last executing test programs: 1m4.703475058s ago: executing program 4 (id=1039): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x12, r0, 0x8000000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 1m4.613543667s ago: executing program 4 (id=1040): bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffff8) 1m4.437492774s ago: executing program 4 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20004054) 1m4.291577248s ago: executing program 4 (id=1046): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m3.591618866s ago: executing program 4 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x1c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) 1m2.951201629s ago: executing program 4 (id=1052): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000) 1m2.773885636s ago: executing program 32 (id=1052): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000) 5.049008828s ago: executing program 2 (id=1609): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 4.92756806s ago: executing program 2 (id=1611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r1, 0x1}, 0x14}}, 0x0) 4.755905436s ago: executing program 2 (id=1614): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x406, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.686012738s ago: executing program 1 (id=1636): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCGETS2(r0, 0x802c542a, 0xfffffffffffffffe) 2.534155853s ago: executing program 1 (id=1639): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x3, 0x10000, 0x4, 0xc, 0xcc6, 0x10, 0x7, 0x400000a, 0xfffffff8, 0x3, 0x0, 0x0, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x200003, 0x0, 0x7, 0x9, 0xfffffffe, 0x5, 0xb, 0x1000e63, 0x4bc, 0x8, 0x6, 0x2000000, 0xfffffff4]}) 2.15335796s ago: executing program 1 (id=1645): r0 = getpgid(0x0) r1 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.933515872s ago: executing program 1 (id=1648): unshare(0x26020480) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000003080)={0x6, 0x14ae4701, 0x6e}, 0xc) 1.757571608s ago: executing program 3 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 1.704311424s ago: executing program 1 (id=1652): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) 1.664835198s ago: executing program 0 (id=1653): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x3fffff) 1.565383328s ago: executing program 2 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.565210358s ago: executing program 3 (id=1655): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 1.486516485s ago: executing program 2 (id=1657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 1.472107247s ago: executing program 0 (id=1658): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) 1.369592036s ago: executing program 3 (id=1659): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) 1.324976191s ago: executing program 2 (id=1661): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d0102030109021200010000100009048d0000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) 1.261545517s ago: executing program 0 (id=1662): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00040, &(0x7f00000001c0)={[{@utf8}, {@numtail}, {@fat=@time_offset={'time_offset', 0x3d, 0x56a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@rodir}, {@fat=@nocase}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4090, 0xffa) 1.242776299s ago: executing program 3 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.109578882s ago: executing program 3 (id=1665): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.042684478s ago: executing program 3 (id=1667): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x5, "c7"}, @main=@item_012={0x2, 0x0, 0xa, "a9c3"}]}}, 0x0}, 0x0) 985.730934ms ago: executing program 5 (id=1668): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x31}]}]}, 0x1c}}, 0x0) 761.550906ms ago: executing program 5 (id=1669): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c6974060e"], 0x7c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000) 654.241656ms ago: executing program 5 (id=1670): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 520.24289ms ago: executing program 1 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e6174002400028008000740000000000800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0) 485.347753ms ago: executing program 5 (id=1672): add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 325.517579ms ago: executing program 5 (id=1673): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@unhide}, {@noadinicb}, {@uid}, {@umask={'umask', 0x3d, 0x3d}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid_forget}, {@shortad}, {@uid_forget}, {@adinicb}]}, 0x1, 0xc5f, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800052, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 325.382599ms ago: executing program 0 (id=1674): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) connect$vsock_stream(r0, &(0x7f0000000bc0), 0x10) 120.953648ms ago: executing program 0 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aa00aaaaaaaaffffffffffff86dd0500000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000bb08", @ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 181.9µs ago: executing program 0 (id=1676): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') exit(0x8) getdents(r0, 0x0, 0x48) 0s ago: executing program 5 (id=1677): r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000040)={'virt_wifi0\x00', @random="1b008000"}) ioctl(r0, 0x8b22, &(0x7f0000000040)) kernel console output (not intermixed with test programs): filesystem [ 117.796936][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.694: corrupted inode contents [ 117.823750][ T5966] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.694: mark_inode_dirty error [ 117.844670][ T5966] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 117.873936][ T5966] EXT4-fs (loop1): 1 truncate cleaned up [ 117.898203][ T5966] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.943310][ T5966] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.032718][ T5966] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 118.239693][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 118.268672][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 118.292715][ T5991] netlink: 'syz.4.704': attribute type 19 has an invalid length. [ 118.310723][ T5991] netlink: 'syz.4.704': attribute type 20 has an invalid length. [ 118.865317][ T6000] loop1: detected capacity change from 0 to 32768 [ 119.268895][ T6019] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.271201][ T6000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.304031][ T6022] loop0: detected capacity change from 0 to 8 [ 119.419482][ T6000] (syz.1.707,6000,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 119.558757][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 119.629402][ T5995] infiniband syz0: set down [ 119.634327][ T5995] infiniband syz0: added ipvlan1 [ 119.703330][ T6033] xt_HMARK: proto mask must be zero with L3 mode [ 119.712968][ T6035] xt_l2tp: v2 sid > 0xffff: 1114112 [ 119.753001][ T5995] infiniband syz0: Couldn't open port 1 [ 119.871667][ T6040] tipc: Enabling of bearer rejected, failed to enable media [ 119.939790][ T5995] RDS/IB: syz0: added [ 119.949705][ T5995] smc: adding ib device syz0 with port count 1 [ 119.993068][ T5995] smc: ib device syz0 port 1 has pnetid [ 120.326693][ T2305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.340410][ T6054] loop2: detected capacity change from 0 to 4096 [ 120.498015][ T6054] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.607896][ T2305] usb 1-1: Using ep0 maxpacket: 32 [ 120.625320][ T6054] ntfs3: loop2: Failed to load $Extend. [ 120.692098][ T6050] loop4: detected capacity change from 0 to 32768 [ 120.726351][ T6050] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.731 (6050) [ 120.792108][ T2305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.809641][ T6050] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 120.862511][ T6050] BTRFS info (device loop4): using free space tree [ 120.886808][ T2305] usb 1-1: config 6 has an invalid interface number: 203 but max is 0 [ 120.915485][ T2305] usb 1-1: config 6 has no interface number 0 [ 120.922181][ T6050] BTRFS info (device loop4): has skinny extents [ 120.935128][ T2305] usb 1-1: config 6 interface 203 has no altsetting 0 [ 121.126945][ T4472] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.136346][ T2305] usb 1-1: New USB device found, idVendor=1a8d, idProduct=100f, bcdDevice= 2.fa [ 121.155008][ T6050] BTRFS info (device loop4): enabling ssd optimizations [ 121.166282][ T2305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.194793][ T2305] usb 1-1: Product: syz [ 121.213229][ T2305] usb 1-1: Manufacturer: ㏌玌敮ি藊︕蒘ଳ痣괢偛聶礀봤賐꽼禮⢐⩳ꄻ偢떉᠘휀൱]쒝츦㴻솨┼렽胟侈픟㡗쇺冖㟼퇨ﰤ㊁⚴顷⤎껸㺜퓜䲲〄ﰋ壄僄尯릻攛濜犬팺 [ 121.264467][ T2305] usb 1-1: SerialNumber: syz [ 121.376395][ T4472] usb 2-1: Using ep0 maxpacket: 16 [ 121.627223][ T2305] option 1-1:6.203: GSM modem (1-port) converter detected [ 121.656686][ T4472] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 121.676600][ T4472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.684639][ T4472] usb 2-1: Product: syz [ 121.704316][ T2305] usb 1-1: USB disconnect, device number 5 [ 121.726399][ T4472] usb 2-1: Manufacturer: syz [ 121.731294][ T4472] usb 2-1: SerialNumber: syz [ 121.737451][ T2305] option 1-1:6.203: device disconnected [ 121.782836][ T4472] usb 2-1: config 0 descriptor?? [ 121.827777][ T4472] safe_serial 2-1:0.0: safe_serial converter detected [ 121.887269][ T4472] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 122.068270][ T6098] loop4: detected capacity change from 0 to 2048 [ 122.129224][ T2305] usb 2-1: USB disconnect, device number 7 [ 122.177614][ T6098] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 2016: 0x22 != 0x00 [ 122.226186][ T2305] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 122.285888][ T2305] safe_serial 2-1:0.0: device disconnected [ 122.302579][ T6104] loop0: detected capacity change from 0 to 512 [ 122.345667][ T6098] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 122.373247][ T6100] loop2: detected capacity change from 0 to 32768 [ 122.381454][ T6098] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has too big (2344) entry at pos 0 [ 122.420858][ T6100] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.426062][ T6104] EXT4-fs (loop0): Ignoring removed bh option [ 122.429702][ T6100] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.453609][ T6100] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 122.453609][ T6100] bh = 19 (type: exp=4, found=5) [ 122.453609][ T6100] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 122.473694][ T6106] loop3: detected capacity change from 0 to 2048 [ 122.481244][ T6100] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 122.496714][ T6100] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 122.506120][ T6100] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 122.513484][ T6100] gfs2: fsid=syz:syz.0: File system withdrawn [ 122.520177][ T6100] CPU: 0 PID: 6100 Comm: syz.2.744 Not tainted syzkaller #0 [ 122.527484][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.537561][ T6100] Call Trace: [ 122.540854][ T6100] [ 122.543797][ T6100] dump_stack_lvl+0x168/0x230 [ 122.548514][ T6100] ? kobject_uevent_env+0x371/0x890 [ 122.553734][ T6100] ? show_regs_print_info+0x20/0x20 [ 122.558977][ T6100] ? load_image+0x3b0/0x3b0 [ 122.563516][ T6100] ? kobject_uevent_env+0x371/0x890 [ 122.568741][ T6100] ? lockref_put_or_lock+0x6e/0xb0 [ 122.573890][ T6100] gfs2_withdraw+0x111b/0x1460 [ 122.578693][ T6100] ? gfs2_lm+0x220/0x220 [ 122.582963][ T6100] ? gfs2_meta_read+0x89f/0xa50 [ 122.587842][ T6100] ? gfs2_meta_new+0x160/0x160 [ 122.592634][ T6100] gfs2_metatype_check_ii+0x74/0x90 [ 122.597855][ T6100] gfs2_meta_buffer+0x262/0x310 [ 122.602736][ T6100] gfs2_inode_refresh+0xb5/0xfe0 [ 122.607696][ T6100] ? do_promote+0x71a/0xab0 [ 122.612217][ T6100] ? gfs2_inode_metasync+0xf0/0xf0 [ 122.617366][ T6100] ? __lock_acquire+0x7c60/0x7c60 [ 122.622421][ T6100] inode_go_lock+0x127/0x470 [ 122.627039][ T6100] do_promote+0x741/0xab0 [ 122.631394][ T6100] finish_xmote+0x514/0xb70 [ 122.635922][ T6100] do_xmote+0x7b6/0x1120 [ 122.640205][ T6100] gfs2_glock_nq+0xc7a/0x1550 [ 122.644909][ T6100] init_journal+0xc42/0x2220 [ 122.649534][ T6100] ? end_bio_io_page+0x100/0x100 [ 122.654498][ T6100] ? vsnprintf+0x1905/0x1a00 [ 122.659117][ T6100] ? snprintf+0xd7/0x120 [ 122.663388][ T6100] ? init_journal+0x710/0x2220 [ 122.668174][ T6100] ? vscnprintf+0x80/0x80 [ 122.672523][ T6100] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 122.677667][ T6100] init_inodes+0xdb/0x320 [ 122.682037][ T6100] gfs2_fill_super+0x1701/0x1f50 [ 122.687014][ T6100] ? gfs2_reconfigure+0xcd0/0xcd0 [ 122.692067][ T6100] ? gfs2_glock_nq_num+0x82/0x1b0 [ 122.697220][ T6100] ? preempt_count_add+0x8d/0x190 [ 122.702277][ T6100] ? sb_set_blocksize+0xa5/0xe0 [ 122.707174][ T6100] get_tree_bdev+0x3f1/0x610 [ 122.711790][ T6100] ? gfs2_reconfigure+0xcd0/0xcd0 [ 122.716837][ T6100] gfs2_get_tree+0x4d/0x1e0 [ 122.721372][ T6100] vfs_get_tree+0x88/0x270 [ 122.725819][ T6100] do_new_mount+0x24a/0xa40 [ 122.730355][ T6100] __se_sys_mount+0x2d6/0x3c0 [ 122.735056][ T6100] ? __x64_sys_mount+0xc0/0xc0 [ 122.739845][ T6100] ? lockdep_hardirqs_on+0x94/0x140 [ 122.745066][ T6100] ? __x64_sys_mount+0x1c/0xc0 [ 122.749861][ T6100] do_syscall_64+0x4c/0xa0 [ 122.754299][ T6100] ? clear_bhb_loop+0x30/0x80 [ 122.759002][ T6100] ? clear_bhb_loop+0x30/0x80 [ 122.763703][ T6100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.769618][ T6100] RIP: 0033:0x7ff517d3476a [ 122.774062][ T6100] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.793690][ T6100] RSP: 002b:00007ff515f99e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.802136][ T6100] RAX: ffffffffffffffda RBX: 00007ff515f99ef0 RCX: 00007ff517d3476a [ 122.810132][ T6100] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007ff515f99eb0 [ 122.818128][ T6100] RBP: 0000200000000400 R08: 00007ff515f99ef0 R09: 0000000000010080 [ 122.826126][ T6100] R10: 0000000000010080 R11: 0000000000000246 R12: 0000200000012500 [ 122.834118][ T6100] R13: 00007ff515f99eb0 R14: 000000000001260d R15: 0000200000000640 [ 122.842127][ T6100] [ 122.847083][ T6100] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 122.873197][ T6104] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 122.912175][ T6106] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 122.924680][ T6104] EXT4-fs (loop0): 1 truncate cleaned up [ 123.035068][ T6104] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 123.095656][ T6106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.632442][ T6129] loop3: detected capacity change from 0 to 512 [ 123.674106][ T6133] loop1: detected capacity change from 0 to 256 [ 123.706831][ T6129] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 123.769106][ T6129] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 123.838096][ T6129] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.075212][ T4472] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.132843][ T6150] loop1: detected capacity change from 0 to 4096 [ 124.149516][ T6154] loop0: detected capacity change from 0 to 64 [ 124.228333][ T6157] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.315715][ T4472] usb 5-1: Using ep0 maxpacket: 16 [ 124.439191][ T6161] loop1: detected capacity change from 0 to 512 [ 124.451681][ T4472] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 124.472990][ T4472] usb 5-1: config 0 has no interface number 0 [ 124.490178][ T4472] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.498988][ T6161] EXT4-fs (loop1): Ignoring removed bh option [ 124.530659][ T6161] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 124.535260][ T4472] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.568655][ T26] audit: type=1326 audit(1761106253.823:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7579e6bfc9 code=0x7ffc0000 [ 124.585875][ T6161] EXT4-fs (loop1): 1 truncate cleaned up [ 124.601871][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 124.612545][ T4472] usb 5-1: config 0 interface 41 has no altsetting 0 [ 124.642745][ T26] audit: type=1326 audit(1761106253.893:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7579e6bfc9 code=0x7ffc0000 [ 124.668291][ T26] audit: type=1326 audit(1761106253.893:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7579e6bfc9 code=0x7ffc0000 [ 124.704314][ T4239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.864801][ T4472] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 124.901720][ T4472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.924591][ T4472] usb 5-1: Product: syz [ 124.932205][ T4472] usb 5-1: Manufacturer: syz [ 124.938224][ T4472] usb 5-1: SerialNumber: syz [ 124.953695][ T4472] usb 5-1: config 0 descriptor?? [ 124.985327][ T6153] loop2: detected capacity change from 0 to 32768 [ 125.000637][ T6140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.004435][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 125.014300][ T6140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.036394][ T6153] XFS: ikeep mount option is deprecated. [ 125.099075][ T6153] XFS (loop2): Mounting V5 Filesystem [ 125.166699][ T4239] usb 4-1: config 9 has an invalid interface number: 95 but max is 0 [ 125.186087][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 125.197038][ T4239] usb 4-1: config 9 has no interface number 0 [ 125.203176][ T4239] usb 4-1: config 9 interface 95 altsetting 82 endpoint 0x9 has invalid maxpacket 2039, setting to 64 [ 125.215661][ T6192] netlink: 56 bytes leftover after parsing attributes in process `syz.0.781'. [ 125.256463][ T4472] CoreChips: probe of 5-1:0.41 failed with error -71 [ 125.284661][ T4472] usb 5-1: USB disconnect, device number 8 [ 125.302217][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 125.321760][ T4239] usb 4-1: config 9 interface 95 altsetting 82 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 125.384096][ T4239] usb 4-1: config 9 interface 95 has no altsetting 0 [ 125.417241][ T6153] XFS (loop2): Ending clean mount [ 125.435845][ T6153] XFS (loop2): Quotacheck needed: Please wait. [ 125.477901][ T6198] loop1: detected capacity change from 0 to 4096 [ 125.486175][ T6153] XFS (loop2): Quotacheck: Done. [ 125.567101][ T4186] XFS (loop2): Unmounting Filesystem [ 125.586314][ T4239] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 125.603489][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.612281][ T4239] usb 4-1: Product: syz [ 125.623535][ T4239] usb 4-1: Manufacturer: syz [ 125.645210][ T6198] ntfs3: loop1: ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 125.655737][ T4239] usb 4-1: SerialNumber: syz [ 125.704763][ T4247] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.715812][ T4196] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 125.731467][ T4196] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 125.925704][ T6204] loop1: detected capacity change from 0 to 64 [ 126.015684][ T4239] usb 4-1: USB disconnect, device number 4 [ 126.067246][ T4247] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.109317][ T4247] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.134999][ T4247] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 126.154551][ T6210] loop1: detected capacity change from 0 to 128 [ 126.174137][ T4247] usb 1-1: config 220 has no interface number 2 [ 126.210981][ T4247] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.243123][ T6210] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.276530][ T4247] usb 1-1: config 220 interface 0 has no altsetting 0 [ 126.301038][ T6210] hpfs: filesystem error: improperly stopped [ 126.316537][ T4247] usb 1-1: config 220 interface 76 has no altsetting 0 [ 126.323036][ T6210] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.328115][ T4737] udevd[4737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.353579][ T6210] hpfs: You really don't want any checks? You are crazy... [ 126.361232][ T4247] usb 1-1: config 220 interface 1 has no altsetting 0 [ 126.372558][ T6210] hpfs: hpfs_map_sector(): read error [ 126.385497][ T6210] hpfs: code page support is disabled [ 126.408436][ T6210] hpfs: hpfs_map_4sectors(): unaligned read [ 126.429316][ T6210] hpfs: hpfs_map_4sectors(): unaligned read [ 126.445137][ T6217] loop4: detected capacity change from 0 to 4096 [ 126.451656][ T6210] hpfs: filesystem error: unable to find root dir [ 126.468588][ T6216] loop2: detected capacity change from 0 to 8192 [ 126.544393][ T4247] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.570659][ T6217] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 126.618672][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.676896][ T4247] usb 1-1: Product: syz [ 126.681120][ T4247] usb 1-1: Manufacturer: syz [ 126.741371][ T4247] usb 1-1: SerialNumber: syz [ 126.865431][ T6229] loop1: detected capacity change from 0 to 2048 [ 126.936769][ T6230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.066309][ T6234] loop2: detected capacity change from 0 to 2048 [ 127.141366][ T4247] usb 1-1: selecting invalid altsetting 0 [ 127.170933][ T4247] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 127.191288][ T6234] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 127.243615][ T4247] usb 1-1: No valid video chain found. [ 127.245577][ T6234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.341309][ T6238] loop1: detected capacity change from 0 to 2048 [ 127.344870][ T4247] usb 1-1: selecting invalid altsetting 0 [ 127.371397][ T4247] usbtest: probe of 1-1:220.1 failed with error -22 [ 127.435279][ T6238] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 127.442653][ T4247] usb 1-1: USB disconnect, device number 6 [ 127.491442][ T6238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.627006][ T6245] loop4: detected capacity change from 0 to 128 [ 127.700456][ T26] audit: type=1326 audit(1761106256.965:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26976fc9 code=0x7fc00000 [ 127.751593][ T6245] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 127.832735][ T6245] hpfs: filesystem error: improperly stopped [ 127.839310][ T6245] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 127.886390][ T6245] hpfs: You really don't want any checks? You are crazy... [ 127.929142][ T6245] hpfs: hpfs_map_sector(): read error [ 127.954879][ T6245] hpfs: code page support is disabled [ 127.963390][ T6245] hpfs: hpfs_map_4sectors(): unaligned read [ 127.969353][ T6245] hpfs: hpfs_map_4sectors(): unaligned read [ 127.969365][ T6245] hpfs: filesystem error: unable to find root dir [ 128.097851][ T6259] loop2: detected capacity change from 0 to 512 [ 128.158677][ T6263] loop3: detected capacity change from 0 to 512 [ 128.323400][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 128.355589][ T6274] rdma_rxe: rxe_register_device failed with error -23 [ 128.367116][ T6259] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.381507][ T6263] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.816: corrupted inode contents [ 128.411583][ T6274] rdma_rxe: failed to add ipvlan1 [ 128.453810][ T6263] EXT4-fs error (device loop3): ext4_dirty_inode:6046: inode #16: comm syz.3.816: mark_inode_dirty error [ 128.478739][ T6263] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.816: corrupted inode contents [ 128.505614][ T6263] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.816: mark_inode_dirty error [ 128.537756][ T6263] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.816: corrupted inode contents [ 128.583178][ T6263] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 128.605970][ T6263] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.816: corrupted inode contents [ 128.663636][ T6263] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.816: mark_inode_dirty error [ 128.679962][ T6289] loop2: detected capacity change from 0 to 512 [ 128.708433][ T6263] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 128.739710][ T6289] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 128.740082][ T6263] EXT4-fs (loop3): 1 truncate cleaned up [ 128.758326][ T6289] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 128.768536][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.780398][ T6263] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.836011][ T6289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 128.860300][ T6289] System zones: 1-12 [ 128.866060][ T6263] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 128.867017][ T6289] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.823: bad orphan inode 65551 [ 128.887528][ T6289] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 128.910726][ T26] audit: type=1800 audit(1761106258.145:16): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.828" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 129.012675][ T4481] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.460011][ T6324] loop0: detected capacity change from 0 to 512 [ 129.542402][ T4481] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 129.551503][ T4481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.561783][ T4692] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.591145][ T6324] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.622327][ T4481] usb 5-1: Product: syz [ 129.626551][ T4481] usb 5-1: Manufacturer: syz [ 129.631504][ T6324] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.657531][ T4481] usb 5-1: SerialNumber: syz [ 129.679998][ T6334] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 129.694379][ T4481] usb 5-1: config 0 descriptor?? [ 129.841757][ T4692] usb 2-1: Using ep0 maxpacket: 32 [ 129.927297][ T6347] syz.0.850 uses obsolete (PF_INET,SOCK_PACKET) [ 129.952262][ T4481] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 129.993711][ T4692] usb 2-1: config 0 has no interfaces? [ 129.999404][ T4692] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 130.029820][ T4692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.061881][ T4692] usb 2-1: config 0 descriptor?? [ 130.156069][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 130.172253][ T4481] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 130.179107][ T4481] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 130.212686][ T4481] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 130.322608][ T4481] peak_usb: probe of 5-1:0.0 failed with error -22 [ 130.337917][ T6366] Zero length message leads to an empty skb [ 130.366701][ T4692] usb 2-1: USB disconnect, device number 8 [ 130.399051][ T4693] usb 5-1: USB disconnect, device number 9 [ 130.554712][ T6376] loop0: detected capacity change from 0 to 2048 [ 130.693648][ T6385] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.818096][ T6388] siw: device registration error -23 [ 131.024553][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.886'. [ 131.456430][ T6425] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.652652][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.894'. [ 132.036213][ T6456] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.054773][ T6456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.068935][ T6457] tipc: Enabling of bearer rejected, failed to enable media [ 132.145838][ T6406] loop4: detected capacity change from 0 to 32768 [ 132.224704][ T6406] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.878 (6406) [ 132.251231][ T6459] loop0: detected capacity change from 0 to 4096 [ 132.279195][ T6406] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.306856][ T26] audit: type=1326 audit(1761106261.567:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.1.909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94f1404fc9 code=0x0 [ 132.345617][ T6406] BTRFS info (device loop4): turning on flush-on-commit [ 132.354228][ T6406] BTRFS info (device loop4): turning off barriers [ 132.363985][ T6406] BTRFS info (device loop4): turning on sync discard [ 132.377367][ T6406] BTRFS info (device loop4): using free space tree [ 132.384468][ T6406] BTRFS info (device loop4): has skinny extents [ 132.394786][ T6467] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.634084][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640505][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.669380][ T6490] loop0: detected capacity change from 0 to 256 [ 132.784177][ T6493] netlink: 'syz.3.912': attribute type 3 has an invalid length. [ 132.849291][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.912'. [ 132.865133][ T26] audit: type=1800 audit(1761106262.127:18): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="file1" dev="loop0" ino=1048643 res=0 errno=0 [ 132.868164][ T6490] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.921015][ T6490] FAT-fs (loop0): Filesystem has been set read-only [ 132.942651][ T4303] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by udevd (4303) [ 133.167047][ T6500] tipc: Started in network mode [ 133.199292][ T6500] tipc: Node identity ac141427, cluster identity 4711 [ 133.237764][ T6500] vxcan0: MTU too low for tipc bearer [ 133.267360][ T6500] tipc: Enabling of bearer rejected, failed to enable media [ 133.825820][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 133.870244][ T6532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.929'. [ 133.895095][ T6528] nbd: socks must be embedded in a SOCK_ITEM attr [ 134.145593][ T6546] loop3: detected capacity change from 0 to 4096 [ 134.182594][ T6546] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 134.238490][ T6546] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 134.257529][ T6546] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 134.349118][ T6553] loop0: detected capacity change from 0 to 64 [ 134.480161][ T1277] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 134.488512][ T1277] ntfs3: loop3: ino=1e, "file1" Internal error [ 134.518489][ T1277] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 134.575265][ T4183] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 134.586838][ T4183] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 134.593954][ T6557] loop2: detected capacity change from 0 to 512 [ 134.655993][ T6557] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.942: invalid block [ 134.699041][ T6557] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.942: invalid indirect mapped block 10 (level 1) [ 134.754494][ T6557] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.942: invalid indirect mapped block 8 (level 1) [ 134.835347][ T6557] EXT4-fs (loop2): 1 truncate cleaned up [ 134.849859][ T6557] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 134.892124][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 134.932793][ T6571] nbd: socks must be embedded in a SOCK_ITEM attr [ 135.122227][ T6573] loop2: detected capacity change from 0 to 2048 [ 135.158587][ T6569] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 135.224756][ T6578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.230990][ T6577] loop3: detected capacity change from 0 to 4096 [ 135.279689][ T6573] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 135.362308][ T6573] Remounting filesystem read-only [ 135.396228][ T6583] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 135.436198][ T6585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.470570][ T6551] loop1: detected capacity change from 0 to 32768 [ 135.484141][ T6587] loop0: detected capacity change from 0 to 128 [ 135.491251][ T6584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.513738][ T6551] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.940 (6551) [ 135.566312][ T6551] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 135.577884][ T6551] BTRFS info (device loop1): using free space tree [ 135.598086][ T6551] BTRFS info (device loop1): has skinny extents [ 135.608220][ T6587] EXT4-fs (loop0): Ignoring removed nobh option [ 135.677859][ T6587] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 135.701323][ T6584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.720146][ T6587] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.786018][ T6587] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 135.801544][ T6584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.928015][ T6551] BTRFS info (device loop1): enabling ssd optimizations [ 135.997235][ T6584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.112189][ T6622] loop0: detected capacity change from 0 to 512 [ 136.242156][ T6622] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 136.361269][ T6622] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.399806][ T6584] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.410424][ T6619] loop2: detected capacity change from 0 to 32768 [ 136.473947][ T6584] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.556115][ T6584] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.645428][ T6584] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.675400][ T6619] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 136.728507][ T6619] BTRFS info (device loop2): turning on flush-on-commit [ 136.735741][ T6619] BTRFS info (device loop2): turning off barriers [ 136.782013][ T6619] BTRFS info (device loop2): turning on sync discard [ 136.809538][ T6619] BTRFS info (device loop2): using free space tree [ 136.816194][ T6619] BTRFS info (device loop2): has skinny extents [ 136.971919][ T6644] tipc: Started in network mode [ 137.010849][ T6644] tipc: Node identity ac141427, cluster identity 4711 [ 137.058717][ T6644] vxcan0: MTU too low for tipc bearer [ 137.067235][ T6643] loop3: detected capacity change from 0 to 4096 [ 137.094870][ T6644] tipc: Enabling of bearer rejected, failed to enable media [ 137.118631][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 137.165891][ T6643] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 137.195272][ T6655] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 137.262169][ T6643] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 137.289361][ T6655] CUSE: unknown device info "3ܟ,̘" [ 137.314226][ T6655] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 137.314226][ T6655] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 137.334846][ T6668] loop4: detected capacity change from 0 to 4096 [ 137.356895][ T6668] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 137.359291][ T6643] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 137.378045][ T6643] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 137.392161][ T6643] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 137.438971][ T6655] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 137.461732][ T6668] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 137.483947][ T6655] CUSE: DEVNAME unspecified [ 137.540794][ T6668] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 137.548737][ T6643] ntfs: volume version 3.1. [ 137.583899][ T6643] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 137.613544][ T6680] loop0: detected capacity change from 0 to 512 [ 137.655281][ T6643] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 137.714264][ T4175] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (4175) [ 137.751795][ T6643] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 137.786437][ T6643] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 137.793101][ T6680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.914171][ T6680] EXT4-fs (loop0): 1 truncate cleaned up [ 137.992959][ T6680] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000007,init_itable,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 138.051967][ T4266] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 138.071390][ T6680] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.983: corrupted in-inode xattr [ 138.086711][ T4266] ntfs3: loop4: ino=1e, Internal error [ 138.113718][ T6680] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1761: inode #15: comm syz.0.983: unable to update i_inline_off [ 138.124255][ T6692] loop1: detected capacity change from 0 to 512 [ 138.132751][ T4266] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 138.180037][ T4184] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 138.188872][ T4184] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 138.202777][ T6697] EXT4-fs error (device loop0): ext4_xattr_ibody_list:748: inode #15: comm syz.0.983: corrupted in-inode xattr [ 138.285154][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 138.338207][ T6692] ext4 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.525747][ T6710] loop0: detected capacity change from 0 to 4096 [ 138.685163][ T6713] loop3: detected capacity change from 0 to 2048 [ 138.690581][ T6719] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.829441][ T6725] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.859634][ T6713] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 138.932892][ T6713] Remounting filesystem read-only [ 138.970964][ T6733] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 139.094068][ T6738] loop2: detected capacity change from 0 to 256 [ 139.241459][ T6745] vivid-004: disconnect [ 139.260120][ T6744] vivid-004: reconnect [ 139.325115][ T6747] loop3: detected capacity change from 0 to 2048 [ 139.359766][ T6750] loop4: detected capacity change from 0 to 64 [ 139.479731][ T6747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.705908][ T6764] loop4: detected capacity change from 0 to 512 [ 139.758896][ T6769] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 139.815307][ T6769] CUSE: unknown device info "3ܟ,̘" [ 139.842916][ T6764] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 139.913566][ T6769] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 139.913566][ T6769] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 139.977239][ T6769] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 139.989381][ T6764] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.001124][ T6785] loop0: detected capacity change from 0 to 512 [ 140.012689][ T6769] CUSE: DEVNAME unspecified [ 140.066652][ T6771] loop1: detected capacity change from 0 to 4096 [ 140.178178][ T6771] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 140.213434][ T6785] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1001: invalid indirect mapped block 10 (level 1) [ 140.332226][ T6785] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1001: invalid indirect mapped block 8 (level 1) [ 140.367985][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1009'. [ 140.384318][ T6771] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 140.406540][ T6771] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 140.465594][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 140.516760][ T6785] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 140.644742][ T528] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 140.662651][ T528] ntfs3: loop1: ino=1e, Internal error [ 140.696661][ T528] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 140.737369][ T4196] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 140.744480][ T4196] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 140.958539][ T6822] loop0: detected capacity change from 0 to 2048 [ 141.057090][ T6822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.270619][ T6833] loop4: detected capacity change from 0 to 256 [ 141.772423][ T6859] loop4: detected capacity change from 0 to 512 [ 141.809730][ T6812] loop3: detected capacity change from 0 to 32768 [ 141.876236][ T6859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1027: invalid indirect mapped block 10 (level 1) [ 141.964792][ T6812] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.027209][ T6859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1027: invalid indirect mapped block 8 (level 1) [ 142.038613][ T6812] BTRFS info (device loop3): turning on flush-on-commit [ 142.087549][ T6812] BTRFS info (device loop3): turning off barriers [ 142.095078][ T6859] EXT4-fs (loop4): 1 truncate cleaned up [ 142.104322][ T6859] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 142.135507][ T6812] BTRFS info (device loop3): turning on sync discard [ 142.206277][ T6812] BTRFS info (device loop3): using free space tree [ 142.212951][ T6812] BTRFS info (device loop3): has skinny extents [ 142.327915][ T6847] loop1: detected capacity change from 0 to 32768 [ 142.637086][ T6847] XFS (loop1): Mounting V5 Filesystem [ 142.830453][ T6847] XFS (loop1): Ending clean mount [ 143.013265][ T6931] openvswitch: netlink: Actions may not be safe on all matching packets [ 143.134516][ T6847] XFS (loop1): Quotacheck needed: Please wait. [ 143.210777][ T6937] loop4: detected capacity change from 0 to 128 [ 143.481279][ T6937] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 143.547953][ T6937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.635753][ T6937] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 143.665593][ T6937] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 143.755632][ T6847] XFS (loop1): Quotacheck: Done. [ 143.927671][ T4184] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 143.968412][ T4184] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 144.002445][ T4196] XFS (loop1): Unmounting Filesystem [ 144.361949][ T6945] loop0: detected capacity change from 0 to 32768 [ 144.497190][ T6956] loop3: detected capacity change from 0 to 32768 [ 144.548657][ T1277] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.571720][ T6945] XFS (loop0): Mounting V5 Filesystem [ 144.613255][ T6956] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.636735][ T1277] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.702200][ T6945] XFS (loop0): Ending clean mount [ 144.717660][ T1277] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.799301][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 144.816007][ T1277] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.843685][ T4185] XFS (loop0): Unmounting Filesystem [ 145.090617][ T6974] lo speed is unknown, defaulting to 1000 [ 145.758216][ T1277] tipc: Left network mode [ 145.969121][ T7003] device veth1_macvtap left promiscuous mode [ 146.021844][ T7009] device veth1_macvtap entered promiscuous mode [ 146.043066][ T6974] chnl_net:caif_netlink_parms(): no params data found [ 146.343942][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.359882][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.370303][ T6974] device bridge_slave_0 entered promiscuous mode [ 146.399065][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.408164][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.409845][ T7026] loop3: detected capacity change from 0 to 8 [ 146.425695][ T6974] device bridge_slave_1 entered promiscuous mode [ 146.516704][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.589413][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.784979][ T6974] team0: Port device team_slave_0 added [ 146.864935][ T6974] team0: Port device team_slave_1 added [ 146.942318][ T7043] loop1: detected capacity change from 0 to 2048 [ 147.023732][ T4482] Bluetooth: hci1: command 0x0409 tx timeout [ 147.056509][ T7043] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.082068][ T7043] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1076: bg 0: block 234: padding at end of block bitmap is not set [ 147.110845][ T7045] device veth1_macvtap left promiscuous mode [ 147.144016][ T7050] device veth1_macvtap entered promiscuous mode [ 147.188210][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.210387][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.270486][ T7060] loop3: detected capacity change from 0 to 16 [ 147.330251][ T7031] loop2: detected capacity change from 0 to 32768 [ 147.334335][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.352748][ T7060] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.457305][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.475086][ T7031] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 147.508418][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.524787][ T7031] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 147.539500][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.692766][ T4706] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 147.779869][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 147.808237][ T6974] device hsr_slave_0 entered promiscuous mode [ 147.839590][ T6974] device hsr_slave_1 entered promiscuous mode [ 147.849768][ T7074] loop3: detected capacity change from 0 to 4096 [ 147.857302][ T6974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.878972][ T7074] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.902206][ T6974] Cannot create hsr debugfs directory [ 147.920966][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 148.007384][ T7074] ntfs: (device loop3): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 148.069829][ T7074] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 148.094346][ T7074] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 148.142890][ T4706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 148.168424][ T4706] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.183771][ T7074] ntfs: volume version 3.1. [ 148.201872][ T4706] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.245479][ T4706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.281321][ T4706] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 148.314270][ T4706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.349455][ T4706] usb 1-1: config 0 descriptor?? [ 148.506469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 148.587662][ T6974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.623468][ T6974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.669893][ T6974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.696881][ T6974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.748314][ T1277] device hsr_slave_0 left promiscuous mode [ 148.760516][ T1277] device hsr_slave_1 left promiscuous mode [ 148.779941][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.794560][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.812831][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.840625][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.865051][ T1277] device bridge_slave_1 left promiscuous mode [ 148.874050][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.903385][ T1277] device bridge_slave_0 left promiscuous mode [ 148.920262][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.972755][ T7106] loop1: detected capacity change from 0 to 16 [ 148.994429][ T7106] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.051665][ T1277] device veth1_macvtap left promiscuous mode [ 149.077438][ T1277] device veth0_macvtap left promiscuous mode [ 149.086692][ T1277] device veth1_vlan left promiscuous mode [ 149.097975][ T1277] device veth0_vlan left promiscuous mode [ 149.103630][ T6948] Bluetooth: hci1: command 0x041b tx timeout [ 149.122738][ T4706] usb 1-1: string descriptor 0 read error: -71 [ 149.158965][ T4706] uclogic 0003:5543:0081.0007: failed retrieving string descriptor #200: -71 [ 149.168378][ T4706] uclogic 0003:5543:0081.0007: failed retrieving pen parameters: -71 [ 149.200737][ T4706] uclogic 0003:5543:0081.0007: failed probing pen v2 parameters: -71 [ 149.226241][ T4706] uclogic 0003:5543:0081.0007: failed probing parameters: -71 [ 149.243309][ T4706] uclogic: probe of 0003:5543:0081.0007 failed with error -71 [ 149.264468][ T4706] usb 1-1: USB disconnect, device number 7 [ 149.507027][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 149.529260][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 149.551955][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.569707][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.586691][ T7109] loop1: detected capacity change from 0 to 32768 [ 149.669424][ T7109] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 149.718424][ T7112] loop0: detected capacity change from 0 to 512 [ 149.731314][ T7109] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.766295][ T1277] bond0 (unregistering): Released all slaves [ 149.832889][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 149.842879][ T7112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.050579][ T4707] lo speed is unknown, defaulting to 1000 [ 150.059183][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 150.128468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 150.414804][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.440175][ T7141] loop1: detected capacity change from 0 to 256 [ 150.477822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.495269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.503789][ T7141] exfat: Deprecated parameter 'namecase' [ 150.519212][ T7141] exfat: Deprecated parameter 'utf8' [ 150.558727][ T6974] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.578472][ T7141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 150.596911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.639130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.676345][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.683504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.698986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.771631][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.804527][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.846681][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.853951][ T5800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.905258][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.917973][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.940964][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.996840][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.003811][ T7160] loop0: detected capacity change from 0 to 4096 [ 151.050479][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.066046][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.084045][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.108778][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.125673][ T7160] ntfs: volume version 3.1. [ 151.129068][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.149997][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.181163][ T6948] Bluetooth: hci1: command 0x040f tx timeout [ 151.208476][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.246180][ T6974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.273691][ T7160] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 151.311457][ T7160] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 151.356063][ T7176] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 151.487372][ T4254] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.611768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.642365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.676569][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.805160][ T4254] usb 2-1: Using ep0 maxpacket: 16 [ 151.844799][ T7196] loop3: detected capacity change from 0 to 128 [ 151.859433][ T7196] hpfs: bad mount options. [ 151.871220][ T13] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 151.937430][ T4254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.961244][ T4254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.981197][ T4254] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 152.047198][ T4254] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 152.090914][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.109193][ T4254] usb 2-1: config 0 descriptor?? [ 152.128523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.148288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.200209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.214559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.241316][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.256527][ T6974] device veth0_vlan entered promiscuous mode [ 152.273637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.282949][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.294554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.303597][ T13] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 152.321037][ T6974] device veth1_vlan entered promiscuous mode [ 152.327252][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.339087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.387645][ T13] usb 1-1: config 0 descriptor?? [ 152.418629][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.434297][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.448871][ T6974] device veth0_macvtap entered promiscuous mode [ 152.459970][ T6974] device veth1_macvtap entered promiscuous mode [ 152.482480][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.494751][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.506364][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.518335][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.529154][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.548265][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.559063][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.578006][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.592116][ T4254] appleir 0003:05AC:8241.0008: item fetching failed at offset 1/5 [ 152.601632][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.610924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.619097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.627217][ T4254] appleir 0003:05AC:8241.0008: parse failed [ 152.633957][ T4254] appleir: probe of 0003:05AC:8241.0008 failed with error -22 [ 152.642598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.657255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.668939][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.687351][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.717608][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.735902][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.747715][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.766251][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.776946][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.794133][ T2305] usb 2-1: USB disconnect, device number 9 [ 152.801440][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.820780][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.833633][ T6974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.843954][ T6974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.853244][ T6974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.865532][ T6974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.877321][ T13] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 152.884903][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.901496][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.917569][ T13] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 152.929420][ T13] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 153.028701][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.049037][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.067940][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.073379][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.081128][ T13] isku 0003:1E7D:319C.0009: couldn't init struct isku_device [ 153.091618][ T13] isku 0003:1E7D:319C.0009: couldn't install keyboard [ 153.092288][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.115909][ T13] isku: probe of 0003:1E7D:319C.0009 failed with error -71 [ 153.132208][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.168214][ T13] usb 1-1: USB disconnect, device number 8 [ 153.260307][ T4482] Bluetooth: hci1: command 0x0419 tx timeout [ 153.297657][ T7234] fido_id[7234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.428069][ T7244] loop5: detected capacity change from 0 to 16 [ 153.460119][ T7244] erofs: (device loop5): mounted with root inode @ nid 36. [ 153.756722][ T7254] loop1: detected capacity change from 0 to 4096 [ 153.788312][ T7260] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 153.818900][ T7263] loop3: detected capacity change from 0 to 512 [ 153.847037][ T7254] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 153.906986][ T7257] loop5: detected capacity change from 0 to 4096 [ 153.940389][ T7263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.946279][ T7269] loop0: detected capacity change from 0 to 256 [ 154.027911][ T7269] FAT-fs (loop0): Directory bread(block 64) failed [ 154.091068][ T7269] FAT-fs (loop0): Directory bread(block 65) failed [ 154.100755][ T7269] FAT-fs (loop0): Directory bread(block 66) failed [ 154.107414][ T7269] FAT-fs (loop0): Directory bread(block 67) failed [ 154.114758][ T7269] FAT-fs (loop0): Directory bread(block 68) failed [ 154.126118][ T7269] FAT-fs (loop0): Directory bread(block 69) failed [ 154.143188][ T7269] FAT-fs (loop0): Directory bread(block 70) failed [ 154.179512][ T7269] FAT-fs (loop0): Directory bread(block 71) failed [ 154.186942][ T7254] ntfs: (device loop1): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 154.233702][ T7254] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 154.248423][ T7257] ntfs: volume version 3.1. [ 154.253755][ T7269] FAT-fs (loop0): Directory bread(block 72) failed [ 154.300639][ T7269] FAT-fs (loop0): Directory bread(block 73) failed [ 154.337304][ T7254] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 154.416425][ T7257] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 154.446235][ T7254] ntfs: volume version 3.1. [ 154.470025][ T7257] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 154.776227][ T7284] loop3: detected capacity change from 0 to 256 [ 154.803318][ T7282] loop5: detected capacity change from 0 to 256 [ 154.890640][ T7284] exfat: Deprecated parameter 'namecase' [ 154.900556][ T7284] exfat: Deprecated parameter 'utf8' [ 154.928516][ T7282] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 154.966145][ T7284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 155.039967][ T7290] loop0: detected capacity change from 0 to 1764 [ 155.693825][ T7311] loop0: detected capacity change from 0 to 4096 [ 155.762333][ T7320] loop1: detected capacity change from 0 to 512 [ 155.788094][ T7322] loop5: detected capacity change from 0 to 256 [ 155.798128][ T7313] loop3: detected capacity change from 0 to 4096 [ 155.824558][ T7320] EXT4-fs (loop1): Ignoring removed nobh option [ 155.831768][ T7311] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 155.868105][ T7320] EXT4-fs (loop1): Ignoring removed nobh option [ 155.924177][ T7311] ntfs3: loop0: Failed to load $Extend. [ 155.934314][ T7320] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1148: iget: bad i_size value: 38620345925642 [ 155.969981][ T7320] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1148: couldn't read orphan inode 15 (err -117) [ 155.989142][ T7322] FAT-fs (loop5): Directory bread(block 64) failed [ 156.007549][ T7313] ntfs: volume version 3.1. [ 156.057917][ T7322] FAT-fs (loop5): Directory bread(block 65) failed [ 156.074084][ T7322] FAT-fs (loop5): Directory bread(block 66) failed [ 156.081582][ T7322] FAT-fs (loop5): Directory bread(block 67) failed [ 156.089599][ T7322] FAT-fs (loop5): Directory bread(block 68) failed [ 156.096393][ T7322] FAT-fs (loop5): Directory bread(block 69) failed [ 156.104452][ T7322] FAT-fs (loop5): Directory bread(block 70) failed [ 156.111655][ T7320] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nobh,init_itable,,errors=continue. Quota mode: writeback. [ 156.129164][ T7322] FAT-fs (loop5): Directory bread(block 71) failed [ 156.173491][ T7322] FAT-fs (loop5): Directory bread(block 72) failed [ 156.229700][ T7322] FAT-fs (loop5): Directory bread(block 73) failed [ 156.236738][ T7313] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 156.336691][ T7313] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 156.377315][ T7279] loop2: detected capacity change from 0 to 32768 [ 156.465019][ T7329] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 156.482985][ T7329] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1150'. [ 156.560272][ T7329] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1150'. [ 156.715986][ T7279] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.841167][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 157.063768][ T7339] loop0: detected capacity change from 0 to 8192 [ 157.189641][ T7359] CUSE: unknown device info "" [ 157.194664][ T7359] CUSE: zero length info key specified [ 157.250318][ T7339] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 157.299074][ T7339] REISERFS (device loop0): using ordered data mode [ 157.308397][ T7339] reiserfs: using flush barriers [ 157.328410][ T4482] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.336318][ T7364] xt_policy: neither incoming nor outgoing policy selected [ 157.372632][ T7339] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.483598][ T7339] REISERFS (device loop0): checking transaction log (loop0) [ 157.537351][ T7339] REISERFS (device loop0): Using r5 hash to sort names [ 157.597051][ T7339] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 157.664202][ T7376] loop1: detected capacity change from 0 to 128 [ 157.710345][ T7378] loop2: detected capacity change from 0 to 256 [ 157.825244][ T7378] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 157.858467][ T4482] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 157.873584][ T4482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.892514][ T4482] usb 4-1: Product: syz [ 157.896728][ T4482] usb 4-1: Manufacturer: syz [ 157.908933][ T4482] usb 4-1: SerialNumber: syz [ 157.926655][ T4482] usb 4-1: config 0 descriptor?? [ 157.969859][ T4482] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 157.970822][ T7376] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 158.078231][ T7376] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.172055][ T7392] CUSE: unknown device info "" [ 158.187751][ T7392] CUSE: zero length info key specified [ 158.222400][ T7395] udc-core: couldn't find an available UDC or it's busy [ 158.250096][ T7395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.325381][ T7397] netlink: 'syz.2.1175': attribute type 3 has an invalid length. [ 158.338088][ T4482] gspca_sn9c2028: read1 error -71 [ 158.376126][ T4482] gspca_sn9c2028: read1 error -71 [ 158.417964][ T4482] gspca_sn9c2028: read1 error -71 [ 158.423145][ T4482] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 158.540665][ T4482] usb 4-1: USB disconnect, device number 5 [ 158.808994][ T7415] loop0: detected capacity change from 0 to 256 [ 158.832890][ T7417] xt_policy: neither incoming nor outgoing policy selected [ 158.883448][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 158.944938][ T7415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 158.980801][ T7419] loop3: detected capacity change from 0 to 64 [ 159.555987][ T7399] loop5: detected capacity change from 0 to 32768 [ 159.699369][ T7436] loop2: detected capacity change from 0 to 16 [ 159.743970][ T7399] XFS (loop5): Mounting V5 Filesystem [ 159.813384][ T7399] XFS (loop5): Ending clean mount [ 159.824507][ T7399] XFS (loop5): Quotacheck needed: Please wait. [ 159.885713][ T7399] XFS (loop5): Quotacheck: Done. [ 159.965523][ T6974] XFS (loop5): Unmounting Filesystem [ 160.061438][ T7450] netlink: 'syz.1.1197': attribute type 4 has an invalid length. [ 160.069730][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'. [ 160.327563][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 160.365363][ T7466] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 160.386684][ T7466] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1203'. [ 160.406180][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1206'. [ 160.417647][ T7466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1203'. [ 160.523194][ T7477] netlink: 'syz.0.1219': attribute type 29 has an invalid length. [ 160.533386][ T7477] netlink: 'syz.0.1219': attribute type 29 has an invalid length. [ 160.545672][ T7477] netlink: 'syz.0.1219': attribute type 29 has an invalid length. [ 160.766053][ T7487] loop1: detected capacity change from 0 to 1024 [ 160.796206][ T4707] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 160.818963][ T7436] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.831112][ T7487] hfsplus: bad catalog entry type [ 160.855135][ T528] hfsplus: b-tree write err: -5, ino 4 [ 161.026164][ T4692] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.311644][ T4707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.333263][ T4707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.367010][ T4707] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 161.406514][ T4707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.449512][ T4707] usb 4-1: config 0 descriptor?? [ 161.466130][ T4692] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 161.490171][ T4692] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 161.550251][ T4692] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 161.604390][ T4692] usb 1-1: config 220 has no interface number 2 [ 161.620937][ T4692] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 161.655588][ T4692] usb 1-1: config 220 interface 0 has no altsetting 0 [ 161.663562][ T4692] usb 1-1: config 220 interface 76 has no altsetting 0 [ 161.676927][ T4692] usb 1-1: config 220 interface 1 has no altsetting 0 [ 161.855870][ T4692] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 161.872199][ T7509] loop5: detected capacity change from 0 to 512 [ 161.899618][ T4692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.930102][ T4692] usb 1-1: Product: syz [ 161.937845][ T4707] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 161.955414][ T4692] usb 1-1: Manufacturer: syz [ 161.978956][ T4707] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 161.986370][ T7509] EXT4-fs (loop5): Ignoring removed nobh option [ 161.992938][ T7509] EXT4-fs (loop5): Ignoring removed nobh option [ 162.005740][ T4692] usb 1-1: SerialNumber: syz [ 162.032487][ T7515] loop1: detected capacity change from 0 to 64 [ 162.048062][ T4707] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 162.070154][ T7509] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1195: iget: bad i_size value: 38620345925642 [ 162.147024][ T4707] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 162.154494][ T4707] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 162.162671][ T7509] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1195: couldn't read orphan inode 15 (err -117) [ 162.235974][ T7509] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,nobh,init_itable,,errors=continue. Quota mode: writeback. [ 162.246635][ T4707] isku: probe of 0003:1E7D:319C.000A failed with error -71 [ 162.284463][ T4707] usb 4-1: USB disconnect, device number 6 [ 162.436146][ T4692] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 162.442554][ T4692] usb 1-1: No valid video chain found. [ 162.487124][ T7518] fido_id[7518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 162.496197][ T4692] usb 1-1: selecting invalid altsetting 0 [ 162.616751][ T4692] usb 1-1: selecting invalid altsetting 0 [ 162.626972][ T4692] usbtest: probe of 1-1:220.1 failed with error -22 [ 162.677902][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 162.696693][ T4692] usb 1-1: USB disconnect, device number 9 [ 163.200863][ T7552] loop3: detected capacity change from 0 to 512 [ 163.241372][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 163.428704][ T7562] loop1: detected capacity change from 0 to 64 [ 163.999699][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'. [ 164.010608][ T7582] loop1: detected capacity change from 0 to 16 [ 164.103943][ T7538] loop0: detected capacity change from 0 to 32768 [ 164.110651][ T7582] erofs: (device loop1): mounted with root inode @ nid 36. [ 164.219880][ T7538] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.244052][ T7538] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.308174][ T7538] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 164.334273][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 164.352894][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 164.516784][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms [ 164.519227][ T7595] syz.2.1249 (7595): /proc/7594/oom_adj is deprecated, please use /proc/7594/oom_score_adj instead. [ 164.531844][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 164.548423][ T7538] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.662085][ T7599] sg_read: process 59 (syz.5.1252) changed security contexts after opening file descriptor, this is not allowed. [ 164.733016][ T7602] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 164.821020][ T7538] ODEBUG: Out of memory. ODEBUG disabled [ 164.878595][ T7609] netem: incorrect ge model size [ 164.910657][ T7609] netem: change failed [ 164.969047][ T7611] loop2: detected capacity change from 0 to 128 [ 165.077246][ T7552] EXT4-fs (loop3): Ignoring removed nobh option [ 165.083651][ T7552] EXT4-fs (loop3): Ignoring removed nobh option [ 165.188235][ T7552] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1238: iget: bad i_size value: 38620345925642 [ 165.254001][ T7552] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1238: couldn't read orphan inode 15 (err -117) [ 165.299908][ T7552] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,nobh,init_itable,,errors=continue. Quota mode: writeback. [ 165.312241][ T7620] loop5: detected capacity change from 0 to 8192 [ 165.359341][ T7620] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 165.380253][ T7620] REISERFS (device loop5): using ordered data mode [ 165.413034][ T7620] reiserfs: using flush barriers [ 165.422835][ T7620] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.468366][ T7620] REISERFS (device loop5): checking transaction log (loop5) [ 165.494743][ T7620] REISERFS (device loop5): Using r5 hash to sort names [ 165.512704][ T7620] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 165.842991][ T7634] netlink: 'syz.3.1271': attribute type 29 has an invalid length. [ 165.869575][ T7638] loop5: detected capacity change from 0 to 16 [ 165.916380][ T7634] netlink: 'syz.3.1271': attribute type 29 has an invalid length. [ 165.939490][ T7641] netlink: 'syz.3.1271': attribute type 29 has an invalid length. [ 165.972775][ T7638] erofs: (device loop5): mounted with root inode @ nid 36. [ 166.022478][ T7643] loop1: detected capacity change from 0 to 256 [ 166.074991][ T7643] exfat: Deprecated parameter 'utf8' [ 166.107122][ T7643] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 166.322678][ T7611] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 166.409520][ T7659] loop1: detected capacity change from 0 to 2048 [ 166.446485][ T7655] loop3: detected capacity change from 0 to 8192 [ 166.530358][ T7659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.552186][ T7655] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 166.582550][ T7655] REISERFS (device loop3): using ordered data mode [ 166.602919][ T7655] reiserfs: using flush barriers [ 166.639733][ T7655] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.721609][ T7655] REISERFS (device loop3): checking transaction log (loop3) [ 166.759957][ T7655] REISERFS (device loop3): Using r5 hash to sort names [ 166.814232][ T7655] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 167.112365][ T7685] loop1: detected capacity change from 0 to 128 [ 167.222759][ T7691] loop0: detected capacity change from 0 to 256 [ 167.276648][ T7691] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 167.400362][ T7695] loop3: detected capacity change from 0 to 1024 [ 167.707457][ T7699] loop5: detected capacity change from 0 to 32768 [ 167.720798][ T7697] loop0: detected capacity change from 0 to 1024 [ 167.733264][ T7699] gfs2: commit mount option requires a positive numeric argument [ 167.998007][ T7695] hfsplus: bad catalog entry type [ 168.061928][ T4266] hfsplus: b-tree write err: -5, ino 4 [ 168.317877][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 168.427169][ T7685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 168.458893][ T7723] loop3: detected capacity change from 0 to 256 [ 168.508126][ T7685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.538596][ T7723] exfat: Deprecated parameter 'namecase' [ 168.584009][ T7723] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 168.806343][ T7712] loop5: detected capacity change from 0 to 32768 [ 168.881262][ T7712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1293 (7712) [ 168.956493][ T7712] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 168.972160][ T7712] BTRFS info (device loop5): using free space tree [ 168.989480][ T7712] BTRFS info (device loop5): has skinny extents [ 169.160140][ T7763] loop1: detected capacity change from 0 to 256 [ 169.239870][ T7712] BTRFS info (device loop5): enabling ssd optimizations [ 169.256466][ T7697] hfsplus: bad catalog entry type [ 169.277111][ T7763] FAT-fs (loop1): Directory bread(block 64) failed [ 169.297209][ T7763] FAT-fs (loop1): Directory bread(block 65) failed [ 169.339125][ T9] hfsplus: b-tree write err: -5, ino 4 [ 169.345296][ T7763] FAT-fs (loop1): Directory bread(block 66) failed [ 169.401949][ T7763] FAT-fs (loop1): Directory bread(block 67) failed [ 169.409098][ T7763] FAT-fs (loop1): Directory bread(block 68) failed [ 169.422745][ T7771] BTRFS warning (device loop5): qgroup rescan init failed, qgroup is not enabled [ 169.490670][ T7763] FAT-fs (loop1): Directory bread(block 69) failed [ 169.508723][ T7763] FAT-fs (loop1): Directory bread(block 70) failed [ 169.545781][ T7763] FAT-fs (loop1): Directory bread(block 71) failed [ 169.566254][ T7763] FAT-fs (loop1): Directory bread(block 72) failed [ 169.591379][ T7763] FAT-fs (loop1): Directory bread(block 73) failed [ 169.837331][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 169.883822][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 170.050450][ T7795] loop1: detected capacity change from 0 to 1024 [ 170.764120][ T7785] loop2: detected capacity change from 0 to 32768 [ 170.810887][ T7825] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 170.886734][ T7785] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.924399][ T7785] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.986961][ T7785] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 171.051970][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 171.059022][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 171.121173][ T4705] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.209675][ T7842] loop0: detected capacity change from 0 to 1024 [ 171.270564][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 211ms [ 171.278402][ T7842] hfsplus: bad catalog entry type [ 171.292573][ T7846] loop3: detected capacity change from 0 to 64 [ 171.309847][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 171.335811][ T7785] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 171.379794][ T7271] hfsplus: b-tree write err: -5, ino 4 [ 171.551070][ T4705] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 171.559475][ T4705] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 171.630677][ T4705] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 171.676236][ T4705] usb 2-1: config 220 has no interface number 2 [ 171.738571][ T4705] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 171.818283][ T4705] usb 2-1: config 220 interface 0 has no altsetting 0 [ 171.849274][ T4705] usb 2-1: config 220 interface 76 has no altsetting 0 [ 171.882527][ T4705] usb 2-1: config 220 interface 1 has no altsetting 0 [ 172.090743][ T4705] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.091593][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.101537][ T4705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.130656][ T4705] usb 2-1: Product: syz [ 172.134965][ T4705] usb 2-1: Manufacturer: syz [ 172.151692][ T4705] usb 2-1: SerialNumber: syz [ 172.317825][ T7881] loop0: detected capacity change from 0 to 128 [ 172.550768][ T4705] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 172.557206][ T4705] usb 2-1: No valid video chain found. [ 172.593740][ T4705] usb 2-1: selecting invalid altsetting 0 [ 172.711377][ T4705] usb 2-1: selecting invalid altsetting 0 [ 172.737627][ T4705] usbtest: probe of 2-1:220.1 failed with error -22 [ 172.748439][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 172.765768][ T4705] usb 2-1: USB disconnect, device number 10 [ 172.991899][ T13] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 173.001145][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.009169][ T13] usb 6-1: Product: syz [ 173.037080][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1347'. [ 173.046216][ T13] usb 6-1: Manufacturer: syz [ 173.046237][ T13] usb 6-1: SerialNumber: syz [ 173.075252][ T13] usb 6-1: config 0 descriptor?? [ 173.159851][ T13] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 173.173274][ T7919] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1350'. [ 173.300939][ T7927] ptrace attach of ""[7928] was attempted by "./syz-executor exec"[7927] [ 173.384929][ T7934] udc-core: couldn't find an available UDC or it's busy [ 173.418115][ T7934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.454782][ T13] gspca_sn9c2028: read1 error -71 [ 173.507050][ T13] gspca_sn9c2028: read1 error -71 [ 173.565408][ T13] gspca_sn9c2028: read1 error -71 [ 173.570642][ T13] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 173.587323][ T7939] loop0: detected capacity change from 0 to 256 [ 173.634130][ T13] usb 6-1: USB disconnect, device number 2 [ 173.742348][ T7939] exfat: Deprecated parameter 'utf8' [ 173.919585][ T7939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 174.133450][ T7954] loop2: detected capacity change from 0 to 4096 [ 174.264040][ T7954] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 174.357923][ T7958] loop5: detected capacity change from 0 to 8192 [ 174.442315][ T7956] loop3: detected capacity change from 0 to 4096 [ 174.488909][ T7925] loop1: detected capacity change from 0 to 32768 [ 174.505902][ T7958] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 174.518166][ T7958] REISERFS (device loop5): using ordered data mode [ 174.525297][ T7958] reiserfs: using flush barriers [ 174.565869][ T7958] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.582600][ T7958] REISERFS (device loop5): checking transaction log (loop5) [ 174.671455][ T7965] loop0: detected capacity change from 0 to 2048 [ 174.686846][ T7958] REISERFS (device loop5): Using r5 hash to sort names [ 174.758129][ T1277] JFS: metapage_get_blocks failed [ 174.782161][ T7958] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 174.791102][ T277] blkno = 50030, nblocks = 1 [ 174.795930][ T277] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 174.795930][ T277] [ 174.815699][ T7925] JFS: metapage_get_blocks failed [ 174.826316][ T1277] JFS: metapage_get_blocks failed [ 174.846278][ T7965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.855429][ T277] ERROR: (device loop1): remounting filesystem as read-only [ 174.913557][ T277] blkno = 5002c, nblocks = 4 [ 174.973502][ T277] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 174.973502][ T277] [ 175.110987][ T7925] JFS: metapage_get_blocks failed [ 175.116974][ T7925] JFS: metapage_get_blocks failed [ 175.151280][ T7970] mkiss: ax0: crc mode is auto. [ 175.680097][ T7956] ntfs3: loop3: failed to convert "0080" to maciceland [ 175.968641][ T4703] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 176.539656][ T4703] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 176.559796][ T4703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.620876][ T4703] usb 1-1: Product: syz [ 176.651281][ T4703] usb 1-1: Manufacturer: syz [ 176.691818][ T4703] usb 1-1: SerialNumber: syz [ 176.732120][ T4703] usb 1-1: config 0 descriptor?? [ 176.850433][ T4703] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 177.016891][ T7975] loop5: detected capacity change from 0 to 32768 [ 177.106286][ T8000] udc-core: couldn't find an available UDC or it's busy [ 177.137775][ T8000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.196234][ T7975] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 177.218310][ T4703] gspca_sn9c2028: read1 error -71 [ 177.263178][ T4703] gspca_sn9c2028: read1 error -71 [ 177.338037][ T4703] gspca_sn9c2028: read1 error -71 [ 177.343252][ T4703] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 177.425539][ T4703] usb 1-1: USB disconnect, device number 10 [ 177.554692][ T6974] ocfs2: Unmounting device (7,5) on (node local) [ 177.650536][ T8006] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1385'. [ 178.193710][ T7987] loop1: detected capacity change from 0 to 32768 [ 178.383855][ T7987] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 178.416398][ T7987] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 178.493622][ T8026] loop5: detected capacity change from 0 to 256 [ 178.517085][ T7987] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 178.520194][ T7997] loop2: detected capacity change from 0 to 40427 [ 178.585596][ T4703] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 178.596460][ T4703] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 178.642573][ T7997] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 178.659227][ T8026] exfat: Deprecated parameter 'namecase' [ 178.667476][ T7997] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.752829][ T7997] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 178.792737][ T4703] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 196ms [ 178.825866][ T4703] gfs2: fsid=syz:syz.0: jid=0: Done [ 178.837289][ T7987] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 178.851202][ T7997] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.940903][ T8026] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 179.080538][ T7997] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.106986][ T7997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.543584][ T8029] loop0: detected capacity change from 0 to 32768 [ 179.563463][ T8029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1396 (8029) [ 179.734153][ T8029] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.838358][ T8029] BTRFS info (device loop0): using free space tree [ 179.844930][ T8029] BTRFS info (device loop0): has skinny extents [ 180.100766][ T8058] loop1: detected capacity change from 0 to 1024 [ 180.277302][ T8068] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 180.284477][ T8068] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 180.291867][ T8030] loop3: detected capacity change from 0 to 40427 [ 180.446596][ T8029] BTRFS info (device loop0): enabling ssd optimizations [ 180.476285][ T8030] F2FS-fs (loop3): invalid crc value [ 180.581067][ T8030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.662965][ T8075] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 180.745906][ T8030] F2FS-fs (loop3): Start checkpoint disabled! [ 180.922916][ T8079] loop2: detected capacity change from 0 to 1024 [ 181.105772][ T8030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 181.223674][ T8083] loop5: detected capacity change from 0 to 128 [ 181.537816][ T8086] loop1: detected capacity change from 0 to 32768 [ 181.562831][ T8083] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.591680][ T8083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.616479][ T8086] gfs2: commit mount option requires a positive numeric argument [ 181.628883][ T4484] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.780184][ T528] attempt to access beyond end of device [ 181.780184][ T528] loop3: rw=2049, want=40976, limit=40427 [ 182.042655][ T4484] usb 1-1: Using ep0 maxpacket: 8 [ 182.044117][ T8090] loop1: detected capacity change from 0 to 128 [ 182.258146][ T4484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.285351][ T4484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.302602][ T4484] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 182.372666][ T4484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.417563][ T4484] usb 1-1: config 0 descriptor?? [ 182.713686][ T8109] loop5: detected capacity change from 0 to 1024 [ 182.785143][ T8109] hfsplus: bad catalog file entry [ 182.820217][ T8109] hfsplus: failed to load root directory [ 182.906304][ T4484] logitech 0003:046D:C20E.000B: rdesc size test failed for formula gp [ 182.921360][ T4484] logitech 0003:046D:C20E.000B: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 182.949545][ T8119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 182.957163][ T8119] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 183.015142][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.031912][ T8123] loop5: detected capacity change from 0 to 128 [ 183.154182][ T4484] usb 1-1: USB disconnect, device number 11 [ 183.213940][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 183.245297][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 183.276907][ T8128] netlink: 'syz.3.1430': attribute type 6 has an invalid length. [ 183.325821][ T8126] fido_id[8126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.360603][ T8128] netlink: 'syz.3.1430': attribute type 5 has an invalid length. [ 183.426719][ T8132] loop5: detected capacity change from 0 to 1024 [ 183.435936][ T23] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.464550][ T23] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 183.494044][ T23] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.508540][ T23] usb 2-1: config 220 has no interface number 2 [ 183.531710][ T23] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.546464][ T23] usb 2-1: config 220 interface 0 has no altsetting 0 [ 183.553465][ T23] usb 2-1: config 220 interface 76 has no altsetting 0 [ 183.560822][ T23] usb 2-1: config 220 interface 1 has no altsetting 0 [ 183.601535][ T8132] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 183.624695][ T8132] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 183.634126][ T8132] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 183.702232][ T8132] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.738282][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 183.748839][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.778402][ T23] usb 2-1: Product: syz [ 183.783642][ T23] usb 2-1: Manufacturer: syz [ 183.795960][ T8132] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 183.874956][ T23] usb 2-1: SerialNumber: syz [ 184.194189][ T8125] loop2: detected capacity change from 0 to 32768 [ 184.295157][ T23] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 184.312506][ T23] usb 2-1: No valid video chain found. [ 184.346086][ T23] usb 2-1: selecting invalid altsetting 0 [ 184.405011][ T8152] loop0: detected capacity change from 0 to 8192 [ 184.455980][ T23] usb 2-1: selecting invalid altsetting 0 [ 184.460897][ T8125] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 184.462137][ T23] usbtest: probe of 2-1:220.1 failed with error -22 [ 184.488404][ T23] usb 2-1: USB disconnect, device number 11 [ 184.512806][ T1277] (kworker/u4:4,1277,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 184.571484][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 184.685015][ T8152] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 184.717730][ T8152] REISERFS (device loop0): using ordered data mode [ 184.725434][ T8152] reiserfs: using flush barriers [ 184.755316][ T8152] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.784966][ T8152] REISERFS (device loop0): checking transaction log (loop0) [ 184.883161][ T8152] REISERFS (device loop0): Using r5 hash to sort names [ 184.909256][ T8152] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 184.972967][ T8173] mkiss: ax0: crc mode is auto. [ 185.475622][ T8194] xt_policy: too many policy elements [ 185.706142][ T26] audit: type=1800 audit(1761106314.994:19): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1450" name="/newroot/277/bus/#1470//deleted" dev="tmpfs" ino=1470 res=0 errno=0 [ 185.823850][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.899027][ T8204] loop5: detected capacity change from 0 to 4096 [ 185.912218][ T4478] Bluetooth: hci3: command 0x0406 tx timeout [ 185.918408][ T4478] Bluetooth: hci0: command 0x0406 tx timeout [ 185.930140][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 185.944672][ T8161] loop3: detected capacity change from 0 to 32768 [ 185.950116][ T4478] Bluetooth: hci4: command 0x0406 tx timeout [ 185.993573][ T8204] ntfs3: loop5: try to read out of volume at offset 0x5c00 [ 186.008194][ T8204] ntfs3: loop5: Failed to load $Volume. [ 186.167748][ T8161] XFS (loop3): Mounting V5 Filesystem [ 186.254140][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 186.265268][ T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 186.358621][ T8224] loop5: detected capacity change from 0 to 1024 [ 186.441713][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.508652][ T23] usb 1-1: config 220 has no interface number 2 [ 186.522511][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.573513][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 186.593276][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 186.600315][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 186.675236][ T8205] loop2: detected capacity change from 0 to 32768 [ 186.727264][ T8161] XFS (loop3): Ending clean mount [ 186.791136][ T8205] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 186.804010][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.829454][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.904762][ T23] usb 1-1: Product: syz [ 186.928039][ T23] usb 1-1: Manufacturer: syz [ 186.943150][ T23] usb 1-1: SerialNumber: syz [ 187.127065][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 187.204872][ T4183] XFS (loop3): Unmounting Filesystem [ 187.370704][ T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 187.390751][ T23] usb 1-1: No valid video chain found. [ 187.414877][ T23] usb 1-1: selecting invalid altsetting 0 [ 187.487537][ T8226] loop1: detected capacity change from 0 to 32768 [ 187.534205][ T23] usb 1-1: selecting invalid altsetting 0 [ 187.567150][ T23] usbtest: probe of 1-1:220.1 failed with error -22 [ 187.568544][ T8243] mkiss: ax0: crc mode is auto. [ 187.581983][ T23] usb 1-1: USB disconnect, device number 12 [ 187.601454][ T8226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1459 (8226) [ 187.743996][ T8226] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 187.800617][ T8226] BTRFS info (device loop1): using free space tree [ 187.852626][ T8226] BTRFS info (device loop1): has skinny extents [ 188.055798][ T8260] xt_policy: too many policy elements [ 188.259106][ T8226] BTRFS info (device loop1): enabling ssd optimizations [ 188.374265][ T8278] loop2: detected capacity change from 0 to 2048 [ 188.484973][ T8278] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 188.550709][ T8278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.566279][ T528] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 188.620036][ T8246] loop5: detected capacity change from 0 to 32768 [ 188.769313][ T9] JFS: metapage_get_blocks failed [ 188.782389][ T8246] JFS: metapage_get_blocks failed [ 188.805928][ T277] blkno = 50030, nblocks = 1 [ 188.810577][ T277] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 188.810577][ T277] [ 188.812250][ T7271] JFS: metapage_get_blocks failed [ 188.898726][ T277] ERROR: (device loop5): remounting filesystem as read-only [ 188.954628][ T277] blkno = 5002c, nblocks = 4 [ 188.982301][ T277] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 188.982301][ T277] [ 189.106529][ T8295] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 189.164022][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 189.173336][ T8246] JFS: metapage_get_blocks failed [ 189.178417][ T8246] JFS: metapage_get_blocks failed [ 189.240723][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 189.270418][ T8297] netlink: 'syz.0.1480': attribute type 6 has an invalid length. [ 189.337309][ T8297] netlink: 'syz.0.1480': attribute type 5 has an invalid length. [ 189.743949][ T8314] loop1: detected capacity change from 0 to 128 [ 189.793174][ T8314] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.963840][ T8314] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.999839][ T1326] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 190.157896][ T528] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.364220][ T8330] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 190.381372][ T1326] usb 1-1: Using ep0 maxpacket: 16 [ 190.518832][ T8312] loop3: detected capacity change from 0 to 32768 [ 190.546940][ T8337] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1495'. [ 190.559765][ T1326] usb 1-1: config 0 has an invalid interface number: 71 but max is 1 [ 190.562236][ T8335] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1495'. [ 190.571390][ T1326] usb 1-1: config 0 has an invalid interface number: 220 but max is 1 [ 190.625270][ T1326] usb 1-1: config 0 has no interface number 0 [ 190.640026][ T8312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1486 (8312) [ 190.651227][ T1326] usb 1-1: config 0 has no interface number 1 [ 190.681933][ T1326] usb 1-1: config 0 interface 71 has no altsetting 0 [ 190.688851][ T1326] usb 1-1: config 0 interface 220 has no altsetting 0 [ 190.729676][ T8312] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 190.741524][ T8312] BTRFS info (device loop3): using free space tree [ 190.754766][ T8312] BTRFS info (device loop3): has skinny extents [ 190.898562][ T1326] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69 [ 190.926426][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.941397][ T1326] usb 1-1: Product: syz [ 190.964423][ T4707] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 191.019170][ T8359] loop1: detected capacity change from 0 to 1024 [ 191.031030][ T1326] usb 1-1: Manufacturer: syz [ 191.035759][ T1326] usb 1-1: SerialNumber: syz [ 191.066787][ T1326] usb 1-1: config 0 descriptor?? [ 191.095686][ T8359] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 191.111164][ T8359] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 191.131003][ T8359] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 191.183914][ T8359] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.222193][ T4707] usb 6-1: Using ep0 maxpacket: 8 [ 191.272349][ T8312] BTRFS info (device loop3): enabling ssd optimizations [ 191.318888][ T8359] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 191.390954][ T4707] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 191.593023][ T154] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 191.604259][ T4707] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 191.629086][ T4707] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 191.653129][ T4707] usb 6-1: Product: syz [ 191.657376][ T4707] usb 6-1: Manufacturer: syz [ 191.692704][ T4707] usb 6-1: SerialNumber: syz [ 191.701607][ T1326] usb 1-1: USB disconnect, device number 13 [ 192.052144][ T4707] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 192.070505][ T4707] usb 6-1: Handspring Visor / Palm OS: port 189, is for unknown use [ 192.096107][ T4707] usb 6-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 192.111947][ T8395] loop0: detected capacity change from 0 to 2048 [ 192.118495][ T4707] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 192.175069][ T4736] udevd[4736]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.276983][ T4707] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 192.287776][ T4707] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 192.305433][ T4478] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.318612][ T4707] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 192.375728][ T4707] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 192.405055][ T8395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.458933][ T4707] usb 6-1: USB disconnect, device number 3 [ 192.509300][ T4707] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 192.557229][ T8395] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 192.575978][ T4707] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 192.596732][ T4478] usb 2-1: Using ep0 maxpacket: 16 [ 192.603208][ T4707] visor 6-1:1.0: device disconnected [ 192.797312][ T4478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.811432][ T4478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.855498][ T4478] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.868446][ T4478] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.891524][ T4478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.915615][ T4478] usb 2-1: config 0 descriptor?? [ 193.109676][ T8414] loop0: detected capacity change from 0 to 1024 [ 193.233445][ T8414] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 193.241469][ T8414] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 193.270076][ T8414] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 193.298641][ T8414] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.368453][ T8414] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 193.425312][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.432781][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.449255][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.483162][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.498288][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.513048][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.533044][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.555709][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.593094][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.600445][ T4478] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.627452][ T4478] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input14 [ 193.675305][ T4478] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 193.777513][ T4478] usb 2-1: USB disconnect, device number 12 [ 193.782965][ T8412] loop2: detected capacity change from 0 to 32768 [ 193.859715][ T4707] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.917570][ T8412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1518 (8412) [ 194.015612][ T8426] fido_id[8426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 194.030667][ T8412] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.039337][ T8412] BTRFS info (device loop2): using free space tree [ 194.050649][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057009][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.089720][ T8412] BTRFS info (device loop2): has skinny extents [ 194.259578][ T4707] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 194.289465][ T4707] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 194.298447][ T4707] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 194.405751][ T4707] usb 4-1: config 220 has no interface number 2 [ 194.440275][ T4707] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 194.519444][ T4707] usb 4-1: config 220 interface 0 has no altsetting 0 [ 194.545793][ T4707] usb 4-1: config 220 interface 76 has no altsetting 0 [ 194.572255][ T4707] usb 4-1: config 220 interface 1 has no altsetting 0 [ 194.589252][ T8412] BTRFS info (device loop2): enabling ssd optimizations [ 194.717185][ T8457] BTRFS warning (device loop2): qgroup rescan is already in progress [ 194.801193][ T4707] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 194.846307][ T4707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.876437][ T4707] usb 4-1: Product: syz [ 194.889589][ T4707] usb 4-1: Manufacturer: syz [ 194.899316][ T4707] usb 4-1: SerialNumber: syz [ 194.978299][ T4741] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 195.001257][ T8460] loop0: detected capacity change from 0 to 4096 [ 195.091055][ T8429] loop5: detected capacity change from 0 to 32768 [ 195.257564][ T8460] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 195.277757][ T8460] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 195.336234][ T8460] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 195.368026][ T4707] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 195.388512][ T4707] usb 4-1: No valid video chain found. [ 195.407640][ T8460] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.438928][ T4707] usb 4-1: selecting invalid altsetting 0 [ 195.465120][ T8460] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.506174][ T8460] ntfs: volume version 3.1. [ 195.549776][ T4707] usb 4-1: selecting invalid altsetting 0 [ 195.567807][ T8460] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 195.575997][ T4707] usbtest: probe of 4-1:220.1 failed with error -22 [ 195.603093][ T8460] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 195.624456][ T4707] usb 4-1: USB disconnect, device number 7 [ 195.707179][ T8460] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 195.726193][ T8442] loop1: detected capacity change from 0 to 40427 [ 195.746728][ T8460] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 195.790181][ T8460] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 195.878094][ T8442] F2FS-fs (loop1): invalid crc value [ 195.937936][ T8442] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.963292][ T8464] loop2: detected capacity change from 0 to 1024 [ 196.055782][ T8442] F2FS-fs (loop1): Start checkpoint disabled! [ 196.144226][ T8442] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 196.352080][ T8476] loop0: detected capacity change from 0 to 64 [ 196.539226][ T8476] hfs: keylen 94 too large [ 196.616993][ T4266] attempt to access beyond end of device [ 196.616993][ T4266] loop1: rw=2049, want=40976, limit=40427 [ 197.542839][ T8516] loop1: detected capacity change from 0 to 1024 [ 197.720592][ T8516] EXT4-fs (loop1): Ignoring removed bh option [ 197.726731][ T8516] EXT4-fs (loop1): inline encryption not supported [ 197.738409][ T8516] EXT4-fs (loop1): Ignoring removed nobh option [ 197.744729][ T8516] EXT4-fs (loop1): Ignoring removed bh option [ 197.785511][ T8516] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.889288][ T8516] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,data_err=abort,bh,inlinecrypt,acl,nogrpid,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 198.026590][ T8508] loop0: detected capacity change from 0 to 40427 [ 198.086247][ T8508] F2FS-fs (loop0): invalid crc value [ 198.104918][ T8523] loop3: detected capacity change from 0 to 1024 [ 198.113036][ T8506] loop5: detected capacity change from 0 to 32768 [ 198.142315][ T8508] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.259653][ T8506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1550 (8506) [ 198.354431][ T8508] F2FS-fs (loop0): Start checkpoint disabled! [ 198.416793][ T8508] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 198.443966][ T8506] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 198.457401][ T8506] BTRFS info (device loop5): using free space tree [ 198.506083][ T8506] BTRFS info (device loop5): has skinny extents [ 198.912924][ T8561] loop2: detected capacity change from 0 to 2048 [ 199.032121][ T8506] BTRFS info (device loop5): enabling ssd optimizations [ 199.039069][ T154] attempt to access beyond end of device [ 199.039069][ T154] loop0: rw=2049, want=40976, limit=40427 [ 199.134407][ T8561] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 199.231526][ T4736] udevd[4736]: incorrect nilfs2 checksum on /dev/loop2 [ 199.239745][ T8571] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1568'. [ 199.256071][ T8573] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.693700][ T4303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4303) [ 200.126175][ T8594] loop0: detected capacity change from 0 to 512 [ 200.264570][ T8594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.388769][ T8594] EXT4-fs (loop0): 1 truncate cleaned up [ 200.416094][ T8594] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000068,init_itable=0x00000000000000b5,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 200.459302][ T8603] loop2: detected capacity change from 0 to 4096 [ 200.503212][ T8603] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 200.722840][ T8603] ntfs3: loop2: Failed to load root. [ 201.009649][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 201.396687][ T8633] loop1: detected capacity change from 0 to 4096 [ 201.518278][ T8645] loop5: detected capacity change from 0 to 1024 [ 201.574213][ T8633] __ntfs_error: 6 callbacks suppressed [ 201.574229][ T8633] ntfs: (device loop1): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 201.674068][ T8645] hfsplus: bad catalog entry type [ 201.674357][ T8650] loop2: detected capacity change from 0 to 1024 [ 201.710628][ T8633] ntfs: volume version 3.1. [ 201.719092][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 201.772347][ T7271] hfsplus: b-tree write err: -5, ino 4 [ 201.842932][ T8618] loop0: detected capacity change from 0 to 32768 [ 201.862324][ T8655] loop3: detected capacity change from 0 to 8 [ 201.922231][ T8650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.999453][ T8656] loop5: detected capacity change from 0 to 1024 [ 202.133414][ T8662] loop1: detected capacity change from 0 to 256 [ 202.135191][ T8655] fuse: Unexpected value for 'default_permissions' [ 202.180706][ T8618] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 202.254729][ T8662] FAT-fs (loop1): Directory bread(block 64) failed [ 202.294261][ T8662] FAT-fs (loop1): Directory bread(block 65) failed [ 202.346077][ T8662] FAT-fs (loop1): Directory bread(block 66) failed [ 202.352690][ T8662] FAT-fs (loop1): Directory bread(block 67) failed [ 202.366456][ T8618] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 202.415425][ T8662] FAT-fs (loop1): Directory bread(block 68) failed [ 202.432802][ T8671] loop3: detected capacity change from 0 to 64 [ 202.445766][ T8662] FAT-fs (loop1): Directory bread(block 69) failed [ 202.452458][ T8662] FAT-fs (loop1): Directory bread(block 70) failed [ 202.488720][ T8662] FAT-fs (loop1): Directory bread(block 71) failed [ 202.502764][ T8662] FAT-fs (loop1): Directory bread(block 72) failed [ 202.535298][ T8662] FAT-fs (loop1): Directory bread(block 73) failed [ 202.673992][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 203.168446][ T8685] loop3: detected capacity change from 0 to 32768 [ 203.216284][ T8685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1615 (8685) [ 203.278748][ T8685] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 203.287699][ T8685] BTRFS info (device loop3): enabling disk space caching [ 203.294765][ T8685] BTRFS info (device loop3): disabling tree log [ 203.310032][ T8685] BTRFS info (device loop3): setting nodatasum [ 203.316288][ T8685] BTRFS info (device loop3): metadata ratio 4096 [ 203.322680][ T8685] BTRFS info (device loop3): allowing degraded mounts [ 203.329501][ T8685] BTRFS info (device loop3): force clearing of disk cache [ 203.336680][ T8685] BTRFS info (device loop3): turning on sync discard [ 203.343417][ T8685] BTRFS info (device loop3): enabling ssd optimizations [ 203.350464][ T8685] BTRFS info (device loop3): setting nodatacow, compression disabled [ 203.358603][ T8685] BTRFS info (device loop3): disk space caching is enabled [ 203.365867][ T8685] BTRFS info (device loop3): has skinny extents [ 203.382243][ T8694] loop1: detected capacity change from 0 to 1024 [ 203.431257][ T8702] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 203.498763][ T8707] loop0: detected capacity change from 0 to 512 [ 203.545722][ T8694] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 203.656177][ T8707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1624: bg 0: block 248: padding at end of block bitmap is not set [ 203.840136][ T8707] Quota error (device loop0): write_blk: dquota write failed [ 203.915474][ T8707] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 203.965448][ T8707] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1624: Failed to acquire dquot type 1 [ 204.115205][ T8707] EXT4-fs (loop0): 1 truncate cleaned up [ 204.125694][ T8707] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.175794][ T8707] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.825913][ T7271] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 204.838672][ T7271] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 1 [ 204.918943][ T4303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4303) [ 204.935995][ T8756] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 204.945037][ T8756] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 204.972917][ T8756] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 204.985159][ T8756] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 205.034386][ T8756] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 205.044434][ T8756] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 205.088447][ T8756] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 205.128681][ T8763] loop5: detected capacity change from 0 to 1024 [ 205.137292][ T8756] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 205.174988][ T8756] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 205.464528][ T8763] hfsplus: failed to load root directory [ 206.092295][ T8786] loop1: detected capacity change from 0 to 8192 [ 206.151899][ T8804] loop0: detected capacity change from 0 to 256 [ 206.159537][ T8802] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 206.313437][ T8786] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 206.342984][ T8786] REISERFS (device loop1): using ordered data mode [ 206.350726][ T8786] reiserfs: using flush barriers [ 206.400647][ T8786] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.447485][ T8786] REISERFS (device loop1): checking transaction log (loop1) [ 206.532387][ T8786] REISERFS (device loop1): Using r5 hash to sort names [ 206.576889][ T8804] FAT-fs (loop0): Directory bread(block 64) failed [ 206.579155][ T8786] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 206.609887][ T8804] FAT-fs (loop0): Directory bread(block 65) failed [ 206.617992][ T8804] FAT-fs (loop0): Directory bread(block 66) failed [ 206.636762][ T8786] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 206.673238][ T8804] FAT-fs (loop0): Directory bread(block 67) failed [ 206.680057][ T8804] FAT-fs (loop0): Directory bread(block 68) failed [ 206.708611][ T8804] FAT-fs (loop0): Directory bread(block 69) failed [ 206.745630][ T8804] FAT-fs (loop0): Directory bread(block 70) failed [ 206.782683][ T8804] FAT-fs (loop0): Directory bread(block 71) failed [ 206.799532][ T8804] FAT-fs (loop0): Directory bread(block 72) failed [ 206.814232][ T8804] FAT-fs (loop0): Directory bread(block 73) failed [ 206.883107][ T4478] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 207.175338][ T8828] loop5: detected capacity change from 0 to 2048 [ 207.270324][ T8828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.361840][ C0] ================================================================== [ 207.370428][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 207.378009][ C0] Read of size 2 at addr ffff888078700300 by task ksoftirqd/0/14 [ 207.385748][ C0] [ 207.388085][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 207.395386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.405474][ C0] Call Trace: [ 207.408775][ C0] [ 207.411731][ C0] dump_stack_lvl+0x168/0x230 [ 207.416449][ C0] ? show_regs_print_info+0x20/0x20 [ 207.421672][ C0] ? _printk+0xcc/0x110 [ 207.425855][ C0] ? __nft_trace_packet+0x135/0x150 [ 207.431091][ C0] ? load_image+0x3b0/0x3b0 [ 207.435620][ C0] ? nft_synproxy_do_eval+0x341/0x570 [ 207.441018][ C0] print_address_description+0x60/0x2d0 [ 207.446594][ C0] ? __nft_trace_packet+0x135/0x150 [ 207.451813][ C0] kasan_report+0xdf/0x130 [ 207.456263][ C0] ? __nft_trace_packet+0x135/0x150 [ 207.461491][ C0] __nft_trace_packet+0x135/0x150 [ 207.466547][ C0] nft_do_chain+0x120e/0x1420 [ 207.471263][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 207.477199][ C0] ? tcp_conn_schedule+0x459/0x800 [ 207.482365][ C0] ? ip_vs_in+0xb46/0x1c20 [ 207.486808][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 207.491697][ C0] ? nf_nat_packet+0xf0/0xf0 [ 207.496416][ C0] nft_do_chain_inet+0x22b/0x300 [ 207.501367][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 207.506222][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 207.511597][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 207.516463][ C0] nf_hook_slow+0xb9/0x200 [ 207.520935][ C0] ? NF_HOOK+0x360/0x360 [ 207.525192][ C0] NF_HOOK+0x1cb/0x360 [ 207.529261][ C0] ? NF_HOOK+0x360/0x360 [ 207.533507][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 207.538533][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 207.543840][ C0] ? NF_HOOK+0x360/0x360 [ 207.548085][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 207.553110][ C0] ? ip_rcv_core+0xb60/0xb60 [ 207.557720][ C0] NF_HOOK+0x2d6/0x360 [ 207.561786][ C0] ? ip_rcv_core+0xb60/0xb60 [ 207.566385][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 207.571426][ C0] ? ip_rcv_core+0xb60/0xb60 [ 207.576017][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 207.581650][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 207.587297][ C0] __netif_receive_skb+0xcc/0x290 [ 207.592326][ C0] process_backlog+0x364/0x780 [ 207.597124][ C0] ? rps_trigger_softirq+0x210/0x210 [ 207.602417][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 207.608405][ C0] ? lock_chain_count+0x20/0x20 [ 207.613369][ C0] ? rcu_is_watching+0x11/0xa0 [ 207.618162][ C0] __napi_poll+0xc0/0x430 [ 207.622514][ C0] ? net_rx_action+0x2db/0x9c0 [ 207.627352][ C0] net_rx_action+0x4a8/0x9c0 [ 207.632005][ C0] ? net_tx_action+0x870/0x870 [ 207.636790][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 207.642772][ C0] ? detach_timer+0x2b0/0x2b0 [ 207.647453][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 207.653449][ C0] handle_softirqs+0x328/0x820 [ 207.658255][ C0] ? run_ksoftirqd+0x98/0xf0 [ 207.662852][ C0] ? do_softirq+0x200/0x200 [ 207.667375][ C0] ? run_ksoftirqd+0x75/0xf0 [ 207.671988][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 207.677351][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 207.682652][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 207.687870][ C0] run_ksoftirqd+0x98/0xf0 [ 207.692303][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 207.697611][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 207.702986][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 207.708101][ C0] smpboot_thread_fn+0x4f6/0x970 [ 207.713062][ C0] kthread+0x436/0x520 [ 207.717171][ C0] ? cpu_report_death+0x180/0x180 [ 207.722214][ C0] ? kthread_blkcg+0xd0/0xd0 [ 207.726799][ C0] ret_from_fork+0x1f/0x30 [ 207.731219][ C0] [ 207.734237][ C0] [ 207.736565][ C0] Allocated by task 14: [ 207.740722][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 207.745598][ C0] slab_post_alloc_hook+0x4c/0x380 [ 207.750705][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 207.755987][ C0] __alloc_skb+0xf4/0x750 [ 207.760314][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 207.766123][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 207.771353][ C0] nft_synproxy_do_eval+0x341/0x570 [ 207.776571][ C0] nft_do_chain+0x3fc/0x1420 [ 207.781163][ C0] nft_do_chain_inet+0x22b/0x300 [ 207.786099][ C0] nf_hook_slow+0xb9/0x200 [ 207.790537][ C0] NF_HOOK+0x1cb/0x360 [ 207.794604][ C0] NF_HOOK+0x2d6/0x360 [ 207.798685][ C0] __netif_receive_skb+0xcc/0x290 [ 207.803732][ C0] process_backlog+0x364/0x780 [ 207.808500][ C0] __napi_poll+0xc0/0x430 [ 207.812835][ C0] net_rx_action+0x4a8/0x9c0 [ 207.817454][ C0] handle_softirqs+0x328/0x820 [ 207.822431][ C0] run_ksoftirqd+0x98/0xf0 [ 207.826848][ C0] smpboot_thread_fn+0x4f6/0x970 [ 207.831798][ C0] kthread+0x436/0x520 [ 207.835872][ C0] ret_from_fork+0x1f/0x30 [ 207.840426][ C0] [ 207.842758][ C0] Freed by task 14: [ 207.846573][ C0] kasan_set_track+0x4b/0x70 [ 207.851161][ C0] kasan_set_free_info+0x1f/0x40 [ 207.856111][ C0] ____kasan_slab_free+0xd5/0x110 [ 207.861181][ C0] slab_free_freelist_hook+0xea/0x170 [ 207.866560][ C0] kmem_cache_free+0x8f/0x210 [ 207.871263][ C0] nft_synproxy_eval_v4+0x373/0x560 [ 207.876481][ C0] nft_synproxy_do_eval+0x341/0x570 [ 207.881685][ C0] nft_do_chain+0x3fc/0x1420 [ 207.886299][ C0] nft_do_chain_inet+0x22b/0x300 [ 207.891246][ C0] nf_hook_slow+0xb9/0x200 [ 207.895662][ C0] NF_HOOK+0x1cb/0x360 [ 207.899735][ C0] NF_HOOK+0x2d6/0x360 [ 207.903819][ C0] __netif_receive_skb+0xcc/0x290 [ 207.908852][ C0] process_backlog+0x364/0x780 [ 207.913626][ C0] __napi_poll+0xc0/0x430 [ 207.917979][ C0] net_rx_action+0x4a8/0x9c0 [ 207.922589][ C0] handle_softirqs+0x328/0x820 [ 207.927367][ C0] run_ksoftirqd+0x98/0xf0 [ 207.931779][ C0] smpboot_thread_fn+0x4f6/0x970 [ 207.936717][ C0] kthread+0x436/0x520 [ 207.940779][ C0] ret_from_fork+0x1f/0x30 [ 207.945196][ C0] [ 207.947514][ C0] The buggy address belongs to the object at ffff888078700280 [ 207.947514][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 207.962081][ C0] The buggy address is located 128 bytes inside of [ 207.962081][ C0] 232-byte region [ffff888078700280, ffff888078700368) [ 207.975354][ C0] The buggy address belongs to the page: [ 207.980982][ C0] page:ffffea0001e1c000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78700 [ 207.991134][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 207.998701][ C0] raw: 00fff00000000200 ffffea0001e90800 0000000700000007 ffff88801b5e5140 [ 208.007291][ C0] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 208.015870][ C0] page dumped because: kasan: bad access detected [ 208.022324][ C0] page_owner tracks the page as allocated [ 208.028038][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 14, ts 197937948067, free_ts 197848506212 [ 208.045513][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 208.051074][ C0] __alloc_pages+0x1e1/0x470 [ 208.055695][ C0] new_slab+0xc0/0x4b0 [ 208.059757][ C0] ___slab_alloc+0x81e/0xdf0 [ 208.064345][ C0] kmem_cache_alloc_node+0x1c3/0x2d0 [ 208.069651][ C0] __alloc_skb+0xf4/0x750 [ 208.074007][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 208.079832][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 208.085131][ C0] nft_synproxy_do_eval+0x341/0x570 [ 208.090351][ C0] nft_do_chain+0x3fc/0x1420 [ 208.094955][ C0] nft_do_chain_inet+0x22b/0x300 [ 208.099910][ C0] nf_hook_slow+0xb9/0x200 [ 208.104323][ C0] NF_HOOK+0x1cb/0x360 [ 208.108387][ C0] NF_HOOK+0x2d6/0x360 [ 208.112454][ C0] __netif_receive_skb+0xcc/0x290 [ 208.117493][ C0] process_backlog+0x364/0x780 [ 208.122280][ C0] page last free stack trace: [ 208.126941][ C0] free_unref_page_prepare+0x637/0x6c0 [ 208.132407][ C0] free_unref_page+0x94/0x280 [ 208.137094][ C0] __unfreeze_partials+0x1a5/0x200 [ 208.142203][ C0] put_cpu_partial+0x12d/0x190 [ 208.146993][ C0] qlist_free_all+0x35/0x90 [ 208.151515][ C0] kasan_quarantine_reduce+0x150/0x160 [ 208.156981][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 208.161851][ C0] slab_post_alloc_hook+0x4c/0x380 [ 208.166969][ C0] __kmalloc+0x127/0x330 [ 208.171224][ C0] tomoyo_realpath_from_path+0x118/0x610 [ 208.176852][ C0] tomoyo_path_perm+0x1cd/0x510 [ 208.181700][ C0] security_inode_getattr+0xcf/0x120 [ 208.186995][ C0] vfs_getattr+0x26/0x3a0 [ 208.191353][ C0] __x64_sys_newfstat+0x104/0x1d0 [ 208.196394][ C0] do_syscall_64+0x4c/0xa0 [ 208.200806][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.206693][ C0] [ 208.209014][ C0] Memory state around the buggy address: [ 208.214649][ C0] ffff888078700200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 208.222752][ C0] ffff888078700280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.230806][ C0] >ffff888078700300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 208.238857][ C0] ^ [ 208.242917][ C0] ffff888078700380: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 208.250980][ C0] ffff888078700400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.259038][ C0] ================================================================== [ 208.267114][ C0] Disabling lock debugging due to kernel taint [ 208.273422][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.280635][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 208.289328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.299407][ C0] Call Trace: [ 208.302697][ C0] [ 208.305634][ C0] dump_stack_lvl+0x168/0x230 [ 208.310329][ C0] ? show_regs_print_info+0x20/0x20 [ 208.315543][ C0] ? load_image+0x3b0/0x3b0 [ 208.320073][ C0] panic+0x2c9/0x7f0 [ 208.323983][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 208.328477][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 208.334365][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 208.340271][ C0] ? _raw_spin_unlock+0x40/0x40 [ 208.345114][ C0] ? print_memory_metadata+0x314/0x400 [ 208.350581][ C0] ? __nft_trace_packet+0x135/0x150 [ 208.355773][ C0] check_panic_on_warn+0x80/0xa0 [ 208.360716][ C0] ? __nft_trace_packet+0x135/0x150 [ 208.365975][ C0] end_report+0x6d/0xf0 [ 208.370127][ C0] kasan_report+0x102/0x130 [ 208.374626][ C0] ? __nft_trace_packet+0x135/0x150 [ 208.379833][ C0] __nft_trace_packet+0x135/0x150 [ 208.384857][ C0] nft_do_chain+0x120e/0x1420 [ 208.389562][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 208.395455][ C0] ? tcp_conn_schedule+0x459/0x800 [ 208.400572][ C0] ? ip_vs_in+0xb46/0x1c20 [ 208.404982][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 208.409832][ C0] ? nf_nat_packet+0xf0/0xf0 [ 208.414422][ C0] nft_do_chain_inet+0x22b/0x300 [ 208.419353][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 208.424201][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 208.429572][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 208.434424][ C0] nf_hook_slow+0xb9/0x200 [ 208.438862][ C0] ? NF_HOOK+0x360/0x360 [ 208.443097][ C0] NF_HOOK+0x1cb/0x360 [ 208.447161][ C0] ? NF_HOOK+0x360/0x360 [ 208.451405][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 208.456435][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 208.461715][ C0] ? NF_HOOK+0x360/0x360 [ 208.465962][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 208.470997][ C0] ? ip_rcv_core+0xb60/0xb60 [ 208.475580][ C0] NF_HOOK+0x2d6/0x360 [ 208.479642][ C0] ? ip_rcv_core+0xb60/0xb60 [ 208.484233][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 208.489273][ C0] ? ip_rcv_core+0xb60/0xb60 [ 208.493859][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 208.499486][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 208.505114][ C0] __netif_receive_skb+0xcc/0x290 [ 208.510141][ C0] process_backlog+0x364/0x780 [ 208.514920][ C0] ? rps_trigger_softirq+0x210/0x210 [ 208.520204][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 208.526361][ C0] ? lock_chain_count+0x20/0x20 [ 208.531217][ C0] ? rcu_is_watching+0x11/0xa0 [ 208.535994][ C0] __napi_poll+0xc0/0x430 [ 208.540328][ C0] ? net_rx_action+0x2db/0x9c0 [ 208.545089][ C0] net_rx_action+0x4a8/0x9c0 [ 208.549684][ C0] ? net_tx_action+0x870/0x870 [ 208.554444][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 208.560421][ C0] ? detach_timer+0x2b0/0x2b0 [ 208.565109][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 208.571120][ C0] handle_softirqs+0x328/0x820 [ 208.575947][ C0] ? run_ksoftirqd+0x98/0xf0 [ 208.580542][ C0] ? do_softirq+0x200/0x200 [ 208.585047][ C0] ? run_ksoftirqd+0x75/0xf0 [ 208.589631][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 208.594837][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 208.600129][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 208.605319][ C0] run_ksoftirqd+0x98/0xf0 [ 208.609731][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 208.614921][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 208.620287][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 208.625396][ C0] smpboot_thread_fn+0x4f6/0x970 [ 208.630334][ C0] kthread+0x436/0x520 [ 208.634402][ C0] ? cpu_report_death+0x180/0x180 [ 208.639446][ C0] ? kthread_blkcg+0xd0/0xd0 [ 208.644035][ C0] ret_from_fork+0x1f/0x30 [ 208.648456][ C0] [ 208.651760][ C0] Kernel Offset: disabled [ 208.656087][ C0] Rebooting in 86400 seconds..