programs: 1m28.242846076s ago: executing program 5 (id=10039): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0xbe9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m27.846501171s ago: executing program 5 (id=10043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x0) 1m27.619004925s ago: executing program 5 (id=10047): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x14, 0x8000009, 0x6, 0x13, 0xd, 0x100, 0x4, 0x1000013d, 0xffffffffffffffff}) 1m27.27558874s ago: executing program 5 (id=10052): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m25.344271548s ago: executing program 5 (id=10067): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x7fff, 0x0) 1m23.939480928s ago: executing program 5 (id=10076): r0 = semget$private(0x0, 0x6, 0x431) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) 1m23.259843156s ago: executing program 32 (id=10076): r0 = semget$private(0x0, 0x6, 0x431) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) 1m11.915114709s ago: executing program 0 (id=10176): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0xdc39, 0xffffffff, 0x2251d13d}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m11.493427513s ago: executing program 0 (id=10179): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 1m11.149821687s ago: executing program 0 (id=10183): r0 = syz_open_dev$video(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) 1m10.7030792s ago: executing program 0 (id=10186): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m8.99188145s ago: executing program 0 (id=10204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001180)) 59.663941212s ago: executing program 0 (id=10290): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1e03c1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x78218404, &(0x7f0000000080)}) 59.060493664s ago: executing program 33 (id=10290): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1e03c1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x78218404, &(0x7f0000000080)}) 5.69271391s ago: executing program 6 (id=10786): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 5.378634122s ago: executing program 6 (id=10789): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x85, 0x4, 0x3}}, 0x10) 5.188644419s ago: executing program 6 (id=10792): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 4.790714486s ago: executing program 6 (id=10798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)={0x38, 0x2c, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x20, 0x91a, 0x0, 0x1, [@nested={0x1c, 0xdb, 0x0, 0x1, [@nested={0x18, 0xac, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 4.476398488s ago: executing program 6 (id=10801): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x104b82b, 0x0, 0x1, 0x0, &(0x7f0000000880)) 3.142949305s ago: executing program 1 (id=10816): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f00000001c0)=""/178, 0xb2) 2.866254976s ago: executing program 3 (id=10820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.860042283s ago: executing program 4 (id=10821): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 2.75503872s ago: executing program 1 (id=10823): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d63703836312c696f636861727365743d6d616363656e746575726f2c00301527cd1e7372822f789bbc1674ffa1fb369991c00695b63e61f4c9cd1212b2f0eeb217c74fafae567fa2"], 0x1, 0xc7d, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x496d9d793d7b54ea) 2.565827008s ago: executing program 3 (id=10825): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 2.558225398s ago: executing program 4 (id=10826): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x34, 0x4}}], 0x18}, 0x0) 2.530991799s ago: executing program 2 (id=10827): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xfffc, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0b00008058", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24) 2.333338316s ago: executing program 7 (id=10828): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0xa, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.266480203s ago: executing program 1 (id=10829): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}, {0x0, 0x56}], 0x2, 0x0, 0x5245) 2.261299575s ago: executing program 3 (id=10830): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt6_stats\x00') read$FUSE(r0, &(0x7f0000001900)={0x2020}, 0x2020) 2.230165493s ago: executing program 4 (id=10831): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0xfffffffc, 0x0, 0x1}) 2.187183306s ago: executing program 2 (id=10832): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) 1.949194237s ago: executing program 3 (id=10833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2}, {@in6=@private1, 0x4d3, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8000000000000000, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x14}, {}, 0x70bd28, 0x3500, 0x2, 0x4, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.914934157s ago: executing program 7 (id=10834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001000000000000000f30000ff020005000000000002"], 0x80}}, 0x0) 1.899191183s ago: executing program 4 (id=10835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x25) 1.894095212s ago: executing program 2 (id=10836): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 1.83134207s ago: executing program 1 (id=10837): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 1.678992405s ago: executing program 3 (id=10838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e24000f80"], 0x90}}, 0x0) 1.594800468s ago: executing program 1 (id=10839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 1.488357594s ago: executing program 7 (id=10840): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) 1.338754479s ago: executing program 1 (id=10841): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") lstat(&(0x7f00000000c0)='./file2\x00', 0x0) 1.251427312s ago: executing program 3 (id=10842): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@orlov}, {@debug}, {@i_version}, {@grpquota}, {@nombcache}, {@inlinecrypt}, {@delalloc}, {@nombcache}]}, 0x0, 0x481, &(0x7f0000001300)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x0, 0x20c, 0x3, 0x7}) 1.248487298s ago: executing program 2 (id=10843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f00000001c0)) 1.20175678s ago: executing program 6 (id=10844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [0x47e128f2bce82ddb, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x5, 0x1, 0x51}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x3, 0x800}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x4004, 0x5, 0x0, 0x5, 0x7, 0x7, 0x101, 0x3, 0x7ff, 0x50de, 0x4, 0x5, 0x1000, 0x4, 0xffff], 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0xae, 0xb, 0x6, 0x6}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x25, 0x80}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2001, 0x5, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1.1738705s ago: executing program 7 (id=10845): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) fsync(0xffffffffffffffff) 1.120711155s ago: executing program 4 (id=10846): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 606.426276ms ago: executing program 2 (id=10847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_batadv\x00', {}, 0x2}) 557.563773ms ago: executing program 7 (id=10848): syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) 273.704528ms ago: executing program 2 (id=10849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x130, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @typed={0xe5, 0x12a, 0x0, 0x0, @binary="8ff5bb9427ab70a33426e7c093e686a42f8e8f0d6b0f40cfe60be041b3f1f8cddfe753828af570bd1154423c4208ffbabc2d99757b21b0753a1f09ce362ffbad546905dc09b5bbfb11bf58a4f9dd181af172a96d2f7f1d37f8ae06f9b786ff845b6a3a13a6bcec6a0f6ad18b6334c2a6dac7b5786627490b9c6a04c0c82432ae0d64142b1e1c22814bf47a6a8cb7b0da337e72471875bcbbcd2436abf94b2bdfd70b25c2b7e0d5cf3df1c8adc803ca04bf42a598dc11a2fb686a4d53ab9a15a6958781d01b9c79dfe5de1d6838a3fc320ae6435a4cd7514deff3b1c1202790516f"}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 47.338169ms ago: executing program 7 (id=10850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 0s ago: executing program 4 (id=10851): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x77, "50bb71234ec8c5da5f22659eb5181f4a660fd617fb2ebf8f1b687f238bc0f88939f3481a50f20e7b8c972e8adba08d19654f05e1d1c4f99210530fd879b0664d6a2f0a4152219e985d23d169d7ae3fbe46d333f546061f0ce907168df8668473fba567c5589aa4695e1b629c7df5dcf7afa6732def43976a805ca9fb75d45723"}) kernel console output (not intermixed with test programs): d length. [ 1294.326578][T29125] netlink: 'syz.0.9730': attribute type 17 has an invalid length. [ 1294.780024][T24090] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1294.981053][T24090] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1295.031096][T24090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.045802][T29142] loop5: detected capacity change from 0 to 16 [ 1295.071087][T24090] usb 3-1: Product: syz [ 1295.098145][T29142] erofs (device loop5): mounted with root inode @ nid 36. [ 1295.114822][T24090] usb 3-1: Manufacturer: syz [ 1295.139869][T24090] usb 3-1: SerialNumber: syz [ 1295.178258][T24090] usb 3-1: config 0 descriptor?? [ 1295.221619][T29142] erofs (device loop5): read error -117 @ 0 of nid 36 [ 1295.229597][T24090] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1295.250597][T29143] loop4: detected capacity change from 0 to 4096 [ 1295.301548][T29143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.533498][T29153] vxcan1 speed is unknown, defaulting to 1000 [ 1295.679453][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.701141][T24090] gspca_stk1135: reg_w 0x0 err -71 [ 1295.731517][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.751977][T24090] gspca_stk1135: Sensor write failed [ 1295.752051][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752072][T24090] gspca_stk1135: Sensor write failed [ 1295.752141][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752160][T24090] gspca_stk1135: Sensor read failed [ 1295.752231][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752249][T24090] gspca_stk1135: Sensor read failed [ 1295.752263][T24090] gspca_stk1135: Detected sensor type unknown (0x0) [ 1295.752354][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752373][T24090] gspca_stk1135: Sensor read failed [ 1295.752448][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752467][T24090] gspca_stk1135: Sensor read failed [ 1295.752536][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752555][T24090] gspca_stk1135: Sensor write failed [ 1295.752624][T24090] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.752643][T24090] gspca_stk1135: Sensor write failed [ 1295.752736][T24090] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1295.770792][T24090] usb 3-1: USB disconnect, device number 60 [ 1295.881555][T29159] loop3: detected capacity change from 0 to 256 [ 1295.910249][T29159] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 1295.916166][T29159] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 1296.146838][T29161] loop4: detected capacity change from 0 to 4096 [ 1296.152513][T29161] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1296.870679][T29173] loop4: detected capacity change from 0 to 512 [ 1296.928189][T29173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1296.974947][T29173] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.9756: corrupted xattr entries [ 1296.996024][T29173] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1297.002444][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1297.018237][ C0] EXT4-fs (loop4): initial error at time 2000000894: xattr_find_entry:337: inode 15 [ 1297.027815][ C0] EXT4-fs (loop4): last error at time 2000000894: xattr_find_entry:337: inode 15 [ 1297.054802][T29173] EXT4-fs (loop4): Remounting filesystem read-only [ 1297.064436][T29173] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1297.081492][T29173] EXT4-fs (loop4): 1 truncate cleaned up [ 1297.106066][T29173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.279886][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.338979][T29153] wlan1 speed is unknown, defaulting to 1000 [ 1297.419274][T24074] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1297.602199][T24074] usb 6-1: Using ep0 maxpacket: 8 [ 1297.628765][T24074] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1297.633281][T24090] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1297.661808][T24074] usb 6-1: config 7 has an invalid interface number: 58 but max is 0 [ 1297.700164][T24074] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.734984][T24074] usb 6-1: config 7 has no interface number 0 [ 1297.762343][T24074] usb 6-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 1297.788342][T24074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.810316][T24074] usb 6-1: Product: syz [ 1297.814820][T24074] usb 6-1: Manufacturer: syz [ 1297.819784][T29200] loop2: detected capacity change from 0 to 256 [ 1297.827499][T24090] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1297.838268][T24074] usb 6-1: SerialNumber: syz [ 1297.871502][T24090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.879880][T29202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9768'. [ 1297.939009][T24090] usb 4-1: config 0 descriptor?? [ 1297.954407][T24090] cp210x 4-1:0.0: cp210x converter detected [ 1298.174851][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9771'. [ 1298.189810][T24074] usb 6-1: USB disconnect, device number 68 [ 1298.398505][T24090] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1298.400749][T24090] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1298.400797][T24090] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1298.412335][T24090] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1298.431521][T24090] usb 4-1: USB disconnect, device number 88 [ 1298.464315][T24090] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1298.465227][T24090] cp210x 4-1:0.0: device disconnected [ 1298.821078][T29217] loop2: detected capacity change from 0 to 512 [ 1298.842376][T29217] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1298.899488][T29217] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.9774: corrupted xattr entries [ 1298.912456][T29217] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1298.913038][T29217] EXT4-fs (loop2): Remounting filesystem read-only [ 1298.922263][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1298.922298][ C0] EXT4-fs (loop2): initial error at time 2000000895: xattr_find_entry:337: inode 15 [ 1298.922355][ C0] EXT4-fs (loop2): last error at time 2000000895: xattr_find_entry:337: inode 15 [ 1298.962160][T29217] EXT4-fs (loop2): 1 truncate cleaned up [ 1298.971044][T29217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.216158][ T5744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.471313][T24090] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1299.667760][T24090] usb 4-1: Using ep0 maxpacket: 8 [ 1299.699145][T24090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1299.722641][T24090] usb 4-1: config 127 has an invalid interface number: 1 but max is 0 [ 1299.744946][T24090] usb 4-1: config 127 has no interface number 0 [ 1299.745020][T24090] usb 4-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1299.745071][T24090] usb 4-1: config 127 interface 1 has no altsetting 0 [ 1299.748056][T24090] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 1299.748107][T24090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.748148][T24090] usb 4-1: Product: syz [ 1299.748178][T24090] usb 4-1: Manufacturer: syz [ 1299.748209][T24090] usb 4-1: SerialNumber: syz [ 1299.773056][T29224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1299.820687][T29236] nvme_fabrics: missing parameter 'transport=%s' [ 1299.820752][T29236] nvme_fabrics: missing parameter 'nqn=%s' [ 1300.007458][T29245] loop5: detected capacity change from 0 to 128 [ 1300.024463][T24090] redrat3 4-1:127.1: Couldn't find all endpoints [ 1300.061909][T24090] usb 4-1: USB disconnect, device number 89 [ 1300.318558][T29247] loop2: detected capacity change from 0 to 4096 [ 1300.592089][T29253] loop5: detected capacity change from 0 to 8 [ 1300.662755][T29253] SQUASHFS error: Unable to read directory block [1d0:0] [ 1300.888791][T29260] loop2: detected capacity change from 0 to 512 [ 1300.937075][T29260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1301.034092][T29260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.122338][T29260] ext4 filesystem being mounted at /1610/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.251277][T29260] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.9792: corrupted xattr block 33: invalid ea_ino [ 1301.281050][T29271] loop4: detected capacity change from 0 to 2048 [ 1301.351122][T29271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1301.464909][T29279] loop0: detected capacity change from 0 to 64 [ 1301.504505][T29260] EXT4-fs error (device loop2): ext4_get_inode_usage:888: inode #15: comm syz.2.9792: corrupted xattr block 33: invalid ea_ino [ 1301.707885][ T5744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.387676][T29306] netlink: 'syz.1.9816': attribute type 7 has an invalid length. [ 1302.738258][T29314] loop0: detected capacity change from 0 to 4096 [ 1302.823024][T29314] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1302.945942][T29314] ntfs3(loop0): Failed to load $Extend (-22). [ 1302.996897][T29314] ntfs3(loop0): Failed to initialize $Extend. [ 1303.044277][T29329] netlink: 'syz.5.9827': attribute type 2 has an invalid length. [ 1303.242216][T29333] loop3: detected capacity change from 0 to 1024 [ 1303.774336][T29343] loop0: detected capacity change from 0 to 4096 [ 1303.837982][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9839'. [ 1303.873699][T24090] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1304.060182][T24090] usb 3-1: Using ep0 maxpacket: 8 [ 1304.104333][T24090] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1304.148040][T24090] usb 3-1: config 0 has no interface number 0 [ 1304.184424][T24090] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1304.220197][T24090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.237368][T29360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9842'. [ 1304.259099][T24090] usb 3-1: Product: syz [ 1304.273251][T24090] usb 3-1: Manufacturer: syz [ 1304.278289][T29360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9842'. [ 1304.295575][T24090] usb 3-1: SerialNumber: syz [ 1304.306741][T29363] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 1304.323775][T24090] usb 3-1: config 0 descriptor?? [ 1304.333041][T29363] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 1304.363280][T29363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9843'. [ 1304.564351][T29367] netlink: 'syz.4.9846': attribute type 1 has an invalid length. [ 1304.580570][T24090] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1304.588741][T24090] uvcvideo 3-1:0.31: Failed to initialize entity for entity 32774 [ 1304.597425][T24090] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1304.601463][T29367] netlink: 'syz.4.9846': attribute type 3 has an invalid length. [ 1304.642767][T29367] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9846'. [ 1304.772242][T29373] loop0: detected capacity change from 0 to 512 [ 1304.808737][T24090] usb 3-1: USB disconnect, device number 61 [ 1304.823610][T29373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1304.881733][T29373] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.9849: corrupted xattr entries [ 1304.922278][T29373] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1304.925931][T29373] EXT4-fs (loop0): Remounting filesystem read-only [ 1304.934366][T29351] loop1: detected capacity change from 0 to 32768 [ 1304.935260][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1304.954756][ C1] EXT4-fs (loop0): initial error at time 2000000901: xattr_find_entry:337: inode 15 [ 1304.964379][ C1] EXT4-fs (loop0): last error at time 2000000901: xattr_find_entry:337: inode 15 [ 1304.979537][T29373] EXT4-fs (loop0): 1 truncate cleaned up [ 1305.004357][T29373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1305.050963][T29351] dmapctl: invalid leafidx 1365 (expected 341) [ 1305.082898][T29351] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page [ 1305.082898][T29351] [ 1305.136887][T29351] ERROR: (device loop1): remounting filesystem as read-only [ 1305.155856][T29351] jfs_mkdir: dtInsert returned -EIO [ 1305.168945][T29351] ERROR: (device loop1): txAbort: [ 1305.168945][T29351] [ 1305.204664][ T5742] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.218961][T29385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.359234][T24090] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1305.532164][T24090] usb 5-1: Using ep0 maxpacket: 8 [ 1305.561566][T24090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1305.595915][T24090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.636541][T24090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.679009][T24090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1305.707072][T29389] loop3: detected capacity change from 0 to 4096 [ 1305.735338][T24090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1305.779618][T24090] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1305.823424][T24090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.888666][T24090] usb 5-1: config 0 descriptor?? [ 1305.921661][T29383] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1306.381032][T29375] loop5: detected capacity change from 0 to 32768 [ 1306.431785][T24090] usb 5-1: USB disconnect, device number 80 [ 1306.446518][ T5749] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 1306.510691][T29375] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1306.670769][T29375] XFS (loop5): Ending clean mount [ 1306.873776][ T5760] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1307.904701][T29415] loop2: detected capacity change from 0 to 32768 [ 1308.412885][T29466] kAFS: unable to lookup cell '({FA' [ 1308.702756][T29475] loop3: detected capacity change from 0 to 512 [ 1308.727505][T29475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1308.793412][T29475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.869835][T29475] ext4 filesystem being mounted at /1612/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.892641][T29475] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.9894: corrupted xattr block 33: invalid ea_ino [ 1308.925606][T29475] EXT4-fs error (device loop3): ext4_get_inode_usage:888: inode #15: comm syz.3.9894: corrupted xattr block 33: invalid ea_ino [ 1309.087685][ T5756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.576104][T29498] loop0: detected capacity change from 0 to 2048 [ 1309.659519][T29503] loop3: detected capacity change from 0 to 512 [ 1309.672907][T29505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1309.702873][T29503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1309.776027][T29503] EXT4-fs (loop3): 1 truncate cleaned up [ 1309.811670][T29503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.867041][T29503] EXT4-fs error (device loop3): ext4_generic_delete_entry:2672: inode #2: block 13: comm syz.3.9905: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1309.908650][ T31] audit: type=1800 audit(2000000906.264:121): pid=29498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9903" name="file1" dev="loop0" ino=2097152 res=0 errno=0 [ 1310.050304][T29503] EXT4-fs (loop3): Remounting filesystem read-only [ 1310.059231][T29464] loop4: detected capacity change from 0 to 40427 [ 1310.070266][T29503] EXT4-fs warning (device loop3): ext4_rename_delete:3737: inode #2: comm syz.3.9905: Deleting old file: nlink 4, error=-117 [ 1310.106612][T29464] F2FS-fs (loop4): invalid crc value [ 1310.229587][ T5756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.341579][T29522] No control pipe specified [ 1310.509460][T29464] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1310.525636][T29528] netlink: 'syz.3.9914': attribute type 21 has an invalid length. [ 1310.578478][T29528] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9914'. [ 1310.624034][T29528] netlink: 'syz.3.9914': attribute type 4 has an invalid length. [ 1310.669268][T29528] netlink: 'syz.3.9914': attribute type 5 has an invalid length. [ 1310.716786][T29528] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9914'. [ 1310.740190][T29464] F2FS-fs (loop4): Start checkpoint disabled! [ 1310.907857][T29464] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1310.940555][T29464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1311.271541][T29546] loop5: detected capacity change from 0 to 2048 [ 1311.347270][T29552] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1311.434756][T22619] kworker/u8:12: attempt to access beyond end of device [ 1311.434756][T22619] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1311.507089][ T31] audit: type=1800 audit(2000000907.771:122): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9924" name="file1" dev="loop5" ino=2097152 res=0 errno=0 [ 1311.550273][T29556] loop2: detected capacity change from 0 to 128 [ 1311.586216][T22619] CPU: 0 UID: 0 PID: 22619 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1311.586272][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1311.586300][T22619] Workqueue: writeback wb_workfn (flush-7:4) [ 1311.586376][T22619] Call Trace: [ 1311.586389][T22619] [ 1311.586404][T22619] dump_stack_lvl+0x100/0x190 [ 1311.586449][T22619] f2fs_stop_checkpoint+0x600/0x9b0 [ 1311.586493][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.586543][T22619] ? errseq_set+0xe3/0x150 [ 1311.586601][T22619] ? errseq_set+0xe3/0x150 [ 1311.586659][T22619] f2fs_write_end_io+0xf59/0x1340 [ 1311.586712][T22619] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1311.586771][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.586830][T22619] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1311.586878][T22619] bio_endio+0x78f/0x8f0 [ 1311.586934][T22619] submit_bio_noacct+0x64c/0x2000 [ 1311.587007][T22619] f2fs_submit_write_bio+0x135/0x340 [ 1311.587054][T22619] __submit_merged_bio+0x331/0x780 [ 1311.587111][T22619] __submit_merged_write_cond+0x3fe/0x510 [ 1311.587170][T22619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1311.587233][T22619] ? __pfx___might_resched+0x10/0x10 [ 1311.587286][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.587346][T22619] f2fs_write_cache_pages+0x20e9/0x2630 [ 1311.587427][T22619] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1311.587494][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.587543][T22619] ? lock_acquire+0x1b1/0x370 [ 1311.587596][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.587645][T22619] ? lock_acquire+0x1b1/0x370 [ 1311.587708][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.587756][T22619] ? __lock_acquire+0x4a5/0x2630 [ 1311.587858][T22619] ? unwind_next_frame+0x3be/0x2090 [ 1311.587920][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.587976][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588024][T22619] ? rcu_is_watching+0x12/0xc0 [ 1311.588089][T22619] f2fs_write_data_pages+0x799/0x16d0 [ 1311.588165][T22619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1311.588222][T22619] ? __lock_acquire+0x4a5/0x2630 [ 1311.588280][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588330][T22619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1311.588392][T22619] do_writepages+0x278/0x600 [ 1311.588464][T22619] ? __pfx_do_writepages+0x10/0x10 [ 1311.588530][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588587][T22619] __writeback_single_inode+0x164/0x1350 [ 1311.588651][T22619] ? find_held_lock+0x2b/0x80 [ 1311.588712][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588764][T22619] ? __pfx___writeback_single_inode+0x10/0x10 [ 1311.588824][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588870][T22619] ? do_raw_spin_unlock+0x145/0x1e0 [ 1311.588932][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.588988][T22619] writeback_sb_inodes+0x766/0x1c60 [ 1311.589070][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.589121][T22619] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1311.589246][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.589294][T22619] ? rcu_is_watching+0x12/0xc0 [ 1311.589348][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.589396][T22619] ? queue_io+0x287/0x540 [ 1311.589453][T22619] wb_writeback+0x1bf/0xb90 [ 1311.589528][T22619] ? __pfx_wb_writeback+0x10/0x10 [ 1311.589603][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.589650][T22619] ? mark_held_locks+0x40/0x70 [ 1311.589694][T22619] ? _raw_spin_unlock_irq+0x23/0x50 [ 1311.589755][T22619] wb_workfn+0x14f/0xc00 [ 1311.589822][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.589870][T22619] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1311.589934][T22619] ? __pfx_wb_workfn+0x10/0x10 [ 1311.590001][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590052][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590104][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590153][T22619] ? rcu_is_watching+0x12/0xc0 [ 1311.590207][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590265][T22619] process_one_work+0xa0e/0x1980 [ 1311.590334][T22619] ? __pfx_process_one_work+0x10/0x10 [ 1311.590378][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590441][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590496][T22619] worker_thread+0x5ef/0xe50 [ 1311.590562][T22619] ? kthread+0x13a/0x450 [ 1311.590601][T22619] ? __pfx_worker_thread+0x10/0x10 [ 1311.590645][T22619] kthread+0x370/0x450 [ 1311.590684][T22619] ? __pfx_kthread+0x10/0x10 [ 1311.590726][T22619] ret_from_fork+0x72b/0xd50 [ 1311.590777][T22619] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.590823][T22619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.590870][T22619] ? __switch_to+0x800/0x1100 [ 1311.590932][T22619] ? __switch_to_asm+0x39/0x70 [ 1311.590984][T22619] ? __pfx_kthread+0x10/0x10 [ 1311.591029][T22619] ret_from_fork_asm+0x1a/0x30 [ 1311.591106][T22619] [ 1311.715633][T29555] loop3: detected capacity change from 0 to 4096 [ 1311.720178][T29560] netlink: 'syz.1.9932': attribute type 13 has an invalid length. [ 1311.802776][T22619] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1312.064469][T29556] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1312.139601][T29560] gretap0: refused to change device tx_queue_len [ 1312.235112][T29560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1312.297156][T29565] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1312.583950][T29567] loop5: detected capacity change from 0 to 2048 [ 1312.626202][T29567] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1312.688393][T29567] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1312.795875][T29567] befs: (loop5): No write support. Marking filesystem read-only [ 1312.842939][T29569] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1312.863801][T29567] befs: (loop5): invalid magic header [ 1313.129837][T29564] loop0: detected capacity change from 0 to 32768 [ 1313.238589][T29564] diRead: diIAGRead returned -5 [ 1313.262587][T29578] exfat: Deprecated parameter 'utf8' [ 1313.296665][T29578] exfat: Deprecated parameter 'namecase' [ 1313.306491][T29564] jfs_lookup: iget failed on inum 1048352 [ 1313.359661][T29578] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1313.982605][T29594] netlink: 'syz.0.9947': attribute type 6 has an invalid length. [ 1314.083328][T29597] No such timeout policy "syz0" [ 1314.307690][T29603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9952'. [ 1314.679324][T29573] set_capacity_and_notify: 1 callbacks suppressed [ 1314.679354][T29573] loop3: detected capacity change from 0 to 32768 [ 1314.753255][T29573] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1314.864513][T29573] XFS (loop3): Ending clean mount [ 1315.108071][T29633] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.9963'. [ 1315.129045][ T5756] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1315.676268][T29646] IPv6: Can't replace route, no match found [ 1315.890714][T29652] loop4: detected capacity change from 0 to 2048 [ 1315.929835][T29652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.053797][T29656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1316.092374][T29659] dlm: Unknown command passed to DLM device : 128 [ 1316.092374][T29659] [ 1316.109021][T29656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1316.380564][T29665] nftables ruleset with unbound chain [ 1317.081761][T29694] netlink: 'syz.0.9993': attribute type 1 has an invalid length. [ 1317.504769][T29707] loop0: detected capacity change from 0 to 2048 [ 1317.590800][T29716] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1318.144019][T29731] netlink: 'syz.4.10009': attribute type 13 has an invalid length. [ 1318.437210][T29741] loop2: detected capacity change from 0 to 64 [ 1318.469359][T29731] gretap0: refused to change device tx_queue_len [ 1318.489607][T29731] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1318.606637][T29747] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10016'. [ 1318.855289][T29753] netlink: 'syz.3.10020': attribute type 92 has an invalid length. [ 1319.207198][T29771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1319.690523][T29787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1319.738517][T29789] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1319.813787][T29792] loop1: detected capacity change from 0 to 512 [ 1319.826749][T29793] openvswitch: netlink: Key type 51 is out of range max 32 [ 1320.769253][T29783] loop4: detected capacity change from 0 to 32768 [ 1321.131177][T29825] loop1: detected capacity change from 0 to 2048 [ 1321.208732][T29830] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.340363][ T31] audit: type=1800 audit(2000000916.961:123): pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10056" name="file1" dev="loop1" ino=2097152 res=0 errno=0 [ 1321.475941][T29834] loop2: detected capacity change from 0 to 256 [ 1321.589637][T29834] FAT-fs (loop2): Directory bread(block 64) failed [ 1321.622289][T29834] FAT-fs (loop2): Directory bread(block 65) failed [ 1321.664744][T29834] FAT-fs (loop2): Directory bread(block 66) failed [ 1321.696965][T29834] FAT-fs (loop2): Directory bread(block 67) failed [ 1321.741065][T29834] FAT-fs (loop2): Directory bread(block 68) failed [ 1321.778494][T29834] FAT-fs (loop2): Directory bread(block 69) failed [ 1321.809703][T29834] FAT-fs (loop2): Directory bread(block 70) failed [ 1321.817192][T29840] loop4: detected capacity change from 0 to 256 [ 1321.837779][T29840] exfat: Deprecated parameter 'utf8' [ 1321.843247][T29834] FAT-fs (loop2): Directory bread(block 71) failed [ 1321.876571][T29834] FAT-fs (loop2): Directory bread(block 72) failed [ 1321.894220][T29840] exfat: Deprecated parameter 'namecase' [ 1321.907831][T29834] FAT-fs (loop2): Directory bread(block 73) failed [ 1321.959137][T29840] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1322.084460][T29834] syz.2.10062: attempt to access beyond end of device [ 1322.084460][T29834] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1322.134506][T29834] syz.2.10062: attempt to access beyond end of device [ 1322.134506][T29834] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1322.179096][ T31] audit: type=1800 audit(2000000917.765:124): pid=29834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10062" name="file0" dev="loop2" ino=1048766 res=0 errno=0 [ 1322.190055][T29813] loop5: detected capacity change from 0 to 32768 [ 1322.296195][T24090] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1322.437147][T29821] loop0: detected capacity change from 0 to 40427 [ 1322.468103][T24090] usb 2-1: Using ep0 maxpacket: 32 [ 1322.473320][T29821] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1322.480521][T29821] F2FS-fs (loop0): invalid crc value [ 1322.537045][ T5760] read_mapping_page failed! [ 1322.540357][T24090] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 1322.585083][T24090] usb 2-1: config 0 has no interface number 0 [ 1322.591183][ T5760] ERROR: (device loop5): txAbort: [ 1322.591183][ T5760] [ 1322.653297][T24090] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1322.699998][ T5760] read_mapping_page failed! [ 1322.716179][T24090] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 255 [ 1322.729580][ T5760] ERROR: (device loop5): txAbort: [ 1322.729580][ T5760] [ 1322.771185][T24090] usb 2-1: config 0 interface 86 has no altsetting 0 [ 1322.810079][T24090] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 1322.831706][T24090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.864694][T24090] usb 2-1: Product: syz [ 1322.874059][T24090] usb 2-1: Manufacturer: syz [ 1322.880651][T24090] usb 2-1: SerialNumber: syz [ 1322.909990][T24090] usb 2-1: config 0 descriptor?? [ 1322.947075][T29842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1322.974651][T29842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1323.014086][T29821] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1323.022038][T29836] loop3: detected capacity change from 0 to 32768 [ 1323.074878][T29836] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1323.116922][T29821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1323.216560][T29853] loop4: detected capacity change from 0 to 4096 [ 1323.273611][T29862] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1323.337558][T29821] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 1323.361827][T24090] ljca 2-1:0.86: probe with driver ljca failed with error -71 [ 1323.390969][T29853] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1323.419030][T24090] usb 2-1: USB disconnect, device number 58 [ 1323.471711][ T5756] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1323.500360][T29853] Remounting filesystem read-only [ 1324.076534][T29868] siw: device registration error -23 [ 1324.707086][T29879] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1324.836317][T29876] loop1: detected capacity change from 0 to 4096 [ 1324.870811][T29876] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1324.997486][T29888] loop2: detected capacity change from 0 to 128 [ 1325.012233][T29876] ntfs3(loop1): ino=19, mi_enum_attr [ 1325.134932][T29888] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1325.204092][T29888] ext4 filesystem being mounted at /1658/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.231138][T22617] bond0: (slave netdevsim1): Releasing backup interface [ 1325.255603][T29876] ntfs3(loop1): failed to convert "c46c" to maccroatian [ 1325.288945][T28963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1325.303333][T28963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1325.320540][T28963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1325.328930][T28963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1325.338331][T28963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1325.436355][T29876] ntfs3(loop1): ino=20, mi_enum_attr [ 1325.533714][T29899] netdevsim netdevsim3 : renamed from netdevsim0 [ 1325.545263][T29902] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1325.640536][ T5744] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1325.798844][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10090'. [ 1326.221976][T29918] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1326.444036][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10098'. [ 1326.454866][T29922] set_capacity_and_notify: 1 callbacks suppressed [ 1326.454905][T29922] loop1: detected capacity change from 0 to 2048 [ 1326.590112][T29930] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1327.136441][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10106'. [ 1327.218775][T22617] bridge_slave_1: left allmulticast mode [ 1327.274298][T22617] bridge_slave_1: left promiscuous mode [ 1327.315268][T22617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.387491][T22617] bridge_slave_0: left allmulticast mode [ 1327.421270][T22617] bridge_slave_0: left promiscuous mode [ 1327.438950][T22617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.763063][T29965] netlink: 'syz.2.10113': attribute type 2 has an invalid length. [ 1327.783383][T28963] Bluetooth: hci5: command tx timeout [ 1327.799923][T29965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10113'. [ 1328.732517][T22617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.763358][T22617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.786527][T22617] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 1328.800237][T29992] loop4: detected capacity change from 0 to 64 [ 1328.912010][T22617] bond0 (unregistering): Released all slaves [ 1328.950285][T22617] bond1 (unregistering): Released all slaves [ 1329.032440][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1329.138117][T22617] m>e5n: left promiscuous mode [ 1329.223953][T29983] loop0: detected capacity change from 0 to 40427 [ 1329.283450][T29983] F2FS-fs (loop0): invalid crc value [ 1329.331527][T29997] loop4: detected capacity change from 0 to 1024 [ 1329.367636][T29997] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1329.383966][T30004] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1329.426557][T29997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1329.437808][T30004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.477953][T29997] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 1329.558304][T29997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1329.593399][T30010] program syz.3.10131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.651836][T29894] vxcan1 speed is unknown, defaulting to 1000 [ 1329.668746][T29997] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 1329.721478][T29983] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1329.885219][T29983] F2FS-fs (loop0): Start checkpoint disabled! [ 1329.990114][T28963] Bluetooth: hci5: command tx timeout [ 1330.012177][T30019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10132'. [ 1330.082381][T29983] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1330.094337][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.131115][T29983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1330.564445][T22621] kworker/u8:13: attempt to access beyond end of device [ 1330.564445][T22621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1330.609598][T22621] CPU: 1 UID: 0 PID: 22621 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1330.609651][T22621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1330.609679][T22621] Workqueue: writeback wb_workfn (flush-7:0) [ 1330.609756][T22621] Call Trace: [ 1330.609769][T22621] [ 1330.609784][T22621] dump_stack_lvl+0x100/0x190 [ 1330.609827][T22621] f2fs_stop_checkpoint+0x600/0x9b0 [ 1330.609871][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.609919][T22621] ? errseq_set+0xe3/0x150 [ 1330.609975][T22621] ? errseq_set+0xe3/0x150 [ 1330.610030][T22621] f2fs_write_end_io+0xf59/0x1340 [ 1330.610083][T22621] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1330.610136][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.610193][T22621] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1330.610239][T22621] bio_endio+0x78f/0x8f0 [ 1330.610287][T22621] submit_bio_noacct+0x64c/0x2000 [ 1330.610359][T22621] f2fs_submit_write_bio+0x135/0x340 [ 1330.610406][T22621] __submit_merged_bio+0x331/0x780 [ 1330.610466][T22621] __submit_merged_write_cond+0x3fe/0x510 [ 1330.610524][T22621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1330.610585][T22621] ? __pfx___might_resched+0x10/0x10 [ 1330.610637][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.610695][T22621] f2fs_write_cache_pages+0x20e9/0x2630 [ 1330.610776][T22621] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1330.610842][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.610890][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.610937][T22621] ? find_held_lock+0x2b/0x80 [ 1330.610995][T22621] ? nr_blockdev_pages+0xde/0x120 [ 1330.611050][T22621] ? nr_blockdev_pages+0xde/0x120 [ 1330.611104][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611172][T22621] ? si_meminfo+0x118/0x230 [ 1330.611212][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611260][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611369][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611423][T22621] ? find_held_lock+0x2b/0x80 [ 1330.611480][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611527][T22621] ? rcu_is_watching+0x12/0xc0 [ 1330.611588][T22621] f2fs_write_data_pages+0x799/0x16d0 [ 1330.611643][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611690][T22621] ? trace_f2fs_writepages.constprop.0+0x75/0x230 [ 1330.611764][T22621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1330.611829][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611883][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.611931][T22621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1330.611992][T22621] do_writepages+0x278/0x600 [ 1330.612062][T22621] ? __pfx_do_writepages+0x10/0x10 [ 1330.612128][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612182][T22621] __writeback_single_inode+0x164/0x1350 [ 1330.612245][T22621] ? find_held_lock+0x2b/0x80 [ 1330.612307][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612358][T22621] ? __pfx___writeback_single_inode+0x10/0x10 [ 1330.612426][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612473][T22621] ? do_raw_spin_unlock+0x145/0x1e0 [ 1330.612526][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612579][T22621] writeback_sb_inodes+0x766/0x1c60 [ 1330.612663][T22621] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1330.612723][T22621] ? do_raw_spin_lock+0x128/0x260 [ 1330.612778][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612885][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.612932][T22621] ? rcu_is_watching+0x12/0xc0 [ 1330.612986][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613033][T22621] ? queue_io+0x287/0x540 [ 1330.613090][T22621] wb_writeback+0x1bf/0xb90 [ 1330.613168][T22621] ? __pfx_wb_writeback+0x10/0x10 [ 1330.613242][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613289][T22621] ? mark_held_locks+0x40/0x70 [ 1330.613334][T22621] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.613393][T22621] wb_workfn+0x14f/0xc00 [ 1330.613465][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613512][T22621] ? try_to_wake_up+0x15f/0x1900 [ 1330.613576][T22621] ? __pfx_wb_workfn+0x10/0x10 [ 1330.613636][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613684][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613731][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613776][T22621] ? rcu_is_watching+0x12/0xc0 [ 1330.613826][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.613878][T22621] process_one_work+0xa0e/0x1980 [ 1330.613943][T22621] ? __pfx_process_one_work+0x10/0x10 [ 1330.613984][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.614044][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.614095][T22621] worker_thread+0x5ef/0xe50 [ 1330.614154][T22621] ? kthread+0x13a/0x450 [ 1330.614190][T22621] ? __pfx_worker_thread+0x10/0x10 [ 1330.614230][T22621] kthread+0x370/0x450 [ 1330.614267][T22621] ? __pfx_kthread+0x10/0x10 [ 1330.614310][T22621] ret_from_fork+0x72b/0xd50 [ 1330.614354][T22621] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.614398][T22621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.614446][T22621] ? __switch_to+0x800/0x1100 [ 1330.614497][T22621] ? __switch_to_asm+0x39/0x70 [ 1330.614545][T22621] ? __pfx_kthread+0x10/0x10 [ 1330.614586][T22621] ret_from_fork_asm+0x1a/0x30 [ 1330.614656][T22621] [ 1331.173598][T22621] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1331.285757][T30037] netlink: 'syz.1.10140': attribute type 21 has an invalid length. [ 1331.587547][T30046] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10143'. [ 1331.639376][T29894] wlan1 speed is unknown, defaulting to 1000 [ 1331.698908][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1331.709224][T30046] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10143'. [ 1331.747523][T30052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10146'. [ 1332.176844][T30061] openvswitch: netlink: Flow actions attr not present in new flow. [ 1332.213919][T28963] Bluetooth: hci5: command tx timeout [ 1332.287610][T30064] loop2: detected capacity change from 0 to 16 [ 1332.329008][ T5990] udevd[5990]: incorrect cramfs checksum on /dev/loop2 [ 1332.339213][T30064] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1332.467201][T30064] cramfs: Error -3 while decompressing! [ 1332.576668][T30064] cramfs: ffffffff9b26b8a8(27)->ffff8880af415000(4096) [ 1332.614973][T30064] cramfs: Error -3 while decompressing! [ 1332.648892][T30064] cramfs: ffffffff9b26b8a8(27)->ffff8880af415000(4096) [ 1332.685664][ T31] audit: type=1800 audit(2000000927.582:125): pid=30064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10150" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1332.838653][T30076] loop3: detected capacity change from 0 to 128 [ 1332.964049][T30076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1333.053154][T30076] ext4 filesystem being mounted at /1652/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.298585][ T5756] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1333.771238][T30099] loop2: detected capacity change from 0 to 256 [ 1333.844578][T30101] ALSA: mixer_oss: invalid OSS volume '' [ 1333.859075][T30101] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 1333.897576][T30101] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 1333.908788][T30101] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 1333.917181][T30101] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 1333.927448][T30101] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 1333.935674][T30101] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 1333.944553][T30101] ALSA: mixer_oss: invalid OSS volume '|~\' [ 1333.951100][T30101] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 1333.958149][T30099] FAT-fs (loop2): Directory bread(block 64) failed [ 1333.960155][T30101] ALSA: mixer_oss: invalid OSS volume 'I :' [ 1333.973164][T30101] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 1333.981649][T30101] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 1333.990369][T30099] FAT-fs (loop2): Directory bread(block 65) failed [ 1333.997055][T30099] FAT-fs (loop2): Directory bread(block 66) failed [ 1334.003748][T30099] FAT-fs (loop2): Directory bread(block 67) failed [ 1334.011373][T30099] FAT-fs (loop2): Directory bread(block 68) failed [ 1334.018020][T30101] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 1334.030275][T30099] FAT-fs (loop2): Directory bread(block 69) failed [ 1334.044516][T30099] FAT-fs (loop2): Directory bread(block 70) failed [ 1334.058038][T30101] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 1334.070355][T30099] FAT-fs (loop2): Directory bread(block 71) failed [ 1334.090405][T30099] FAT-fs (loop2): Directory bread(block 72) failed [ 1334.120051][T30099] FAT-fs (loop2): Directory bread(block 73) failed [ 1334.352646][T30071] loop4: detected capacity change from 0 to 32768 [ 1334.429953][T30071] add_index: next_index = 0. Resetting! [ 1334.446633][T28963] Bluetooth: hci5: command tx timeout [ 1334.592666][T30118] loop0: detected capacity change from 0 to 1024 [ 1334.617119][T24094] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1334.646079][T30118] EXT4-fs: Ignoring removed mblk_io_submit option [ 1334.690818][T30118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1334.736937][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1334.745798][T30118] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1334.808642][T24094] usb 3-1: config 127 has an invalid interface number: 63 but max is 0 [ 1334.809003][T30124] autofs4:pid:30124:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 1334.839801][T30124] autofs4:pid:30124:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1334.862051][T24094] usb 3-1: config 127 has no interface number 0 [ 1334.876357][T30118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.921978][T24094] usb 3-1: too many endpoints for config 127 interface 63 altsetting 243: 127, using maximum allowed: 30 [ 1335.006483][T24094] usb 3-1: config 127 interface 63 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 1335.057658][T30118] EXT4-fs: Ignoring removed mblk_io_submit option [ 1335.059019][T24094] usb 3-1: config 127 interface 63 has no altsetting 0 [ 1335.081118][T30118] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1335.099500][T24094] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1335.112398][T30118] EXT4-fs: Cannot change quota options when quota turned on [ 1335.126768][T24094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.378354][ T5742] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.478939][T24094] usb 3-1: string descriptor 0 read error: -71 [ 1335.482130][T30134] --map-set only usable from mangle table [ 1335.547919][T24094] usb 3-1: USB disconnect, device number 62 [ 1336.029742][T30115] loop1: detected capacity change from 0 to 32768 [ 1336.483837][T22617] hsr_slave_0: left promiscuous mode [ 1336.514043][T22617] hsr_slave_1: left promiscuous mode [ 1336.572439][T30160] loop4: detected capacity change from 0 to 2048 [ 1336.619177][T30160] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1336.692911][T30160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1337.582140][T30184] loop3: detected capacity change from 0 to 2048 [ 1337.603243][T30187] tipc: Can't bind to reserved service type 0 [ 1337.636992][T30184] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=301129, location=301129 [ 1337.705627][T30184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1338.395645][T22617] team0 (unregistering): Port device team_slave_1 removed [ 1338.478092][T22617] team0 (unregistering): Port device team_slave_0 removed [ 1338.557695][T30209] loop3: detected capacity change from 0 to 512 [ 1338.558673][T30178] loop0: detected capacity change from 0 to 32768 [ 1338.605224][T30209] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1338.630381][T30209] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1338.900680][ T5742] read_mapping_page failed! [ 1338.922627][ T5742] ERROR: (device loop0): txAbort: [ 1338.922627][ T5742] [ 1338.971725][ T5742] read_mapping_page failed! [ 1338.992294][ T5742] ERROR: (device loop0): txAbort: [ 1338.992294][ T5742] [ 1339.040777][T22621] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1339.301829][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1339.459477][T22621] smc: removing ib device syz1 [ 1339.540343][T24090] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1339.555748][T29894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.594216][T29894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.623151][T29894] bridge_slave_0: entered allmulticast mode [ 1339.655475][T29894] bridge_slave_0: entered promiscuous mode [ 1339.691801][T29894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.726538][T29894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.767525][T24090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1339.772071][T29894] bridge_slave_1: entered allmulticast mode [ 1339.788108][T24090] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.834551][T24090] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.849496][T29894] bridge_slave_1: entered promiscuous mode [ 1339.884230][T24090] usb 4-1: string descriptor 0 read error: -22 [ 1339.895327][T24090] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1339.931117][T24090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.948884][T30230] loop1: detected capacity change from 0 to 4096 [ 1339.988419][T29894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.011104][T29894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.025706][T30230] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1340.087219][T24090] usb 4-1: selecting invalid altsetting 1 [ 1340.098400][T24090] usb 4-1: unit 3 not found! [ 1340.122845][T22621] smbdirect: ib_dev[syz1] removed [ 1340.226947][T24090] usb 4-1: cannot request logical cluster ID: 0 (err: -5) [ 1340.267651][T24090] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1340.490767][T29894] team0: Port device team_slave_0 added [ 1340.546557][T29894] team0: Port device team_slave_1 added [ 1340.593230][T24090] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1340.645235][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1340.675186][T24090] usb 4-1: USB disconnect, device number 90 [ 1341.015522][T29894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.053118][T29894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.137510][T29894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.169740][T29894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.204757][T29894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.283291][T29894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.537216][ T5009] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1341.960527][T29894] hsr_slave_0: entered promiscuous mode [ 1342.020493][T29894] hsr_slave_1: entered promiscuous mode [ 1342.064759][T29894] debugfs: 'hsr0' already exists in 'hsr' [ 1342.090864][T29894] Cannot create hsr debugfs directory [ 1342.852476][T30301] loop2: detected capacity change from 0 to 4096 [ 1342.871856][T30301] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1343.022743][T30301] ntfs3(loop2): ino=19, mi_enum_attr [ 1343.156792][T30301] ntfs3(loop2): failed to convert "c46c" to maccroatian [ 1343.250186][T30301] ntfs3(loop2): ino=20, mi_enum_attr [ 1343.921074][T30297] loop3: detected capacity change from 0 to 32768 [ 1344.004874][T30297] add_index: next_index = 0. Resetting! [ 1344.113512][T30326] loop4: detected capacity change from 0 to 128 [ 1344.260426][T30326] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1344.285982][T30326] ext4 filesystem being mounted at /1749/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.435957][T30332] loop1: detected capacity change from 0 to 128 [ 1344.542834][T30332] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1344.577775][T30332] ext4 filesystem being mounted at /1685/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.615560][T30332] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 7 (only 1 groups) [ 1344.633454][ T5758] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.757224][ T5743] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.953719][T30340] openvswitch: netlink: EtherType 50a is less than min 600 [ 1345.225573][T29894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1345.268754][T30349] new mount options do not match the existing superblock, will be ignored [ 1345.338232][T29894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1345.382521][T29894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1345.514248][T29894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1345.558127][T29894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1345.592971][T30355] loop2: detected capacity change from 0 to 1024 [ 1345.622176][T29894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1345.647237][T30359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10265'. [ 1345.666554][T29894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1345.689218][T30355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.759063][T29894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1345.857485][T30355] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 623: comm syz.2.10263: Attempting to read directory block (623) that is past i_size (638464) [ 1346.159293][ T5744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.304920][T29894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.421207][T29894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.539962][T22612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.547207][T22612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.612822][T22617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.620081][T22617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.957368][T30397] loop4: detected capacity change from 0 to 256 [ 1347.121987][T30397] FAT-fs (loop4): Directory bread(block 64) failed [ 1347.150356][T30397] FAT-fs (loop4): Directory bread(block 65) failed [ 1347.177027][T30397] FAT-fs (loop4): Directory bread(block 66) failed [ 1347.202914][T30397] FAT-fs (loop4): Directory bread(block 67) failed [ 1347.227111][T30397] FAT-fs (loop4): Directory bread(block 68) failed [ 1347.236890][T30397] FAT-fs (loop4): Directory bread(block 69) failed [ 1347.244459][T30397] FAT-fs (loop4): Directory bread(block 70) failed [ 1347.274682][T30397] FAT-fs (loop4): Directory bread(block 71) failed [ 1347.294952][T30397] FAT-fs (loop4): Directory bread(block 72) failed [ 1347.323468][T30397] FAT-fs (loop4): Directory bread(block 73) failed [ 1347.915939][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.138830][T30422] loop3: detected capacity change from 0 to 64 [ 1348.560657][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.797880][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.136882][T30436] loop3: detected capacity change from 0 to 4096 [ 1349.182142][T30436] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1349.348407][T30436] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1349.366691][T30436] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1349.421606][T30451] dlm: non-version read from control device 36 [ 1349.475383][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.533402][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1349.553315][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1349.577198][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1349.588937][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1349.604731][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1349.787435][T29894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.816063][T30489] comedi: No check for data length of config insn id 536875917 is implemented [ 1350.887281][T30489] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1350.905493][T30492] loop3: detected capacity change from 0 to 1024 [ 1350.916294][T30489] comedi: Assuming n=15 is correct [ 1350.939310][T30492] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1350.955247][ T37] bridge_slave_1: left allmulticast mode [ 1350.986483][ T37] bridge_slave_1: left promiscuous mode [ 1350.992744][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.034916][T30492] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.10313: lblock 2 mapped to illegal pblock 2 (length 1) [ 1351.053984][ T37] bridge_slave_0: left allmulticast mode [ 1351.059667][ T37] bridge_slave_0: left promiscuous mode [ 1351.087718][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.116421][T30492] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.116824][T30492] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1351.134129][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1351.134166][ C0] EXT4-fs (loop3): initial error at time 2000000944: ext4_map_blocks:791: inode 3: block 2 [ 1351.134234][ C0] EXT4-fs (loop3): last error at time 2000000944: ext4_map_blocks:791: inode 3: block 2 [ 1351.188046][T30492] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.10313: lblock 0 mapped to illegal pblock 48 (length 1) [ 1351.210193][T30492] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.232106][T30492] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1351.308783][T30492] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.10313: Failed to acquire dquot type 0 [ 1351.368175][T30492] loop3: lost filesystem error report for type 5 error -117 [ 1351.370201][T30492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1351.430554][T30508] sctp: [Deprecated]: syz.2.10318 (pid 30508) Use of int in max_burst socket option deprecated. [ 1351.430554][T30508] Use struct sctp_assoc_value instead [ 1351.439035][T30492] loop3: lost filesystem error report for type 5 error -117 [ 1351.499403][T30492] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.10313: mark_inode_dirty error [ 1351.550726][T30492] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1351.552288][T30492] EXT4-fs warning (device loop3): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1351.581956][T30492] EXT4-fs (loop3): 1 orphan inode deleted [ 1351.610318][T22617] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1351.636346][T22617] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.641549][T22617] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1351.660548][T30492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.707053][T22617] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:11: Failed to release dquot type 0 [ 1351.800414][ T5749] Bluetooth: hci0: command tx timeout [ 1351.878910][T30492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4884: comm syz.3.10313: Invalid inode table block 1 in block_group 0 [ 1351.894797][T30514] loop4: detected capacity change from 0 to 4096 [ 1351.918845][T30492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1351.960292][T30492] EXT4-fs error (device loop3): ext4_setattr:5946: inode #2: comm syz.3.10313: mark_inode_dirty error [ 1352.003971][T30521] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1352.063734][T30514] NILFS error (device loop4): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 1352.081234][T30522] loop1: detected capacity change from 0 to 512 [ 1352.182919][T30522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.244107][T30522] ext4 filesystem being mounted at /1706/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.254403][T30514] Remounting filesystem read-only [ 1352.299656][ T5756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.328648][T22617] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1352.367296][T22617] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1352.367646][T22617] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1352.386221][T22617] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:11: Failed to release dquot type 0 [ 1352.386380][T30522] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #12: comm syz.1.10322: corrupted xattr block 6: invalid header [ 1352.400116][T22617] loop3: lost filesystem error report for type 5 error -117 [ 1352.447045][ T5756] EXT4-fs error (device loop3): __ext4_get_inode_loc:4884: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1352.480257][ T5756] loop3: lost filesystem error report for type 5 error -117 [ 1352.483286][ T5756] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1352.504596][ T5756] loop3: lost filesystem error report for type 5 error -117 [ 1352.530598][ T5756] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1352.604725][ T5756] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1352.713477][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.813409][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.850207][ T37] bond0 (unregistering): Released all slaves [ 1352.922308][T30539] openvswitch: : Dropping previously announced user features [ 1352.953777][ T5743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.005860][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1353.101543][ T37] : left promiscuous mode [ 1353.212091][T30546] loop3: detected capacity change from 0 to 128 [ 1353.362379][T30448] vxcan1 speed is unknown, defaulting to 1000 [ 1353.377258][T30546] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1353.439445][T30546] FAT-fs (loop3): Filesystem has been set read-only [ 1353.714538][T29894] veth0_vlan: entered promiscuous mode [ 1353.808398][T29894] veth1_vlan: entered promiscuous mode [ 1354.006328][T30568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1354.016491][ T5749] Bluetooth: hci0: command tx timeout [ 1354.161632][T30572] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1354.230340][T29894] veth0_macvtap: entered promiscuous mode [ 1354.347550][T29894] veth1_macvtap: entered promiscuous mode [ 1354.574545][T29894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.619331][T30587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10346'. [ 1354.718855][T30589] libceph: secret too big 289 [ 1354.752081][T29894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.807005][T22619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.842169][T22619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.877472][T30584] loop3: detected capacity change from 0 to 4096 [ 1354.904897][T30584] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1354.927436][T22619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.964517][T22619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.041246][T30584] ntfs3(loop3): ino=19, mi_enum_attr [ 1355.060897][T30584] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1355.347625][T30584] ntfs3(loop3): failed to convert "c46c" to iso8859-9 [ 1355.418315][T30448] wlan1 speed is unknown, defaulting to 1000 [ 1355.551555][T30584] ntfs3(loop3): ino=20, mi_enum_attr [ 1355.710551][T30610] loop1: detected capacity change from 0 to 256 [ 1355.884971][T30610] FAT-fs (loop1): Directory bread(block 64) failed [ 1355.911500][T30610] FAT-fs (loop1): Directory bread(block 65) failed [ 1355.932494][T30610] FAT-fs (loop1): Directory bread(block 66) failed [ 1355.947390][T30610] FAT-fs (loop1): Directory bread(block 67) failed [ 1355.954349][T30610] FAT-fs (loop1): Directory bread(block 68) failed [ 1355.961419][T30612] loop4: detected capacity change from 0 to 1024 [ 1355.982795][T30610] FAT-fs (loop1): Directory bread(block 69) failed [ 1356.012921][T30610] FAT-fs (loop1): Directory bread(block 70) failed [ 1356.034589][T30610] FAT-fs (loop1): Directory bread(block 71) failed [ 1356.059638][T30610] FAT-fs (loop1): Directory bread(block 72) failed [ 1356.084926][T30610] FAT-fs (loop1): Directory bread(block 73) failed [ 1356.235590][ T5749] Bluetooth: hci0: command tx timeout [ 1356.468124][T30620] vxcan1 speed is unknown, defaulting to 1000 [ 1356.475086][T22617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.497156][T30625] 9pnet: Found fid 0 not clunked [ 1356.531390][T22617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.962605][T22619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.981051][T22619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.374718][T30642] loop4: detected capacity change from 0 to 4096 [ 1357.399040][T30642] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1357.413516][ T37] hsr_slave_0: left promiscuous mode [ 1357.445898][ T37] hsr_slave_1: left promiscuous mode [ 1357.536245][T30642] ntfs3(loop4): ino=19, mi_enum_attr [ 1357.585920][T30642] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1357.645257][T30642] ntfs3(loop4): failed to convert "c46c" to iso8859-9 [ 1357.665618][T30642] ntfs3(loop4): ino=20, mi_enum_attr [ 1358.266164][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1358.300795][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1358.479029][ T5749] Bluetooth: hci0: command tx timeout [ 1358.498791][T30620] wlan1 speed is unknown, defaulting to 1000 [ 1358.673107][T30668] netlink: 'syz.6.10078': attribute type 13 has an invalid length. [ 1358.750228][T30668] gretap0: refused to change device tx_queue_len [ 1358.763695][T30668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1358.911899][T30674] loop2: detected capacity change from 0 to 256 [ 1358.954925][T24075] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1359.011365][T30674] FAT-fs (loop2): Directory bread(block 64) failed [ 1359.042801][T30674] FAT-fs (loop2): Directory bread(block 65) failed [ 1359.087034][T30674] FAT-fs (loop2): Directory bread(block 66) failed [ 1359.118492][T30679] loop6: detected capacity change from 0 to 8 [ 1359.126422][T30674] FAT-fs (loop2): Directory bread(block 67) failed [ 1359.186233][T30674] FAT-fs (loop2): Directory bread(block 68) failed [ 1359.188290][T24075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1359.224750][T30674] FAT-fs (loop2): Directory bread(block 69) failed [ 1359.255675][T30674] FAT-fs (loop2): Directory bread(block 70) failed [ 1359.258700][T24075] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1359.272235][T30679] SQUASHFS error: Unable to read inode 0xa7 [ 1359.285738][T30674] FAT-fs (loop2): Directory bread(block 71) failed [ 1359.315082][T24075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.328358][T30674] FAT-fs (loop2): Directory bread(block 72) failed [ 1359.366138][T30674] FAT-fs (loop2): Directory bread(block 73) failed [ 1359.373287][T24075] usb 5-1: Product: syz [ 1359.389606][T24075] usb 5-1: Manufacturer: syz [ 1359.413647][T24075] usb 5-1: SerialNumber: syz [ 1359.433706][T24075] usb 5-1: config 0 descriptor?? [ 1359.457247][T24075] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1359.745118][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1359.753719][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.824977][T24075] usb 5-1: USB disconnect, device number 81 [ 1360.118179][T30702] loop1: detected capacity change from 0 to 1024 [ 1360.161280][T30698] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1360.216947][T30448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.267594][T30702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1360.268221][T30448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.394885][T30448] bridge_slave_0: entered allmulticast mode [ 1360.465240][T30448] bridge_slave_0: entered promiscuous mode [ 1360.526997][T30448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.567322][T30448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.604180][T30448] bridge_slave_1: entered allmulticast mode [ 1360.651201][ T5743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.658779][T30448] bridge_slave_1: entered promiscuous mode [ 1360.955292][T30448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.011609][T30448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.255936][T30448] team0: Port device team_slave_0 added [ 1361.301804][T30448] team0: Port device team_slave_1 added [ 1361.346887][T30730] loop1: detected capacity change from 0 to 8 [ 1361.372440][T30730] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1361.431124][T30730] cramfs: Error -3 while decompressing! [ 1361.432527][ T6031] udevd[6031]: incorrect cramfs checksum on /dev/loop1 [ 1361.458792][T30730] cramfs: ffffffff9b26b8a8(26)->ffff8880acc66000(4096) [ 1361.493912][T30730] cramfs: Error -5 while decompressing! [ 1361.520835][T30730] cramfs: ffffffff9b26b8c2(26)->ffff888074e12000(4096) [ 1361.551229][T30730] cramfs: Error 2 while decompressing! [ 1361.554287][T30448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.580252][T30730] cramfs: ffffffff9b26b8dc(16)->ffff8880468e9000(4096) [ 1361.603055][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.610921][T30730] cramfs: Error -3 while decompressing! [ 1361.656692][ T5990] udevd[5990]: incorrect cramfs checksum on /dev/loop1 [ 1361.668083][T30730] cramfs: ffffffff9b26b8a8(26)->ffff8880acc66000(4096) [ 1361.722504][ T31] audit: type=1800 audit(2000000954.758:126): pid=30730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10393" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1361.749787][T30448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.797249][T30448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.862294][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.007056][T30448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.157478][T30746] loop3: detected capacity change from 0 to 4096 [ 1362.308579][T30716] loop6: detected capacity change from 0 to 32768 [ 1362.416563][T30448] hsr_slave_0: entered promiscuous mode [ 1362.455876][T30448] hsr_slave_1: entered promiscuous mode [ 1362.489909][T30448] debugfs: 'hsr0' already exists in 'hsr' [ 1362.528061][T30448] Cannot create hsr debugfs directory [ 1363.309276][T24082] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1363.504374][T24082] usb 4-1: Using ep0 maxpacket: 8 [ 1363.542308][T24082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1363.543373][T30747] loop2: detected capacity change from 0 to 32768 [ 1363.585878][T24082] usb 4-1: config 8 has an invalid interface number: 61 but max is 2 [ 1363.604264][T30779] loop4: detected capacity change from 0 to 1764 [ 1363.630490][T24082] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1363.658438][T30747] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1363.658438][T30747] [ 1363.674632][T24082] usb 4-1: config 8 has no interface number 0 [ 1363.685151][T24082] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1363.733121][T24082] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1363.777902][T24082] usb 4-1: config 8 interface 61 has no altsetting 0 [ 1363.792833][T24070] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1363.819996][T24082] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 1363.824216][T30747] ERROR: (device loop2): remounting filesystem as read-only [ 1363.855776][T24082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.888553][T24082] usb 4-1: Product: syz [ 1363.893380][T30747] ialloc: diAlloc returned -5! [ 1363.898814][T24082] usb 4-1: Manufacturer: syz [ 1363.909435][T24082] usb 4-1: SerialNumber: syz [ 1364.022875][T24070] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1364.065201][T24070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.087717][T24070] usb 7-1: Product: syz [ 1364.101724][T24070] usb 7-1: Manufacturer: syz [ 1364.111817][T24070] usb 7-1: SerialNumber: syz [ 1364.238313][T24082] bfusb 4-1:8.61: probe with driver bfusb failed with error -5 [ 1364.315481][T24082] usb 4-1: USB disconnect, device number 91 [ 1364.515710][T30793] loop4: detected capacity change from 0 to 1764 [ 1364.547326][T24070] rtl8150 7-1:1.0: couldn't reset the device [ 1364.577966][T24070] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1364.668703][T24070] usb 7-1: USB disconnect, device number 2 [ 1364.818551][T30448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1364.861992][T30448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1364.893179][T30448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1364.946025][T30448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1364.983143][T30448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1365.071463][T30448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1365.117406][T30448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1365.193224][T30448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1365.697346][T30448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.729044][T30834] loop4: detected capacity change from 0 to 16 [ 1365.765794][T30834] erofs (device loop4): mounted with root inode @ nid 36. [ 1365.832955][T30448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.904666][T22621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.911915][T22621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.028908][T22621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.036133][T22621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.078651][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1366.615394][T30858] binder: 30856:30858 ioctl c0306201 2000000001c0 returned -14 [ 1366.644074][T30860] loop2: detected capacity change from 0 to 512 [ 1366.666665][T30860] EXT4-fs: Ignoring removed nobh option [ 1366.727060][T30860] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.10441: corrupted inode contents [ 1366.761310][T24070] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1366.793877][T30860] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1366.795901][T30860] EXT4-fs (loop2): Remounting filesystem read-only [ 1366.805130][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1366.805172][ C1] EXT4-fs (loop2): initial error at time 2000000959: ext4_do_update_inode:5690: inode 3 [ 1366.805229][ C1] EXT4-fs (loop2): last error at time 2000000959: ext4_do_update_inode:5690: inode 3 [ 1366.850614][T30860] Quota error (device loop2): write_blk: dquota write failed [ 1366.861387][T30860] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 1366.888567][T30860] EXT4-fs (loop2): 1 truncate cleaned up [ 1366.947837][T30860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.017326][T24070] usb 4-1: Using ep0 maxpacket: 32 [ 1367.017812][T30860] ext4 filesystem being mounted at /1744/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.044572][T30873] loop6: detected capacity change from 0 to 256 [ 1367.072576][T24070] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1367.072631][T24070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.072671][T24070] usb 4-1: Product: syz [ 1367.072700][T24070] usb 4-1: Manufacturer: syz [ 1367.072728][T24070] usb 4-1: SerialNumber: syz [ 1367.232624][T30873] FAT-fs (loop6): Directory bread(block 64) failed [ 1367.232674][T30873] FAT-fs (loop6): Directory bread(block 65) failed [ 1367.232927][T30873] FAT-fs (loop6): Directory bread(block 66) failed [ 1367.232980][T30873] FAT-fs (loop6): Directory bread(block 67) failed [ 1367.233085][T30873] FAT-fs (loop6): Directory bread(block 68) failed [ 1367.233126][T30873] FAT-fs (loop6): Directory bread(block 69) failed [ 1367.233235][T30873] FAT-fs (loop6): Directory bread(block 70) failed [ 1367.233276][T30873] FAT-fs (loop6): Directory bread(block 71) failed [ 1367.233380][T30873] FAT-fs (loop6): Directory bread(block 72) failed [ 1367.233421][T30873] FAT-fs (loop6): Directory bread(block 73) failed [ 1367.324844][T24070] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1367.347703][T24070] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1367.359566][T24070] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1367.495514][ T5744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.596312][T24085] usb 4-1: USB disconnect, device number 92 [ 1367.643363][T24085] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1367.982722][T24085] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1368.026943][T24085] visor 4-1:1.0: device disconnected [ 1368.855000][T30448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.112995][T30923] loop2: detected capacity change from 0 to 4096 [ 1369.119571][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1369.161892][T30923] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1369.330521][T30923] ntfs3(loop2): ino=19, mi_enum_attr [ 1369.350067][T30937] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1369.360682][T30923] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1369.512516][T30923] ntfs3(loop2): failed to convert "c46c" to iso8859-9 [ 1369.561804][T30923] ntfs3(loop2): ino=20, mi_enum_attr [ 1370.275240][T30964] IPv6: NLM_F_CREATE should be specified when creating new route [ 1370.453420][T30963] loop2: detected capacity change from 0 to 4096 [ 1370.486788][T30448] veth0_vlan: entered promiscuous mode [ 1370.504707][T30928] loop6: detected capacity change from 0 to 32768 [ 1370.580896][T30448] veth1_vlan: entered promiscuous mode [ 1370.794211][T30448] veth0_macvtap: entered promiscuous mode [ 1370.843320][ T118] ERROR: (device loop6): diFree: numfree > numinos [ 1370.843320][ T118] [ 1370.863427][T30448] veth1_macvtap: entered promiscuous mode [ 1370.899262][ T118] ERROR: (device loop6): remounting filesystem as read-only [ 1370.990675][T30448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.066127][T30448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.145610][T22621] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.181202][T22621] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.219398][T22621] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.256112][T22621] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.635076][T30979] loop3: detected capacity change from 0 to 4096 [ 1371.787506][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10483'. [ 1371.798578][T30989] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1371.817329][T22617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.841643][T30966] loop4: detected capacity change from 0 to 32768 [ 1371.848272][T22617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.893586][T30966] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10475 (30966) [ 1371.959217][T30966] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1372.004423][T30966] BTRFS info (device loop4): using sha256 checksum algorithm [ 1372.110461][T30979] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1372.138282][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1372.154755][T22621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.193172][T22621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.289213][T30966] BTRFS info (device loop4): enabling ssd optimizations [ 1372.301568][T30966] BTRFS info (device loop4): turning on async discard [ 1372.340637][T30966] BTRFS info (device loop4): enabling free space tree [ 1372.689955][ T5758] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1373.554994][T31033] loop7: detected capacity change from 0 to 4096 [ 1373.633267][T24074] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1373.735889][T31044] loop4: detected capacity change from 0 to 512 [ 1373.766086][T31033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.870519][T24074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.874710][T31044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1373.915130][T24074] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1373.957481][T24074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.967911][T31047] netlink: 'syz.1.10500': attribute type 2 has an invalid length. [ 1374.023583][T31044] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #17: comm syz.4.10498: corrupted in-inode xattr: invalid ea_ino [ 1374.058881][T24074] usb 3-1: Product: syz [ 1374.094904][T31044] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1374.099062][T31044] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.10498: couldn't read orphan inode 17 (err -117) [ 1374.100324][T24074] usb 3-1: Manufacturer: syz [ 1374.109209][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1374.131677][ C1] EXT4-fs (loop4): initial error at time 2000000966: ext4_iget_extra_inode:5127: inode 17 [ 1374.136310][T31052] xt_SECMARK: invalid mode: 2 [ 1374.141711][ C1] EXT4-fs (loop4): last error at time 2000000966: ext4_iget_extra_inode:5127: inode 17 [ 1374.171425][T31044] loop4: lost filesystem error report for type 5 error -117 [ 1374.182757][T31044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.282527][T24074] usb 3-1: SerialNumber: syz [ 1374.341633][T24074] usb 3-1: config 0 descriptor?? [ 1374.389861][T24074] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1374.422129][T30448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.712533][T31066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10507'. [ 1374.721829][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.813304][T24074] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1374.865262][T24074] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1374.942344][T24074] usb 3-1: USB disconnect, device number 63 [ 1375.324753][T31080] loop4: detected capacity change from 0 to 512 [ 1375.383136][T31080] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1375.399791][T31080] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1375.425755][T31080] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1375.446503][T31080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1375.475420][T31080] System zones: 0-2, 18-18, 34-35 [ 1375.494018][T31080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.529166][T31080] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 1375.657504][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.848918][T31100] Cannot find set identified by id 1 to match [ 1375.883873][T31102] loop4: detected capacity change from 0 to 16 [ 1375.910092][T31102] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1376.097080][T31107] loop3: detected capacity change from 0 to 256 [ 1376.182582][T31112] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1376.662126][T24082] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1376.843226][T31124] netlink: set zone limit has 4 unknown bytes [ 1376.862327][T24082] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1376.895749][T24074] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1376.913059][T24082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.998327][T24082] usb 5-1: config 0 descriptor?? [ 1377.058628][T24082] cp210x 5-1:0.0: cp210x converter detected [ 1377.106268][T24074] usb 3-1: Using ep0 maxpacket: 32 [ 1377.141256][T24074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.204470][T24074] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1377.240429][T24074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.250421][T31136] openvswitch: netlink: Flow key attribute not present in set flow. [ 1377.277480][T24074] usb 3-1: Product: syz [ 1377.299096][T24074] usb 3-1: Manufacturer: syz [ 1377.322739][T24074] usb 3-1: SerialNumber: syz [ 1377.358503][T24074] usb 3-1: config 0 descriptor?? [ 1377.390697][T24074] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1377.501168][T31140] netlink: 'syz.3.10542': attribute type 7 has an invalid length. [ 1377.513842][T24082] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1377.565102][T24082] usb 5-1: USB disconnect, device number 82 [ 1377.607793][T24074] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1377.611494][T24082] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1377.639638][T24074] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 1377.682636][T24082] cp210x 5-1:0.0: device disconnected [ 1377.831308][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1377.853426][T24074] usb 3-1: USB disconnect, device number 64 [ 1377.928600][T31119] loop6: detected capacity change from 0 to 32768 [ 1377.971770][T31119] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1378.225452][T31119] XFS (loop6): Ending clean mount [ 1378.440008][T29894] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1378.459470][T31168] loop3: detected capacity change from 0 to 256 [ 1378.640121][T31168] FAT-fs (loop3): Directory bread(block 64) failed [ 1378.654613][T31168] FAT-fs (loop3): Directory bread(block 65) failed [ 1378.694812][T31168] FAT-fs (loop3): Directory bread(block 66) failed [ 1378.740536][T31168] FAT-fs (loop3): Directory bread(block 67) failed [ 1378.772176][T31168] FAT-fs (loop3): Directory bread(block 68) failed [ 1378.807384][T31168] FAT-fs (loop3): Directory bread(block 69) failed [ 1378.859896][T31168] FAT-fs (loop3): Directory bread(block 70) failed [ 1378.899490][T31168] FAT-fs (loop3): Directory bread(block 71) failed [ 1378.946442][T31168] FAT-fs (loop3): Directory bread(block 72) failed [ 1378.950384][T31178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10558'. [ 1378.992727][T31168] FAT-fs (loop3): Directory bread(block 73) failed [ 1379.363536][T31184] loop1: detected capacity change from 0 to 16 [ 1379.388518][T31184] erofs (device loop1): mounted with root inode @ nid 36. [ 1379.461579][T31187] loop7: detected capacity change from 0 to 256 [ 1379.632768][T31187] FAT-fs (loop7): Directory bread(block 64) failed [ 1379.670025][T31187] FAT-fs (loop7): Directory bread(block 65) failed [ 1379.686611][T31193] loop4: detected capacity change from 0 to 512 [ 1379.705541][T31187] FAT-fs (loop7): Directory bread(block 66) failed [ 1379.733119][T31193] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.10564: inode has both inline data and extents flags [ 1379.737843][T31187] FAT-fs (loop7): Directory bread(block 67) failed [ 1379.753956][T31187] FAT-fs (loop7): Directory bread(block 68) failed [ 1379.760855][T31187] FAT-fs (loop7): Directory bread(block 69) failed [ 1379.768330][T31187] FAT-fs (loop7): Directory bread(block 70) failed [ 1379.775142][T31187] FAT-fs (loop7): Directory bread(block 71) failed [ 1379.782802][T31187] FAT-fs (loop7): Directory bread(block 72) failed [ 1379.790845][T31187] FAT-fs (loop7): Directory bread(block 73) failed [ 1379.811121][T31193] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1379.812660][T31193] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.10564: couldn't read orphan inode 15 (err -117) [ 1379.821892][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1379.821927][ C1] EXT4-fs (loop4): initial error at time 2000000971: ext4_orphan_get:1397: inode 15 [ 1379.821982][ C1] EXT4-fs (loop4): last error at time 2000000971: ext4_orphan_get:1397: inode 15 [ 1379.859894][T31193] loop4: lost filesystem error report for type 5 error -117 [ 1379.866487][T31193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.968004][T31203] netlink: 412 bytes leftover after parsing attributes in process `syz.6.10566'. [ 1380.190605][T31209] loop2: detected capacity change from 0 to 512 [ 1380.237712][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.243924][T31209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1380.322597][T31212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1380.414939][T31209] EXT4-fs error (device loop2): ext4_iget_extra_inode:5127: inode #17: comm syz.2.10570: corrupted in-inode xattr: invalid ea_ino [ 1380.456997][T31209] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1380.460194][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1380.475852][ C1] EXT4-fs (loop2): initial error at time 2000000972: ext4_iget_extra_inode:5127: inode 17 [ 1380.485857][ C1] EXT4-fs (loop2): last error at time 2000000972: ext4_iget_extra_inode:5127: inode 17 [ 1380.503053][T31209] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.10570: couldn't read orphan inode 17 (err -117) [ 1380.517041][T31216] loop4: detected capacity change from 0 to 512 [ 1380.523503][T31209] loop2: lost filesystem error report for type 5 error -117 [ 1380.532784][T31209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.567224][T31216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1380.635037][T31216] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.10572: invalid indirect mapped block 4294967295 (level 1) [ 1380.664049][T31216] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1380.670182][T31216] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.10572: invalid indirect mapped block 4294967295 (level 1) [ 1380.679544][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1380.679580][ C0] EXT4-fs (loop4): initial error at time 2000000972: ext4_free_branches:1020: inode 11 [ 1380.679639][ C0] EXT4-fs (loop4): last error at time 2000000972: ext4_free_branches:1020: inode 11 [ 1380.732084][T24074] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1380.787844][T31216] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1380.789764][T31216] EXT4-fs (loop4): 2 truncates cleaned up [ 1380.859159][T31216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.923176][ T5744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.966470][T24074] usb 2-1: Using ep0 maxpacket: 16 [ 1381.012548][T24074] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 1381.028519][T24074] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1381.066355][T24074] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1381.143128][T24074] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1381.185382][T24074] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1381.214851][T24074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.250536][ T5758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.271218][T24074] usb 2-1: config 0 descriptor?? [ 1381.307968][T31234] PM: Enabling pm_trace changes system date and time during resume. [ 1381.307968][T31234] PM: Correct system time has to be restored manually after resume. [ 1381.518190][T24074] usb 2-1: string descriptor 0 read error: -71 [ 1381.552340][T24074] pxrc 2-1:0.0: Could not find endpoint [ 1381.570244][T31240] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1381.583725][T24074] usb 2-1: USB disconnect, device number 59 [ 1381.724839][T31208] loop3: detected capacity change from 0 to 32768 [ 1381.802950][ T31] audit: type=1800 audit(2000000973.539:127): pid=31208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10569" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 1382.277347][T31256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1382.355547][ T31] audit: type=1400 audit(2000000974.072:128): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=31257 comm="syz.2.10594" [ 1382.939855][T24082] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1383.043771][T31273] loop1: detected capacity change from 0 to 4096 [ 1383.070673][T31248] loop6: detected capacity change from 0 to 32768 [ 1383.089265][T31273] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 1383.121059][T24082] usb 3-1: Using ep0 maxpacket: 8 [ 1383.157050][T24082] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.196917][T24082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1383.240676][T31282] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10605'. [ 1383.252557][T24082] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1383.280128][T24082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.303738][T24082] usb 3-1: Product: syz [ 1383.351251][T24082] usb 3-1: Manufacturer: syz [ 1383.379211][T24082] usb 3-1: SerialNumber: syz [ 1383.415777][T24082] usb 3-1: config 0 descriptor?? [ 1383.443230][T24070] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1383.481148][T24082] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1383.583398][T31288] netlink: 204476 bytes leftover after parsing attributes in process `syz.7.10608'. [ 1383.589623][T31286] loop6: detected capacity change from 0 to 128 [ 1383.647488][T24070] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 1383.700756][T24070] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 1383.714455][T24082] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1383.750920][T24070] usb 2-1: config 0 has no interface number 0 [ 1383.757928][T24070] usb 2-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30 [ 1383.766863][T31286] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1383.774321][T24070] usb 2-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1383.788526][T24082] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1383.804578][T24070] usb 2-1: config 0 interface 39 has no altsetting 0 [ 1383.812179][T24070] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1383.821653][T24070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.833600][T24070] usb 2-1: config 0 descriptor?? [ 1383.892827][T31286] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.908899][T24082] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1383.983191][T24082] usb 3-1: USB disconnect, device number 65 [ 1384.057034][T29894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1384.077555][T24070] usb 2-1: string descriptor 0 read error: -71 [ 1384.113701][T24070] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 1384.152382][T24070] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1384.199992][T24070] usb 2-1: USB disconnect, device number 60 [ 1384.223731][T24070] ftdi_sio 2-1:0.39: device disconnected [ 1384.368365][T31295] loop6: detected capacity change from 0 to 2048 [ 1384.402196][T31295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.611244][T31280] loop3: detected capacity change from 0 to 32768 [ 1384.724986][T31280] jfs_strtoUCS: char2uni returned -22. [ 1384.753588][T31280] charset = cp1255, char = 0xfc [ 1384.790181][T31305] JFS: discard option not supported on device [ 1384.821301][T31305] Mount JFS Failure: -22 [ 1384.844327][T31305] jfs_mount failed w/return code = -22 [ 1385.025108][T31309] loop2: detected capacity change from 0 to 2048 [ 1385.152411][T31309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1385.525760][T24094] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1385.576093][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10626'. [ 1385.713970][T31323] vlan0: left promiscuous mode [ 1385.750219][T24094] usb 7-1: Using ep0 maxpacket: 16 [ 1385.768126][T24094] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1385.792651][T24094] usb 7-1: config 0 has no interface number 0 [ 1385.808518][T31323] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1385.822512][T24094] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1385.865002][T24094] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1385.917214][T24094] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1385.940330][T31323] bond1: left promiscuous mode [ 1385.947723][T31337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10629'. [ 1385.961673][T24094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.977656][T31323] vti0: left promiscuous mode [ 1385.987497][T31337] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10629'. [ 1385.998278][T24094] usb 7-1: Product: syz [ 1386.009952][T24094] usb 7-1: Manufacturer: syz [ 1386.029471][T24094] usb 7-1: SerialNumber: syz [ 1386.034869][T31337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10629'. [ 1386.063545][T24094] usb 7-1: config 0 descriptor?? [ 1386.080071][T31320] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1386.102688][T31320] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1386.253598][T24074] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1386.354076][T31348] loop2: detected capacity change from 0 to 256 [ 1386.370741][T31320] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1386.393867][T31320] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1386.445111][T24074] usb 5-1: Using ep0 maxpacket: 16 [ 1386.476206][T24074] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1386.490950][T31348] FAT-fs (loop2): Directory bread(block 64) failed [ 1386.505681][T31348] FAT-fs (loop2): Directory bread(block 65) failed [ 1386.515172][T24074] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.517406][T31348] FAT-fs (loop2): Directory bread(block 66) failed [ 1386.547536][T24074] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1386.560813][T31348] FAT-fs (loop2): Directory bread(block 67) failed [ 1386.576476][T24074] usb 5-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 1386.596503][T31348] FAT-fs (loop2): Directory bread(block 68) failed [ 1386.622426][T24074] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1386.625014][T31348] FAT-fs (loop2): Directory bread(block 69) failed [ 1386.655623][T24094] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1386.662022][T24074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.686072][T31348] FAT-fs (loop2): Directory bread(block 70) failed [ 1386.701443][T24094] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1386.707276][T24074] usb 5-1: Product: syz [ 1386.717046][T31348] FAT-fs (loop2): Directory bread(block 71) failed [ 1386.733168][T31348] FAT-fs (loop2): Directory bread(block 72) failed [ 1386.740015][T24074] usb 5-1: Manufacturer: syz [ 1386.740196][T24094] asix 7-1:0.251: probe with driver asix failed with error -5 [ 1386.753144][T31348] FAT-fs (loop2): Directory bread(block 73) failed [ 1386.763570][T24074] usb 5-1: SerialNumber: syz [ 1386.778554][T24094] usb 7-1: USB disconnect, device number 3 [ 1387.027360][T24074] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1387.043995][T24074] cdc_ncm 5-1:1.0: bind() failure [ 1387.046236][T31359] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1387.068989][T24074] usb 5-1: USB disconnect, device number 83 [ 1387.414690][T31346] loop3: detected capacity change from 0 to 32768 [ 1387.440255][T31346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10632 (31346) [ 1387.484942][T31346] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1387.523113][T31346] BTRFS info (device loop3): using sha256 checksum algorithm [ 1387.544279][T31371] netlink: 'syz.1.10640': attribute type 1 has an invalid length. [ 1387.570802][T31371] netlink: 1000 bytes leftover after parsing attributes in process `syz.1.10640'. [ 1387.681463][T31346] BTRFS info (device loop3): enabling ssd optimizations [ 1387.718321][T31346] BTRFS info (device loop3): turning on async discard [ 1387.757372][T31346] BTRFS info (device loop3): enabling free space tree [ 1388.092045][ T5756] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1388.636883][T24074] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1388.884452][T24074] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1388.942433][T24074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.985475][T24074] usb 3-1: Product: syz [ 1388.995003][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10654'. [ 1389.012335][T24074] usb 3-1: Manufacturer: syz [ 1389.037697][T24074] usb 3-1: SerialNumber: syz [ 1389.044411][T31423] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10654'. [ 1389.123109][T24074] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1389.153863][T31426] loop1: detected capacity change from 0 to 512 [ 1389.176360][T24070] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1389.191420][T31426] EXT4-fs: Mount option(s) incompatible with ext2 [ 1390.826891][T31457] tc_dump_action: action bad kind [ 1391.537267][T24075] usb 3-1: USB disconnect, device number 66 [ 1391.559161][T24070] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1391.567270][T24070] ath9k_htc: Failed to initialize the device [ 1391.580480][T24075] usb 3-1: ath9k_htc: USB layer deinitialized [ 1391.582574][T31467] loop3: detected capacity change from 0 to 256 [ 1391.997380][T31478] netlink: 'syz.4.10676': attribute type 3 has an invalid length. [ 1392.247172][T31482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1392.389367][T31446] loop1: detected capacity change from 0 to 32768 [ 1392.419004][T31446] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10660 (31446) [ 1392.509062][T31446] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1392.567084][T31446] BTRFS info (device loop1): using sha256 checksum algorithm [ 1392.864114][T31446] BTRFS info (device loop1): enabling ssd optimizations [ 1392.894716][T31446] BTRFS info (device loop1): turning on async discard [ 1392.919928][T31446] BTRFS info (device loop1): enabling free space tree [ 1393.139883][ T5743] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1393.157011][T31462] loop6: detected capacity change from 0 to 32768 [ 1393.195055][T31462] BTRFS info: device /dev/loop6 (7:6) using temp-fsid c8748758-16fe-4e01-a38c-bd82c089e8eb [ 1393.231471][T31462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10670 (31462) [ 1393.276210][T31462] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1393.375406][T31462] BTRFS info (device loop6): using sha256 checksum algorithm [ 1393.864837][T31462] BTRFS info (device loop6): enabling ssd optimizations [ 1393.896938][T31462] BTRFS info (device loop6): turning on async discard [ 1393.916005][T31550] hub 8-0:1.0: USB hub found [ 1393.933586][T31462] BTRFS info (device loop6): enabling free space tree [ 1393.970123][T31550] hub 8-0:1.0: 1 port detected [ 1394.211792][T31559] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10694'. [ 1394.633896][T29894] BTRFS info (device loop6): last unmount of filesystem c8748758-16fe-4e01-a38c-bd82c089e8eb [ 1396.105707][T31558] loop4: detected capacity change from 0 to 32768 [ 1396.921490][T31630] loop3: detected capacity change from 0 to 512 [ 1396.951241][T31630] EXT4-fs: Ignoring removed oldalloc option [ 1397.021151][T31630] EXT4-fs error (device loop3): ext4_iget_extra_inode:5127: inode #15: comm syz.3.10726: corrupted in-inode xattr: invalid ea_ino [ 1397.128165][T31630] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1397.129650][T31630] EXT4-fs (loop3): Remounting filesystem read-only [ 1397.138939][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1397.138979][ C1] EXT4-fs (loop3): initial error at time 2000000987: ext4_iget_extra_inode:5127: inode 15 [ 1397.139037][ C1] EXT4-fs (loop3): last error at time 2000000987: ext4_iget_extra_inode:5127: inode 15 [ 1397.185306][T31630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.471926][ T5756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.629285][T31652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10736'. [ 1398.132365][T31662] loop3: detected capacity change from 0 to 1024 [ 1398.227569][T31668] loop6: detected capacity change from 0 to 256 [ 1398.315479][T31627] loop4: detected capacity change from 0 to 32768 [ 1398.445286][T24082] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1398.628242][T24082] usb 3-1: Using ep0 maxpacket: 16 [ 1398.668389][T24082] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1398.711974][T24082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.743249][T24082] usb 3-1: Product: syz [ 1398.761787][T24082] usb 3-1: Manufacturer: syz [ 1398.778269][T24082] usb 3-1: SerialNumber: syz [ 1398.820484][T24082] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1398.861864][T24082] r8152-cfgselector 3-1: config 0 descriptor?? [ 1399.005025][T31649] loop7: detected capacity change from 0 to 32768 [ 1399.098157][T31649] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1399.147034][T24082] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1399.166041][T24082] r8152-cfgselector 3-1: No union descriptors [ 1399.390395][T24082] r8152-cfgselector 3-1: USB disconnect, device number 67 [ 1399.414954][T31687] bond3 (unregistering): Released all slaves [ 1399.653158][T31649] XFS (loop7): Ending clean mount [ 1399.884990][T31707] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1400.016341][T30448] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1400.717626][T31727] loop6: detected capacity change from 0 to 256 [ 1401.223466][T24090] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1401.238191][T31742] hfs: unable to load iocharset "I#hIars8Ύ wѷ}+[S_. ,s$nFBlbSR,.R]^kRL/J}&o9b6\wm$xCdeOjocڅ`1҆m#CX^ݾO;;󣫭Xp!+ƇK=A a2HKA rp" [ 1401.406684][T24090] usb 4-1: Using ep0 maxpacket: 8 [ 1401.439274][T24090] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1401.480348][T24090] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1401.507522][T24090] usb 4-1: Product: syz [ 1401.521874][T24090] usb 4-1: Manufacturer: syz [ 1401.536572][T24090] usb 4-1: SerialNumber: syz [ 1401.603720][T24090] usb 4-1: config 0 descriptor?? [ 1401.642548][T24090] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1401.911098][T24094] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1402.069894][T24090] gspca_zc3xx: reg_r err -71 [ 1402.086020][T24090] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1402.105965][T24094] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1402.133038][T24090] usb 4-1: USB disconnect, device number 93 [ 1402.139091][T24094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.172071][T24094] usb 5-1: Product: syz [ 1402.188690][T24094] usb 5-1: Manufacturer: syz [ 1402.207793][T24094] usb 5-1: SerialNumber: syz [ 1402.267876][T24094] usb 5-1: config 0 descriptor?? [ 1402.303802][T24094] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1402.372011][T31741] loop1: detected capacity change from 0 to 32768 [ 1402.416022][T31741] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1402.654354][T31741] XFS (loop1): Ending clean mount [ 1402.745527][T24094] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1402.778510][T24094] sq905c 5-1:0.0: Reading version command failed [ 1402.797839][T31788] __vm_enough_memory: pid: 31788, comm: syz.6.10792, bytes: 21200627240960 not enough memory for the allocation [ 1402.801259][T24094] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1402.852074][T24094] usb 5-1: USB disconnect, device number 84 [ 1402.960236][ T5743] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1403.428371][T31803] loop3: detected capacity change from 0 to 16 [ 1403.509415][T31803] erofs (device loop3): mounted with root inode @ nid 36. [ 1403.590617][T31799] bond3 (unregistering): Released all slaves [ 1403.617471][T31803] erofs (device loop3): compressed inode (nid 83) is invalid in a plain filesystem [ 1403.965953][T31814] loop7: detected capacity change from 0 to 256 [ 1404.013211][T31814] exfat: Deprecated parameter 'utf8' [ 1404.036511][T31814] exfat: Deprecated parameter 'utf8' [ 1404.079813][T31814] exfat: Deprecated parameter 'utf8' [ 1404.166011][T31814] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1405.269305][T31807] loop6: detected capacity change from 0 to 40427 [ 1405.278199][T31853] loop1: detected capacity change from 0 to 2048 [ 1405.332126][T31853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1405.335042][T31807] F2FS-fs (loop6): invalid crc value [ 1405.406263][ T31] audit: type=1800 audit(2000000995.643:129): pid=31853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10823" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 1405.854050][T31807] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1405.901769][T31807] F2FS-fs (loop6): Start checkpoint disabled! [ 1406.171328][T31807] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1406.196265][T31807] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1406.208307][T31880] loop2: detected capacity change from 0 to 4096 [ 1406.301796][T31886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1406.336623][T31887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10838'. [ 1406.652379][T22623] kworker/u8:14: attempt to access beyond end of device [ 1406.652379][T22623] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1406.679712][T31894] loop1: detected capacity change from 0 to 512 [ 1406.709019][T22623] CPU: 1 UID: 0 PID: 22623 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.709078][T22623] Tainted: [L]=SOFTLOCKUP [ 1406.709093][T22623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1406.709120][T22623] Workqueue: writeback wb_workfn (flush-7:6) [ 1406.709193][T22623] Call Trace: [ 1406.709207][T22623] [ 1406.709222][T22623] dump_stack_lvl+0x100/0x190 [ 1406.709266][T22623] f2fs_stop_checkpoint+0x600/0x9b0 [ 1406.709309][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.709355][T22623] ? errseq_set+0xe3/0x150 [ 1406.709415][T22623] ? errseq_set+0xe3/0x150 [ 1406.709472][T22623] f2fs_write_end_io+0xf59/0x1340 [ 1406.709524][T22623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1406.709569][T22623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1406.709621][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.709668][T22623] ? percpu_ref_put_many.constprop.0+0x52/0x2a0 [ 1406.709719][T22623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1406.709765][T22623] bio_endio+0x78f/0x8f0 [ 1406.709812][T22623] submit_bio_noacct+0x64c/0x2000 [ 1406.709886][T22623] f2fs_submit_write_bio+0x135/0x340 [ 1406.709931][T22623] __submit_merged_bio+0x331/0x780 [ 1406.709987][T22623] __submit_merged_write_cond+0x3fe/0x510 [ 1406.710047][T22623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1406.710111][T22623] ? __pfx___might_resched+0x10/0x10 [ 1406.710165][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710224][T22623] f2fs_write_cache_pages+0x20e9/0x2630 [ 1406.710312][T22623] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1406.710381][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710437][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710494][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710542][T22623] ? __lock_acquire+0x4a5/0x2630 [ 1406.710636][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710684][T22623] ? do_raw_spin_unlock+0x145/0x1e0 [ 1406.710790][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710835][T22623] ? find_held_lock+0x2b/0x80 [ 1406.710891][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.710935][T22623] ? rcu_is_watching+0x12/0xc0 [ 1406.710995][T22623] f2fs_write_data_pages+0x799/0x16d0 [ 1406.711047][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711091][T22623] ? trace_f2fs_writepages.constprop.0+0x75/0x230 [ 1406.711162][T22623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1406.711224][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711274][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711320][T22623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1406.711377][T22623] do_writepages+0x278/0x600 [ 1406.711449][T22623] ? __pfx_do_writepages+0x10/0x10 [ 1406.711511][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711562][T22623] __writeback_single_inode+0x164/0x1350 [ 1406.711621][T22623] ? find_held_lock+0x2b/0x80 [ 1406.711678][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711726][T22623] ? __pfx___writeback_single_inode+0x10/0x10 [ 1406.711783][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711827][T22623] ? do_raw_spin_unlock+0x145/0x1e0 [ 1406.711878][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.711929][T22623] writeback_sb_inodes+0x766/0x1c60 [ 1406.712012][T22623] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1406.712069][T22623] ? do_raw_spin_lock+0x128/0x260 [ 1406.712119][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712230][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712276][T22623] ? rcu_is_watching+0x12/0xc0 [ 1406.712326][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712371][T22623] ? queue_io+0x287/0x540 [ 1406.712432][T22623] wb_writeback+0x1bf/0xb90 [ 1406.712505][T22623] ? __pfx_wb_writeback+0x10/0x10 [ 1406.712577][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712621][T22623] ? mark_held_locks+0x40/0x70 [ 1406.712662][T22623] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.712718][T22623] wb_workfn+0x14f/0xc00 [ 1406.712780][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712825][T22623] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1406.712879][T22623] ? __pfx_wb_workfn+0x10/0x10 [ 1406.712941][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.712991][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713038][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713082][T22623] ? rcu_is_watching+0x12/0xc0 [ 1406.713136][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713191][T22623] process_one_work+0xa0e/0x1980 [ 1406.713258][T22623] ? __pfx_process_one_work+0x10/0x10 [ 1406.713300][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713361][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713421][T22623] worker_thread+0x5ef/0xe50 [ 1406.713485][T22623] ? kthread+0x13a/0x450 [ 1406.713520][T22623] ? __pfx_worker_thread+0x10/0x10 [ 1406.713562][T22623] kthread+0x370/0x450 [ 1406.713599][T22623] ? __pfx_kthread+0x10/0x10 [ 1406.713641][T22623] ret_from_fork+0x72b/0xd50 [ 1406.713686][T22623] ? __pfx_ret_from_fork+0x10/0x10 [ 1406.713728][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713771][T22623] ? rcu_is_watching+0x12/0xc0 [ 1406.713821][T22623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.713865][T22623] ? __switch_to+0x800/0x1100 [ 1406.713916][T22623] ? __switch_to_asm+0x39/0x70 [ 1406.713964][T22623] ? __pfx_kthread+0x10/0x10 [ 1406.714007][T22623] ret_from_fork_asm+0x1a/0x30 [ 1406.714087][T22623] [ 1406.714454][T22623] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1406.910759][T31894] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1406.927017][T31899] loop3: detected capacity change from 0 to 512 [ 1406.989504][T31894] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1407.093318][T31899] EXT4-fs: Ignoring removed orlov option [ 1407.281101][T31894] System zones: 0-1, 15-15, 18-18, 34-34 [ 1407.303860][T31894] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1407.321946][T31894] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1407.338903][T31904] loop4: detected capacity change from 0 to 64 [ 1407.342960][T31899] EXT4-fs: Ignoring removed i_version option [ 1407.352375][T31894] EXT4-fs warning (device loop1): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1407.393035][T31899] EXT4-fs: inline encryption not supported [ 1407.401679][T31904] hfs: unable to locate alternate MDB [ 1407.420843][T31894] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1407.432894][T31894] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.10841: bad orphan inode 16 [ 1407.446527][T31908] tmpfs: Bad value for 'mpol' [ 1407.449671][T31904] hfs: continuing without an alternate MDB [ 1407.459323][T31899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e854e01d, mo2=0003] [ 1407.491446][T31894] loop1: lost filesystem error report for type 5 error -117 [ 1407.493427][T31894] ext4_test_bit(bit=15, block=18) = 1 [ 1407.500822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1407.500854][ C1] EXT4-fs (loop1): initial error at time 2000000997: ext4_orphan_get:1423 [ 1407.500898][ C1] EXT4-fs (loop1): last error at time 2000000997: ext4_orphan_get:1423 [ 1407.549479][T31899] System zones: 1-12 [ 1407.586906][ T31] audit: type=1800 audit(2000000997.683:130): pid=31904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10846" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 1407.603575][T31899] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.10842: inode has both inline data and extents flags [ 1407.635160][T31899] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1407.643525][T31899] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.10842: couldn't read orphan inode 15 (err -117) [ 1407.652748][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1407.652782][ C0] EXT4-fs (loop3): initial error at time 2000000997: ext4_orphan_get:1397: inode 15 [ 1407.652840][ C0] EXT4-fs (loop3): last error at time 2000000997: ext4_orphan_get:1397: inode 15 [ 1407.685735][T31894] is_bad_inode(inode)=0 [ 1407.758425][T31894] NEXT_ORPHAN(inode)=0 [ 1407.774577][T31894] max_ino=32 [ 1407.790120][T31894] i_nlink=2 [ 1407.793450][T31912] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1407.825970][T31894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1407.838099][T31899] loop3: lost filesystem error report for type 5 error -117 [ 1407.849614][T22625] [ 1407.859241][T22625] ====================================================== [ 1407.866260][T22625] WARNING: possible circular locking dependency detected [ 1407.873282][T22625] syzkaller #0 Tainted: G L [ 1407.879260][T22625] ------------------------------------------------------ [ 1407.886314][T22625] kworker/u8:15/22625 is trying to acquire lock: [ 1407.892633][T22625] ffff88807dbf0730 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1407.903422][T22625] [ 1407.903422][T22625] but task is already holding lock: [ 1407.910777][T22625] ffff8880355ae0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1407.920178][T22625] [ 1407.920178][T22625] which lock already depends on the new lock. [ 1407.920178][T22625] [ 1407.930570][T22625] [ 1407.930570][T22625] the existing dependency chain (in reverse order) is: [ 1407.939588][T22625] [ 1407.939588][T22625] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1407.947706][T22625] __mutex_lock+0x1a4/0x1b10 [ 1407.952888][T22625] hfs_find_init+0x273/0x330 [ 1407.958108][T22625] hfs_ext_read_extent+0x19d/0x9d0 [ 1407.963771][T22625] hfs_get_block+0x576/0x830 [ 1407.968907][T22625] block_read_full_folio+0x36c/0x8e0 [ 1407.974771][T22625] filemap_read_folio+0xfc/0x3b0 [ 1407.980243][T22625] do_read_cache_folio+0x2d7/0x6b0 [ 1407.985924][T22625] read_cache_page+0x5b/0x1b0 [ 1407.991140][T22625] __hfs_bnode_create+0x718/0x9a0 [ 1407.996703][T22625] hfs_bnode_find+0x2d5/0xd30 [ 1408.001940][T22625] hfs_brec_find+0x39d/0x620 [ 1408.007071][T22625] hfs_brec_read+0x26/0x120 [ 1408.012110][T22625] hfs_cat_find_brec+0xdc/0x2a0 [ 1408.017508][T22625] hfs_fill_super+0x58d/0x7e0 [ 1408.022726][T22625] get_tree_bdev_flags+0x38c/0x620 [ 1408.028391][T22625] vfs_get_tree+0x92/0x320 [ 1408.033355][T22625] path_mount+0x7d0/0x23d0 [ 1408.038311][T22625] __x64_sys_mount+0x293/0x310 [ 1408.043629][T22625] do_syscall_64+0x115/0x870 [ 1408.048785][T22625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.055207][T22625] [ 1408.055207][T22625] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1408.064477][T22625] __lock_acquire+0x14b8/0x2630 [ 1408.069864][T22625] lock_acquire+0x1b1/0x370 [ 1408.074914][T22625] __mutex_lock+0x1a4/0x1b10 [ 1408.080058][T22625] hfs_extend_file+0xa6/0xcf0 [ 1408.085497][T22625] hfs_bmap_reserve+0x2ab/0x3a0 [ 1408.090893][T22625] __hfs_ext_write_extent+0x3c4/0x510 [ 1408.096812][T22625] hfs_ext_write_extent+0x1b7/0x200 [ 1408.102649][T22625] hfs_write_inode+0xce/0xab0 [ 1408.107873][T22625] __writeback_single_inode+0xcd4/0x1350 [ 1408.114059][T22625] writeback_sb_inodes+0x766/0x1c60 [ 1408.119813][T22625] wb_writeback+0x1bf/0xb90 [ 1408.124874][T22625] wb_workfn+0x14f/0xc00 [ 1408.129786][T22625] process_one_work+0xa0e/0x1980 [ 1408.135263][T22625] worker_thread+0x5ef/0xe50 [ 1408.140388][T22625] kthread+0x370/0x450 [ 1408.144991][T22625] ret_from_fork+0x72b/0xd50 [ 1408.150111][T22625] ret_from_fork_asm+0x1a/0x30 [ 1408.155421][T22625] [ 1408.155421][T22625] other info that might help us debug this: [ 1408.155421][T22625] [ 1408.165643][T22625] Possible unsafe locking scenario: [ 1408.165643][T22625] [ 1408.173089][T22625] CPU0 CPU1 [ 1408.178455][T22625] ---- ---- [ 1408.183811][T22625] lock(&tree->tree_lock/1); [ 1408.188510][T22625] lock(&HFS_I(tree->inode)->extents_lock); [ 1408.197049][T22625] lock(&tree->tree_lock/1); [ 1408.204268][T22625] lock(&HFS_I(tree->inode)->extents_lock); [ 1408.210256][T22625] [ 1408.210256][T22625] *** DEADLOCK *** [ 1408.210256][T22625] [ 1408.218395][T22625] 3 locks held by kworker/u8:15/22625: [ 1408.223942][T22625] #0: ffff888020abf940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1408.234707][T22625] #1: ffffc900077ffd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1408.246598][T22625] #2: ffff8880355ae0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1408.256419][T22625] [ 1408.256419][T22625] stack backtrace: [ 1408.262431][T22625] CPU: 1 UID: 0 PID: 22625 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.262482][T22625] Tainted: [L]=SOFTLOCKUP [ 1408.262496][T22625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1408.262521][T22625] Workqueue: writeback wb_workfn (flush-7:4) [ 1408.262588][T22625] Call Trace: [ 1408.262603][T22625] [ 1408.262617][T22625] dump_stack_lvl+0x100/0x190 [ 1408.262654][T22625] print_circular_bug.cold+0x178/0x1c7 [ 1408.262715][T22625] check_noncircular+0x146/0x160 [ 1408.262750][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.262802][T22625] __lock_acquire+0x14b8/0x2630 [ 1408.262847][T22625] ? __pfx_stack_trace_save+0x10/0x10 [ 1408.262907][T22625] lock_acquire+0x1b1/0x370 [ 1408.262945][T22625] ? hfs_extend_file+0xa6/0xcf0 [ 1408.263003][T22625] ? __pfx___might_resched+0x10/0x10 [ 1408.263049][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263092][T22625] ? add_lock_to_list+0x99/0x110 [ 1408.263155][T22625] __mutex_lock+0x1a4/0x1b10 [ 1408.263211][T22625] ? hfs_extend_file+0xa6/0xcf0 [ 1408.263266][T22625] ? hfs_extend_file+0xa6/0xcf0 [ 1408.263322][T22625] ? hfs_write_inode+0xce/0xab0 [ 1408.263355][T22625] ? __writeback_single_inode+0xcd4/0x1350 [ 1408.263418][T22625] ? __pfx___mutex_lock+0x10/0x10 [ 1408.263473][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263516][T22625] ? lock_acquire+0x1b1/0x370 [ 1408.263559][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263602][T22625] ? trace_contention_end+0x122/0x170 [ 1408.263646][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263694][T22625] ? hfs_extend_file+0xa6/0xcf0 [ 1408.263748][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263791][T22625] hfs_extend_file+0xa6/0xcf0 [ 1408.263848][T22625] ? __pfx_hfs_extend_file+0x10/0x10 [ 1408.263902][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.263953][T22625] hfs_bmap_reserve+0x2ab/0x3a0 [ 1408.264009][T22625] __hfs_ext_write_extent+0x3c4/0x510 [ 1408.264064][T22625] ? hfs_find_init+0x273/0x330 [ 1408.264103][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.264150][T22625] hfs_ext_write_extent+0x1b7/0x200 [ 1408.264206][T22625] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1408.264267][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.264310][T22625] ? __mpage_writepages+0x1a8/0x210 [ 1408.264346][T22625] ? __pfx___mpage_writepages+0x10/0x10 [ 1408.264383][T22625] hfs_write_inode+0xce/0xab0 [ 1408.264423][T22625] ? __pfx_hfs_write_inode+0x10/0x10 [ 1408.264456][T22625] ? __lock_acquire+0x4a5/0x2630 [ 1408.264509][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1408.264566][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1408.264622][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.264672][T22625] __writeback_single_inode+0xcd4/0x1350 [ 1408.264733][T22625] ? __pfx___writeback_single_inode+0x10/0x10 [ 1408.264789][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.264832][T22625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1408.264880][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.264927][T22625] writeback_sb_inodes+0x766/0x1c60 [ 1408.264994][T22625] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1408.265050][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265124][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265167][T22625] ? rcu_is_watching+0x12/0xc0 [ 1408.265217][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265262][T22625] ? queue_io+0x287/0x540 [ 1408.265310][T22625] wb_writeback+0x1bf/0xb90 [ 1408.265370][T22625] ? __pfx_wb_writeback+0x10/0x10 [ 1408.265436][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265479][T22625] ? mark_held_locks+0x40/0x70 [ 1408.265517][T22625] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.265566][T22625] wb_workfn+0x14f/0xc00 [ 1408.265623][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265666][T22625] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1408.265716][T22625] ? __pfx_wb_workfn+0x10/0x10 [ 1408.265774][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265819][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265863][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.265906][T22625] ? rcu_is_watching+0x12/0xc0 [ 1408.265955][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.266002][T22625] process_one_work+0xa0e/0x1980 [ 1408.266054][T22625] ? __pfx_process_one_work+0x10/0x10 [ 1408.266094][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.266145][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.266192][T22625] worker_thread+0x5ef/0xe50 [ 1408.266241][T22625] ? kthread+0x13a/0x450 [ 1408.266276][T22625] ? __pfx_worker_thread+0x10/0x10 [ 1408.266321][T22625] kthread+0x370/0x450 [ 1408.266355][T22625] ? __pfx_kthread+0x10/0x10 [ 1408.266394][T22625] ret_from_fork+0x72b/0xd50 [ 1408.266439][T22625] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.266479][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.266523][T22625] ? __switch_to+0x800/0x1100 [ 1408.266571][T22625] ? __switch_to_asm+0x39/0x70 [ 1408.266617][T22625] ? __pfx_kthread+0x10/0x10 [ 1408.266655][T22625] ret_from_fork_asm+0x1a/0x30 [ 1408.266713][T22625] [ 1408.274664][T31899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.333436][T22625] hfs: new node 0 already hashed? [ 1408.358189][T31894] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 1408.359830][T22625] ------------[ cut here ]------------ [ 1408.790275][T22625] 1 [ 1408.790293][T22625] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:15/22625 [ 1408.803141][T22625] Modules linked in: [ 1408.807165][T22625] CPU: 1 UID: 0 PID: 22625 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.818450][T22625] Tainted: [L]=SOFTLOCKUP [ 1408.822830][T22625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1408.832969][T22625] Workqueue: writeback wb_workfn (flush-7:4) [ 1408.839029][T22625] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1408.845019][T22625] Code: f5 64 63 0a e9 27 3e d1 01 e8 3b 13 e1 00 4c 89 f7 e8 e3 64 63 0a e8 2e 13 e1 00 89 ee 48 c7 c7 c0 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 29 41 d1 01 e8 12 13 e1 00 e8 cd 4b 4d 00 e9 85 43 d1 [ 1408.864842][T22625] RSP: 0018:ffffc900077ff020 EFLAGS: 00010282 [ 1408.870962][T22625] RAX: 000000000000001f RBX: ffff88807c9c4000 RCX: 0000000000000000 [ 1408.879265][T22625] RDX: 000000000000001f RSI: ffffffff81e71b29 RDI: fffff52000effdf5 [ 1408.887308][T22625] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1408.895880][T22625] R10: 0000000080000000 R11: 0000000073203f20 R12: dffffc0000000000 [ 1408.903878][T22625] R13: ffff8880355ae000 R14: ffff8880355ae0d8 R15: 0000000000000000 [ 1408.912452][T22625] FS: 0000000000000000(0000) GS:ffff888124484000(0000) knlGS:0000000000000000 [ 1408.921639][T22625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1408.928403][T22625] CR2: 00007fc08fdea2f8 CR3: 0000000069f10000 CR4: 0000000000350ef0 [ 1408.936391][T22625] Call Trace: [ 1408.939713][T22625] [ 1408.942672][T22625] ? _raw_spin_unlock+0x28/0x50 [ 1408.947553][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.953253][T22625] ? hfs_bnode_put+0x208/0x480 [ 1408.958071][T22625] hfs_bmap_alloc+0x5a7/0x6b0 [ 1408.962920][T22625] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1408.968161][T22625] ? __asan_memcpy+0x3c/0x60 [ 1408.972951][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.978643][T22625] ? hfs_bnode_read.part.0+0x298/0x330 [ 1408.984231][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1408.989900][T22625] ? folio_mark_accessed+0xf3/0x1040 [ 1408.995302][T22625] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1409.001674][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.006907][T22625] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1409.013345][T22625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1409.018807][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.024886][T22625] ? _raw_spin_unlock+0x28/0x50 [ 1409.029778][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.035485][T22625] ? hfs_bnode_put+0x208/0x480 [ 1409.040316][T22625] hfs_brec_insert+0x8ba/0xc20 [ 1409.045118][T22625] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1409.050496][T22625] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1409.055689][T22625] __hfs_ext_write_extent+0x3ef/0x510 [ 1409.061122][T22625] ? hfs_find_init+0x273/0x330 [ 1409.065914][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.071605][T22625] hfs_ext_write_extent+0x1b7/0x200 [ 1409.076851][T22625] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1409.082640][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.088330][T22625] ? __mpage_writepages+0x1a8/0x210 [ 1409.093549][T22625] ? __pfx___mpage_writepages+0x10/0x10 [ 1409.099255][T22625] hfs_write_inode+0xce/0xab0 [ 1409.104048][T22625] ? __pfx_hfs_write_inode+0x10/0x10 [ 1409.109340][T22625] ? __lock_acquire+0x4a5/0x2630 [ 1409.114817][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1409.121077][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1409.126955][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.132789][T22625] __writeback_single_inode+0xcd4/0x1350 [ 1409.138610][T22625] ? __pfx___writeback_single_inode+0x10/0x10 [ 1409.144772][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.150443][T22625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1409.155810][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.161472][T22625] writeback_sb_inodes+0x766/0x1c60 [ 1409.166763][T22625] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1409.172452][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.178205][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.183874][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.188705][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.194379][T22625] ? queue_io+0x287/0x540 [ 1409.198785][T22625] wb_writeback+0x1bf/0xb90 [ 1409.203344][T22625] ? __pfx_wb_writeback+0x10/0x10 [ 1409.208548][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.214234][T22625] ? mark_held_locks+0x40/0x70 [ 1409.219120][T22625] ? _raw_spin_unlock_irq+0x23/0x50 [ 1409.224447][T22625] wb_workfn+0x14f/0xc00 [ 1409.229311][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.234959][T22625] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1409.241824][T22625] ? __pfx_wb_workfn+0x10/0x10 [ 1409.246640][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.252501][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.258163][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.263843][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.268706][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.274452][T22625] process_one_work+0xa0e/0x1980 [ 1409.279444][T22625] ? __pfx_process_one_work+0x10/0x10 [ 1409.284894][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.290573][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.296311][T22625] worker_thread+0x5ef/0xe50 [ 1409.300949][T22625] ? kthread+0x13a/0x450 [ 1409.305243][T22625] ? __pfx_worker_thread+0x10/0x10 [ 1409.310382][T22625] kthread+0x370/0x450 [ 1409.314518][T22625] ? __pfx_kthread+0x10/0x10 [ 1409.319133][T22625] ret_from_fork+0x72b/0xd50 [ 1409.323763][T22625] ? __pfx_ret_from_fork+0x10/0x10 [ 1409.329356][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.335469][T22625] ? __switch_to+0x800/0x1100 [ 1409.340185][T22625] ? __switch_to_asm+0x39/0x70 [ 1409.345367][T22625] ? __pfx_kthread+0x10/0x10 [ 1409.350022][T22625] ret_from_fork_asm+0x1a/0x30 [ 1409.354935][T22625] [ 1409.358003][T22625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1409.365350][T22625] CPU: 1 UID: 0 PID: 22625 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.376768][T22625] Tainted: [L]=SOFTLOCKUP [ 1409.381086][T22625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1409.391159][T22625] Workqueue: writeback wb_workfn (flush-7:4) [ 1409.397190][T22625] Call Trace: [ 1409.400465][T22625] [ 1409.403390][T22625] dump_stack_lvl+0x100/0x190 [ 1409.408087][T22625] vpanic+0x552/0x970 [ 1409.412096][T22625] ? __pfx_vpanic+0x10/0x10 [ 1409.416618][T22625] ? lock_release+0x245/0x310 [ 1409.421329][T22625] panic+0xd1/0xe0 [ 1409.425062][T22625] ? __pfx_panic+0x10/0x10 [ 1409.429497][T22625] ? check_panic_on_warn+0x1f/0x90 [ 1409.434625][T22625] check_panic_on_warn.cold+0x19/0x34 [ 1409.440042][T22625] ? hfs_bnode_create.cold+0x41/0x49 [ 1409.445530][T22625] __warn.cold+0x191/0x328 [ 1409.450010][T22625] __report_bug+0x296/0x3d0 [ 1409.454538][T22625] ? hfs_bnode_create.cold+0x41/0x49 [ 1409.459857][T22625] ? __pfx___report_bug+0x10/0x10 [ 1409.464913][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.470595][T22625] ? preempt_schedule_thunk+0x16/0x30 [ 1409.476077][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.481743][T22625] ? preempt_count_add+0x76/0x150 [ 1409.486801][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.492483][T22625] ? __wake_up_klogd+0xe2/0x140 [ 1409.497449][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.503113][T22625] ? vprintk_emit+0x1c9/0x6b0 [ 1409.507828][T22625] ? __pfx_vprintk_emit+0x10/0x10 [ 1409.512925][T22625] ? hfs_bnode_create.cold+0x41/0x49 [ 1409.518256][T22625] report_bug+0xb2/0x220 [ 1409.522533][T22625] ? hfs_bnode_create.cold+0x41/0x49 [ 1409.527885][T22625] handle_bug+0x16a/0x2a0 [ 1409.532236][T22625] exc_invalid_op+0x17/0x50 [ 1409.536749][T22625] asm_exc_invalid_op+0x1a/0x20 [ 1409.541612][T22625] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1409.547526][T22625] Code: f5 64 63 0a e9 27 3e d1 01 e8 3b 13 e1 00 4c 89 f7 e8 e3 64 63 0a e8 2e 13 e1 00 89 ee 48 c7 c7 c0 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 29 41 d1 01 e8 12 13 e1 00 e8 cd 4b 4d 00 e9 85 43 d1 [ 1409.567188][T22625] RSP: 0018:ffffc900077ff020 EFLAGS: 00010282 [ 1409.573297][T22625] RAX: 000000000000001f RBX: ffff88807c9c4000 RCX: 0000000000000000 [ 1409.581286][T22625] RDX: 000000000000001f RSI: ffffffff81e71b29 RDI: fffff52000effdf5 [ 1409.589266][T22625] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1409.597245][T22625] R10: 0000000080000000 R11: 0000000073203f20 R12: dffffc0000000000 [ 1409.605261][T22625] R13: ffff8880355ae000 R14: ffff8880355ae0d8 R15: 0000000000000000 [ 1409.613272][T22625] ? vprintk_emit+0x1c9/0x6b0 [ 1409.617990][T22625] ? _raw_spin_unlock+0x28/0x50 [ 1409.623036][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.628701][T22625] ? hfs_bnode_put+0x208/0x480 [ 1409.633527][T22625] hfs_bmap_alloc+0x5a7/0x6b0 [ 1409.638246][T22625] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1409.643472][T22625] ? __asan_memcpy+0x3c/0x60 [ 1409.648084][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.653747][T22625] ? hfs_bnode_read.part.0+0x298/0x330 [ 1409.659235][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.665149][T22625] ? folio_mark_accessed+0xf3/0x1040 [ 1409.670467][T22625] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1409.676233][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.681024][T22625] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1409.687396][T22625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1409.692829][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.698480][T22625] ? _raw_spin_unlock+0x28/0x50 [ 1409.703441][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.709100][T22625] ? hfs_bnode_put+0x208/0x480 [ 1409.713891][T22625] hfs_brec_insert+0x8ba/0xc20 [ 1409.718693][T22625] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1409.724004][T22625] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1409.729098][T22625] __hfs_ext_write_extent+0x3ef/0x510 [ 1409.734527][T22625] ? hfs_find_init+0x273/0x330 [ 1409.739327][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.745012][T22625] hfs_ext_write_extent+0x1b7/0x200 [ 1409.750250][T22625] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1409.756034][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.761689][T22625] ? __mpage_writepages+0x1a8/0x210 [ 1409.766898][T22625] ? __pfx___mpage_writepages+0x10/0x10 [ 1409.772548][T22625] hfs_write_inode+0xce/0xab0 [ 1409.777251][T22625] ? __pfx_hfs_write_inode+0x10/0x10 [ 1409.782560][T22625] ? __lock_acquire+0x4a5/0x2630 [ 1409.787556][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1409.793409][T22625] ? __writeback_single_inode+0x454/0x1350 [ 1409.799264][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.804931][T22625] __writeback_single_inode+0xcd4/0x1350 [ 1409.810620][T22625] ? __pfx___writeback_single_inode+0x10/0x10 [ 1409.816721][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.822374][T22625] ? do_raw_spin_unlock+0x145/0x1e0 [ 1409.827602][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.833261][T22625] writeback_sb_inodes+0x766/0x1c60 [ 1409.838512][T22625] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1409.844184][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.849876][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.855571][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.860389][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.866049][T22625] ? queue_io+0x287/0x540 [ 1409.870404][T22625] wb_writeback+0x1bf/0xb90 [ 1409.874950][T22625] ? __pfx_wb_writeback+0x10/0x10 [ 1409.880011][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.885668][T22625] ? mark_held_locks+0x40/0x70 [ 1409.890464][T22625] ? _raw_spin_unlock_irq+0x23/0x50 [ 1409.895727][T22625] wb_workfn+0x14f/0xc00 [ 1409.900009][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.905663][T22625] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1409.911508][T22625] ? __pfx_wb_workfn+0x10/0x10 [ 1409.916366][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.922022][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.927673][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.933318][T22625] ? rcu_is_watching+0x12/0xc0 [ 1409.938107][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.943796][T22625] process_one_work+0xa0e/0x1980 [ 1409.948800][T22625] ? __pfx_process_one_work+0x10/0x10 [ 1409.954218][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.959900][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1409.965574][T22625] worker_thread+0x5ef/0xe50 [ 1409.970191][T22625] ? kthread+0x13a/0x450 [ 1409.974447][T22625] ? __pfx_worker_thread+0x10/0x10 [ 1409.979604][T22625] kthread+0x370/0x450 [ 1409.983686][T22625] ? __pfx_kthread+0x10/0x10 [ 1409.988290][T22625] ret_from_fork+0x72b/0xd50 [ 1409.992917][T22625] ? __pfx_ret_from_fork+0x10/0x10 [ 1409.998044][T22625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1410.003703][T22625] ? __switch_to+0x800/0x1100 [ 1410.008412][T22625] ? __switch_to_asm+0x39/0x70 [ 1410.013196][T22625] ? __pfx_kthread+0x10/0x10 [ 1410.017807][T22625] ret_from_fork_asm+0x1a/0x30 [ 1410.022692][T22625] [ 1410.025935][T22625] Kernel Offset: disabled [ 1410.030246][T22625] Rebooting in 86400 seconds..