last executing test programs: 5.258834013s ago: executing program 2 (id=701): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc"], 0x18}, 0x43480) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc40) 5.003595318s ago: executing program 2 (id=704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xfe) 4.798608718s ago: executing program 2 (id=705): sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x30004800) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) 4.57048368s ago: executing program 2 (id=709): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@xino_off}], [], 0x5c}) 4.157050311s ago: executing program 2 (id=724): syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0}) 2.127037591s ago: executing program 2 (id=731): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@grpquota}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x8a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 1.890541804s ago: executing program 0 (id=736): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=C']) 1.744344189s ago: executing program 0 (id=739): unshare(0x40400) r0 = semget$private(0x0, 0x7, 0x195) semop(r0, &(0x7f0000000180)=[{0x2, 0x2, 0x1000}], 0x90) 1.545973488s ago: executing program 3 (id=742): socket$inet6(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.545271868s ago: executing program 0 (id=743): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f0000000440)=[{r1, 0x1000}, {r0, 0x23}], 0x2, 0x0, 0x0, 0x0) 1.441785698s ago: executing program 1 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a9f4600000000000000000200000028000480240001800b000100657874686472000014000266bf1f4493109ed40108000740000000110900020073797a32000000000900010073797a3000000000050007"], 0x84}}, 0x0) 1.400621742s ago: executing program 0 (id=745): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 1.394481313s ago: executing program 3 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, r1, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) 1.248370107s ago: executing program 1 (id=747): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.248108297s ago: executing program 4 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1.230077889s ago: executing program 3 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x29, 0xe, [@chsw_timing={0x68, 0x4}, @ht={0x2d, 0x1a}, @challenge={0x10, 0x1}]}]]}, 0x48}}, 0x0) 1.048345977s ago: executing program 1 (id=750): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) 1.003441942s ago: executing program 3 (id=751): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8002, 0x184) 951.646987ms ago: executing program 4 (id=752): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 865.035405ms ago: executing program 1 (id=753): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 801.368661ms ago: executing program 4 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009d000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 762.211635ms ago: executing program 4 (id=755): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 636.269617ms ago: executing program 1 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 594.809922ms ago: executing program 4 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 431.520678ms ago: executing program 0 (id=758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) 430.991418ms ago: executing program 1 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000012500)='./file0\x00', 0xa00408, &(0x7f00000000c0)={[{@locktable={'locktable', 0x3d, 'errors=withdrawS\x8a9\xdd\xc6\xfe\x12\xb11]\xa0\x89\xb2\xe8\xe2\x91\xf3\xe5]\x88/\xee4@N?\xe1^\xbb\xcb\xf5\xe2\xc2c_\x06:\xa1gr=\xcc\x83\xb7D\xb6\xed\x1ar|\x1a\x17K\x97\xc0\xc6i\xf5;\x0e\xfb}\xe3\xbd[\x1cHy\x97\xf71\n\xba\x11\xb5\xfc\xcb8\x1d\xfb\xcf\xa3\x1b0\xf3\nnM\x83\xad\xfb\x0fFy\xdc\x91\xca\x84\xb8z\xae'}}]}, 0x0, 0x12627, &(0x7f0000049640)="$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") 155.724335ms ago: executing program 3 (id=760): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000bc0)="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", 0x1a2}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838", 0x1e}, {&(0x7f0000004ac0)="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", 0x10b}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 35.207587ms ago: executing program 0 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 33.940597ms ago: executing program 4 (id=770): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 0s ago: executing program 3 (id=762): r0 = syz_io_uring_setup(0xaf1, &(0x7f0000000240)={0x0, 0x5885, 0x800, 0x3, 0x40}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 74.150206][ T4185] device veth1_vlan entered promiscuous mode [ 74.209763][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.226926][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.238272][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.250024][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.261131][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.272167][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.284108][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.298306][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.309001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.319405][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.330217][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.340531][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.352077][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.371186][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.394023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.403429][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.411997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.420675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.430265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.439921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.450831][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.504585][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.514784][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524456][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.534555][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.565967][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.570350][ T4185] device veth0_macvtap entered promiscuous mode [ 74.583226][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.606179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.615817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.625606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.635747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.669671][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.675617][ T4185] device veth1_macvtap entered promiscuous mode [ 74.679083][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.727326][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.743464][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.774653][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.784488][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.790136][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.798817][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.819539][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.830668][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.841261][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.853766][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.864119][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.875576][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.888683][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.909803][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.918668][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.930605][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.948918][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.949530][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.959632][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.980853][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.993381][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.005646][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.016137][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.027242][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.038522][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.049182][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.060812][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.076534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.100780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.110555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.143051][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158270][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.168614][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.178587][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.224140][ T4295] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 75.239343][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.249321][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.271757][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.281211][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.308118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.308164][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.317693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.340432][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.441254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.457186][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.486633][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.499828][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.507689][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.532657][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.559181][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.637531][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.889426][ T4302] loop4: detected capacity change from 0 to 32768 [ 75.911502][ T4309] loop0: detected capacity change from 0 to 64 [ 75.943800][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.977394][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 75.985190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.042840][ T4316] Bluetooth: hci1: command 0x0419 tx timeout [ 76.049555][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.056351][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.124682][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 76.161458][ T4302] XFS (loop4): Mounting V5 Filesystem [ 76.332446][ T4243] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 76.377313][ T4243] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 76.451257][ T4243] XFS (loop4): Unmount and run xfs_repair [ 76.502542][ T4243] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 76.510358][ T4243] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 76.567329][ T4243] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10 ................ [ 76.624808][ T4243] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 76.638657][ T4243] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 76.649800][ T4342] loop0: detected capacity change from 0 to 65 [ 76.672721][ T4243] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 76.692388][ T4243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.703130][ T4243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.712034][ T4243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.722981][ T4302] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74 [ 76.741448][ T4302] XFS (loop4): Failed to read root inode 0x1140, error 117 [ 76.771084][ T4342] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 76.909743][ T4326] loop2: detected capacity change from 0 to 32768 [ 77.107478][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (4326) [ 77.191744][ T4356] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 77.195021][ T4358] loop0: detected capacity change from 0 to 128 [ 77.229271][ T4326] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 77.252751][ T4326] BTRFS info (device loop2): using free space tree [ 77.265950][ T4361] loop4: detected capacity change from 0 to 1024 [ 77.281143][ T4326] BTRFS info (device loop2): has skinny extents [ 77.333782][ T4361] ======================================================= [ 77.333782][ T4361] WARNING: The mand mount option has been deprecated and [ 77.333782][ T4361] and is ignored by this kernel. Remove the mand [ 77.333782][ T4361] option from the mount to silence this warning. [ 77.333782][ T4361] ======================================================= [ 77.511693][ T4379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.526752][ T4379] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.554475][ T4361] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.25: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.692722][ T4243] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.737785][ T4326] BTRFS info (device loop2): enabling ssd optimizations [ 77.762669][ T4361] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 77.789562][ T4361] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.25: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.867259][ T4394] loop3: detected capacity change from 0 to 4096 [ 77.878077][ T4361] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 77.920121][ T4361] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.25: Failed to acquire dquot type 0 [ 77.930587][ T4398] loop0: detected capacity change from 0 to 64 [ 77.968096][ T4361] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 77.985727][ T4394] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 78.011227][ T4361] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.25: mark_inode_dirty error [ 78.036983][ T26] audit: type=1800 audit(1760972047.933:2): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.31" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 78.041150][ T4394] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 78.113390][ T4361] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 78.133114][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.153691][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.202625][ T4243] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 78.204630][ T4361] EXT4-fs (loop4): 1 orphan inode deleted [ 78.223974][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.238516][ T4361] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 78.255153][ T144] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.279730][ T4243] usb 2-1: config 0 descriptor?? [ 78.291625][ T4394] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 78.339931][ T4394] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 78.381004][ T144] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 78.425712][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 78.480562][ T4394] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 78.511427][ T4394] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 78.568888][ T4394] ntfs: volume version 3.1. [ 78.729602][ T154] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.769613][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 0 [ 78.782601][ T4186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.794745][ T4194] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.841557][ T4194] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 78.867019][ T4243] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 78.869388][ T4422] loop2: detected capacity change from 0 to 1024 [ 78.890562][ T4194] EXT4-fs error (device loop4): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 78.912897][ T4243] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 78.919958][ T4243] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 78.959747][ T4243] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 78.989704][ T4243] waltop 0003:172F:0032.0001: unknown main item tag 0x0 [ 79.053389][ T4243] waltop 0003:172F:0032.0001: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 79.092841][ T4223] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.152107][ T4243] usb 2-1: USB disconnect, device number 2 [ 79.153029][ T4186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.211005][ T4186] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 79.251403][ T4186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.273217][ T4186] usb 1-1: config 0 descriptor?? [ 79.376924][ T4223] usb 4-1: Using ep0 maxpacket: 16 [ 79.378553][ T4425] fido_id[4425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 79.493845][ T4223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 79.513464][ T4223] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 79.531986][ T4223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.560564][ T4223] usb 4-1: config 0 descriptor?? [ 79.622812][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.749723][ T4437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 79.762283][ T4186] holtek 0003:1241:5015.0002: unbalanced collection at end of report description [ 79.778939][ T4186] holtek 0003:1241:5015.0002: parse failed [ 79.785611][ T4186] holtek: probe of 0003:1241:5015.0002 failed with error -22 [ 79.892738][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 79.969667][ T4243] usb 1-1: USB disconnect, device number 2 [ 80.012277][ T4444] loop1: detected capacity change from 0 to 4096 [ 80.020416][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 80.044098][ T7] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 80.062315][ T4223] ryos 0003:1E7D:31CE.0003: unbalanced collection at end of report description [ 80.073543][ T4223] ryos 0003:1E7D:31CE.0003: parse failed [ 80.079927][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.088613][ T4223] ryos: probe of 0003:1E7D:31CE.0003 failed with error -22 [ 80.101315][ T7] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 80.101749][ T4444] ntfs: volume version 3.1. [ 80.132644][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.164410][ T7] usb 3-1: config 0 descriptor?? [ 80.277628][ T4223] usb 4-1: USB disconnect, device number 2 [ 80.282005][ T4440] loop4: detected capacity change from 0 to 32768 [ 80.389433][ T4440] XFS (loop4): Mounting V5 Filesystem [ 80.545328][ T4440] XFS (loop4): Ending clean mount [ 80.571973][ T4440] XFS (loop4): Quotacheck needed: Please wait. [ 80.627967][ T4440] XFS (loop4): Quotacheck: Done. [ 80.677183][ T7] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 80.694886][ T7] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 80.710729][ T7] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 80.721088][ T7] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 80.730130][ T7] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 80.741409][ T4194] XFS (loop4): Unmounting Filesystem [ 80.744172][ T7] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 80.850410][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.917770][ T23] usb 3-1: USB disconnect, device number 2 [ 80.945722][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.947518][ T4243] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 81.113451][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 81.202724][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 81.250770][ T1108] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 81.271011][ T1108] usb 2-1: config 0 has no interface number 0 [ 81.323175][ T7] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 81.331694][ T7] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 81.356258][ T7] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 81.372452][ T7] usb 1-1: config 250 has no interface number 0 [ 81.379170][ T7] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 81.398092][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 81.419367][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 81.438895][ T7] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 81.461651][ T7] usb 1-1: config 250 interface 228 has no altsetting 0 [ 81.472931][ T1108] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 81.482873][ T4486] bridge_slave_0: default FDB implementation only supports local addresses [ 81.521722][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.535793][ T1108] usb 2-1: Product: syz [ 81.544148][ T1108] usb 2-1: Manufacturer: syz [ 81.549017][ T1108] usb 2-1: SerialNumber: syz [ 81.591264][ T1108] usb 2-1: config 0 descriptor?? [ 81.604014][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 81.637316][ T7] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 81.688607][ T7] usb 1-1: Product: syz [ 81.695950][ T7] usb 1-1: SerialNumber: syz [ 81.712065][ T4496] loop2: detected capacity change from 0 to 2048 [ 81.743845][ T7] hub 1-1:250.228: bad descriptor, ignoring hub [ 81.750380][ T7] hub: probe of 1-1:250.228 failed with error -5 [ 81.778542][ T4498] loop3: detected capacity change from 0 to 1024 [ 81.790836][ T4496] NILFS (loop2): invalid segment: Magic number mismatch [ 81.804640][ T4496] NILFS (loop2): trying rollback from an earlier position [ 81.836399][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 81.843515][ T4496] NILFS (loop2): recovery complete [ 81.845834][ T4500] netlink: 5 bytes leftover after parsing attributes in process `syz.4.68'. [ 81.890191][ T1108] usb 2-1: USB disconnect, device number 3 [ 81.906528][ T4501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.974614][ T7] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 82.208795][ T4507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.221830][ T4507] overlayfs: missing 'lowerdir' [ 82.422403][ T4515] capability: warning: `syz.2.74' uses deprecated v2 capabilities in a way that may be insecure [ 82.451167][ T4517] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.76'. [ 82.471043][ T4519] loop1: detected capacity change from 0 to 512 [ 82.482884][ T1108] usb 1-1: USB disconnect, device number 3 [ 82.503014][ T1108] usblp0: removed [ 82.546403][ T4519] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 82.588899][ T4519] EXT4-fs error (device loop1): __ext4_iget:4900: inode #11: block 1: comm syz.1.77: invalid block [ 82.592618][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.654029][ T4519] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.77: couldn't read orphan inode 11 (err -117) [ 82.690254][ T4527] loop3: detected capacity change from 0 to 8192 [ 82.698039][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000002004,nomblk_io_submit,nodiscard,noauto_da_alloc,nojournal_checksum,noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 82.774544][ T4527] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 82.803521][ T4527] REISERFS (device loop3): using ordered data mode [ 82.810634][ T4527] reiserfs: using flush barriers [ 82.819465][ T4527] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.837190][ T4527] REISERFS (device loop3): checking transaction log (loop3) [ 82.859270][ T4527] REISERFS (device loop3): Using r5 hash to sort names [ 82.867517][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 82.875540][ T4527] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 82.959033][ T4534] loop2: detected capacity change from 0 to 1024 [ 83.007334][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 83.019781][ T23] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 83.041283][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.106249][ T23] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 83.146915][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.198671][ T23] usb 5-1: config 0 descriptor?? [ 83.531528][ T4553] loop1: detected capacity change from 0 to 128 [ 83.623752][ T4553] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 83.646980][ T4553] hpfs: filesystem error: improperly stopped [ 83.659110][ T4553] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 83.689838][ T4553] hpfs: You really don't want any checks? You are crazy... [ 83.708727][ T4553] hpfs: hpfs_map_sector(): read error [ 83.719029][ T4553] hpfs: code page support is disabled [ 83.731571][ T4553] hpfs: hpfs_map_4sectors(): unaligned read [ 83.736129][ T23] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 83.745196][ T4553] hpfs: hpfs_map_4sectors(): unaligned read [ 83.745238][ T4553] hpfs: filesystem error: unable to find root dir [ 83.762953][ T23] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 83.790983][ T23] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 83.812627][ T23] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 83.831563][ T23] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 83.839650][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.863026][ T23] gt683r_led 0003:1770:FF00.0005: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 83.996871][ T23] usb 5-1: USB disconnect, device number 2 [ 84.009859][ T21] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19 [ 84.015875][ T4565] loop1: detected capacity change from 0 to 2364 [ 84.057238][ T4542] loop0: detected capacity change from 0 to 32768 [ 84.087132][ T4567] fido_id[4567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 84.195109][ T4573] loop2: detected capacity change from 0 to 16 [ 84.217521][ T4542] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 84.217521][ T4542] [ 84.252976][ T1108] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.286418][ T4573] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.295680][ T1108] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.355103][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.410773][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 84.447549][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 84.554794][ T4577] loop0: detected capacity change from 0 to 4096 [ 84.618582][ T1108] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.624571][ T4577] __ntfs_warning: 29 callbacks suppressed [ 84.624590][ T4577] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 84.665132][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.701961][ T1108] usb 4-1: Product: syz [ 84.732641][ T1108] usb 4-1: Manufacturer: syz [ 84.741007][ T4587] netlink: 52 bytes leftover after parsing attributes in process `syz.4.104'. [ 84.785391][ T4590] damon: kdamond (4590) starts [ 84.798946][ T4577] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 84.813697][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 84.819053][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 84.841133][ T4577] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 84.856491][ T1108] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 84.869494][ T4577] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 84.902543][ T1108] cdc_wdm 4-1:1.0: Unknown control protocol [ 84.908878][ T4577] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 85.025497][ T4577] ntfs: volume version 3.1. [ 85.051573][ T4577] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 85.072250][ T4577] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 85.148030][ T4577] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp874. You might want to try to use the mount option nls=utf8. [ 85.192633][ T4577] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 85.272457][ T23] usb 4-1: USB disconnect, device number 3 [ 85.335505][ T4581] loop1: detected capacity change from 0 to 32768 [ 85.413353][ T4604] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.423794][ T4581] jfs_lookup: dtSearch returned -5 [ 85.439892][ T4604] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.490894][ T4603] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.651257][ T4612] loop0: detected capacity change from 0 to 64 [ 85.665492][ T4610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 85.691071][ T4610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 85.703562][ T4610] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 85.731306][ T4610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 85.738656][ T4610] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 85.746297][ T4610] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 85.747581][ T4612] hfs: bad catalog entry type 65535 [ 85.754763][ T4610] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 86.244168][ T4639] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 86.294031][ T4639] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 86.331583][ T4639] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 86.345040][ T4639] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 86.351805][ T4639] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 86.373077][ T4639] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 86.380044][ T4639] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 86.396972][ T4645] loop0: detected capacity change from 0 to 736 [ 86.412151][ T4639] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 86.420219][ T4639] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 86.429010][ T4639] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 86.450911][ T4647] loop4: detected capacity change from 0 to 256 [ 86.455189][ T4639] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 86.470982][ T4639] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 86.478841][ T4639] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 86.500227][ T4639] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 86.508870][ T4639] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 86.515936][ T4639] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 86.541644][ T4639] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 86.599508][ T4639] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 86.631325][ T4639] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 86.645211][ T4639] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 86.678436][ T4639] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 86.727834][ T4639] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 86.919557][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.929702][ T1324] cfg80211: failed to load regulatory.db [ 87.009686][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.022973][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.277250][ T4673] loop3: detected capacity change from 0 to 4096 [ 87.409912][ T4673] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 87.440623][ T4677] loop1: detected capacity change from 0 to 8192 [ 87.498320][ T4673] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 87.524175][ T4677] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 87.548366][ T4676] loop4: detected capacity change from 0 to 8192 [ 87.557180][ T4677] REISERFS (device loop1): using ordered data mode [ 87.603683][ T4676] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 87.635116][ T4676] REISERFS (device loop4): using ordered data mode [ 87.641768][ T4676] reiserfs: using flush barriers [ 87.652637][ T4677] reiserfs: using flush barriers [ 87.683062][ T4677] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.734592][ T4676] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.758057][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 87.771969][ T4676] REISERFS (device loop4): checking transaction log (loop4) [ 87.785675][ T4676] REISERFS (device loop4): Using r5 hash to sort names [ 87.787497][ T4677] REISERFS (device loop1): checking transaction log (loop1) [ 87.798168][ T4676] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 87.902380][ T4677] REISERFS (device loop1): Using r5 hash to sort names [ 87.987123][ T4677] reiserfs: enabling write barrier flush mode [ 87.987142][ C1] sd 0:0:1:0: tag#2365 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 87.987218][ C1] sd 0:0:1:0: tag#2365 CDB: Read(6) 08 00 00 00 00 2c [ 88.022840][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 88.082923][ T4690] Zero length message leads to an empty skb [ 88.141329][ T4677] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 88.218734][ T4693] loop0: detected capacity change from 0 to 2048 [ 88.234075][ T4697] loop4: detected capacity change from 0 to 47 [ 88.291805][ T4677] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 88.352748][ T4677] REISERFS (device loop1): Remounting filesystem read-only [ 88.360045][ T4677] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 88.391619][ T4693] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.517328][ T4311] udevd[4311]: incorrect nilfs2 checksum on /dev/loop0 [ 88.545816][ T4697] MINIX-fs: deleted inode referenced: 9 [ 88.614371][ T4701] loop2: detected capacity change from 0 to 32768 [ 88.619237][ T4702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.627221][ T4677] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 88.633221][ T4697] MINIX-fs: deleted inode referenced: 9 [ 88.685639][ T4677] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 88.696555][ T4677] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 88.723633][ T4677] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 88.767970][ T4677] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 88.789898][ T4701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 88.798595][ T4701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 88.835217][ T4701] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 88.835217][ T4701] bh = 19 (type: exp=4, found=5) [ 88.835217][ T4701] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 88.854520][ T4677] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 88.859241][ T4701] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 88.883997][ T4701] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 88.893244][ T4701] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 88.901236][ T4701] gfs2: fsid=syz:syz.0: File system withdrawn [ 88.907507][ T4701] CPU: 1 PID: 4701 Comm: syz.2.156 Not tainted syzkaller #0 [ 88.914933][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.925212][ T4701] Call Trace: [ 88.928535][ T4701] [ 88.931595][ T4701] dump_stack_lvl+0x168/0x230 [ 88.936451][ T4701] ? kobject_uevent_env+0x371/0x890 [ 88.941851][ T4701] ? show_regs_print_info+0x20/0x20 [ 88.947199][ T4701] ? load_image+0x3b0/0x3b0 [ 88.952179][ T4701] ? kobject_uevent_env+0x371/0x890 [ 88.958047][ T4701] ? lockref_put_or_lock+0x6e/0xb0 [ 88.963226][ T4701] gfs2_withdraw+0x111b/0x1460 [ 88.968057][ T4701] ? gfs2_lm+0x220/0x220 [ 88.972329][ T4701] ? gfs2_meta_read+0x89f/0xa50 [ 88.977235][ T4701] ? gfs2_meta_new+0x160/0x160 [ 88.982221][ T4701] gfs2_metatype_check_ii+0x74/0x90 [ 88.984340][ T4677] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 88.987809][ T4701] gfs2_meta_buffer+0x262/0x310 [ 88.987847][ T4701] gfs2_inode_refresh+0xb5/0xfe0 [ 89.012628][ T4701] ? do_promote+0x71a/0xab0 [ 89.017175][ T4701] ? gfs2_inode_metasync+0xf0/0xf0 [ 89.022812][ T4701] ? __lock_acquire+0x7c60/0x7c60 [ 89.027892][ T4701] inode_go_lock+0x127/0x470 [ 89.032532][ T4701] do_promote+0x741/0xab0 [ 89.037004][ T4701] finish_xmote+0x514/0xb70 [ 89.041665][ T4701] do_xmote+0x7b6/0x1120 [ 89.046061][ T4701] gfs2_glock_nq+0xc7a/0x1550 [ 89.051116][ T4701] init_journal+0xc42/0x2220 [ 89.055882][ T4701] ? end_bio_io_page+0x100/0x100 [ 89.060977][ T4701] ? vsnprintf+0x1905/0x1a00 [ 89.065629][ T4701] ? snprintf+0xd7/0x120 [ 89.069917][ T4701] ? init_journal+0x710/0x2220 [ 89.074728][ T4701] ? vscnprintf+0x80/0x80 [ 89.079121][ T4701] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 89.084384][ T4701] init_inodes+0xdb/0x320 [ 89.088847][ T4701] gfs2_fill_super+0x1701/0x1f50 [ 89.093843][ T4701] ? gfs2_reconfigure+0xcd0/0xcd0 [ 89.099183][ T4701] ? gfs2_glock_nq_num+0x82/0x1b0 [ 89.104362][ T4701] ? preempt_count_add+0x8d/0x190 [ 89.109534][ T4701] ? sb_set_blocksize+0xa5/0xe0 [ 89.114435][ T4701] get_tree_bdev+0x3f1/0x610 [ 89.119073][ T4701] ? gfs2_reconfigure+0xcd0/0xcd0 [ 89.124141][ T4701] gfs2_get_tree+0x4d/0x1e0 [ 89.128699][ T4701] vfs_get_tree+0x88/0x270 [ 89.133162][ T4701] do_new_mount+0x24a/0xa40 [ 89.137903][ T4701] __se_sys_mount+0x2d6/0x3c0 [ 89.142819][ T4701] ? __x64_sys_mount+0xc0/0xc0 [ 89.148058][ T4701] ? lockdep_hardirqs_on+0x94/0x140 [ 89.153668][ T4701] ? __x64_sys_mount+0x1c/0xc0 [ 89.158577][ T4701] do_syscall_64+0x4c/0xa0 [ 89.163433][ T4701] ? clear_bhb_loop+0x30/0x80 [ 89.168248][ T4701] ? clear_bhb_loop+0x30/0x80 [ 89.172987][ T4701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.179502][ T4701] RIP: 0033:0x7f4ce97be76a [ 89.183963][ T4701] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.203868][ T4701] RSP: 002b:00007f4ce7a23e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.212335][ T4701] RAX: ffffffffffffffda RBX: 00007f4ce7a23ef0 RCX: 00007f4ce97be76a [ 89.220606][ T4701] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f4ce7a23eb0 [ 89.228790][ T4701] RBP: 0000200000000400 R08: 00007f4ce7a23ef0 R09: 0000000000010080 [ 89.236986][ T4701] R10: 0000000000010080 R11: 0000000000000246 R12: 0000200000012500 [ 89.245576][ T4701] R13: 00007f4ce7a23eb0 R14: 000000000001260d R15: 0000200000000640 [ 89.253132][ T4677] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 89.253645][ T4701] [ 89.253694][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.278527][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.284699][ T4701] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 89.328363][ T4677] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 89.339654][ T4677] REISERFS (device loop1): Remounting filesystem read-only [ 89.348209][ T4677] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 89.370844][ T4710] loop0: detected capacity change from 0 to 16 [ 89.433276][ T4710] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 89.642357][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 89.847964][ T4726] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 89.860847][ T4728] loop4: detected capacity change from 0 to 2048 [ 90.012722][ T4736] binder: BINDER_SET_CONTEXT_MGR already set [ 90.019370][ T4736] binder: 4735:4736 ioctl 40046207 0 returned -16 [ 90.072225][ T4732] loop1: detected capacity change from 0 to 8192 [ 90.155694][ T4732] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 90.243356][ T4732] REISERFS (device loop1): using journaled data mode [ 90.250235][ T4732] reiserfs: using flush barriers [ 90.278566][ T4732] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.328800][ T4732] REISERFS (device loop1): checking transaction log (loop1) [ 90.346542][ T4732] REISERFS (device loop1): Using r5 hash to sort names [ 90.399323][ T4732] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.472794][ T4732] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.086131][ T4750] loop2: detected capacity change from 0 to 32768 [ 91.188444][ T1324] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.263407][ T4760] loop4: detected capacity change from 0 to 32768 [ 91.274604][ T4750] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 91.442821][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 91.562810][ T1324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.584884][ T4788] mkiss: ax0: crc mode is auto. [ 91.595646][ T1324] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 91.598121][ T4784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 91.606267][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.650321][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 91.677999][ T1324] usb 4-1: config 0 descriptor?? [ 91.736104][ T1324] dw2102: su3000_identify_state [ 91.769595][ T1324] dvb-usb: found a 'TeVii S662' in warm state. [ 91.810841][ T1324] dw2102: su3000_power_ctrl: 1, initialized 0 [ 91.847745][ T1324] dvb-usb: bulk message failed: -22 (2/0) [ 91.906525][ T1324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.938213][ T4769] dvb-usb: bulk message failed: -22 (4/0) [ 91.967833][ T4769] dw2102: i2c transfer failed. [ 91.990523][ T4793] loop4: detected capacity change from 0 to 4096 [ 91.997769][ T1324] dvbdev: DVB: registering new adapter (TeVii S662) [ 92.053170][ T1324] usb 4-1: media controller created [ 92.067539][ T4793] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 92.103631][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.110108][ T1324] dw2102: i2c transfer failed. [ 92.145358][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.161734][ T1324] dw2102: i2c transfer failed. [ 92.177159][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.197433][ T1324] dw2102: i2c transfer failed. [ 92.219186][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.239477][ T1324] dw2102: i2c transfer failed. [ 92.260159][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.280429][ T1324] dw2102: i2c transfer failed. [ 92.290569][ T1324] dvb-usb: bulk message failed: -22 (6/0) [ 92.309811][ T4809] loop0: detected capacity change from 0 to 256 [ 92.326766][ T1324] dw2102: i2c transfer failed. [ 92.331600][ T1324] dvb-usb: MAC address: 02:02:02:02:02:02 [ 92.377565][ T1324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.404200][ T1324] dvb-usb: bulk message failed: -22 (3/0) [ 92.412075][ T1324] dw2102: command 0x0e transfer failed. [ 92.422140][ T1324] dvb-usb: bulk message failed: -22 (3/0) [ 92.428383][ T1324] dw2102: command 0x0e transfer failed. [ 92.449403][ T4814] loop2: detected capacity change from 0 to 64 [ 92.500962][ T4809] FAT-fs (loop0): Directory bread(block 64) failed [ 92.531574][ T4809] FAT-fs (loop0): Directory bread(block 65) failed [ 92.557218][ T4809] FAT-fs (loop0): Directory bread(block 66) failed [ 92.581647][ T4809] FAT-fs (loop0): Directory bread(block 67) failed [ 92.595077][ T4809] FAT-fs (loop0): Directory bread(block 68) failed [ 92.618286][ T4809] FAT-fs (loop0): Directory bread(block 69) failed [ 92.655362][ T4809] FAT-fs (loop0): Directory bread(block 70) failed [ 92.662192][ T4809] FAT-fs (loop0): Directory bread(block 71) failed [ 92.702088][ T4809] FAT-fs (loop0): Directory bread(block 72) failed [ 92.752688][ T1324] dvb-usb: bulk message failed: -22 (3/0) [ 92.758682][ T1324] dw2102: command 0x0e transfer failed. [ 92.772640][ T4809] FAT-fs (loop0): Directory bread(block 73) failed [ 92.808669][ T1324] dvb-usb: bulk message failed: -22 (3/0) [ 92.819563][ T4825] overlayfs: unrecognized mount option "\loc" or missing value [ 92.841149][ T1324] dw2102: command 0x0e transfer failed. [ 92.862561][ T1324] dvb-usb: bulk message failed: -22 (1/0) [ 92.868455][ T1324] dw2102: command 0x51 transfer failed. [ 92.875101][ T4824] loop3: detected capacity change from 0 to 1764 [ 92.900434][ T1324] dvb-usb: bulk message failed: -22 (5/0) [ 92.927401][ T1324] dw2102: i2c probe for address 0x68 failed. [ 92.940313][ T4824] /dev/loop0: Can't open blockdev [ 92.947399][ T1324] dvb-usb: bulk message failed: -22 (5/0) [ 92.977452][ T1324] dw2102: i2c probe for address 0x69 failed. [ 93.005451][ T1324] dvb-usb: bulk message failed: -22 (5/0) [ 93.026502][ T1324] dw2102: i2c probe for address 0x6a failed. [ 93.048535][ T1324] dw2102: probing for demodulator failed. Is the external power switched on? [ 93.086478][ T1324] dvb-usb: no frontend was attached by 'TeVii S662' [ 93.289915][ T26] audit: type=1400 audit(1760972063.183:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=4842 comm="syz.3.221" [ 93.312647][ T1324] rc_core: IR keymap rc-tt-1500 not found [ 93.318636][ T1324] Registered IR keymap rc-empty [ 93.373730][ T1324] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 93.409557][ T1324] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 93.444441][ T4846] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 93.454115][ T1324] dvb-usb: schedule remote query interval to 250 msecs. [ 93.469303][ T1324] dw2102: su3000_power_ctrl: 0, initialized 1 [ 93.487196][ T1324] dvb-usb: TeVii S662 successfully initialized and connected. [ 93.512698][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.532752][ T1324] usb 4-1: USB disconnect, device number 4 [ 93.721590][ T4840] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.780441][ T4863] loop3: detected capacity change from 0 to 24 [ 93.809281][ T1324] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 93.830795][ T4863] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 93.881289][ T4863] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 93.964146][ T23] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 93.985327][ T23] usb 2-1: config 0 has no interface number 0 [ 93.991659][ T23] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 94.003510][ T23] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 94.018178][ T23] usb 2-1: config 0 interface 255 has no altsetting 0 [ 94.025375][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 94.034882][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.044904][ T4865] loop2: detected capacity change from 0 to 4096 [ 94.064446][ T23] usb 2-1: config 0 descriptor?? [ 94.134571][ T23] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 94.202727][ T4869] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.203585][ T4865] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 94.327306][ T4865] Remounting filesystem read-only [ 94.337685][ T4875] smc: net device bond0 applied user defined pnetid SYZ0 [ 94.389999][ T4316] usb 2-1: USB disconnect, device number 4 [ 94.526081][ T4878] loop4: detected capacity change from 0 to 256 [ 94.668665][ T4878] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 94.891057][ T4885] loop2: detected capacity change from 0 to 2048 [ 94.903739][ T4862] loop0: detected capacity change from 0 to 32768 [ 94.969978][ T4885] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.010812][ T4885] NILFS (loop2): mounting unchecked fs [ 95.025185][ T4388] udevd[4388]: incorrect nilfs2 checksum on /dev/loop2 [ 95.072080][ T4892] loop1: detected capacity change from 0 to 64 [ 95.087910][ T4862] [ 95.087910][ T4862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.087910][ T4862] [ 95.133759][ T4885] NILFS (loop2): recovery complete [ 95.165322][ T4895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.209558][ T4862] JFS: metapage_get_blocks failed [ 95.229203][ T4892] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 95.251810][ T4862] ERROR: (device loop0): release_metapage: write_one_page() failed [ 95.251810][ T4862] [ 95.332400][ T4862] ERROR: (device loop0): diWrite: ixpxd invalid [ 95.332400][ T4862] [ 95.433097][ T4862] ERROR: (device loop0): txCommit: [ 95.433097][ T4862] [ 95.473936][ T4873] loop3: detected capacity change from 0 to 32768 [ 95.484028][ T4898] jfs_create: dtSearch returned -17 [ 95.561733][ T4873] ialloc: diAlloc returned -5! [ 95.622557][ T4181] [ 95.622557][ T4181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.622557][ T4181] [ 95.670756][ T4181] [ 95.670756][ T4181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.670756][ T4181] [ 95.880531][ T4912] nbd: must specify an index to disconnect [ 95.963757][ T4917] loop3: detected capacity change from 0 to 4096 [ 96.040332][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 96.096112][ T4928] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.120477][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 96.572805][ T4958] loop1: detected capacity change from 0 to 64 [ 96.919182][ T26] audit: type=1800 audit(1760972066.813:4): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.263" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 97.160258][ T4953] infiniband syz0: set down [ 97.197655][ T4953] infiniband syz0: added ipvlan1 [ 97.262157][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 97.317251][ T4953] RDS/IB: syz0: added [ 97.393433][ T4953] smc: adding ib device syz0 with port count 1 [ 97.405025][ T4989] loop0: detected capacity change from 0 to 512 [ 97.409758][ T4953] smc: ib device syz0 port 1 has pnetid [ 97.494361][ T4989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.557517][ T4989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.645037][ T4989] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.677261][ T4989] EXT4-fs (loop0): 1 truncate cleaned up [ 97.689503][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000068,init_itable=0x00000000000000b5,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 97.910004][ T4961] loop3: detected capacity change from 0 to 32768 [ 98.076805][ T4961] XFS (loop3): Mounting V5 Filesystem [ 98.251153][ T4961] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 98.328806][ T4961] XFS (loop3): Starting recovery (logdev: internal) [ 98.386512][ T5024] loop0: detected capacity change from 0 to 512 [ 98.388602][ T4961] XFS (loop3): Ending recovery (logdev: internal) [ 98.395246][ T4961] XFS (loop3): Quotacheck needed: Please wait. [ 98.434494][ T4961] XFS (loop3): Quotacheck: Done. [ 98.493194][ T5024] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.493219][ T5024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 98.493283][ T5024] System zones: 0-1, 15-15, 18-18, 34-34 [ 98.494519][ T5024] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.494621][ T5024] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 98.494694][ T5024] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.494723][ T5024] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 98.496107][ T5024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.288: bg 0: block 40: padding at end of block bitmap is not set [ 98.505076][ T5024] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 98.505430][ T5024] EXT4-fs (loop0): 1 truncate cleaned up [ 98.505452][ T5024] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.559063][ T5024] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 98.643664][ T4188] XFS (loop3): Unmounting Filesystem [ 99.066849][ T5040] loop1: detected capacity change from 0 to 1024 [ 99.179256][ T5040] hfsplus: bad catalog entry type [ 99.222036][ T154] hfsplus: b-tree write err: -5, ino 4 [ 99.252658][ T1108] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.402910][ T4223] Bluetooth: hci4: command 0x0405 tx timeout [ 99.495842][ T5056] loop4: detected capacity change from 0 to 1024 [ 99.602841][ T5056] hfsplus: bad catalog entry type [ 99.642887][ T1108] usb 1-1: config 0 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 99.662153][ T1108] usb 1-1: config 0 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.690331][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.735048][ T1108] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 99.742171][ T4223] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.769136][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.792926][ T3008] hfsplus: b-tree write err: -5, ino 4 [ 99.802142][ T5063] loop1: detected capacity change from 0 to 1024 [ 99.818180][ T1108] usb 1-1: config 0 descriptor?? [ 99.852894][ T5039] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.904488][ T5063] hfsplus: bad catalog entry type [ 99.959149][ T5069] program syz.4.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.002835][ T4223] usb 4-1: Using ep0 maxpacket: 8 [ 100.123026][ T4223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.152722][ T4223] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 100.192590][ T4223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.233375][ T4223] usb 4-1: config 0 descriptor?? [ 100.275199][ T4223] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 100.281416][ T5085] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 100.329918][ T1108] wacom 0003:056A:0333.0006: hidraw0: USB HID v0.01 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 100.530793][ T23] usb 1-1: USB disconnect, device number 4 [ 100.662849][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.738771][ T5083] loop1: detected capacity change from 0 to 40427 [ 100.789232][ T5083] F2FS-fs (loop1): invalid crc value [ 100.825680][ T5083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.924352][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 100.933456][ T4223] gspca_vc032x: reg_r err -71 [ 100.938348][ T4223] vc032x: probe of 4-1:0.0 failed with error -71 [ 100.954475][ T4223] usb 4-1: USB disconnect, device number 5 [ 100.960935][ T5083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.058820][ T26] audit: type=1800 audit(1760972070.953:5): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 101.088184][ T1108] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 101.109135][ T1108] usb 5-1: config 0 has no interface number 0 [ 101.137880][ T4185] attempt to access beyond end of device [ 101.137880][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 101.209280][ T5098] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 101.227762][ T5098] netlink: 144 bytes leftover after parsing attributes in process `syz.0.322'. [ 101.248394][ T5098] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 101.264958][ T5098] netlink: 76 bytes leftover after parsing attributes in process `syz.0.322'. [ 101.308466][ T1108] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.334604][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.356330][ T1108] usb 5-1: Product: syz [ 101.360648][ T1108] usb 5-1: Manufacturer: syz [ 101.381958][ T1108] usb 5-1: SerialNumber: syz [ 101.423993][ T1108] usb 5-1: config 0 descriptor?? [ 101.489588][ T1108] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 101.716818][ T1108] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 101.752825][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.753341][ T1108] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.932664][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 102.120608][ T23] usb 5-1: USB disconnect, device number 3 [ 102.142550][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 102.156847][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 102.162982][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.204250][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 102.212901][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.241804][ T23] quatech2 5-1:0.51: device disconnected [ 102.255870][ T13] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.307668][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.335825][ T5112] loop3: detected capacity change from 0 to 32768 [ 102.353097][ T13] usb 3-1: config 0 descriptor?? [ 102.368974][ T5134] loop1: detected capacity change from 0 to 1024 [ 102.395291][ T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 102.423089][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 102.435679][ T13] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 102.465287][ T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 102.478336][ T5134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.487629][ T5112] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.488941][ T13] usb 3-1: media controller created [ 102.504300][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.514305][ T5134] UDF-fs: error (device loop1): udf_read_inode: (ino 832) failed !bh [ 102.519224][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.531770][ T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 102.563258][ T5134] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 102.575045][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 102.598420][ T5108] dvb-usb: bulk message failed: -22 (2/0) [ 102.605649][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 102.623141][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 102.633737][ T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.679367][ T13] usb 3-1: USB disconnect, device number 3 [ 102.692983][ T1108] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 102.780978][ T13] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 103.072807][ T1108] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 103.108214][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.126717][ T1108] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 103.157313][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.212152][ T1108] usb 1-1: config 0 descriptor?? [ 103.253053][ T5136] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.352674][ T4316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.380576][ T5141] loop4: detected capacity change from 0 to 32768 [ 103.491694][ T5170] loop1: detected capacity change from 0 to 256 [ 103.512310][ T5141] XFS (loop4): Mounting V5 Filesystem [ 103.543401][ T5170] exfat: Deprecated parameter 'utf8' [ 103.549845][ T5170] exfat: Deprecated parameter 'namecase' [ 103.566846][ T5170] exfat: Deprecated parameter 'namecase' [ 103.575725][ T5170] exfat: Deprecated parameter 'utf8' [ 103.661382][ T5170] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 103.682992][ T5141] XFS (loop4): Ending clean mount [ 103.724669][ T1108] pantherlord 0003:0E8F:0003.0007: unexpected long global item [ 103.763806][ T1108] pantherlord 0003:0E8F:0003.0007: parse failed [ 103.770359][ T1108] pantherlord: probe of 0003:0E8F:0003.0007 failed with error -22 [ 103.792866][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.814998][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.842895][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.868992][ T4316] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.880513][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.893871][ T4194] XFS (loop4): Unmounting Filesystem [ 103.908953][ T4316] usb 4-1: config 0 descriptor?? [ 103.972026][ T4186] usb 1-1: USB disconnect, device number 5 [ 104.107259][ T5187] netlink: 9 bytes leftover after parsing attributes in process `syz.2.360'. [ 104.127185][ T5187] device gretap0 entered promiscuous mode [ 104.160237][ T5187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.360'. [ 104.178731][ T5187] 0ªX¹¦D: renamed from gretap0 [ 104.191500][ T5187] device 30ªX¹¦D left promiscuous mode [ 104.211276][ T5187] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 104.414943][ T4316] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x6 [ 104.445445][ T4316] plantronics 0003:047F:FFFF.0008: item 0 0 0 11 parsing failed [ 104.462708][ T5197] loop1: detected capacity change from 0 to 512 [ 104.471497][ T4316] plantronics 0003:047F:FFFF.0008: parse failed [ 104.485870][ T5201] loop4: detected capacity change from 0 to 16 [ 104.493748][ T4316] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 104.519354][ T5201] erofs: (device loop4): mounted with root inode @ nid 36. [ 104.541202][ T5197] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 104.568792][ T5201] overlayfs: upper fs is r/o, try multi-lower layers mount [ 104.599578][ T5197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 104.624800][ T5197] System zones: 1-12 [ 104.630602][ T5197] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.639497][ T4316] usb 4-1: USB disconnect, device number 6 [ 104.657559][ T5197] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.365: bg 0: block 361: padding at end of block bitmap is not set [ 104.805012][ T5197] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 104.818839][ T5197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.365: invalid indirect mapped block 12 (level 1) [ 104.877202][ T5197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.365: invalid indirect mapped block 2 (level 2) [ 104.916424][ T5197] EXT4-fs (loop1): 1 truncate cleaned up [ 104.930427][ T5197] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 105.059503][ T5197] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 105.131387][ T5225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 105.425332][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 105.575840][ T5249] ptrace attach of "./syz-executor exec"[5251] was attempted by "./syz-executor exec"[5249] [ 105.642318][ T5253] trusted_key: encrypted_key: insufficient parameters specified [ 105.917509][ T5272] loop3: detected capacity change from 0 to 1024 [ 105.974373][ T5272] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.981890][ T5272] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 106.011270][ T5280] loop2: detected capacity change from 0 to 1024 [ 106.043951][ T5272] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 106.059044][ T5272] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.120170][ T5280] hfsplus: bad catalog entry type [ 106.182250][ T5272] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 106.253552][ T154] hfsplus: b-tree write err: -5, ino 4 [ 106.270882][ T5290] loop4: detected capacity change from 0 to 2048 [ 106.350776][ T5290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.367162][ T5295] loop1: detected capacity change from 0 to 16 [ 106.432849][ T5295] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.480906][ T5295] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 106.546869][ T5295] attempt to access beyond end of device [ 106.546869][ T5295] loop1: rw=524288, want=34359740336, limit=16 [ 106.621857][ T5310] loop4: detected capacity change from 0 to 256 [ 106.714464][ T5310] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 106.897166][ T5323] loop2: detected capacity change from 0 to 1024 [ 107.011542][ T5323] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.027776][ T5324] loop0: detected capacity change from 0 to 4096 [ 107.236061][ T5338] loop3: detected capacity change from 0 to 2048 [ 107.246636][ T5342] loop1: detected capacity change from 0 to 16 [ 107.307898][ T5324] ntfs3: loop0: ino=5, "/" directory corrupted [ 107.317307][ T5342] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.329550][ T5338] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.352746][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.373340][ T5342] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 107.393657][ T5344] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.583640][ T5346] loop1: detected capacity change from 0 to 256 [ 107.624809][ T5346] exfat: Deprecated parameter 'namecase' [ 107.653193][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 107.713669][ T5346] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 107.890801][ T5346] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 107.962802][ T21] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 107.974420][ T5355] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 108.003604][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.012107][ T21] usb 5-1: Product: syz [ 108.057576][ T21] usb 5-1: Manufacturer: syz [ 108.062246][ T21] usb 5-1: SerialNumber: syz [ 108.116218][ T21] usb 5-1: config 0 descriptor?? [ 108.164331][ T21] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 108.222082][ T5366] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 108.266591][ T5366] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 108.279970][ T5368] loop2: detected capacity change from 0 to 64 [ 108.286654][ T5366] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 108.286741][ T5366] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 108.286775][ T5366] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 108.303125][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.323028][ T5366] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 108.331314][ T5366] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 108.344269][ T5366] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 108.351803][ T5366] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 108.416368][ T5366] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 108.434947][ T5366] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 108.452772][ T5366] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 108.556991][ T5374] loop2: detected capacity change from 0 to 2048 [ 108.572838][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 108.603013][ T21] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 108.619781][ T21] visor: probe of 5-1:0.0 failed with error -5 [ 108.631652][ T5379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.677097][ T5374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.712902][ T7] usb 1-1: config 0 has no interfaces? [ 108.718626][ T7] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 108.759516][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.777351][ T7] usb 1-1: config 0 descriptor?? [ 108.825233][ T7] usb 5-1: USB disconnect, device number 4 [ 108.986137][ T4316] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 109.013495][ T4316] hid-generic: probe of 0000:0000:0000.0009 failed with error -22 [ 109.037825][ T1324] usb 1-1: USB disconnect, device number 6 [ 109.395686][ T5400] loop2: detected capacity change from 0 to 4096 [ 109.453437][ T5400] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 109.642134][ T5415] program syz.0.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.113819][ T1324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.158825][ T5429] netlink: 830 bytes leftover after parsing attributes in process `syz.0.470'. [ 110.226762][ T5406] loop4: detected capacity change from 0 to 32768 [ 110.241843][ T5431] loop2: detected capacity change from 0 to 1024 [ 110.404210][ T5431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.492897][ T1324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.497620][ T5451] program syz.1.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.548923][ T1324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.689760][ T1324] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.747412][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.802676][ T1324] usb 4-1: SerialNumber: syz [ 110.976361][ T5469] loop4: detected capacity change from 0 to 4096 [ 111.037275][ T5469] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 111.110744][ T1324] usb 4-1: 0:2 : does not exist [ 111.190035][ T5477] loop0: detected capacity change from 0 to 4096 [ 111.196809][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.254027][ T5477] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 111.268737][ T1324] usb 4-1: USB disconnect, device number 7 [ 111.310999][ T5477] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 111.329144][ T5477] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 111.382682][ T5477] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 111.424984][ T5477] ntfs: volume version 3.1. [ 111.446068][ T5477] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 111.472638][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 111.512685][ T5477] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 111.582832][ T5477] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 111.612832][ T5477] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 111.642778][ T4316] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.648097][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.661553][ T4316] usb 2-1: config 0 has no interface number 0 [ 111.740924][ T5471] loop2: detected capacity change from 0 to 32768 [ 111.753426][ T5477] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 111.785687][ T5479] program syz.3.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.805289][ T5477] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 111.808749][ T5471] JBD2: Ignoring recovery information on journal [ 111.902762][ T4316] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 111.916263][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.926077][ T4316] usb 2-1: Product: syz [ 111.930292][ T4316] usb 2-1: Manufacturer: syz [ 111.935317][ T4316] usb 2-1: SerialNumber: syz [ 111.954846][ T4316] usb 2-1: config 0 descriptor?? [ 111.973151][ T5483] loop3: detected capacity change from 0 to 512 [ 112.014815][ T4316] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 112.032557][ T4316] usb 2-1: selecting invalid altsetting 1 [ 112.042321][ T4316] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 112.051199][ T5471] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 112.073594][ T4316] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.110432][ T5483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.162100][ T4316] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 112.189978][ T5483] EXT4-fs (loop3): 1 truncate cleaned up [ 112.221679][ T5483] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 112.254061][ T4316] usb 2-1: media controller created [ 112.350311][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.426563][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 112.522829][ T4316] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 112.530821][ T4316] zl10353_read_register: readreg error (reg=127, ret==-71) [ 112.629722][ T4316] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 112.730722][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.808425][ T4316] usb 2-1: USB disconnect, device number 5 [ 113.242776][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.317205][ T5523] loop2: detected capacity change from 0 to 4096 [ 113.466837][ T5527] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.482735][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 113.558704][ T5523] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 113.589900][ T5529] loop0: detected capacity change from 0 to 1024 [ 113.604735][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.642853][ T1324] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 113.683105][ T4193] Bluetooth: hci4: link tx timeout [ 113.688943][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.708107][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.727962][ T1324] usb 4-1: config 0 descriptor?? [ 113.764048][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.772085][ T5523] Remounting filesystem read-only [ 114.162272][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 114.214857][ T1324] elo 0003:04E7:0009.000A: collection stack underflow [ 114.223564][ T1324] elo 0003:04E7:0009.000A: item 0 4 0 12 parsing failed [ 114.239379][ T1324] elo 0003:04E7:0009.000A: parse failed [ 114.262622][ T1324] elo: probe of 0003:04E7:0009.000A failed with error -22 [ 114.345395][ T21] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 114.354112][ T21] usb 5-1: config 0 has no interface number 0 [ 114.360480][ T21] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 114.405058][ T21] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 114.444733][ T21] usb 5-1: config 0 interface 41 has no altsetting 0 [ 114.466353][ T1324] usb 4-1: USB disconnect, device number 8 [ 114.482541][ T4316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.518961][ T5551] loop1: detected capacity change from 0 to 4096 [ 114.565168][ T5551] ntfs: volume version 3.1. [ 114.640892][ T21] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 114.685436][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.695746][ T21] usb 5-1: Product: syz [ 114.700059][ T21] usb 5-1: Manufacturer: syz [ 114.731757][ T21] usb 5-1: SerialNumber: syz [ 114.757535][ T21] usb 5-1: config 0 descriptor?? [ 114.792776][ T5526] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.811755][ T5526] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.842189][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 114.987916][ T4316] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.010054][ T4316] usb 1-1: config 0 has no interface number 0 [ 115.035187][ T5562] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 115.104564][ T5526] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.111698][ T5526] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.256298][ T4316] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.268231][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.278602][ T5572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 115.302728][ T4186] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.308280][ T4316] usb 1-1: Product: syz [ 115.314976][ T4316] usb 1-1: Manufacturer: syz [ 115.319602][ T4316] usb 1-1: SerialNumber: syz [ 115.343461][ T4316] usb 1-1: config 0 descriptor?? [ 115.404771][ T4316] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.433613][ T4316] usb 1-1: selecting invalid altsetting 1 [ 115.439433][ T4316] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.489828][ T4316] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.512278][ T5578] loop2: detected capacity change from 0 to 1024 [ 115.516378][ T4316] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.542574][ T4316] usb 1-1: media controller created [ 115.570286][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.618166][ T21] CoreChips: probe of 5-1:0.41 failed with error -71 [ 115.672938][ T21] usb 5-1: USB disconnect, device number 5 [ 115.673083][ T4186] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.710871][ T4316] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 115.718854][ T4316] zl10353_read_register: readreg error (reg=127, ret==-71) [ 115.770880][ T4186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.780385][ T4316] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 115.791135][ T5578] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.537: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.842094][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 115.861388][ T5578] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.537: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.896873][ T4316] usb 1-1: USB disconnect, device number 7 [ 115.913255][ T4186] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.958036][ T4186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.007493][ T4186] usb 2-1: SerialNumber: syz [ 116.019895][ T5578] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.537: Failed to acquire dquot type 0 [ 116.089606][ T5578] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 116.118266][ T5578] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.537: mark_inode_dirty error [ 116.149854][ T5578] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 116.191567][ T5578] EXT4-fs (loop2): 1 orphan inode deleted [ 116.213582][ T3008] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.215501][ T5578] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 116.266409][ T5591] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.284753][ T3008] __quota_error: 20 callbacks suppressed [ 116.284770][ T3008] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 116.305604][ T4186] usb 2-1: 0:2 : does not exist [ 116.344878][ T3008] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 116.402201][ T4186] usb 2-1: USB disconnect, device number 6 [ 116.611570][ T4318] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.626267][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 116.641350][ T4318] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 116.672001][ T4318] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 116.693550][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.744986][ T4189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.781917][ T4189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 116.826362][ T4189] EXT4-fs error (device loop2): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 116.849141][ T5589] loop3: detected capacity change from 0 to 32768 [ 116.922454][ T5599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.547'. [ 117.002198][ T5589] JBD2: Ignoring recovery information on journal [ 117.240805][ T5607] bridge_slave_0: default FDB implementation only supports local addresses [ 117.306556][ T5589] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 117.446412][ T5613] loop2: detected capacity change from 0 to 1024 [ 117.453272][ T5615] blktrace: Concurrent blktraces are not allowed on sg0 [ 117.621070][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 117.867459][ T5625] loop1: detected capacity change from 0 to 1024 [ 117.901707][ T5594] loop0: detected capacity change from 0 to 32768 [ 117.974265][ T5594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.543 (5594) [ 118.089986][ T5594] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.099170][ T5594] BTRFS info (device loop0): using free space tree [ 118.108053][ T5594] BTRFS info (device loop0): has skinny extents [ 118.222621][ T5625] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.558: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.260661][ T5625] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 118.271467][ T5625] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.558: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.313955][ T5625] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 118.323539][ T5625] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.558: Failed to acquire dquot type 0 [ 118.346549][ T5625] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 118.359863][ T5625] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.558: mark_inode_dirty error [ 118.383591][ T5625] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 118.428095][ T5625] EXT4-fs (loop1): 1 orphan inode deleted [ 118.437047][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 118.441635][ T5656] bridge_slave_0: default FDB implementation only supports local addresses [ 118.463844][ T5658] loop4: detected capacity change from 0 to 128 [ 118.502724][ T3008] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.599905][ T3008] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 118.629195][ T5594] BTRFS info (device loop0): enabling ssd optimizations [ 118.659064][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.674929][ T5663] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.566'. [ 118.675199][ T3008] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 118.822619][ T3008] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.892612][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 118.895439][ T3008] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 118.953048][ T3008] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 119.014706][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 119.076971][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 119.140321][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 119.204218][ T21] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.206287][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 119.221242][ T21] usb 4-1: config 0 has no interface number 0 [ 119.537126][ T21] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 119.557478][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.626502][ T21] usb 4-1: Product: syz [ 119.631039][ T21] usb 4-1: Manufacturer: syz [ 119.678693][ T21] usb 4-1: SerialNumber: syz [ 119.697076][ T4243] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.727074][ T21] usb 4-1: config 0 descriptor?? [ 119.821695][ T21] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 119.849839][ T21] usb 4-1: selecting invalid altsetting 1 [ 119.893405][ T21] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 119.938393][ T21] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.960227][ T5693] bridge_slave_0: default FDB implementation only supports local addresses [ 120.008214][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 120.032065][ T21] usb 4-1: media controller created [ 120.087873][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.118856][ T5696] loop2: detected capacity change from 0 to 512 [ 120.200830][ T4243] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 120.209188][ T4243] usb 5-1: config 0 has no interface number 0 [ 120.209760][ T5699] loop0: detected capacity change from 0 to 1024 [ 120.221954][ T21] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 120.232552][ T21] zl10353_read_register: readreg error (reg=127, ret==-71) [ 120.284621][ T5696] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 120.299902][ T21] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 120.350149][ T5696] EXT4-fs error (device loop2): __ext4_iget:4900: inode #11: block 1: comm syz.2.590: invalid block [ 120.436856][ T5696] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.590: couldn't read orphan inode 11 (err -117) [ 120.466567][ T5696] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000002004,nomblk_io_submit,nodiscard,noauto_da_alloc,nojournal_checksum,noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 120.491309][ T21] usb 4-1: USB disconnect, device number 9 [ 120.502750][ T5699] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.579: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.539665][ T4243] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 120.569096][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.591657][ T4243] usb 5-1: Product: syz [ 120.595971][ T4243] usb 5-1: Manufacturer: syz [ 120.600685][ T4243] usb 5-1: SerialNumber: syz [ 120.625294][ T4243] usb 5-1: config 0 descriptor?? [ 120.630615][ T5699] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 120.659714][ T5699] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.579: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.756238][ T5699] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 120.829450][ T5699] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.579: Failed to acquire dquot type 0 [ 120.858071][ T5699] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 120.885841][ T5699] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.579: mark_inode_dirty error [ 120.918501][ T5699] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 120.949635][ T5699] EXT4-fs (loop0): 1 orphan inode deleted [ 120.963387][ T3008] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.979829][ T7] usb 5-1: USB disconnect, device number 6 [ 120.985984][ T5699] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 121.056419][ T3008] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 121.079611][ T5718] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.088984][ T3008] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 121.110985][ T5718] overlayfs: missing 'lowerdir' [ 121.248504][ T5723] damon: kdamond (5723) starts [ 121.281128][ T144] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.344105][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 121.363031][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 121.420897][ T4181] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.467597][ T4181] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 121.506437][ T4181] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 121.619189][ T5743] loop3: detected capacity change from 0 to 512 [ 121.718239][ T5743] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 121.816284][ T5743] EXT4-fs error (device loop3): __ext4_iget:4900: inode #11: block 1: comm syz.3.601: invalid block [ 121.880917][ T5743] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.601: couldn't read orphan inode 11 (err -117) [ 121.943525][ T5757] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.604'. [ 121.948819][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.988824][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000002004,nomblk_io_submit,nodiscard,noauto_da_alloc,nojournal_checksum,noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 122.047506][ T5757] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.604'. [ 122.142896][ T5750] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.604'. [ 122.384325][ T5767] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 122.431316][ T5767] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 122.453248][ T5767] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 122.463521][ T5771] damon: kdamond (5771) starts [ 122.491621][ T5767] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 122.507432][ T5767] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 122.553713][ T5767] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 122.573407][ T5776] loop1: detected capacity change from 0 to 736 [ 122.576328][ T5767] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 122.588301][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.599330][ T23] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 122.642146][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.670926][ T23] usb 5-1: config 0 descriptor?? [ 123.131390][ T5797] loop1: detected capacity change from 0 to 4096 [ 123.213115][ T23] holtek 0003:1241:5015.000B: unbalanced collection at end of report description [ 123.249303][ T23] holtek 0003:1241:5015.000B: parse failed [ 123.256730][ T5805] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.273563][ T23] holtek: probe of 0003:1241:5015.000B failed with error -22 [ 123.292598][ T5805] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 123.319723][ T5797] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.332879][ T5805] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 123.408428][ T5805] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 123.420679][ T5805] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.437617][ T5805] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 123.440668][ T5797] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 123.460622][ T7] usb 5-1: USB disconnect, device number 7 [ 123.473034][ T5805] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.502631][ T5805] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 123.513514][ T5797] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 123.522780][ T5797] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 123.523790][ T5805] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 123.568977][ T5797] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 123.599118][ T5805] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 123.613170][ T5797] ntfs: volume version 3.1. [ 123.614648][ T5805] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 123.621567][ T5797] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 123.640602][ T5805] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 123.650288][ T5805] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 123.664377][ T5797] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 123.684847][ T5805] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 123.697080][ T5805] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 123.710930][ T5805] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 123.721484][ T5805] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 123.746915][ T5805] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 123.789274][ T5797] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp874. You might want to try to use the mount option nls=utf8. [ 123.807203][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.819600][ T5805] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 123.832056][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.853310][ T5797] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 123.867820][ T5805] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 123.895743][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.913834][ T5805] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 123.921223][ T5805] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 123.976506][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.011136][ T5812] loop0: detected capacity change from 0 to 8192 [ 124.164566][ T5812] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 124.244642][ T5812] REISERFS (device loop0): using ordered data mode [ 124.322624][ T5812] reiserfs: using flush barriers [ 124.372245][ T5812] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.414667][ T5812] REISERFS (device loop0): checking transaction log (loop0) [ 124.481621][ T5812] REISERFS (device loop0): Using r5 hash to sort names [ 124.527041][ T5812] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 124.918784][ T5834] loop1: detected capacity change from 0 to 4096 [ 124.977864][ T5838] loop0: detected capacity change from 0 to 16 [ 125.018221][ T5838] erofs: (device loop0): mounted with root inode @ nid 36. [ 125.079946][ T5834] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 125.126477][ T5834] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 125.417187][ T5844] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.443474][ T5844] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 125.459143][ T5844] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.483484][ T5844] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 125.508152][ T5844] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.532730][ T5844] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 125.556183][ T5844] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.603751][ T5844] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.629406][ T5824] loop2: detected capacity change from 0 to 32768 [ 125.655602][ T5844] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 125.684385][ T5844] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 125.721004][ T5844] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 125.760635][ T5844] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 125.803442][ T5844] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 125.849529][ T5844] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 125.887002][ T5844] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 125.904011][ T5844] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 125.923502][ T5844] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 125.939629][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.947908][ T5844] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 125.955352][ T5824] jfs_lookup: dtSearch returned -5 [ 125.957353][ T5844] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 125.981232][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.990325][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.992662][ T5844] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 126.021371][ T5857] loop3: detected capacity change from 0 to 4096 [ 126.028798][ T5844] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 126.067792][ T5844] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 126.384822][ T5864] loop0: detected capacity change from 0 to 8192 [ 126.602591][ T5866] loop4: detected capacity change from 0 to 32768 [ 126.631478][ T5857] ntfs: volume version 3.1. [ 126.639582][ T5857] __ntfs_error: 5 callbacks suppressed [ 126.639599][ T5857] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota. [ 126.666838][ T5866] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.676433][ T5866] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.684264][ T5864] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 126.719209][ T5866] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 126.719209][ T5866] bh = 19 (type: exp=4, found=5) [ 126.719209][ T5866] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 126.739604][ T5866] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 126.753824][ T5866] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 126.763641][ T5866] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 126.770399][ T5866] gfs2: fsid=syz:syz.0: File system withdrawn [ 126.776622][ T5866] CPU: 0 PID: 5866 Comm: syz.4.656 Not tainted syzkaller #0 [ 126.784265][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.789037][ T5864] REISERFS (device loop0): using ordered data mode [ 126.794484][ T5866] Call Trace: [ 126.794502][ T5866] [ 126.794513][ T5866] dump_stack_lvl+0x168/0x230 [ 126.794543][ T5866] ? kobject_uevent_env+0x371/0x890 [ 126.794568][ T5866] ? show_regs_print_info+0x20/0x20 [ 126.794593][ T5866] ? load_image+0x3b0/0x3b0 [ 126.801584][ T5857] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 126.804656][ T5866] ? kobject_uevent_env+0x371/0x890 [ 126.804687][ T5866] ? lockref_put_or_lock+0x6e/0xb0 [ 126.851780][ T5866] gfs2_withdraw+0x111b/0x1460 [ 126.856628][ T5866] ? gfs2_lm+0x220/0x220 [ 126.860922][ T5866] ? gfs2_meta_read+0x89f/0xa50 [ 126.865502][ T5864] reiserfs: using flush barriers [ 126.865811][ T5866] ? gfs2_meta_new+0x160/0x160 [ 126.875664][ T5866] gfs2_metatype_check_ii+0x74/0x90 [ 126.881041][ T5866] gfs2_meta_buffer+0x262/0x310 [ 126.885961][ T5866] gfs2_inode_refresh+0xb5/0xfe0 [ 126.891134][ T5866] ? do_promote+0x71a/0xab0 [ 126.895687][ T5866] ? gfs2_inode_metasync+0xf0/0xf0 [ 126.900928][ T5866] ? __lock_acquire+0x7c60/0x7c60 [ 126.906511][ T5866] inode_go_lock+0x127/0x470 [ 126.911335][ T5866] do_promote+0x741/0xab0 [ 126.913590][ T5857] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp874. You might want to try to use the mount option nls=utf8. [ 126.915838][ T5866] finish_xmote+0x514/0xb70 [ 126.915878][ T5866] do_xmote+0x7b6/0x1120 [ 126.943138][ T5866] gfs2_glock_nq+0xc7a/0x1550 [ 126.948112][ T5866] init_journal+0xc42/0x2220 [ 126.953401][ T5866] ? end_bio_io_page+0x100/0x100 [ 126.958656][ T5866] ? vsnprintf+0x1905/0x1a00 [ 126.963568][ T5866] ? snprintf+0xd7/0x120 [ 126.967884][ T5864] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.968065][ T5866] ? init_journal+0x710/0x2220 [ 126.990819][ T5866] ? vscnprintf+0x80/0x80 [ 126.995202][ T5866] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 127.000536][ T5866] init_inodes+0xdb/0x320 [ 127.004912][ T5866] gfs2_fill_super+0x1701/0x1f50 [ 127.010357][ T5866] ? gfs2_reconfigure+0xcd0/0xcd0 [ 127.015634][ T5866] ? gfs2_glock_nq_num+0x82/0x1b0 [ 127.021081][ T5866] ? preempt_count_add+0x8d/0x190 [ 127.024891][ T5864] REISERFS (device loop0): checking transaction log (loop0) [ 127.026429][ T5866] ? sb_set_blocksize+0xa5/0xe0 [ 127.026465][ T5866] get_tree_bdev+0x3f1/0x610 [ 127.043432][ T5866] ? gfs2_reconfigure+0xcd0/0xcd0 [ 127.048537][ T5866] gfs2_get_tree+0x4d/0x1e0 [ 127.053436][ T5866] vfs_get_tree+0x88/0x270 [ 127.058089][ T5866] do_new_mount+0x24a/0xa40 [ 127.062644][ T5866] __se_sys_mount+0x2d6/0x3c0 [ 127.062721][ T5857] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 127.067365][ T5866] ? __x64_sys_mount+0xc0/0xc0 [ 127.067402][ T5866] ? lockdep_hardirqs_on+0x94/0x140 [ 127.086511][ T5866] ? __x64_sys_mount+0x1c/0xc0 [ 127.091360][ T5866] do_syscall_64+0x4c/0xa0 [ 127.096175][ T5866] ? clear_bhb_loop+0x30/0x80 [ 127.101007][ T5866] ? clear_bhb_loop+0x30/0x80 [ 127.105970][ T5866] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.112148][ T5866] RIP: 0033:0x7fddd28b176a [ 127.116991][ T5866] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.137800][ T5866] RSP: 002b:00007fddd0b16e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.146264][ T5866] RAX: ffffffffffffffda RBX: 00007fddd0b16ef0 RCX: 00007fddd28b176a [ 127.154275][ T5866] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fddd0b16eb0 [ 127.162373][ T5866] RBP: 0000200000000400 R08: 00007fddd0b16ef0 R09: 0000000000010080 [ 127.170391][ T5866] R10: 0000000000010080 R11: 0000000000000246 R12: 0000200000012500 [ 127.178586][ T5866] R13: 00007fddd0b16eb0 R14: 000000000001260d R15: 0000200000000640 [ 127.186804][ T5866] [ 127.189924][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.197964][ T5866] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 127.198358][ T5864] REISERFS (device loop0): Using r5 hash to sort names [ 127.243170][ T5864] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 127.382199][ T5873] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.388962][ T5873] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.398613][ T5873] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 127.406448][ T5873] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.413398][ T5873] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 127.420253][ T5873] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 127.452182][ T5873] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 127.472885][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 127.970536][ T5891] binder: BINDER_SET_CONTEXT_MGR already set [ 127.997781][ T5891] binder: 5889:5891 ioctl 40046207 0 returned -16 [ 128.052719][ T5683] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.181508][ T5901] loop0: detected capacity change from 0 to 256 [ 128.280126][ T5898] loop4: detected capacity change from 0 to 4096 [ 128.349113][ T5898] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.386206][ T5898] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 128.404715][ T5898] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 128.418448][ T5898] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 128.439342][ T5898] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 128.461462][ T5683] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.481741][ T5683] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.503605][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.549181][ T5898] ntfs: volume version 3.1. [ 128.555372][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.579681][ T5898] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 128.590758][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 128.750636][ T5683] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.802563][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.810835][ T5683] usb 3-1: Product: syz [ 128.839618][ T4193] Bluetooth: hci4: link tx timeout [ 128.845762][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.857978][ T5683] usb 3-1: Manufacturer: syz [ 128.913611][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 128.919115][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 128.926779][ T5683] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 128.933061][ T5683] cdc_wdm 3-1:1.0: Unknown control protocol [ 129.152312][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.220663][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.233027][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.282409][ T5922] loop0: detected capacity change from 0 to 8192 [ 129.321325][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.341469][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.357840][ T5924] loop3: detected capacity change from 0 to 8192 [ 129.385921][ T4222] usb 3-1: USB disconnect, device number 4 [ 129.392024][ T5922] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 129.455102][ T5922] REISERFS (device loop0): using ordered data mode [ 129.470853][ T5924] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 129.500196][ T5924] REISERFS (device loop3): using journaled data mode [ 129.507204][ T5922] reiserfs: using flush barriers [ 129.527059][ T5924] reiserfs: using flush barriers [ 129.561288][ T5924] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.562766][ T5922] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.579994][ T5924] REISERFS (device loop3): checking transaction log (loop3) [ 129.607980][ T5922] REISERFS (device loop0): checking transaction log (loop0) [ 129.683677][ T5924] REISERFS (device loop3): Using r5 hash to sort names [ 129.689459][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 129.710418][ T5922] REISERFS (device loop0): Using r5 hash to sort names [ 129.721657][ T5924] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 129.780249][ T5924] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 129.831577][ T5922] reiserfs: enabling write barrier flush mode [ 129.880082][ T5922] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 129.958186][ T5922] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 129.991128][ T5922] REISERFS (device loop0): Remounting filesystem read-only [ 130.027587][ T5922] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 130.094935][ T5922] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 130.182637][ T5922] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 130.293420][ T5922] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 130.301948][ T5922] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 130.418541][ T5943] loop2: detected capacity change from 0 to 4096 [ 130.434431][ T5922] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 130.484810][ T5922] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 130.511271][ T5922] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 130.578475][ T5922] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 130.594897][ T5922] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 130.652695][ T5922] REISERFS (device loop0): Remounting filesystem read-only [ 130.665700][ T5922] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 130.729532][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 130.850387][ T5951] loop3: detected capacity change from 0 to 4096 [ 131.023587][ T5943] ntfs: volume version 3.1. [ 131.036560][ T5951] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 131.194289][ T5957] loop1: detected capacity change from 0 to 8192 [ 131.268789][ T5957] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 131.388504][ T5957] REISERFS (device loop1): using ordered data mode [ 131.424221][ T5957] reiserfs: using flush barriers [ 131.482712][ T5957] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.504093][ T5970] loop3: detected capacity change from 0 to 256 [ 131.554107][ T5957] REISERFS (device loop1): checking transaction log (loop1) [ 131.661788][ T5957] REISERFS (device loop1): Using r5 hash to sort names [ 131.691239][ T5957] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.745233][ T5978] loop0: detected capacity change from 0 to 64 [ 131.763506][ T5974] loop4: detected capacity change from 0 to 8192 [ 131.837400][ T5974] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 131.961297][ T5974] REISERFS (device loop4): using journaled data mode [ 132.046464][ T5974] reiserfs: using flush barriers [ 132.070853][ T5985] overlayfs: unrecognized mount option "\loc" or missing value [ 132.089349][ T5974] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.152623][ T5974] REISERFS (device loop4): checking transaction log (loop4) [ 132.251717][ T5974] REISERFS (device loop4): Using r5 hash to sort names [ 132.342414][ T5974] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.459244][ T5974] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 132.486323][ T5989] loop0: detected capacity change from 0 to 4096 [ 132.752603][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.961972][ T6009] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.962510][ T5989] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 132.963318][ T5989] Remounting filesystem read-only [ 133.009752][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009807][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.068952][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 133.260301][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.260358][ T23] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 133.260386][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.262857][ T23] usb 3-1: config 0 descriptor?? [ 133.275051][ T6014] loop3: detected capacity change from 0 to 2048 [ 133.337321][ T23] dw2102: su3000_identify_state [ 133.337338][ T23] dvb-usb: found a 'TeVii S662' in warm state. [ 133.337361][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 133.337379][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 133.342887][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.382023][ T23] dvbdev: DVB: registering new adapter (TeVii S662) [ 133.382067][ T23] usb 3-1: media controller created [ 133.382095][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382140][ T23] dw2102: i2c transfer failed. [ 133.382180][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382196][ T23] dw2102: i2c transfer failed. [ 133.382213][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382229][ T23] dw2102: i2c transfer failed. [ 133.382245][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382261][ T23] dw2102: i2c transfer failed. [ 133.382278][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382293][ T23] dw2102: i2c transfer failed. [ 133.382309][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 133.382324][ T23] dw2102: i2c transfer failed. [ 133.382335][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 133.419470][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.456387][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 133.456411][ T23] dw2102: command 0x0e transfer failed. [ 133.456451][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 133.456466][ T23] dw2102: command 0x0e transfer failed. [ 133.619310][ T6020] loop3: detected capacity change from 0 to 1024 [ 133.628928][ T6022] loop0: detected capacity change from 0 to 64 [ 133.792229][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 133.792256][ T23] dw2102: command 0x0e transfer failed. [ 133.792267][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 133.792282][ T23] dw2102: command 0x0e transfer failed. [ 133.792293][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 133.792308][ T23] dw2102: command 0x51 transfer failed. [ 133.792318][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 133.792331][ T23] dw2102: i2c probe for address 0x68 failed. [ 133.792343][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 133.792357][ T23] dw2102: i2c probe for address 0x69 failed. [ 133.792368][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 133.792382][ T23] dw2102: i2c probe for address 0x6a failed. [ 133.792437][ T23] dw2102: probing for demodulator failed. Is the external power switched on? [ 133.792450][ T23] dvb-usb: no frontend was attached by 'TeVii S662' [ 133.792610][ T5993] dvb-usb: bulk message failed: -22 (4/0) [ 133.792655][ T5993] dw2102: i2c transfer failed. [ 133.839340][ T6020] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.923568][ T6020] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 133.934811][ T6020] EXT4-fs (loop3): re-mounted. Opts: journal_async_commit,journal_ioprio=0x0000000000000002,stripe=0x000000000000009d,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 133.979900][ T23] rc_core: IR keymap rc-tt-1500 not found [ 133.979921][ T23] Registered IR keymap rc-empty [ 133.981249][ T23] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 133.982380][ T23] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 134.000598][ T23] dvb-usb: schedule remote query interval to 250 msecs. [ 134.000623][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 134.000638][ T23] dvb-usb: TeVii S662 successfully initialized and connected. [ 134.012632][ T23] usb 3-1: USB disconnect, device number 5 [ 134.140349][ T23] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 134.740233][ T6046] loop4: detected capacity change from 0 to 8 [ 134.958035][ T6046] SQUASHFS error: Failed to read block 0x2fc: -5 [ 135.013414][ T6046] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 135.063260][ T6058] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 135.114551][ T6046] SQUASHFS error: Unable to read directory block [247:26] [ 135.143563][ T6058] SQUASHFS error: Unable to read directory block [247:26] [ 135.568513][ T6078] loop3: detected capacity change from 0 to 64 [ 135.621793][ T6036] loop2: detected capacity change from 0 to 32768 [ 135.881074][ T6036] XFS (loop2): Mounting V5 Filesystem [ 135.937267][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 135.937284][ T26] audit: type=1800 audit(1760972105.833:6): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.751" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 136.054164][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 136.093383][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 136.161213][ T6098] netlink: 'syz.4.757': attribute type 15 has an invalid length. [ 136.478988][ T6101] loop1: detected capacity change from 0 to 32768 [ 136.566503][ C1] ================================================================== [ 136.575146][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 136.582740][ C1] Read of size 2 at addr ffff8880185d9080 by task ksoftirqd/1/20 [ 136.590693][ C1] [ 136.593139][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 136.600457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.610839][ C1] Call Trace: [ 136.614153][ C1] [ 136.617115][ C1] dump_stack_lvl+0x168/0x230 [ 136.621838][ C1] ? show_regs_print_info+0x20/0x20 [ 136.627083][ C1] ? _printk+0xcc/0x110 [ 136.631387][ C1] ? __nft_trace_packet+0x135/0x150 [ 136.636744][ C1] ? load_image+0x3b0/0x3b0 [ 136.641287][ C1] ? nft_synproxy_do_eval+0x3d3/0x570 [ 136.646686][ C1] print_address_description+0x60/0x2d0 [ 136.652278][ C1] ? __nft_trace_packet+0x135/0x150 [ 136.657501][ C1] kasan_report+0xdf/0x130 [ 136.662040][ C1] ? __nft_trace_packet+0x135/0x150 [ 136.667271][ C1] __nft_trace_packet+0x135/0x150 [ 136.672396][ C1] nft_do_chain+0x120e/0x1420 [ 136.677076][ C1] ? stack_trace_save+0xe0/0xe0 [ 136.681990][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 136.688031][ C1] ? __local_bh_enable_ip+0xcb/0x1b0 [ 136.693521][ C1] ? ipv6_find_tlv+0x270/0x270 [ 136.698397][ C1] nft_do_chain_inet+0x22b/0x300 [ 136.703366][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 136.708324][ C1] ? nf_nat_ipv6_fn+0x217/0x2d0 [ 136.713289][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 136.718671][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 136.724136][ C1] ? lock_downgrade+0x7c0/0x820 [ 136.730384][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 136.736097][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 136.741184][ C1] nf_hook_slow+0xb9/0x200 [ 136.745620][ C1] ? ip6_input+0xa0/0xa0 [ 136.749879][ C1] NF_HOOK+0x1cb/0x360 [ 136.753960][ C1] ? ip6_input+0xa0/0xa0 [ 136.758311][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 136.763283][ C1] ? ip6_input+0xa0/0xa0 [ 136.767771][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 136.773159][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 136.778020][ C1] ? refcount_add+0x80/0x80 [ 136.782540][ C1] NF_HOOK+0x2d6/0x360 [ 136.786845][ C1] ? refcount_add+0x80/0x80 [ 136.791444][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 136.796307][ C1] ? refcount_add+0x80/0x80 [ 136.800823][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 136.806118][ C1] __netif_receive_skb+0xcc/0x290 [ 136.811244][ C1] process_backlog+0x364/0x780 [ 136.816131][ C1] ? rps_trigger_softirq+0x210/0x210 [ 136.821426][ C1] ? virtqueue_poll+0x169/0x210 [ 136.826761][ C1] __napi_poll+0xc0/0x430 [ 136.831212][ C1] ? net_rx_action+0x2db/0x9c0 [ 136.836101][ C1] net_rx_action+0x4a8/0x9c0 [ 136.840737][ C1] ? net_tx_action+0x870/0x870 [ 136.845510][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.851546][ C1] ? detach_timer+0x2b0/0x2b0 [ 136.856500][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 136.862878][ C1] handle_softirqs+0x328/0x820 [ 136.867848][ C1] ? run_ksoftirqd+0x98/0xf0 [ 136.872482][ C1] ? do_softirq+0x200/0x200 [ 136.877040][ C1] ? run_ksoftirqd+0x75/0xf0 [ 136.881661][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 136.887071][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 136.892406][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 136.897814][ C1] run_ksoftirqd+0x98/0xf0 [ 136.902273][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 136.908833][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 136.914745][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 136.920210][ C1] smpboot_thread_fn+0x4f6/0x970 [ 136.925831][ C1] kthread+0x436/0x520 [ 136.930473][ C1] ? cpu_report_death+0x180/0x180 [ 136.935994][ C1] ? kthread_blkcg+0xd0/0xd0 [ 136.940852][ C1] ret_from_fork+0x1f/0x30 [ 136.945602][ C1] [ 136.948647][ C1] [ 136.951170][ C1] Allocated by task 20: [ 136.955662][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 136.960808][ C1] slab_post_alloc_hook+0x4c/0x380 [ 136.966506][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 136.972685][ C1] __alloc_skb+0xf4/0x750 [ 136.977056][ C1] synproxy_send_client_synack_ipv6+0x15b/0xc50 [ 136.983512][ C1] nft_synproxy_eval_v6+0x36b/0x560 [ 136.988811][ C1] nft_synproxy_do_eval+0x3d3/0x570 [ 136.994408][ C1] nft_do_chain+0x3fc/0x1420 [ 136.999214][ C1] nft_do_chain_inet+0x22b/0x300 [ 137.004661][ C1] nf_hook_slow+0xb9/0x200 [ 137.010164][ C1] NF_HOOK+0x1cb/0x360 [ 137.014369][ C1] NF_HOOK+0x2d6/0x360 [ 137.018545][ C1] __netif_receive_skb+0xcc/0x290 [ 137.023784][ C1] process_backlog+0x364/0x780 [ 137.028665][ C1] __napi_poll+0xc0/0x430 [ 137.033248][ C1] net_rx_action+0x4a8/0x9c0 [ 137.037916][ C1] handle_softirqs+0x328/0x820 [ 137.042704][ C1] run_ksoftirqd+0x98/0xf0 [ 137.047284][ C1] smpboot_thread_fn+0x4f6/0x970 [ 137.052355][ C1] kthread+0x436/0x520 [ 137.056725][ C1] ret_from_fork+0x1f/0x30 [ 137.061169][ C1] [ 137.063599][ C1] Freed by task 20: [ 137.067727][ C1] kasan_set_track+0x4b/0x70 [ 137.072442][ C1] kasan_set_free_info+0x1f/0x40 [ 137.077676][ C1] ____kasan_slab_free+0xd5/0x110 [ 137.082736][ C1] slab_free_freelist_hook+0xea/0x170 [ 137.088114][ C1] kmem_cache_free+0x8f/0x210 [ 137.092807][ C1] nft_synproxy_eval_v6+0x373/0x560 [ 137.098013][ C1] nft_synproxy_do_eval+0x3d3/0x570 [ 137.103290][ C1] nft_do_chain+0x3fc/0x1420 [ 137.108060][ C1] nft_do_chain_inet+0x22b/0x300 [ 137.113309][ C1] nf_hook_slow+0xb9/0x200 [ 137.117774][ C1] NF_HOOK+0x1cb/0x360 [ 137.122164][ C1] NF_HOOK+0x2d6/0x360 [ 137.126379][ C1] __netif_receive_skb+0xcc/0x290 [ 137.131757][ C1] process_backlog+0x364/0x780 [ 137.136647][ C1] __napi_poll+0xc0/0x430 [ 137.140985][ C1] net_rx_action+0x4a8/0x9c0 [ 137.145694][ C1] handle_softirqs+0x328/0x820 [ 137.150644][ C1] run_ksoftirqd+0x98/0xf0 [ 137.155165][ C1] smpboot_thread_fn+0x4f6/0x970 [ 137.160201][ C1] kthread+0x436/0x520 [ 137.164383][ C1] ret_from_fork+0x1f/0x30 [ 137.168996][ C1] [ 137.171525][ C1] The buggy address belongs to the object at ffff8880185d9000 [ 137.171525][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 137.186323][ C1] The buggy address is located 128 bytes inside of [ 137.186323][ C1] 232-byte region [ffff8880185d9000, ffff8880185d90e8) [ 137.200036][ C1] The buggy address belongs to the page: [ 137.205964][ C1] page:ffffea0000617640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x185d9 [ 137.216466][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 137.224428][ C1] raw: 00fff00000000200 0000000000000000 0000000a00000001 ffff888144bf0140 [ 137.233030][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 137.241976][ C1] page dumped because: kasan: bad access detected [ 137.248736][ C1] page_owner tracks the page as allocated [ 137.254569][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 126062708201, free_ts 126007095672 [ 137.272556][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 137.278235][ C1] __alloc_pages+0x1e1/0x470 [ 137.283055][ C1] new_slab+0xc0/0x4b0 [ 137.287239][ C1] ___slab_alloc+0x81e/0xdf0 [ 137.291850][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 137.297515][ C1] __alloc_skb+0xf4/0x750 [ 137.301879][ C1] synproxy_send_client_synack_ipv6+0x15b/0xc50 [ 137.308236][ C1] nft_synproxy_eval_v6+0x36b/0x560 [ 137.313797][ C1] nft_synproxy_do_eval+0x3d3/0x570 [ 137.319210][ C1] nft_do_chain+0x3fc/0x1420 [ 137.323816][ C1] nft_do_chain_inet+0x22b/0x300 [ 137.329093][ C1] nf_hook_slow+0xb9/0x200 [ 137.333554][ C1] NF_HOOK+0x1cb/0x360 [ 137.337902][ C1] NF_HOOK+0x2d6/0x360 [ 137.342079][ C1] __netif_receive_skb+0xcc/0x290 [ 137.347207][ C1] process_backlog+0x364/0x780 [ 137.352306][ C1] page last free stack trace: [ 137.357067][ C1] free_unref_page_prepare+0x637/0x6c0 [ 137.362544][ C1] free_unref_page_list+0x122/0x7e0 [ 137.367876][ C1] release_pages+0x184b/0x1bb0 [ 137.372661][ C1] tlb_finish_mmu+0x164/0x2e0 [ 137.377363][ C1] exit_mmap+0x3a6/0x5f0 [ 137.381654][ C1] __mmput+0x115/0x3b0 [ 137.385936][ C1] exit_mm+0x567/0x6c0 [ 137.390036][ C1] do_exit+0x5a1/0x20a0 [ 137.394219][ C1] do_group_exit+0x12e/0x300 [ 137.398851][ C1] get_signal+0x6ca/0x12c0 [ 137.403649][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 137.409484][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 137.415057][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 137.420820][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 137.426316][ C1] do_syscall_64+0x58/0xa0 [ 137.431365][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.437268][ C1] [ 137.439683][ C1] Memory state around the buggy address: [ 137.445700][ C1] ffff8880185d8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.453859][ C1] ffff8880185d9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.462502][ C1] >ffff8880185d9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 137.471018][ C1] ^ [ 137.475087][ C1] ffff8880185d9100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 137.483357][ C1] ffff8880185d9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.491473][ C1] ================================================================== [ 137.499545][ C1] Disabling lock debugging due to kernel taint [ 137.506000][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.513666][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 137.522987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.533797][ C1] Call Trace: [ 137.537109][ C1] [ 137.540059][ C1] dump_stack_lvl+0x168/0x230 [ 137.544768][ C1] ? show_regs_print_info+0x20/0x20 [ 137.550119][ C1] ? load_image+0x3b0/0x3b0 [ 137.554904][ C1] panic+0x2c9/0x7f0 [ 137.558813][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 137.563334][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 137.569527][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 137.575533][ C1] ? _raw_spin_unlock+0x40/0x40 [ 137.580492][ C1] ? print_memory_metadata+0x314/0x400 [ 137.586017][ C1] ? __nft_trace_packet+0x135/0x150 [ 137.591348][ C1] check_panic_on_warn+0x80/0xa0 [ 137.596344][ C1] ? __nft_trace_packet+0x135/0x150 [ 137.601686][ C1] end_report+0x6d/0xf0 [ 137.605879][ C1] kasan_report+0x102/0x130 [ 137.610831][ C1] ? __nft_trace_packet+0x135/0x150 [ 137.616035][ C1] __nft_trace_packet+0x135/0x150 [ 137.621324][ C1] nft_do_chain+0x120e/0x1420 [ 137.626466][ C1] ? stack_trace_save+0xe0/0xe0 [ 137.631420][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 137.637483][ C1] ? __local_bh_enable_ip+0xcb/0x1b0 [ 137.642907][ C1] ? ipv6_find_tlv+0x270/0x270 [ 137.647884][ C1] nft_do_chain_inet+0x22b/0x300 [ 137.652949][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 137.657852][ C1] ? nf_nat_ipv6_fn+0x217/0x2d0 [ 137.662760][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 137.668155][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 137.673550][ C1] ? lock_downgrade+0x7c0/0x820 [ 137.678407][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 137.683917][ C1] ? nft_do_chain_arp+0xe0/0xe0 [ 137.688775][ C1] nf_hook_slow+0xb9/0x200 [ 137.693281][ C1] ? ip6_input+0xa0/0xa0 [ 137.697634][ C1] NF_HOOK+0x1cb/0x360 [ 137.701899][ C1] ? ip6_input+0xa0/0xa0 [ 137.706452][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 137.711400][ C1] ? ip6_input+0xa0/0xa0 [ 137.716035][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 137.721464][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 137.726510][ C1] ? refcount_add+0x80/0x80 [ 137.731019][ C1] NF_HOOK+0x2d6/0x360 [ 137.735102][ C1] ? refcount_add+0x80/0x80 [ 137.739718][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 137.744788][ C1] ? refcount_add+0x80/0x80 [ 137.749430][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 137.754733][ C1] __netif_receive_skb+0xcc/0x290 [ 137.759969][ C1] process_backlog+0x364/0x780 [ 137.764875][ C1] ? rps_trigger_softirq+0x210/0x210 [ 137.770203][ C1] ? virtqueue_poll+0x169/0x210 [ 137.775281][ C1] __napi_poll+0xc0/0x430 [ 137.779705][ C1] ? net_rx_action+0x2db/0x9c0 [ 137.784618][ C1] net_rx_action+0x4a8/0x9c0 [ 137.789376][ C1] ? net_tx_action+0x870/0x870 [ 137.794498][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 137.800628][ C1] ? detach_timer+0x2b0/0x2b0 [ 137.805402][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 137.811592][ C1] handle_softirqs+0x328/0x820 [ 137.816469][ C1] ? run_ksoftirqd+0x98/0xf0 [ 137.821075][ C1] ? do_softirq+0x200/0x200 [ 137.825670][ C1] ? run_ksoftirqd+0x75/0xf0 [ 137.830455][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 137.835661][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 137.840953][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 137.846284][ C1] run_ksoftirqd+0x98/0xf0 [ 137.850914][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 137.856115][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 137.861670][ C1] ? smpboot_thread_fn+0x5bc/0x970 [ 137.866788][ C1] smpboot_thread_fn+0x4f6/0x970 [ 137.871736][ C1] kthread+0x436/0x520 [ 137.875805][ C1] ? cpu_report_death+0x180/0x180 [ 137.880831][ C1] ? kthread_blkcg+0xd0/0xd0 [ 137.885433][ C1] ret_from_fork+0x1f/0x30 [ 137.890035][ C1] [ 137.893377][ C1] Kernel Offset: disabled [ 137.897912][ C1] Rebooting in 86400 seconds..