last executing test programs: 22.924271442s ago: executing program 0 (id=762): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 22.284251189s ago: executing program 4 (id=778): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 22.09228108s ago: executing program 4 (id=781): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 21.991875836s ago: executing program 0 (id=784): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 21.911525741s ago: executing program 0 (id=785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x0) 21.785268309s ago: executing program 0 (id=788): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x210014, &(0x7f0000000040)=ANY=[], 0x5, 0x1c4, &(0x7f00000002c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f00000000c0)='./file1\x00', 0x0) 21.504112835s ago: executing program 0 (id=792): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x0) 21.167657595s ago: executing program 4 (id=795): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000000)="0015e8bbffa06120000a", 0xa, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'sha512\x00'}}) 20.925446689s ago: executing program 4 (id=798): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 20.556228011s ago: executing program 0 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_MTU={0x8}]}, 0x4c}, 0x1, 0xba01}, 0x4000040) 20.481521385s ago: executing program 32 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_MTU={0x8}]}, 0x4c}, 0x1, 0xba01}, 0x4000040) 20.253603709s ago: executing program 4 (id=804): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000440)=0x22af, 0x4) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 19.55217588s ago: executing program 4 (id=810): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}}, 0x0) 19.396707179s ago: executing program 33 (id=810): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}}, 0x0) 3.74109062s ago: executing program 2 (id=994): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="3678f68852ed9dff79e6baa0a717d3c8a69d87ad4d5dc2733c0a8163e3eac273755b7824c45c69134b6442eb09df827fee7afc88f1c7d5c686166248bd493fb28131bfd2a352461dc5db360dc77f62eb033dec2d1cfabd759e4c040c4169a9662766121aee72ba341505bf70ca632cab3e779db90cc0e689b6ea2a6ec023af3ce32943f7f3237baea32d85a23a427243895cf2af02711188e9b912dd1ed0cca10f7a5bd7eac8e1d11b3017fa5ac2062b38367dfb772a90540e4fef4d423318e04eca5be2d7bc8cfdc7dea18cd2334ac702d60c0a73418e8248776f4af3b4748e"], 0x1, 0x5f55, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 3.41035395s ago: executing program 5 (id=1001): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") lsetxattr$security_ima(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYBLOB="03021c00"], 0xa, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 2.733615199s ago: executing program 5 (id=1009): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/182, 0xb6}], 0x1) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 2.622133846s ago: executing program 2 (id=1010): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f000000cd80)={[{}, {@force}, {@barrier}, {@uid={'uid', 0x3d, 0xee01}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@gid}, {@type={'type', 0x3d, "998fd8e9"}}]}, 0x2, 0x6f7, &(0x7f00000010c0)="$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") lstat(&(0x7f0000000080)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141c42, 0x16e) 1.923480417s ago: executing program 2 (id=1021): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r0, 0x40044591, 0x0) writev(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)='g', 0x1}], 0x2) 1.827937383s ago: executing program 6 (id=1023): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r0], 0x50}}, 0x0) 1.812201173s ago: executing program 5 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000007c0)={0x6, 0xffffffc3, 0xffffdffc, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a0001000600000003dcdf250220200000f6"], 0x2c}}, 0x4040000) 1.800214635s ago: executing program 3 (id=1026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.721170939s ago: executing program 6 (id=1027): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000680)) 1.664715123s ago: executing program 5 (id=1028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x0, 0x187, &(0x7f0000001400)="$eJzslTtPOkEUxc8Mr/z/McHaRhNJgMJld1EjhYW1hSa+YifRlaCLGKAQOjsLe2s/ATWx8YNYqJUNdtpYrJnZgR3xWbCJj/sr7pwZ7lxm7iRnQRDEn+X25uG6nU5xoUeQQkKt30WCHK7ld5JP2WR56eLMvL/qXC4WBusxAJ739f+PAnhsexLIvS93p9S4Ct7Xa+DIKr0BBkPpLXCsK+2AYVPpPU1XRb5h7JZdx9iuujtCmCJYItgi5AfP1z1m/RaI8zHt93qztV90XacWovisf90FjnntfPp79Xpjav2zwGEpnQfDitJzSPR647ckuD/GokH9yPDvH+s9W5h9/D3iJKTKp/gmFyTx40XgT945Q1rzp6jmH7lG5TBXb7amypViySk5B7adnzWnTXPGzkkj8uMH/vdP+tN/rX7sndw4i+Oo2GjULD/257Yf33LcuPQ/jsykP2dqTUd+D0bZhBgyETUnCIIgCIIgCIIgCIIgCIIYOuNg8AYpvFqyl2X2cwAAAP//Fkh3Bw==") ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x4, 0x6, 0xe, 0x1, 0x9, 0x7}, {0x40000001, 0x10000, 0x0, 0x2, 0x7, 0x0, 0x2}, {0xc0000000, 0x0, 0x5, 0x2, 0x1, 0x9, 0x4}, {0x1, 0x800, 0x6, 0x10000, 0x8, 0x6, 0x80000001}]}) 1.640261594s ago: executing program 6 (id=1029): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4) sendmmsg(r0, &(0x7f0000005940)=[{{&(0x7f0000000380)=@rc={0x1f, @any, 0x3}, 0x80, 0x0}}], 0x1, 0x4001) 1.477532403s ago: executing program 6 (id=1030): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x19, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 1.477149684s ago: executing program 2 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffffff0000000016000000140001800d000100756465599cb2a6cb35c12dfe"], 0x28}}, 0x0) 1.379307309s ago: executing program 3 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.336703242s ago: executing program 2 (id=1033): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1.228289338s ago: executing program 3 (id=1034): unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f0000000280)) 1.168836512s ago: executing program 3 (id=1035): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0xffff, 0x5, 0x831a, 0x1, "6d7fcb0b0e0000efffffffffffffff00", 0x3, 0x201}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 1.040144259s ago: executing program 6 (id=1036): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) close_range(r0, r0, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002080)={r0, r0}, 0xc) 1.008926191s ago: executing program 5 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) 932.258205ms ago: executing program 3 (id=1038): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@barrier}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@force}]}, 0x1, 0x6f0, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20) 919.890206ms ago: executing program 6 (id=1039): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x701080a, &(0x7f00000005c0)={[{@gid}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard_size={'discard', 0x3d, 0xff}}, {}, {@uid}, {@quota}, {@discard}]}, 0x24, 0x623a, &(0x7f00000089c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000000600)=""/205, 0xcd) 750.308386ms ago: executing program 3 (id=1040): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='./file0\x00', 0x1a00040, &(0x7f0000000a80)={[{@numtail}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@flush}, {@uni_xlateno}, {@rodir}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@utf8no}]}, 0x3, 0x35f, &(0x7f0000000bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4087, 0xff7) 703.511619ms ago: executing program 5 (id=1041): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_012={0x2, 0x2, 0x0, "fc20"}, @main=@item_4={0x3, 0x0, 0xa, "3b23a4d3"}, @main=@item_012={0x1, 0x0, 0xc, "8f"}, @local=@item_4={0x3, 0x2, 0xa, '_0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xb3, 0x28400, 0x23456}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 580.478696ms ago: executing program 1 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000000000000008001e00ac1414aa06001d"], 0x2c}}, 0x20000050) 414.027886ms ago: executing program 1 (id=1044): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 294.720123ms ago: executing program 1 (id=1045): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x5, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x68, 0x0, 0x9a, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 80.249666ms ago: executing program 1 (id=1046): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00160014000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee84400", 0x35}], 0x1}, 0x0) 32.488938ms ago: executing program 2 (id=1047): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 0s ago: executing program 1 (id=1048): setresuid(0xee01, 0xee00, 0x0) r0 = geteuid() setfsuid(r0) kernel console output (not intermixed with test programs): 2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.732252][ T4442] F2FS-fs (loop2): invalid crc value [ 61.737829][ T4473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.780715][ T4473] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.794250][ T4442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.873367][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.874440][ T4300] hfsplus: b-tree write err: -5, ino 4 [ 61.910417][ T4473] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.66: Invalid block bitmap block 0 in block_group 0 [ 61.930787][ T4442] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.962297][ T4442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.981092][ T4473] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 61.998963][ T4473] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.66: attempt to clear invalid blocks 983261 len 1 [ 62.021934][ T4472] XFS (loop4): Mounting V5 Filesystem [ 62.027746][ T4473] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.66: Invalid inode table block 0 in block_group 0 [ 62.057013][ T4473] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 62.133198][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 62.151593][ T4491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 62.158404][ T4473] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 62.166854][ T4442] attempt to access beyond end of device [ 62.166854][ T4442] loop2: rw=2049, want=45104, limit=40427 [ 62.172727][ T4473] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.66: Invalid inode table block 0 in block_group 0 [ 62.204875][ T4473] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 62.211343][ T4472] XFS (loop4): Ending clean mount [ 62.229328][ T4473] EXT4-fs error (device loop0): ext4_truncate:4279: inode #11: comm syz.0.66: mark_inode_dirty error [ 62.242174][ T4491] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 62.256869][ T4473] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 62.278668][ T4233] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 62.287732][ T4473] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.66: Invalid inode table block 0 in block_group 0 [ 62.293172][ T4233] usb 2-1: config 0 has no interface number 0 [ 62.312733][ T4233] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.314987][ T4473] EXT4-fs (loop0): 1 truncate cleaned up [ 62.361186][ T4279] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 62.361284][ T4473] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 62.383619][ T4279] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.395182][ T4494] set_capacity_and_notify: 3 callbacks suppressed [ 62.395196][ T4494] loop3: detected capacity change from 0 to 512 [ 62.459916][ T4494] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 62.472031][ T4195] XFS (loop4): Unmounting Filesystem [ 62.513366][ T4233] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 62.537600][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.556309][ T4233] usb 2-1: Product: syz [ 62.560498][ T4233] usb 2-1: Manufacturer: syz [ 62.571938][ T4233] usb 2-1: SerialNumber: syz [ 62.619892][ T4233] usb 2-1: config 0 descriptor?? [ 62.668833][ T4494] EXT4-fs (loop3): Test dummy encryption mode enabled [ 62.687094][ T4494] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000. Quota mode: none. [ 62.694830][ T4233] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 62.773229][ T4233] em28xx 2-1:0.132: Video interface 132 found: [ 63.072582][ T4494] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 63.102410][ T4514] loop0: detected capacity change from 0 to 2048 [ 63.121886][ T4494] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.80: Directory hole found for htree leaf block 0 [ 63.132844][ T4520] mmap: syz.4.81 (4520) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 63.147385][ T4233] em28xx 2-1:0.132: chip ID is em2765 [ 63.176403][ T4494] EXT4-fs (loop3): Remounting filesystem read-only [ 63.220609][ T4514] loop0: p2 < > p4 [ 63.239645][ T4514] loop0: p4 size 262144 extends beyond EOD, truncated [ 63.473338][ T4233] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 63.480692][ T4532] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.482424][ T4233] em28xx 2-1:0.132: board has no eeprom [ 63.493692][ T4532] exFAT-fs (loop3): unable to read boot sector [ 63.506298][ T4532] exFAT-fs (loop3): failed to read boot sector [ 63.512467][ T4532] exFAT-fs (loop3): failed to recognize exfat type [ 63.594113][ T4233] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 63.604227][ T4233] em28xx 2-1:0.132: analog set to bulk mode. [ 63.613854][ T4225] em28xx 2-1:0.132: Registering V4L2 extension [ 63.653250][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.707018][ T4233] usb 2-1: USB disconnect, device number 2 [ 63.715167][ T4225] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 63.736588][ T4233] em28xx 2-1:0.132: Disconnecting em28xx [ 63.811850][ T4522] loop2: detected capacity change from 0 to 32768 [ 63.824093][ T4225] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 63.832187][ T4225] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 63.850783][ T4225] em28xx 2-1:0.132: No AC97 audio processor [ 63.869533][ T4545] loop4: detected capacity change from 0 to 512 [ 63.882106][ T4225] usb 2-1: Decoder not found [ 63.893759][ T4225] em28xx 2-1:0.132: failed to create media graph [ 63.900164][ T4225] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 63.913149][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 63.928185][ T4225] em28xx 2-1:0.132: Remote control support is not available for this card. [ 63.945452][ T4522] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.88 (4522) [ 63.972638][ T4233] em28xx 2-1:0.132: Closing input extension [ 63.994316][ T4549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 64.058560][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 64.071499][ T4233] em28xx 2-1:0.132: Freeing device [ 64.107719][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9648, setting to 1024 [ 64.173657][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.203619][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.219395][ T4522] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 64.235402][ T24] usb 1-1: config 0 descriptor?? [ 64.245823][ T4522] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.303457][ T4514] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 64.314413][ T4522] BTRFS info (device loop2): use zstd compression, level 3 [ 64.321677][ T4522] BTRFS info (device loop2): using free space tree [ 64.334297][ T24] hub 1-1:0.0: USB hub found [ 64.370093][ T4522] BTRFS info (device loop2): has skinny extents [ 64.563394][ T24] hub 1-1:0.0: 1 port detected [ 64.649665][ T4522] BTRFS info (device loop2): enabling ssd optimizations [ 64.802259][ T24] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 64.826199][ T24] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 64.984310][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 65.000262][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 65.070386][ T24] usb 1-1: USB disconnect, device number 2 [ 65.139651][ T4571] loop1: detected capacity change from 0 to 40427 [ 65.211140][ T4571] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.244880][ T4571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.278456][ T4571] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 65.330797][ T4571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.422229][ T4571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.440345][ T4571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.627056][ T4621] loop0: detected capacity change from 0 to 4096 [ 65.697683][ T4621] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 65.790978][ T4631] netlink: 'syz.3.123': attribute type 8 has an invalid length. [ 65.854426][ T4631] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 65.879851][ T4631] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.123'. [ 65.980558][ T4184] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 66.018268][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.245041][ T4646] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.696349][ C1] sd 0:0:1:0: tag#754 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 66.706260][ C1] sd 0:0:1:0: tag#754 CDB: Read(6) 08 00 00 00 00 00 00 00 98 18 00 00 [ 66.752274][ T4664] loop0: detected capacity change from 0 to 256 [ 66.852685][ T4659] loop3: detected capacity change from 0 to 32768 [ 66.899353][ T4664] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d) [ 66.917150][ T4659] gfs2: not a GFS2 filesystem [ 67.005082][ T4635] loop2: detected capacity change from 0 to 32768 [ 67.089944][ T4674] loop1: detected capacity change from 0 to 128 [ 67.150141][ T4674] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 67.331027][ T4635] XFS (loop2): Mounting V5 Filesystem [ 67.424281][ T4635] XFS (loop2): Ending clean mount [ 67.472831][ T4635] XFS (loop2): Quotacheck needed: Please wait. [ 67.590131][ T4635] XFS (loop2): Quotacheck: Done. [ 67.732946][ T4692] loop4: detected capacity change from 0 to 2048 [ 67.756450][ T4186] XFS (loop2): Unmounting Filesystem [ 67.824174][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop4 [ 67.826182][ T4701] loop1: detected capacity change from 0 to 512 [ 67.832197][ T4692] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.849135][ T4692] NILFS (loop4): mounting unchecked fs [ 67.860204][ T4701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.933869][ T4701] EXT4-fs (loop1): 1 truncate cleaned up [ 67.933896][ T4701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.940250][ T4701] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.149: inode #2: comm syz.1.149: iget: illegal inode # [ 67.955445][ T4692] NILFS (loop4): recovery complete [ 67.969546][ T4704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.254323][ T4708] loop0: detected capacity change from 0 to 64 [ 68.731636][ T4732] loop0: detected capacity change from 0 to 256 [ 68.845995][ T4732] FAT-fs (loop0): Directory bread(block 64) failed [ 68.863502][ T4732] FAT-fs (loop0): Directory bread(block 65) failed [ 68.879017][ T4732] FAT-fs (loop0): Directory bread(block 66) failed [ 68.913458][ T4742] loop2: detected capacity change from 0 to 128 [ 68.933370][ T4732] FAT-fs (loop0): Directory bread(block 67) failed [ 68.940029][ T4732] FAT-fs (loop0): Directory bread(block 68) failed [ 68.975836][ T4732] FAT-fs (loop0): Directory bread(block 69) failed [ 69.011707][ T4742] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.043324][ T4732] FAT-fs (loop0): Directory bread(block 70) failed [ 69.067512][ T4732] FAT-fs (loop0): Directory bread(block 71) failed [ 69.110215][ T4742] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.123363][ T4732] FAT-fs (loop0): Directory bread(block 72) failed [ 69.156038][ T4732] FAT-fs (loop0): Directory bread(block 73) failed [ 69.272875][ T4300] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.746363][ T4758] loop4: detected capacity change from 0 to 4096 [ 69.755233][ T4770] loop3: detected capacity change from 0 to 22 [ 69.761888][ T4741] loop1: detected capacity change from 0 to 32768 [ 69.781346][ T4758] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 69.802594][ T4764] loop0: detected capacity change from 0 to 8192 [ 69.814414][ T4770] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 69.864042][ T4770] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 70.163480][ T4774] loop0: detected capacity change from 0 to 64 [ 70.298540][ T4774] hfs: hfs: Invalid key length: 94 [ 70.480046][ T4184] hfs: node 4:3 still has 1 user(s)! [ 70.890361][ T4793] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 71.166469][ T4810] binder: 4809:4810 ioctl c018620c 200000000300 returned -22 [ 71.183376][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 71.241308][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 71.263276][ T4607] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.278586][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288044][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.298066][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 71.633435][ T4607] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 71.666108][ T4607] usb 2-1: config 0 has no interface number 0 [ 71.674486][ T4826] SQUASHFS error: Failed to read block 0x2d7: -5 [ 71.686656][ T4826] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 71.703562][ T4607] usb 2-1: config 0 interface 142 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.745458][ T4607] usb 2-1: config 0 interface 142 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.780073][ T4607] usb 2-1: config 0 interface 142 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.813406][ T4607] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 71.832901][ T4607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.850992][ T4804] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 71.854941][ T4607] usb 2-1: config 0 descriptor?? [ 71.875578][ T4804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 71.920166][ T4804] F2FS-fs (loop3): invalid crc value [ 71.943434][ T4804] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 71.973240][ T4804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.022513][ T4804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 72.041519][ T4804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 72.074455][ T4804] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 72.081534][ T4804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.346693][ T4607] hid-udraw 0003:20D6:CB17.0001: item fetching failed at offset 5/7 [ 72.383775][ T4607] hid-udraw 0003:20D6:CB17.0001: parse failed [ 72.407368][ T4607] hid-udraw: probe of 0003:20D6:CB17.0001 failed with error -22 [ 72.597888][ T4607] usb 2-1: USB disconnect, device number 3 [ 72.663538][ T4857] syz.4.222 uses obsolete (PF_INET,SOCK_PACKET) [ 72.830623][ T4847] set_capacity_and_notify: 6 callbacks suppressed [ 72.830638][ T4847] loop2: detected capacity change from 0 to 32768 [ 72.985945][ T4847] XFS (loop2): Mounting V5 Filesystem [ 73.074527][ T4847] XFS (loop2): Ending clean mount [ 73.242023][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 73.268548][ T4186] XFS (loop2): Unmounting Filesystem [ 73.334136][ T4888] netlink: 5 bytes leftover after parsing attributes in process `syz.3.234'. [ 73.343198][ T4853] loop0: detected capacity change from 0 to 32768 [ 73.436523][ T26] audit: type=1326 audit(1770960656.079:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.513139][ T26] audit: type=1326 audit(1770960656.079:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.608818][ T26] audit: type=1326 audit(1770960656.079:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.670770][ T4853] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.691746][ T26] audit: type=1326 audit(1770960656.079:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.799562][ T4907] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.241'. [ 73.830897][ T26] audit: type=1326 audit(1770960656.079:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.893316][ T26] audit: type=1326 audit(1770960656.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 73.935115][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 73.940767][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 73.955508][ T4912] loop3: detected capacity change from 0 to 512 [ 74.015834][ T26] audit: type=1326 audit(1770960656.079:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 74.053521][ T4600] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.162205][ T4912] EXT4-fs (loop3): 1 orphan inode deleted [ 74.163184][ T26] audit: type=1326 audit(1770960656.079:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 74.175125][ T4912] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,noquota,init_itable,dax=never,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 74.212922][ T4912] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.264385][ T26] audit: type=1326 audit(1770960656.079:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f76626c3f79 code=0x7ffc0000 [ 74.293316][ T4600] usb 3-1: Using ep0 maxpacket: 32 [ 74.308067][ T26] audit: type=1326 audit(1770960656.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f766268484e code=0x7ffc0000 [ 74.423373][ T4600] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 74.431600][ T4600] usb 3-1: config 0 has no interface number 0 [ 74.455596][ T4600] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 74.456553][ T4934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.251'. [ 74.540769][ T4930] loop0: detected capacity change from 0 to 4096 [ 74.653546][ T4600] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 74.673599][ T4600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.681626][ T4600] usb 3-1: Product: syz [ 74.696228][ T4939] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.723173][ T4600] usb 3-1: Manufacturer: syz [ 74.738060][ T4600] usb 3-1: SerialNumber: syz [ 74.760892][ T4600] usb 3-1: config 0 descriptor?? [ 74.775687][ T4943] loop4: detected capacity change from 0 to 1024 [ 74.803630][ T4905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.960228][ T4943] attempt to access beyond end of device [ 74.960228][ T4943] loop4: rw=0, want=393222, limit=1024 [ 75.027550][ T4905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.200533][ T4928] loop1: detected capacity change from 0 to 32768 [ 75.283333][ T4600] asix 3-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 75.355459][ T4928] XFS (loop1): Mounting V5 Filesystem [ 75.483459][ T4969] loop4: detected capacity change from 0 to 1024 [ 75.503263][ T4600] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 75.518408][ T4928] XFS (loop1): Ending clean mount [ 75.533394][ T4600] asix 3-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 75.547821][ T4928] XFS (loop1): Quotacheck needed: Please wait. [ 75.556408][ T4600] asix: probe of 3-1:0.191 failed with error -71 [ 75.576878][ T4600] usb 3-1: USB disconnect, device number 2 [ 75.603362][ T4928] XFS (loop1): Quotacheck: Done. [ 75.754721][ T4942] loop3: detected capacity change from 0 to 40427 [ 75.802704][ T4198] XFS (loop1): Unmounting Filesystem [ 75.808933][ T4942] F2FS-fs (loop3): invalid crc value [ 75.899026][ T4942] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.992424][ T4975] loop4: detected capacity change from 0 to 8192 [ 76.072758][ T4942] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.156089][ T4975] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 76.212041][ T4975] REISERFS (device loop4): using ordered data mode [ 76.247318][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 76.274918][ T4975] reiserfs: using flush barriers [ 76.307315][ T4975] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.323151][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 76.332247][ T4988] netlink: 'syz.0.274': attribute type 6 has an invalid length. [ 76.407771][ T1347] cfg80211: failed to load regulatory.db [ 76.412280][ T4975] REISERFS (device loop4): checking transaction log (loop4) [ 76.504942][ T4185] attempt to access beyond end of device [ 76.504942][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 76.561179][ T4993] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 76.829204][ T4975] REISERFS (device loop4): Using tea hash to sort names [ 76.834599][ T5002] loop0: detected capacity change from 0 to 2048 [ 76.856367][ T4975] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 76.890536][ T4975] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 77.041816][ T5002] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 77.083443][ T1347] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.221258][ T5002] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.280: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 77.261297][ T5007] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.283: corrupted inode contents [ 77.308612][ T5007] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #16: comm syz.2.283: mark_inode_dirty error [ 77.322437][ T5002] EXT4-fs (loop0): Remounting filesystem read-only [ 77.377728][ T5007] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.283: corrupted inode contents [ 77.408791][ T5007] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.283: mark_inode_dirty error [ 77.457854][ T5007] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.283: corrupted inode contents [ 77.521259][ T5007] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 77.530268][ T1347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.551688][ T1347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.582952][ T1347] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 77.592252][ T5007] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.283: corrupted inode contents [ 77.630097][ T1347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.653759][ T5007] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.283: mark_inode_dirty error [ 77.689961][ T1347] usb 2-1: config 0 descriptor?? [ 77.695990][ T5007] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 77.748592][ T5007] EXT4-fs (loop2): 1 truncate cleaned up [ 77.773266][ T5007] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.818340][ T5007] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.945238][ T5024] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.955732][ T5023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 78.134893][ T5028] set_capacity_and_notify: 1 callbacks suppressed [ 78.134909][ T5028] loop0: detected capacity change from 0 to 16 [ 78.162184][ T5030] loop3: detected capacity change from 0 to 512 [ 78.229886][ T1347] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 78.261731][ T5030] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.316358][ T5028] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.363184][ T5030] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 78.372292][ T5032] loop4: detected capacity change from 0 to 4096 [ 78.404147][ T5030] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.432965][ T5030] System zones: 0-2, 18-18, 34-35 [ 78.443119][ T1347] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 78.467897][ T5032] ntfs3: loop4: ino=3, Correct links count -> 2. [ 78.470485][ T5030] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 78.493389][ T1347] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 78.579974][ T1347] arvo: probe of 0003:1E7D:30D4.0002 failed with error -71 [ 78.584110][ T5030] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 78.613722][ T5032] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 78.663132][ T5030] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.671745][ T1347] usb 2-1: USB disconnect, device number 4 [ 78.701864][ T5030] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 78.740289][ T5030] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.3.293: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 78.832754][ T5038] fido_id[5038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 78.838410][ T5041] loop0: detected capacity change from 0 to 4096 [ 78.853556][ T5030] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 78.964617][ T5041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.059556][ T5036] loop2: detected capacity change from 0 to 32768 [ 79.106269][ T5036] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.294 (5036) [ 79.135244][ T5041] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.305: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.189367][ T5041] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.305: directory missing '..' [ 79.236154][ T5036] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 79.296738][ T5036] BTRFS info (device loop2): enabling disk space caching [ 79.334004][ T5036] BTRFS info (device loop2): force clearing of disk cache [ 79.341171][ T5036] BTRFS info (device loop2): turning off barriers [ 79.435139][ T5036] BTRFS info (device loop2): setting nodatasum [ 79.441346][ T5036] BTRFS info (device loop2): enabling ssd optimizations [ 79.463501][ T5058] loop4: detected capacity change from 0 to 4096 [ 79.496708][ T5036] BTRFS info (device loop2): using spread ssd allocation scheme [ 79.526401][ T5058] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 79.573527][ T5036] BTRFS info (device loop2): disk space caching is enabled [ 79.621609][ T5036] BTRFS info (device loop2): has skinny extents [ 79.858876][ T5079] loop3: detected capacity change from 0 to 2048 [ 79.896881][ T4195] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 79.940851][ T5079] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 79.959800][ T4195] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 79.976395][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.993169][ T5079] UDF-fs: Scanning with blocksize 512 failed [ 80.052127][ T5036] BTRFS info (device loop2): clearing free space tree [ 80.082690][ T5036] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.114531][ T5079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.161422][ T5036] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.262125][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 80.266034][ T5079] overlayfs: upper fs needs to support d_type. [ 80.387397][ T5079] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.472750][ T5113] loop1: detected capacity change from 0 to 128 [ 80.478137][ T5079] overlayfs: failed to set xattr on upper [ 80.523437][ T5079] overlayfs: ...falling back to index=off,metacopy=off. [ 80.549470][ T5062] loop0: detected capacity change from 0 to 32768 [ 80.577017][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 80.577031][ T26] audit: type=1800 audit(1770960663.219:48): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 80.642849][ T5113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 80.706542][ T5113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.025564][ T5132] loop4: detected capacity change from 0 to 1024 [ 81.062129][ T5132] hfsplus: request for non-existent node 3 in B*Tree [ 81.077240][ T5132] hfsplus: request for non-existent node 3 in B*Tree [ 81.082507][ T5062] XFS (loop0): Mounting V5 Filesystem [ 81.093528][ T5132] hfsplus: invalid length 28418 has been corrected to 255 [ 81.101392][ T5132] hfsplus: invalid length 28418 has been corrected to 255 [ 81.152729][ T5132] hfsplus: walked past end of dir [ 81.204752][ T5062] XFS (loop0): Ending clean mount [ 81.400202][ T4184] XFS (loop0): Unmounting Filesystem [ 81.491467][ T5150] FAT-fs (loop4): Directory bread(block 64) failed [ 81.530254][ T5150] FAT-fs (loop4): Directory bread(block 65) failed [ 81.578472][ T5150] FAT-fs (loop4): Directory bread(block 66) failed [ 81.623475][ T5150] FAT-fs (loop4): Directory bread(block 67) failed [ 81.638376][ T5150] FAT-fs (loop4): Directory bread(block 68) failed [ 81.660252][ T5150] FAT-fs (loop4): Directory bread(block 69) failed [ 81.698351][ T5150] FAT-fs (loop4): Directory bread(block 70) failed [ 81.750832][ T5150] FAT-fs (loop4): Directory bread(block 71) failed [ 81.798693][ T5150] FAT-fs (loop4): Directory bread(block 72) failed [ 81.814775][ T5150] FAT-fs (loop4): Directory bread(block 73) failed [ 82.303063][ T5156] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.333 (5156) [ 82.409210][ T5156] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 82.451269][ T5156] BTRFS info (device loop3): enabling disk space caching [ 82.487076][ T5156] BTRFS info (device loop3): force clearing of disk cache [ 82.522603][ T5156] BTRFS info (device loop3): turning off barriers [ 82.546684][ T5156] BTRFS info (device loop3): setting nodatasum [ 82.580152][ T5156] BTRFS info (device loop3): enabling ssd optimizations [ 82.592927][ T5156] BTRFS info (device loop3): using spread ssd allocation scheme [ 82.609914][ T5156] BTRFS info (device loop3): disk space caching is enabled [ 82.637058][ T5156] BTRFS info (device loop3): has skinny extents [ 82.776714][ T5193] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.350: corrupted inode contents [ 82.860307][ T5193] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.350: mark_inode_dirty error [ 82.873893][ T5193] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.350: corrupted inode contents [ 82.904857][ T5193] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.350: mark_inode_dirty error [ 82.955433][ T5193] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.350: corrupted inode contents [ 82.973959][ T5193] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 82.983820][ T5193] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.350: corrupted inode contents [ 82.996310][ T5193] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.350: mark_inode_dirty error [ 83.017774][ T5185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.347 (5185) [ 83.023470][ T5224] netlink: 'syz.2.355': attribute type 3 has an invalid length. [ 83.040593][ T5193] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 83.051788][ T5156] BTRFS info (device loop3): clearing free space tree [ 83.059304][ T5156] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.069393][ T5156] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.085765][ T5193] EXT4-fs (loop0): 1 truncate cleaned up [ 83.116384][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.128007][ T5139] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 83.198425][ T5185] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 83.215612][ T5193] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.227028][ T26] audit: type=1800 audit(1770960665.869:49): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.333" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 83.288236][ T5185] BTRFS info (device loop4): setting nodatacow, compression disabled [ 83.349598][ T5185] BTRFS info (device loop4): turning on sync discard [ 83.379244][ T5185] BTRFS info (device loop4): turning on flush-on-commit [ 83.387660][ T5185] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 83.398813][ T5185] BTRFS info (device loop4): trying to use backup root at mount time [ 83.408820][ T5185] BTRFS info (device loop4): using free space tree [ 83.425280][ T5185] BTRFS info (device loop4): has skinny extents [ 83.523553][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.569144][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 83.628284][ T5139] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 83.668101][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.682616][ T4364] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 83.697970][ T5139] usb 2-1: config 0 descriptor?? [ 83.713333][ T5185] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 83.713522][ T5212] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.226601][ T5272] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 84.241116][ T5274] set_capacity_and_notify: 5 callbacks suppressed [ 84.241130][ T5274] loop0: detected capacity change from 0 to 1024 [ 84.283057][ T5139] hid-led 0003:1294:1320.0003: unbalanced collection at end of report description [ 84.301299][ T5139] hid-led: probe of 0003:1294:1320.0003 failed with error -22 [ 84.427090][ T5274] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.370: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.503484][ T1347] usb 2-1: USB disconnect, device number 5 [ 84.507764][ T5274] Quota error (device loop0): write_blk: dquota write failed [ 84.548208][ T5274] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 84.561447][ T5267] loop2: detected capacity change from 0 to 32768 [ 84.573975][ T5274] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.370: Failed to acquire dquot type 0 [ 84.597373][ T5274] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.370: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.635521][ T5274] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.370: Invalid inode bitmap blk 0 in block_group 0 [ 84.669732][ T144] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.686577][ T5274] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 84.727708][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 84.758758][ T5274] EXT4-fs (loop0): 1 orphan inode deleted [ 84.770759][ T5274] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 84.781127][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 85.124319][ T5316] overlayfs: failed to set xattr on upper [ 85.130582][ T5316] overlayfs: ...falling back to index=off,metacopy=off. [ 85.160545][ T5320] loop1: detected capacity change from 0 to 128 [ 85.203811][ T5316] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 85.271809][ T5320] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 85.311412][ T5320] hpfs: filesystem error: improperly stopped [ 85.336127][ T5320] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 85.350847][ T5320] hpfs: You really don't want any checks? You are crazy... [ 85.380722][ T5320] hpfs: hpfs_map_sector(): read error [ 85.387528][ T5320] hpfs: code page support is disabled [ 85.400443][ T5320] hpfs: hpfs_map_4sectors(): unaligned read [ 85.407116][ T5320] hpfs: hpfs_map_4sectors(): unaligned read [ 85.419287][ T5320] hpfs: filesystem error: unable to find root dir [ 85.758013][ T5351] loop3: detected capacity change from 0 to 256 [ 85.845410][ T5351] FAT-fs (loop3): Directory bread(block 64) failed [ 85.855784][ T5361] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 85.866673][ T5351] FAT-fs (loop3): Directory bread(block 65) failed [ 85.878713][ T5351] FAT-fs (loop3): Directory bread(block 66) failed [ 85.904581][ T5351] FAT-fs (loop3): Directory bread(block 67) failed [ 85.943587][ T5351] FAT-fs (loop3): Directory bread(block 68) failed [ 85.962080][ T5351] FAT-fs (loop3): Directory bread(block 69) failed [ 85.985567][ T5351] FAT-fs (loop3): Directory bread(block 70) failed [ 85.992139][ T5351] FAT-fs (loop3): Directory bread(block 71) failed [ 86.022672][ T5351] FAT-fs (loop3): Directory bread(block 72) failed [ 86.063244][ T5351] FAT-fs (loop3): Directory bread(block 73) failed [ 86.288240][ T5381] loop4: detected capacity change from 0 to 128 [ 86.621136][ T5395] loop2: detected capacity change from 0 to 128 [ 86.916864][ T5407] loop3: detected capacity change from 0 to 1024 [ 86.920288][ T5378] loop1: detected capacity change from 0 to 32768 [ 86.953069][ T5409] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 86.967910][ T5409] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 87.012019][ T5407] hfsplus: bad catalog entry type [ 87.016903][ T5409] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 87.256184][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 87.401466][ T5430] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 87.439061][ T5430] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 87.469022][ T5430] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 87.519194][ T5430] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 87.558139][ T5430] comedi comedi3: 8255: I/O port conflict (0x3df,4) [ 87.604467][ T5430] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 87.636121][ T5430] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 87.678749][ T5430] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 87.687193][ T1347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.723210][ T5430] comedi comedi3: 8255: I/O port conflict (0xfffffffffffff350,4) [ 87.725471][ T5445] loop1: detected capacity change from 0 to 65 [ 87.739412][ T5430] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 87.761990][ T5430] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 87.806293][ T5445] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 87.957166][ T5449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 88.090543][ T1347] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 88.108516][ T5453] loop2: detected capacity change from 0 to 512 [ 88.120430][ T1347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.138031][ T1347] usb 5-1: config 0 has no interface number 0 [ 88.146411][ T1347] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 88.157653][ T1347] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.181509][ T5453] EXT4-fs (loop2): Test dummy encryption mode enabled [ 88.191519][ T5453] EXT4-fs (loop2): Test dummy encryption mode enabled [ 88.199272][ T5453] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.299608][ T5438] XFS (loop3): Mounting V5 Filesystem [ 88.306026][ T5453] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 88.372812][ T1347] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 88.400275][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.417068][ T1347] usb 5-1: Product: syz [ 88.421667][ T5453] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.451: Directory hole found for htree leaf block 0 [ 88.439829][ T5438] XFS (loop3): Ending clean mount [ 88.441076][ T1347] usb 5-1: Manufacturer: syz [ 88.449649][ T1347] usb 5-1: SerialNumber: syz [ 88.462426][ T5438] XFS (loop3): Quotacheck needed: Please wait. [ 88.473921][ T5453] EXT4-fs (loop2): Remounting filesystem read-only [ 88.513040][ T1347] usb 5-1: config 0 descriptor?? [ 88.566176][ T5438] XFS (loop3): Quotacheck: Done. [ 88.669230][ T5281] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.709777][ T4185] XFS (loop3): Unmounting Filesystem [ 88.961204][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 89.103878][ T5281] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.123576][ T5281] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.134259][ T5281] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.141149][ T5281] usb 2-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 89.150877][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.162588][ T5485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 89.182447][ T5482] FAT-fs (loop2): Directory bread(block 64) failed [ 89.194168][ T5281] usb 2-1: config 0 descriptor?? [ 89.204006][ T5482] FAT-fs (loop2): Directory bread(block 65) failed [ 89.245749][ T5482] FAT-fs (loop2): Directory bread(block 66) failed [ 89.252309][ T5482] FAT-fs (loop2): Directory bread(block 67) failed [ 89.295975][ T1347] usb 5-1: USB disconnect, device number 2 [ 89.349685][ T5482] FAT-fs (loop2): Directory bread(block 68) failed [ 89.368401][ T5482] FAT-fs (loop2): Directory bread(block 69) failed [ 89.409609][ T5482] FAT-fs (loop2): Directory bread(block 70) failed [ 89.429851][ T5482] FAT-fs (loop2): Directory bread(block 71) failed [ 89.461930][ T5482] FAT-fs (loop2): Directory bread(block 72) failed [ 89.520960][ T5482] FAT-fs (loop2): Directory bread(block 73) failed [ 89.715143][ T5281] wacom 0003:056A:0004.0004: unknown main item tag 0x0 [ 89.722055][ T5281] wacom 0003:056A:0004.0004: unknown main item tag 0x0 [ 89.757839][ T5281] wacom 0003:056A:0004.0004: Unknown device_type for 'HID 056a:0004'. Ignoring. [ 89.879105][ T5502] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.468'. [ 89.932706][ T1347] usb 2-1: USB disconnect, device number 6 [ 89.988484][ T5492] set_capacity_and_notify: 5 callbacks suppressed [ 89.988499][ T5492] loop0: detected capacity change from 0 to 32768 [ 90.055947][ T5492] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 90.137860][ T5492] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.305762][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 90.715575][ T5513] loop3: detected capacity change from 0 to 32768 [ 90.752134][ T5536] loop4: detected capacity change from 0 to 512 [ 90.783943][ T5536] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.791720][ T5536] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.811418][ T5536] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.868268][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 91.051762][ T5536] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.482: Directory hole found for htree leaf block 0 [ 91.079629][ T5536] EXT4-fs (loop4): Remounting filesystem read-only [ 91.155768][ T5557] capability: warning: `syz.2.493' uses 32-bit capabilities (legacy support in use) [ 91.241748][ T26] audit: type=1326 audit(1770960673.879:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.4.492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdebee7bf79 code=0x0 [ 91.581105][ T5583] loop1: detected capacity change from 0 to 512 [ 91.686417][ T5583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.703510][ T5583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.710812][ T5583] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.765837][ T5583] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 91.830435][ T5574] loop2: detected capacity change from 0 to 40427 [ 91.853423][ T5574] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.870281][ T5574] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.892766][ T5583] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #2: comm syz.1.503: Directory hole found for htree leaf block 0 [ 91.916442][ T5583] EXT4-fs (loop1): Remounting filesystem read-only [ 91.918176][ T5574] F2FS-fs (loop2): invalid crc value [ 91.996300][ T5574] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.103876][ T5574] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.110940][ T5574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.312474][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.321468][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.407008][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.414442][ T5608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.423984][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.431077][ T5608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.491322][ T5608] team0: Port device bridge0 added [ 92.650541][ T5601] loop3: detected capacity change from 0 to 32768 [ 92.748505][ T5601] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.510 (5601) [ 92.792431][ T5601] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 92.816449][ T5601] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.841050][ T5601] BTRFS info (device loop3): use lzo compression, level 0 [ 92.852951][ T5601] BTRFS info (device loop3): using free space tree [ 92.869214][ T5601] BTRFS info (device loop3): has skinny extents [ 92.903507][ T5620] netlink: 88 bytes leftover after parsing attributes in process `syz.2.518'. [ 93.053379][ T5258] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 93.077174][ T5633] loop4: detected capacity change from 0 to 8192 [ 93.078900][ T5601] BTRFS info (device loop3): enabling ssd optimizations [ 93.182344][ T5633] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 93.214678][ T5633] REISERFS (device loop4): using ordered data mode [ 93.221214][ T5633] reiserfs: using flush barriers [ 93.292800][ T5633] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.319764][ T4178] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 10 /dev/loop3 scanned by udevd (4178) [ 93.331899][ T1347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.368186][ T5633] REISERFS (device loop4): checking transaction log (loop4) [ 93.423500][ T5258] usb 2-1: config 0 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 93.451447][ T5258] usb 2-1: config 0 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.486823][ T5258] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.506123][ T5258] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 93.529072][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.553031][ T5258] usb 2-1: config 0 descriptor?? [ 93.573514][ T5618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.590911][ T5633] REISERFS (device loop4): Using tea hash to sort names [ 93.606640][ T5633] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 93.623838][ T5633] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 93.726658][ T5655] loop3: detected capacity change from 0 to 1024 [ 93.748813][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 93.769577][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.795231][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 93.849925][ T144] hfsplus: b-tree write err: -5, ino 4 [ 93.926737][ T5657] loop3: detected capacity change from 0 to 256 [ 93.942272][ T5657] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.946946][ T5659] loop4: detected capacity change from 0 to 16 [ 93.958910][ T5657] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 93.973334][ T5659] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.983025][ T5657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 94.003417][ T26] audit: type=1800 audit(1770960676.639:51): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.526" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 94.023761][ T1347] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 94.045581][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.061296][ T5258] wacom 0003:056A:0333.0005: hidraw0: USB HID v0.01 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 94.085200][ T1347] usb 3-1: Product: syz [ 94.093706][ T1347] usb 3-1: Manufacturer: syz [ 94.098338][ T1347] usb 3-1: SerialNumber: syz [ 94.123872][ T1347] usb 3-1: config 0 descriptor?? [ 94.227046][ T5665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.260115][ T1325] usb 2-1: USB disconnect, device number 7 [ 94.274790][ T5665] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.401998][ T1347] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 94.625104][ T13] usb 3-1: USB disconnect, device number 3 [ 94.650648][ T5674] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 94.664506][ T5674] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 94.675424][ T5674] EXT4-fs (loop3): group descriptors corrupted! [ 94.730975][ T5676] program syz.3.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.101728][ T5699] netlink: 'syz.1.545': attribute type 3 has an invalid length. [ 95.200333][ T5707] set_capacity_and_notify: 2 callbacks suppressed [ 95.200347][ T5707] loop2: detected capacity change from 0 to 64 [ 95.256974][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 95.358533][ T5707] attempt to access beyond end of device [ 95.358533][ T5707] loop2: rw=0, want=234881064, limit=64 [ 95.407441][ T26] audit: type=1804 audit(1770960678.049:52): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.549" name="/newroot/101/file2/file2" dev="loop2" ino=6 res=1 errno=0 [ 95.439961][ T5707] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 95.479723][ T26] audit: type=1800 audit(1770960678.119:53): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.549" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 95.480036][ T5717] Trying to free block not in datazone [ 95.563228][ T5717] Trying to free block not in datazone [ 95.572121][ T5717] Trying to free block not in datazone [ 95.600750][ T5717] Trying to free block not in datazone [ 95.725308][ T5718] loop4: detected capacity change from 0 to 32768 [ 95.758595][ T5720] tipc: Enabling of bearer rejected, media not registered [ 95.811631][ T5718] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 95.811631][ T5718] [ 95.815168][ T5713] loop1: detected capacity change from 0 to 32768 [ 95.918403][ T5713] XFS (loop1): Mounting V5 Filesystem [ 96.037613][ T5713] XFS (loop1): Ending clean mount [ 96.155565][ T5743] loop2: detected capacity change from 0 to 2048 [ 96.170925][ T4198] XFS (loop1): Unmounting Filesystem [ 96.264487][ T5743] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 96.289400][ T5745] loop4: detected capacity change from 0 to 256 [ 96.290516][ T5743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.333030][ T5745] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.362391][ T5745] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 96.377679][ T5745] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 96.557112][ T5749] loop0: detected capacity change from 0 to 256 [ 96.624399][ T5751] loop2: detected capacity change from 0 to 16 [ 96.665012][ T5753] loop4: detected capacity change from 0 to 512 [ 96.700467][ T5751] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.779281][ T5753] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.4.567: corrupted xattr block 95 [ 96.820845][ T5761] Cannot find del_set index 0 as target [ 96.887632][ T5764] loop1: detected capacity change from 0 to 8 [ 96.894245][ T5753] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 96.907829][ T5753] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.567: bg 0: block 7: invalid block bitmap [ 96.938624][ T5753] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 96.956327][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop1 [ 96.970400][ T5764] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 96.978351][ T5753] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2923: inode #11: comm syz.4.567: corrupted xattr block 95 [ 97.025022][ T5753] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 97.031509][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 97.063238][ T5753] EXT4-fs (loop4): 1 orphan inode deleted [ 97.079390][ T5753] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.266189][ T5777] loop3: detected capacity change from 0 to 2368 [ 97.428256][ T5791] netlink: 'syz.4.579': attribute type 6 has an invalid length. [ 97.482900][ T5777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 97.650307][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 97.663659][ T5797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.698734][ T5797] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.730029][ T5797] EXT4-fs (loop1): 1 truncate cleaned up [ 97.736267][ T5797] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 98.093445][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.234233][ T5831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.234414][ T5831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.252116][ T5831] EXT4-fs error (device loop4): __ext4_iget:4912: inode #11: block 1: comm syz.4.592: invalid block [ 98.252463][ T5831] EXT4-fs (loop4): Remounting filesystem read-only [ 98.252525][ T5831] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.592: couldn't read orphan inode 11 (err -117) [ 98.252805][ T5831] EXT4-fs (loop4): Remounting filesystem read-only [ 98.252821][ T5831] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none. [ 98.504949][ T5841] netlink: 'syz.4.593': attribute type 2 has an invalid length. [ 98.535317][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.573214][ T1325] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 98.582325][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.622323][ T1325] usb 4-1: config 0 descriptor?? [ 98.917127][ T5859] syz.2.603 (5859) used greatest stack depth: 20080 bytes left [ 98.977481][ T5863] FAT-fs (loop4): Directory bread(block 64) failed [ 98.998264][ T5863] FAT-fs (loop4): Directory bread(block 65) failed [ 99.009195][ T5863] FAT-fs (loop4): Directory bread(block 66) failed [ 99.033857][ T5863] FAT-fs (loop4): Directory bread(block 67) failed [ 99.040479][ T5863] FAT-fs (loop4): Directory bread(block 68) failed [ 99.055426][ T5863] FAT-fs (loop4): Directory bread(block 69) failed [ 99.089241][ T5863] FAT-fs (loop4): Directory bread(block 70) failed [ 99.115315][ T5863] FAT-fs (loop4): Directory bread(block 71) failed [ 99.129462][ T1325] waltop 0003:172F:0501.0006: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 99.135659][ T5863] FAT-fs (loop4): Directory bread(block 72) failed [ 99.151826][ T5863] FAT-fs (loop4): Directory bread(block 73) failed [ 99.213260][ T5876] netlink: 'syz.2.610': attribute type 2 has an invalid length. [ 99.333687][ T13] usb 4-1: USB disconnect, device number 2 [ 99.974792][ T5908] hugetlbfs: Bad value for 'size' [ 100.230898][ T5918] set_capacity_and_notify: 6 callbacks suppressed [ 100.230912][ T5918] loop1: detected capacity change from 0 to 1024 [ 100.512303][ T5935] netdevsim netdevsim3: Firmware load for '/../file0' refused, path contains '..' component [ 100.528823][ T5282] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.612106][ T5938] netlink: 404 bytes leftover after parsing attributes in process `syz.1.641'. [ 100.671126][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 100.755483][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 100.793639][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 100.938365][ T5282] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.077319][ T5959] loop1: detected capacity change from 0 to 256 [ 101.159845][ T5962] lo speed is unknown, defaulting to 1000 [ 101.161895][ T5959] FAT-fs (loop1): Directory bread(block 64) failed [ 101.173167][ T5282] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.182319][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.214448][ T5282] usb 5-1: Product: syz [ 101.218643][ T5282] usb 5-1: Manufacturer: syz [ 101.223552][ T5962] lo speed is unknown, defaulting to 1000 [ 101.224006][ T5959] FAT-fs (loop1): Directory bread(block 65) failed [ 101.246507][ T5282] usb 5-1: SerialNumber: syz [ 101.262595][ T5962] lo speed is unknown, defaulting to 1000 [ 101.264834][ T5959] FAT-fs (loop1): Directory bread(block 66) failed [ 101.301080][ T5959] FAT-fs (loop1): Directory bread(block 67) failed [ 101.306510][ T5962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.315612][ T5959] FAT-fs (loop1): Directory bread(block 68) failed [ 101.337214][ T5959] FAT-fs (loop1): Directory bread(block 69) failed [ 101.337641][ T5962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.357464][ T5959] FAT-fs (loop1): Directory bread(block 70) failed [ 101.381076][ T5959] FAT-fs (loop1): Directory bread(block 71) failed [ 101.398436][ T5942] loop0: detected capacity change from 0 to 32768 [ 101.399030][ T5959] FAT-fs (loop1): Directory bread(block 72) failed [ 101.422242][ T5959] FAT-fs (loop1): Directory bread(block 73) failed [ 101.429099][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.465444][ T5962] lo speed is unknown, defaulting to 1000 [ 101.519394][ T5962] lo speed is unknown, defaulting to 1000 [ 101.550010][ T5962] lo speed is unknown, defaulting to 1000 [ 101.560415][ T5962] lo speed is unknown, defaulting to 1000 [ 101.570102][ T5942] XFS (loop0): Mounting V5 Filesystem [ 101.581026][ T5962] lo speed is unknown, defaulting to 1000 [ 101.588081][ T5962] lo speed is unknown, defaulting to 1000 [ 101.628183][ T5282] cdc_ncm 5-1:1.0: bind() failure [ 101.647426][ T5282] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 101.713460][ T1325] usb 3-1: Using ep0 maxpacket: 32 [ 101.733885][ T5282] cdc_ncm 5-1:1.1: bind() failure [ 101.734507][ T5974] loop1: detected capacity change from 0 to 4096 [ 101.767992][ T5282] usb 5-1: USB disconnect, device number 3 [ 101.825203][ T5974] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 101.845390][ T5942] XFS (loop0): Ending clean mount [ 101.859789][ T5974] ntfs3: loop1: Failed to load $Extend. [ 101.966609][ T4184] XFS (loop0): Unmounting Filesystem [ 102.023375][ T1325] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 102.037558][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.051270][ T1325] usb 3-1: Product: syz [ 102.059137][ T1325] usb 3-1: Manufacturer: syz [ 102.072419][ T1325] usb 3-1: SerialNumber: syz [ 102.099797][ T1325] usb 3-1: config 0 descriptor?? [ 102.188014][ T1325] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 102.433217][ T4267] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 102.813633][ T1325] gspca_stk1135: reg_w 0x3 err -71 [ 102.820290][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.823370][ T4267] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.844520][ T1325] gspca_stk1135: Sensor write failed [ 102.866261][ T4267] usb 2-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 102.868948][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.876043][ T6009] loop3: detected capacity change from 0 to 512 [ 102.888899][ T1325] gspca_stk1135: Sensor write failed [ 102.898693][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.910361][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.927303][ T1325] gspca_stk1135: Sensor read failed [ 102.932694][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.938164][ T4267] usb 2-1: config 0 descriptor?? [ 102.943812][ T1325] gspca_stk1135: Sensor read failed [ 102.949300][ T1325] gspca_stk1135: Detected sensor type unknown (0x0) [ 102.965893][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.972618][ T1325] gspca_stk1135: Sensor read failed [ 102.980864][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 102.991353][ T1325] gspca_stk1135: Sensor read failed [ 102.995184][ T4267] pwc: Samsung MPC-C30 USB webcam detected. [ 102.997059][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 103.008364][ T6009] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.013214][ T1325] gspca_stk1135: Sensor write failed [ 103.031020][ T1325] gspca_stk1135: serial bus timeout: status=0x00 [ 103.037843][ T1325] gspca_stk1135: Sensor write failed [ 103.043802][ T1325] stk1135: probe of 3-1:0.0 failed with error -71 [ 103.061653][ T6009] EXT4-fs (loop3): 1 truncate cleaned up [ 103.064385][ T1325] usb 3-1: USB disconnect, device number 4 [ 103.074007][ T6009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.219108][ T4267] pwc: send_video_command error -71 [ 103.224587][ T4267] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 103.235712][ T4267] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 103.244921][ T4267] usb 2-1: USB disconnect, device number 8 [ 103.424520][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 103.468203][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'. [ 103.916629][ T6018] loop0: detected capacity change from 0 to 32768 [ 103.979071][ T6045] loop4: detected capacity change from 0 to 1024 [ 104.036570][ T6018] JBD2: Ignoring recovery information on journal [ 104.051986][ T6050] device team_slave_0 entered promiscuous mode [ 104.058727][ T6050] device team_slave_1 entered promiscuous mode [ 104.065046][ T6050] device bridge0 entered promiscuous mode [ 104.088700][ T6027] loop2: detected capacity change from 0 to 32768 [ 104.125749][ T6050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.187935][ T6027] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.689 (6027) [ 104.201629][ T6018] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.213132][ T9] hfsplus: b-tree write err: -5, ino 4 [ 104.264495][ T6027] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.306091][ T6027] BTRFS info (device loop2): force zlib compression, level 3 [ 104.350318][ T6027] BTRFS info (device loop2): force clearing of disk cache [ 104.404856][ T6027] BTRFS info (device loop2): setting nodatasum [ 104.411089][ T6027] BTRFS info (device loop2): allowing degraded mounts [ 104.488829][ T6027] BTRFS info (device loop2): enabling disk space caching [ 104.523373][ T6027] BTRFS info (device loop2): disk space caching is enabled [ 104.583230][ T6027] BTRFS info (device loop2): has skinny extents [ 104.631902][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 104.790475][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 104.846797][ T6081] netlink: 30 bytes leftover after parsing attributes in process `syz.1.702'. [ 105.170410][ T6103] loop1: detected capacity change from 0 to 2048 [ 105.181021][ T6027] BTRFS info (device loop2): clearing free space tree [ 105.181156][ T6099] loop3: detected capacity change from 0 to 1764 [ 105.188841][ T6027] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.227968][ T6027] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.342818][ T6103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.592756][ T6125] loop1: detected capacity change from 0 to 512 [ 105.599478][ T6121] tipc: Started in network mode [ 105.630592][ T6121] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 105.715001][ T6121] tipc: Enabling of bearer rejected, failed to enable media [ 105.755592][ T6125] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.714: invalid indirect mapped block 4294967295 (level 1) [ 105.888457][ T6125] EXT4-fs (loop1): Remounting filesystem read-only [ 105.986201][ T6129] loop0: detected capacity change from 0 to 4096 [ 106.043455][ T6125] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.714: invalid indirect mapped block 4294967295 (level 1) [ 106.118625][ T6125] EXT4-fs (loop1): Remounting filesystem read-only [ 106.162002][ T6129] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 106.167675][ T6125] EXT4-fs (loop1): 2 truncates cleaned up [ 106.227659][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 106.282271][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 106.339047][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 106.392265][ T6144] netlink: 'syz.4.724': attribute type 12 has an invalid length. [ 106.417194][ T6144] netlink: 'syz.4.724': attribute type 14 has an invalid length. [ 106.669540][ T4192] Bluetooth: hci4: link tx timeout [ 106.669623][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.260938][ T6188] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.282823][ T6187] loop0: detected capacity change from 0 to 2048 [ 107.336199][ T6187] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.367217][ T6133] udevd[6133]: incorrect nilfs2 checksum on /dev/loop0 [ 107.402409][ T6189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.641654][ T6173] loop4: detected capacity change from 0 to 32768 [ 107.772039][ T6194] loop0: detected capacity change from 0 to 4096 [ 107.887312][ T6194] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 107.919894][ T6194] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 107.980531][ T6194] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 108.024933][ T6194] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 108.056619][ T6210] netlink: 64 bytes leftover after parsing attributes in process `syz.3.755'. [ 108.062453][ T6194] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 108.081006][ T6209] siw: device registration error -23 [ 108.087146][ T6194] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 108.131245][ T6194] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 108.158658][ T6212] loop1: detected capacity change from 0 to 8 [ 108.218526][ T6194] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.249483][ T6212] process 'syz.1.757' launched './file1' with NULL argv: empty string added [ 108.288653][ T6194] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.303804][ T6212] SQUASHFS error: zstd decompression error: 2 [ 108.328689][ T6212] SQUASHFS error: zstd decompression failed, data probably corrupt [ 108.362925][ T6194] ntfs: volume version 3.1. [ 108.381199][ T6194] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 108.408661][ T6212] SQUASHFS error: Failed to read block 0x60: -5 [ 108.419945][ T6212] SQUASHFS error: zstd decompression error: 2 [ 108.452705][ T6212] SQUASHFS error: zstd decompression failed, data probably corrupt [ 108.481302][ T6212] SQUASHFS error: Failed to read block 0x60: -5 [ 108.624542][ T6228] lo speed is unknown, defaulting to 1000 [ 108.631794][ T6228] lo speed is unknown, defaulting to 1000 [ 108.640341][ T6228] lo speed is unknown, defaulting to 1000 [ 108.652802][ T6228] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 108.698558][ T6228] lo speed is unknown, defaulting to 1000 [ 108.709321][ T6228] lo speed is unknown, defaulting to 1000 [ 108.710205][ T6228] lo speed is unknown, defaulting to 1000 [ 108.711218][ T6228] lo speed is unknown, defaulting to 1000 [ 108.712178][ T6228] lo speed is unknown, defaulting to 1000 [ 108.732591][ T5288] Bluetooth: hci4: command 0x0406 tx timeout [ 108.816851][ T6238] loop3: detected capacity change from 0 to 64 [ 108.847956][ T6240] loop1: detected capacity change from 0 to 8 [ 108.887950][ T6240] unable to read id index table [ 108.953383][ T6247] netlink: 52 bytes leftover after parsing attributes in process `syz.4.772'. [ 109.150479][ T6257] tipc: Started in network mode [ 109.179856][ T6257] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 109.233554][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 109.247861][ T6259] netlink: 'syz.4.778': attribute type 3 has an invalid length. [ 109.510271][ T6268] netlink: 'syz.3.782': attribute type 3 has an invalid length. [ 109.549712][ T6272] loop2: detected capacity change from 0 to 1024 [ 109.618441][ T6240] loop1: detected capacity change from 0 to 32768 [ 109.689539][ T6272] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,barrier=0x0000000000000007,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 109.732176][ T6272] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.773333][ T6240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.769 (6240) [ 109.805844][ T6272] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm syz.2.783: lblock 0 mapped to illegal pblock 0 (length 1) [ 109.829643][ T6240] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.848751][ T6240] BTRFS info (device loop1): setting nodatasum [ 109.855366][ T6290] SQUASHFS error: Unable to read inode 0xa7 [ 109.861849][ T6240] BTRFS info (device loop1): force zlib compression, level 3 [ 109.878384][ T6240] BTRFS info (device loop1): ignoring bad roots [ 109.898339][ T6240] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 109.907132][ T6272] EXT4-fs (loop2): Remounting filesystem read-only [ 109.932357][ T6240] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 109.965177][ T6272] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: comm syz.2.783: lblock 0 mapped to illegal pblock 0 (length 1) [ 109.971923][ T4184] SQUASHFS error: Unable to read directory block [629:1f] [ 110.038256][ T6240] BTRFS error (device loop1): open_ctree failed: -22 [ 110.057249][ T4184] SQUASHFS error: Failed to read block 0x904e8: -5 [ 110.092765][ T6272] EXT4-fs (loop2): Remounting filesystem read-only [ 110.110872][ T4184] SQUASHFS error: Unable to read metadata cache entry [904e8] [ 110.141416][ T6272] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.783: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 110.181905][ T4184] SQUASHFS error: Unable to read inode 0x900000000 [ 110.201427][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4178) [ 110.219527][ T4184] SQUASHFS error: Unable to read metadata cache entry [904e8] [ 110.239150][ T4184] SQUASHFS error: Unable to read inode 0x900000000 [ 110.250678][ T6272] EXT4-fs (loop2): Remounting filesystem read-only [ 110.334695][ T6296] device vlan2 entered promiscuous mode [ 110.352867][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 110.631644][ T6304] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 110.771490][ T6289] XFS (loop3): Mounting V5 Filesystem [ 110.824356][ T6304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.861876][ T6307] set_capacity_and_notify: 3 callbacks suppressed [ 110.861890][ T6307] loop2: detected capacity change from 0 to 32768 [ 110.899246][ T6319] loop1: detected capacity change from 0 to 512 [ 110.970173][ T6304] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 110.972723][ T6307] JBD2: Ignoring recovery information on journal [ 111.000336][ T6289] XFS (loop3): Ending clean mount [ 111.039685][ T6304] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 111.063859][ T6289] XFS (loop3): Quotacheck needed: Please wait. [ 111.078591][ T6319] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.802: inode has both inline data and extents flags [ 111.121261][ T6319] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.802: couldn't read orphan inode 15 (err -117) [ 111.186746][ T6319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.209146][ T6289] XFS (loop3): Quotacheck: Done. [ 111.270507][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.305647][ T4195] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 111.319971][ T4185] XFS (loop3): Unmounting Filesystem [ 111.330200][ T6307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 111.334261][ T4195] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 111.664753][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 111.701620][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.791455][ T6324] lo speed is unknown, defaulting to 1000 [ 111.855830][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'. [ 111.956692][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.099951][ T6344] loop1: detected capacity change from 0 to 512 [ 112.116877][ T6340] loop3: detected capacity change from 0 to 256 [ 112.135471][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.211756][ T6340] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 112.320293][ T6344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.334456][ T6344] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.348217][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 112.392915][ T6340] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 112.399915][ T6348] lo speed is unknown, defaulting to 1000 [ 112.571811][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.579258][ T6358] loop1: detected capacity change from 0 to 512 [ 112.579563][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.594448][ T6324] device bridge_slave_0 entered promiscuous mode [ 112.609680][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.618339][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.626917][ T6324] device bridge_slave_1 entered promiscuous mode [ 112.651201][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.690457][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.754826][ T6358] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 112.802507][ T6133] udevd[6133]: incorrect ext4 checksum on /dev/loop1 [ 112.837766][ T6324] team0: Port device team_slave_0 added [ 112.867773][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 112.914823][ T6324] team0: Port device team_slave_1 added [ 112.927279][ T6369] loop3: detected capacity change from 0 to 4096 [ 112.971121][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.981012][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.019892][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.032749][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.040295][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.041933][ T6369] __ntfs_error: 10 callbacks suppressed [ 113.041946][ T6369] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 113.075620][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.153434][ T4226] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.231208][ T6369] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 113.273595][ T6131] Bluetooth: hci0: command 0x0409 tx timeout [ 113.331329][ T6369] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 113.366584][ T6369] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 113.391309][ T6324] device hsr_slave_0 entered promiscuous mode [ 113.399017][ T6369] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 113.407846][ T6369] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.414851][ T6324] device hsr_slave_1 entered promiscuous mode [ 113.421364][ T6369] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 113.438719][ T6369] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 113.451959][ T6324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.451966][ T6369] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 113.454182][ T6369] ntfs: volume version 3.1. [ 113.475668][ T6324] Cannot create hsr debugfs directory [ 113.479644][ T6369] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 113.533269][ T4226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.558228][ T4226] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 113.583598][ T4226] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 113.592875][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.605211][ T4226] usb 2-1: config 0 descriptor?? [ 113.739361][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.755049][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.784376][ T6348] device bridge_slave_0 entered promiscuous mode [ 113.819607][ T6395] loop3: detected capacity change from 0 to 8192 [ 113.851584][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.863249][ T4226] Bluetooth: Can't get state to change to load ram patch err [ 113.870657][ T4226] Bluetooth: Loading patch file failed [ 113.883200][ T6395] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 113.908990][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.918703][ T6395] REISERFS (device loop3): using ordered data mode [ 113.923552][ T6348] device bridge_slave_1 entered promiscuous mode [ 113.932165][ T6395] reiserfs: using flush barriers [ 113.970275][ T4226] ath3k: probe of 2-1:0.0 failed with error -71 [ 113.972014][ T6406] loop2: detected capacity change from 0 to 256 [ 113.997381][ T6395] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.045307][ T4226] usb 2-1: USB disconnect, device number 9 [ 114.069493][ T6395] REISERFS (device loop3): checking transaction log (loop3) [ 114.075291][ T6406] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.085028][ T6395] REISERFS (device loop3): Using tea hash to sort names [ 114.094915][ T6395] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 114.171512][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.191433][ T6406] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.212426][ T6406] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.245233][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.313492][ T4226] Bluetooth: hci3: command 0x0409 tx timeout [ 114.327897][ T6324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.446591][ T6324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.493962][ T6348] team0: Port device team_slave_0 added [ 114.549059][ T6348] team0: Port device team_slave_1 added [ 114.571602][ T6324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.637992][ T6324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.714797][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.722316][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.781644][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.811347][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.819316][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.845224][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.902341][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.296570][ T6348] device hsr_slave_0 entered promiscuous mode [ 115.331680][ T6348] device hsr_slave_1 entered promiscuous mode [ 115.350334][ T6348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.353484][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 115.398297][ T6348] Cannot create hsr debugfs directory [ 115.430386][ T6472] loop1: detected capacity change from 0 to 1024 [ 115.525166][ T6472] EXT4-fs (loop1): Ignoring removed bh option [ 115.661709][ T6472] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 115.739387][ T6481] loop3: detected capacity change from 0 to 256 [ 115.911246][ T6484] rdma_op ffff8880760579f0 conn xmit_rdma 0000000000000000 [ 115.946752][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.013571][ T154] device hsr_slave_0 left promiscuous mode [ 116.056989][ T154] device hsr_slave_1 left promiscuous mode [ 116.075158][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.102222][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.145947][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.169989][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.191562][ T154] device bridge_slave_1 left promiscuous mode [ 116.209459][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.256878][ T154] device bridge_slave_0 left promiscuous mode [ 116.273933][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.360904][ T154] device veth1_macvtap left promiscuous mode [ 116.371550][ T154] device veth0_macvtap left promiscuous mode [ 116.383747][ T154] device veth1_vlan left promiscuous mode [ 116.395046][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 116.407866][ T154] device veth0_vlan left promiscuous mode [ 116.452358][ T6518] set_capacity_and_notify: 1 callbacks suppressed [ 116.452373][ T6518] loop3: detected capacity change from 0 to 64 [ 116.563869][ T6525] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.864'. [ 116.603543][ T6518] attempt to access beyond end of device [ 116.603543][ T6518] loop3: rw=2049, want=268435470, limit=64 [ 116.619851][ T6518] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 116.746714][ T6527] loop1: detected capacity change from 0 to 8192 [ 116.791904][ T6532] loop3: detected capacity change from 0 to 256 [ 116.804480][ T6527] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 116.815576][ T6527] REISERFS (device loop1): using ordered data mode [ 116.822664][ T6527] reiserfs: using flush barriers [ 116.838047][ T6527] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.862776][ T6527] REISERFS (device loop1): checking transaction log (loop1) [ 116.891720][ T6527] REISERFS (device loop1): Using r5 hash to sort names [ 116.906886][ T154] team0 (unregistering): Port device team_slave_1 removed [ 116.911193][ T6532] FAT-fs (loop3): Directory bread(block 64) failed [ 116.927693][ T6527] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 116.933500][ T6532] FAT-fs (loop3): Directory bread(block 65) failed [ 116.942318][ T154] team0 (unregistering): Port device team_slave_0 removed [ 116.948861][ T6532] FAT-fs (loop3): Directory bread(block 66) failed [ 116.964617][ T6532] FAT-fs (loop3): Directory bread(block 67) failed [ 116.971221][ T6532] FAT-fs (loop3): Directory bread(block 68) failed [ 116.971785][ T6527] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 116.978014][ T6532] FAT-fs (loop3): Directory bread(block 69) failed [ 116.993858][ T6532] FAT-fs (loop3): Directory bread(block 70) failed [ 117.000406][ T6532] FAT-fs (loop3): Directory bread(block 71) failed [ 117.009271][ T6532] FAT-fs (loop3): Directory bread(block 72) failed [ 117.009403][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.016185][ T6532] FAT-fs (loop3): Directory bread(block 73) failed [ 117.049825][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.155828][ T154] bond0 (unregistering): Released all slaves [ 117.263750][ T6490] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 117.291127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.300675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.316947][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.371099][ T6542] loop1: detected capacity change from 0 to 256 [ 117.401009][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.423958][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.432978][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.434648][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 117.440209][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.468501][ T6348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.504721][ T6542] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 117.524244][ T6348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.562083][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.579959][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.609782][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.629413][ T6542] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 117.637147][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.645699][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.706402][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.732800][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.783498][ T6348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.820821][ T6348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.851305][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.893375][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.005638][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.018824][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.071847][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.098704][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.122633][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.155569][ T6324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.200766][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.218275][ T6576] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 118.246730][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.259577][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.271982][ T6578] netlink: 200 bytes leftover after parsing attributes in process `syz.2.884'. [ 118.462323][ T6583] device macsec0 entered promiscuous mode [ 118.473415][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 118.569440][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.653650][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.667243][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.707847][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.784563][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.823675][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.832125][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.839311][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.893492][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.961312][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.990933][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.013706][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.020801][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.065709][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.096636][ T6574] loop3: detected capacity change from 0 to 32768 [ 119.129708][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.151245][ T6611] loop2: detected capacity change from 0 to 1024 [ 119.159471][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.206490][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.231652][ T6574] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 119.233483][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.299426][ T6574] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.320367][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.344992][ T6611] hfsplus: bad catalog entry type [ 119.372018][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.380869][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.390043][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.411073][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.430466][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.475742][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 119.487247][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.513277][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 119.542959][ T6620] loop1: detected capacity change from 0 to 4096 [ 119.552766][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.567743][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 119.618208][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.658091][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.699642][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.736434][ T6628] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.231559][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.253534][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.298184][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.360673][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 120.427022][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.456648][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.493917][ T6642] loop2: detected capacity change from 0 to 8192 [ 120.554035][ T5140] Bluetooth: hci3: command 0x0419 tx timeout [ 120.624604][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.655044][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.709411][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.758886][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.831293][ T6324] device veth0_vlan entered promiscuous mode [ 120.888999][ T6324] device veth1_vlan entered promiscuous mode [ 120.925928][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.912'. [ 121.133952][ T6324] device veth0_macvtap entered promiscuous mode [ 121.141749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.171166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.218339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.272082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.338402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.424661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.481333][ T6695] loop1: detected capacity change from 0 to 32768 [ 121.496020][ T6324] device veth1_macvtap entered promiscuous mode [ 121.534987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.565824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.580931][ T6695] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.589348][ T6695] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 121.611800][ T6348] device veth0_vlan entered promiscuous mode [ 121.621511][ T6695] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 121.621511][ T6695] bh = 2073 (magic number) [ 121.621511][ T6695] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 121.640828][ T6695] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 121.648313][ T6695] gfs2: fsid=syz:syz.s: File system withdrawn [ 121.654531][ T6695] CPU: 1 PID: 6695 Comm: syz.1.918 Not tainted syzkaller #0 [ 121.661829][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.671970][ T6695] Call Trace: [ 121.675268][ T6695] [ 121.678210][ T6695] dump_stack_lvl+0x188/0x250 [ 121.681950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.682915][ T6695] ? kobject_uevent_env+0x371/0x890 [ 121.695954][ T6695] ? show_regs_print_info+0x20/0x20 [ 121.701174][ T6695] ? load_image+0x400/0x400 [ 121.705701][ T6695] ? kobject_uevent_env+0x371/0x890 [ 121.710918][ T6695] ? load_image+0x400/0x400 [ 121.715534][ T6695] gfs2_withdraw+0x1149/0x1490 [ 121.720325][ T6695] ? gfs2_lm+0x240/0x240 [ 121.724578][ T6695] ? gfs2_meta_read+0x8a9/0xa60 [ 121.729450][ T6695] ? gfs2_meta_new+0x160/0x160 [ 121.734227][ T6695] gfs2_meta_check_ii+0x6e/0x80 [ 121.739526][ T6695] gfs2_meta_buffer+0x232/0x310 [ 121.744393][ T6695] gfs2_inode_refresh+0xbb/0xff0 [ 121.749337][ T6695] ? do_promote+0x71a/0xab0 [ 121.753844][ T6695] ? gfs2_inode_metasync+0xf0/0xf0 [ 121.758963][ T6695] ? __lock_acquire+0x7d10/0x7d10 [ 121.764004][ T6695] inode_go_lock+0x127/0x470 [ 121.764356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.768597][ T6695] do_promote+0x741/0xab0 [ 121.780522][ T6695] finish_xmote+0x4df/0xb00 [ 121.785039][ T6695] do_xmote+0x7b6/0x1120 [ 121.789304][ T6695] gfs2_glock_nq+0xc7a/0x1550 [ 121.794011][ T6695] gfs2_lookupi+0x416/0x600 [ 121.798528][ T6695] ? verify_lock_unused+0x140/0x140 [ 121.803746][ T6695] ? gfs2_lookup_simple+0x100/0x100 [ 121.809110][ T6695] ? gfs2_lookupi+0x40e/0x600 [ 121.813801][ T6695] ? crc32_le_base+0x755/0xcf0 [ 121.818593][ T6695] gfs2_lookup_simple+0xab/0x100 [ 121.823640][ T6695] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 121.828767][ T6695] ? lockref_put_or_lock+0x6e/0xb0 [ 121.833982][ T6695] init_journal+0x1c3/0x22f0 [ 121.838591][ T6695] ? __rwlock_init+0x140/0x140 [ 121.843371][ T6695] ? format_decode+0x19d/0x1300 [ 121.848249][ T6695] ? vsnprintf+0x14e/0x1c20 [ 121.852920][ T6695] ? end_bio_io_page+0x100/0x100 [ 121.857874][ T6695] ? vsnprintf+0x1b21/0x1c20 [ 121.862488][ T6695] ? snprintf+0xe5/0x140 [ 121.864416][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.866765][ T6695] ? vscnprintf+0x80/0x80 [ 121.866787][ T6695] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 121.866811][ T6695] init_inodes+0xdb/0x320 [ 121.866843][ T6695] gfs2_fill_super+0x16b2/0x1f00 [ 121.866874][ T6695] ? gfs2_reconfigure+0xd30/0xd30 [ 121.866895][ T6695] ? gfs2_glock_nq_num+0x82/0x1b0 [ 121.866926][ T6695] ? sb_set_blocksize+0xa5/0xe0 [ 121.866945][ T6695] get_tree_bdev+0x3f1/0x610 [ 121.866969][ T6695] ? gfs2_reconfigure+0xd30/0xd30 [ 121.866990][ T6695] gfs2_get_tree+0x4d/0x1e0 [ 121.867012][ T6695] vfs_get_tree+0x88/0x270 [ 121.867033][ T6695] do_new_mount+0x24a/0xa40 [ 121.867059][ T6695] __se_sys_mount+0x2e3/0x3d0 [ 121.867083][ T6695] ? __x64_sys_mount+0xc0/0xc0 [ 121.867105][ T6695] ? lockdep_hardirqs_on+0x94/0x140 [ 121.867124][ T6695] ? __x64_sys_mount+0x1c/0xc0 [ 121.867144][ T6695] do_syscall_64+0x4c/0xa0 [ 121.867160][ T6695] ? clear_bhb_loop+0x30/0x80 [ 121.867177][ T6695] ? clear_bhb_loop+0x30/0x80 [ 121.867196][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.867226][ T6695] RIP: 0033:0x7f76626c520a [ 121.867246][ T6695] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.867261][ T6695] RSP: 002b:00007f766091de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.867287][ T6695] RAX: ffffffffffffffda RBX: 00007f766091dee0 RCX: 00007f76626c520a [ 121.867300][ T6695] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007f766091dea0 [ 121.867313][ T6695] RBP: 0000200000000400 R08: 00007f766091dee0 R09: 0000000000200001 [ 121.867326][ T6695] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000000000 [ 121.867338][ T6695] R13: 00007f766091dea0 R14: 00000000000125d5 R15: 0000200000000040 [ 121.867361][ T6695] [ 121.868664][ T6695] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 122.012997][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.273144][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.293138][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.303055][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.324864][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.334735][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.345415][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.358561][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.387465][ T6348] device veth1_vlan entered promiscuous mode [ 122.422319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.456869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.497000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.532625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.541550][ T6717] loop3: detected capacity change from 0 to 256 [ 122.562591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.600044][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.611904][ T6717] exfat: Deprecated parameter 'utf8' [ 122.622309][ T6717] exfat: Deprecated parameter 'utf8' [ 122.641851][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.659124][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.670156][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.689206][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.702842][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.712611][ T6711] loop2: detected capacity change from 0 to 32768 [ 122.721077][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.731849][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.743435][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.758107][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.772987][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.800761][ T6324] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.830261][ T6324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.835281][ T6717] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 122.862254][ T6711] [ 122.862254][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.862254][ T6711] [ 122.883143][ T6324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.893934][ T6324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.912192][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 122.912207][ T26] audit: type=1800 audit(1770960705.549:54): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.925" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 122.968373][ T6711] [ 122.968373][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.968373][ T6711] [ 123.039634][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.063724][ T6711] [ 123.063724][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.063724][ T6711] [ 123.071336][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.110317][ T6348] device veth0_macvtap entered promiscuous mode [ 123.200729][ T275] [ 123.200729][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.200729][ T275] [ 123.233595][ T6348] device veth1_macvtap entered promiscuous mode [ 123.262803][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.294905][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.313868][ T4186] [ 123.313868][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.313868][ T4186] [ 123.329620][ T6727] loop1: detected capacity change from 0 to 256 [ 123.360370][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.379626][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.390492][ T4186] [ 123.390492][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.390492][ T4186] [ 123.411536][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.422158][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.437451][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.463206][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.473288][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.497859][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.510967][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.531250][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.542738][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.555577][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.564513][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.589330][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.635397][ T6727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 123.654135][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.662868][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.726888][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.739605][ T6618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.777364][ T6618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.794120][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.837836][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.848420][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.859609][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.886835][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.896773][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.907689][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.919110][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.943795][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.955830][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.975396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.001677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.033854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.042388][ T6752] netlink: 'syz.1.936': attribute type 16 has an invalid length. [ 124.064332][ T6752] netlink: 'syz.1.936': attribute type 2 has an invalid length. [ 124.096280][ T6752] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.936'. [ 124.114943][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.159139][ T6348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.168267][ T6348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.211903][ T6348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.221822][ T6348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.241757][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 124.319217][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.454534][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.520606][ T6775] loop1: detected capacity change from 0 to 512 [ 124.541072][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.601672][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.610291][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.657702][ T6782] netlink: 'syz.5.950': attribute type 49 has an invalid length. [ 124.666100][ T5285] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.677943][ T6775] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 124.690073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.691885][ T6775] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.743835][ T6786] loop2: detected capacity change from 0 to 512 [ 124.800530][ T6775] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 124.815465][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.838839][ T6786] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.951: inode has both inline data and extents flags [ 124.847968][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.873939][ T6786] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.951: couldn't read orphan inode 15 (err -117) [ 124.909134][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.917763][ T6786] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,prjquota,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: writeback. [ 124.960150][ T154] tipc: Left network mode [ 125.076252][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.107673][ T5285] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 125.150255][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.209536][ T5285] usb 4-1: config 0 descriptor?? [ 125.719496][ T6798] loop1: detected capacity change from 0 to 32768 [ 125.726186][ T5285] waltop 0003:172F:0034.0007: unknown main item tag 0xe [ 125.733991][ T5285] waltop 0003:172F:0034.0007: hidraw0: USB HID vff.fc Device [HID 172f:0034] on usb-dummy_hcd.3-1/input0 [ 125.967673][ T5258] usb 4-1: USB disconnect, device number 3 [ 126.028728][ T6832] fido_id[6832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 126.378581][ T26] audit: type=1326 audit(1770960709.019:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.6.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6204b6f79 code=0x0 [ 126.418213][ T6861] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 126.418213][ T6861] program syz.2.970 not setting count and/or reply_len properly [ 126.448701][ T154] device hsr_slave_0 left promiscuous mode [ 126.463966][ T154] device hsr_slave_1 left promiscuous mode [ 126.500355][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.513602][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.559944][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.574150][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.607663][ T154] device bridge_slave_1 left promiscuous mode [ 126.631183][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.659758][ T154] device bridge_slave_0 left promiscuous mode [ 126.682864][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.720909][ T6880] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 126.746570][ T6880] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 126.771057][ T154] device veth1_macvtap left promiscuous mode [ 126.775900][ T6880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 126.788327][ T154] device veth0_macvtap left promiscuous mode [ 126.810545][ T154] device veth1_vlan left promiscuous mode [ 126.826483][ T154] device veth0_vlan left promiscuous mode [ 126.840625][ T6880] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 126.862320][ T6880] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 126.886206][ T6880] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 126.925125][ T6880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 126.931725][ T5285] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 126.932416][ T5285] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 126.968170][ T6880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.003217][ T6880] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 127.011252][ T6880] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 127.020914][ T6880] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 127.027657][ T6880] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 127.496709][ T154] team0 (unregistering): Port device team_slave_1 removed [ 127.541356][ T154] team0 (unregistering): Port device team_slave_0 removed [ 127.566786][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.606802][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.757287][ T154] bond0 (unregistering): Released all slaves [ 128.185526][ T6936] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1003'. [ 128.199586][ T6931] loop5: detected capacity change from 0 to 1024 [ 128.213432][ T6936] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 128.264128][ T6931] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 128.341121][ T6944] loop1: detected capacity change from 0 to 16 [ 128.353514][ T6931] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 128.416043][ T6951] loop6: detected capacity change from 0 to 1024 [ 128.482081][ T6944] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.493464][ T6951] EXT4-fs (loop6): Ignoring removed orlov option [ 128.555090][ T6951] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 128.576154][ T6944] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 10 of nid 36 [ 128.624769][ T6915] loop2: detected capacity change from 0 to 32768 [ 128.751404][ T6915] ialloc: diAlloc returned -5! [ 128.787093][ T6958] tipc: Started in network mode [ 128.811011][ T6958] tipc: Node identity ac14140f, cluster identity 4711 [ 128.913331][ T6958] tipc: Enabled bearer , priority 10 [ 129.116728][ T6969] Zero length message leads to an empty skb [ 129.295001][ T6979] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1015'. [ 129.371846][ T6983] loop2: detected capacity change from 0 to 1024 [ 129.378640][ T6979] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 129.845495][ T4225] tipc: Node number set to 2886997007 [ 129.887042][ T7008] loop5: detected capacity change from 0 to 16 [ 129.950771][ T7008] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 130.600346][ T7039] loop3: detected capacity change from 0 to 1024 [ 130.765339][ T144] hfsplus: b-tree write err: -5, ino 4 [ 130.929717][ T7050] loop3: detected capacity change from 0 to 256 [ 131.012310][ T7050] FAT-fs (loop3): Directory bread(block 64) failed [ 131.039609][ T7050] FAT-fs (loop3): Directory bread(block 65) failed [ 131.053393][ T7050] FAT-fs (loop3): Directory bread(block 66) failed [ 131.096074][ T7050] FAT-fs (loop3): Directory bread(block 67) failed [ 131.103512][ T5140] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.124775][ T7050] FAT-fs (loop3): Directory bread(block 68) failed [ 131.131329][ T7050] FAT-fs (loop3): Directory bread(block 69) failed [ 131.151925][ T7024] loop2: detected capacity change from 0 to 32768 [ 131.163238][ T7050] FAT-fs (loop3): Directory bread(block 70) failed [ 131.202285][ T7050] FAT-fs (loop3): Directory bread(block 71) failed [ 131.265154][ T7050] FAT-fs (loop3): Directory bread(block 72) failed [ 131.278739][ T7024] read_mapping_page failed! [ 131.309095][ T7024] ERROR: (device loop2): txCommit: [ 131.309095][ T7024] [ 131.322241][ T7050] FAT-fs (loop3): Directory bread(block 73) failed [ 131.442993][ T275] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 131.460429][ T275] ------------[ cut here ]------------ [ 131.473550][ T5140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.501480][ T275] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 131.515658][ T5140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.530612][ T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 131.536701][ T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 131.541853][ T7041] loop6: detected capacity change from 0 to 32768 [ 131.543905][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 131.543916][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 131.543937][ T275] Code: 0f 69 de 06 0f 0b e8 78 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba a4 03 00 00 48 c7 c1 00 75 62 8a e8 e9 68 de 06 <0f> 0b e8 52 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba [ 131.543949][ T275] RSP: 0018:ffffc900025dfd28 EFLAGS: 00010246 [ 131.543965][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 2421cb468a512e00 [ 131.598987][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 131.606948][ T275] RBP: ffffc90002822120 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 131.614900][ T275] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888029cd36c8 [ 131.622851][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002601110 [ 131.630807][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 131.639717][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.646376][ T275] CR2: 0000200000001000 CR3: 00000000255cb000 CR4: 00000000003506f0 [ 131.654341][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.662318][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.670286][ T275] Call Trace: [ 131.673590][ T275] [ 131.676510][ T275] ? lockdep_hardirqs_on+0x94/0x140 [ 131.681695][ T275] jfs_lazycommit+0x581/0xb40 [ 131.686357][ T275] ? txFreelock+0x5a0/0x5a0 [ 131.690883][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 131.696851][ T275] ? sched_dynamic_update+0x210/0x210 [ 131.702224][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.708096][ T275] ? __kthread_parkme+0x157/0x1b0 [ 131.713099][ T275] kthread+0x436/0x520 [ 131.717146][ T275] ? txFreelock+0x5a0/0x5a0 [ 131.721627][ T275] ? kthread_blkcg+0xd0/0xd0 [ 131.726196][ T275] ret_from_fork+0x1f/0x30 [ 131.730597][ T275] [ 131.733606][ T275] Modules linked in: [ 131.759770][ T5140] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.783260][ T5140] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.792340][ T5140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.827071][ T5140] usb 6-1: config 0 descriptor?? [ 131.832195][ T275] ---[ end trace 5416d0e8e72a3f9d ]--- [ 131.865240][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 131.870864][ T275] Code: 0f 69 de 06 0f 0b e8 78 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba a4 03 00 00 48 c7 c1 00 75 62 8a e8 e9 68 de 06 <0f> 0b e8 52 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba [ 131.904044][ T275] RSP: 0018:ffffc900025dfd28 EFLAGS: 00010246 [ 131.910139][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 2421cb468a512e00 [ 131.924332][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 131.932422][ T275] RBP: ffffc90002822120 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 131.950856][ T275] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888029cd36c8 [ 131.960115][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002601110 [ 131.972491][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 131.981993][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.988909][ T275] CR2: 00007f6bc0e78e9c CR3: 00000000255cb000 CR4: 00000000003506f0 [ 131.997564][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.006909][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.015678][ T275] Kernel panic - not syncing: Fatal exception [ 132.022189][ T275] Kernel Offset: disabled [ 132.026506][ T275] Rebooting in 86400 seconds..