last executing test programs: 1m15.995551539s ago: executing program 2 (id=252): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[]) 1m15.957847111s ago: executing program 2 (id=255): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x400) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), 0x4) 1m15.797921257s ago: executing program 2 (id=257): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b0073697000060001"], 0xc4}}, 0x4008800) 1m15.496068978s ago: executing program 2 (id=263): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 1m14.478475347s ago: executing program 2 (id=273): r0 = msgget$private(0x0, 0x123) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000300)={0x1}, 0x8, 0x800) 1m13.740086545s ago: executing program 2 (id=282): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) 1m13.504377004s ago: executing program 32 (id=282): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) 14.622634257s ago: executing program 1 (id=1026): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) 14.518854143s ago: executing program 1 (id=1028): r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)='Q', 0x1}], 0x1}, 0x4000) 14.195793392s ago: executing program 1 (id=1037): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 12.310260525s ago: executing program 1 (id=1055): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 11.837596313s ago: executing program 1 (id=1064): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11.243674838s ago: executing program 1 (id=1076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 10.985144654s ago: executing program 33 (id=1076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 7.096157256s ago: executing program 4 (id=1110): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xfffb}, 0x8) 6.844749481s ago: executing program 4 (id=1112): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80004, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x100, 0x0, 0x7, 0x6}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.302492484s ago: executing program 4 (id=1115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 5.498676441s ago: executing program 4 (id=1125): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 4.945381255s ago: executing program 4 (id=1136): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0xf9c, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x10800c1, 0x4, 0x4, 0x3, 0xa, 0xff, 0x1000, 0xc, 0x3, 0x4, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffd, 0x5, 0x100004, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x2, 0xc, 0x401, 0x40bed4, 0x8, 0x3, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x2e, 0x0, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x8003, 0x0, 0x7, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x88, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x6, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0xa, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.107191235s ago: executing program 4 (id=1144): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 3.829925811s ago: executing program 34 (id=1144): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 3.805777463s ago: executing program 5 (id=1147): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000080)=""/32, 0x20}) 3.67963906s ago: executing program 5 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.52024231s ago: executing program 5 (id=1152): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0x11, 0x10, "af7ff43acee2e04e56d05d2cdce4e9d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.600155065s ago: executing program 0 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x51, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 2.331288871s ago: executing program 0 (id=1162): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="6f2fdd9ec45cc6411a5f559113bf33aa5c2590598d509bfd796347498f76c038d9285228b5419230ef6ba87d1698a2d288a7953d3f3259de44eceaa15ff35d56b88a2802905fde8ac5e4db5979ed6e0dbf2b4768b2952e03ae70cfd23194fa118c27d8cc19e43d5793e7aa20a443937c7ff074efbf00b33b01c59226ddd2096dd82374cc64dcdfe893496cb3f25c2f2d393667e23a02af1deff75f743d56a1a5e052bffdf30999d9792ae939958e930b8c852f99761c681236c9a5f809", 0xbd}, {&(0x7f0000000540)="0703a7c3f2bebb055d1e52892e9bf7c74ef6e9a87b37501b33be0951013a91dac8593aac1cdfbda89aec802800eeaa4b250f285c02a6ef938ae8a2d438e883f147c6a486ec24658e2a3469ecfa29350e390b1be974a819d6c45ec858dfd693e4442766af8664f7afa025a915e812679a7af7aeee6d1cc62d3554271d08389fc4afc64be0c7e3f0cfaa7f02390347", 0x8e}, {&(0x7f0000000600)="5c1aec6b067165864ac89d079f7ae228b12bd322e9076ef6626ecb969b18011809e68c7759a3b625d81edab4f55c3168b8c347f42d1e0df30c059b04ea938925f351d6404961009ab100b4720a6643d0b5240aeb09448730be5c3da8e4cc76efa4ab636643f702c74aafb6b52bbc4ebcadd617ca84e7311734f3ed6b69be4071f4142e29d08ad6ac9ae6bf879a3c45b4daa9c91fe652988f7e", 0x99}, {&(0x7f00000006c0)="b616ee6f330ddb57e9ce7a0c58a66d5ef2b5c32e120200000086f42ec382731055e77ee8d728c3978a7aa65a700541aee6a81f6da206ea9b4a67f8a037a0d08119ba", 0x42}, {&(0x7f0000000740)="58b21162359c52272b5535876b05d4709fd42e4c01e3635bb7a91021d65f18fa36f3e3bd0205037b9e049f3f77fbdf4831478bc5dbdbdb5c3a49d607b90ab824bde681d13dabfe4157d3f22a6b319ccd09899322ce56347356c7e5d8fdf5027a4d0b63fadeae648f61404b134ef5e1", 0x6f}, {&(0x7f00000007c0)="27e5750b79a2e118266e181dd79f190df3f8ff918ed2a3f5599ec770c447a39b8bea726a54f949a73b3e309c95187ebfe8f7a95ad0bf75d69664e5c0790b09b81d1f194ed81cb7c8757b1bbce4ccce04418feef357c5e65cf7402e3000e5f0c247a4f5923cfbf1fd41485eac17631b2dd40d07e343f9bceaef81117f44a6932d20b6dd04d4f668738fa4c9509ba4f3221e5954b8f9dbc87b99db546780b22c004dfee35e9c41d1777b45b0c8087a5f325f17eed51c4bdea9f1d7c55d4b3c5fc41e1827eeff2cb0ac3eaa5a60708861080bea8d34", 0xd4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001100)="035667ca0000000000000000e81deb5ac064084d1f49557a10f3017890bc6ec2368bb3f5fc8158854542c6c0d1fda9455fbb52fe0500b5bb01c26d0a53ce1f06c0e383fa992aa025a7ed115635ffec2c9c3b915d4b9beb919744ddf38a9254ab4767b73fbaef1f75769b4a4d440801f44fadb7fd5be39640a915306adabb9c9d8b6f32ad286a4e9370", 0x89}, {&(0x7f0000000b40)="e830bf6980a60ca5a450bc8ff794a58de6f67b2218a3944a52c0b477335d14ae29ad3573fff74f99bf815fab6e5e8be6cac7037673fc5373e32e6b5b827138486240d8e9cf2dcfbc44ce7abf65dd79b9efadc93d8dc383c0ccad461617223c4d0b3cd8f2da4edbb8e7ff9350b05eb151a40d82932f334a364d896f4c61f3cbfae25211fda729594102650b7ffddecf79942022f1a77e7d8eba3dc076113b530de904f3dece9a8691a361d4c1fc9e124a7f97f1209694efc8d99970a1fba968b14877c5c1fb054e34917aff3f31", 0xcd}, {&(0x7f00000003c0)="0cb0d93bdf68ddfcfda8a4900ff37eea8cb48e", 0x13}, {&(0x7f0000000c40)="45ed63d2b4c4834e6240a30f4cb3ce4d89f30975b94238a8294326325f3f86381ba190ca87e40ce9f719fee915b02cc74b0238", 0x33}, {&(0x7f0000000c80)="8c38dd033afd5a974fecb19c2d96b9716122de262d6d54c8a120ad2d9d9477c71ffd035537666cf6999156a72bdd0933d71c4c8cafe3f204ea1c2cb31ae10f4c36e1232981f7272970ecdb7196e8f925c008fa02aa577938b7f96602a7e72b44fcef090bb21495e49b3a1dd76a093b5f6beff23863736f2d6b2ed0d5959575b4714bc8a8d233d9b7296666c87a19abd29188e777eba6ea5dfc837c82a9550d9233d6474084e07f99a5f1069ddb", 0xad}, {&(0x7f0000001040)="3c81029d88386c4965a1d89703c154e63f4d7f", 0x13}], 0x6}}], 0x3, 0x4) 1.758496055s ago: executing program 3 (id=1163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.616259163s ago: executing program 3 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'batadv_slave_1\x00'}) 1.140252671s ago: executing program 0 (id=1165): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x9, 0xc56, &(0x7f0000001bc0)="$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") vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) 819.242281ms ago: executing program 0 (id=1166): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x54, r0, 0x801, 0x70bd2c, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 786.907483ms ago: executing program 3 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r2, r1, 0x25, 0x8, @val=@tcx}, 0x1c) 770.594783ms ago: executing program 5 (id=1168): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x2000, 0x0) 600.133254ms ago: executing program 5 (id=1169): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4) 512.110859ms ago: executing program 3 (id=1170): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008001340000000000500010006000000050005000a00000805000400000000000900020073797a31000000000c000300"], 0x50}}, 0x8000000) 411.053815ms ago: executing program 3 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a01080000000000ff00000a0000010900020073797a31000000000900010073797a310000000014000380100000800800034000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0xc044) 342.023089ms ago: executing program 0 (id=1172): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40013102}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 240.640355ms ago: executing program 3 (id=1173): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 187.423869ms ago: executing program 0 (id=1174): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 66.803866ms ago: executing program 5 (id=1175): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 0s ago: executing program 35 (id=1175): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): data mode [ 79.908393][ T5005] reiserfs: using flush barriers [ 79.931569][ T5005] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 79.955257][ T5005] REISERFS (device loop3): checking transaction log (loop3) [ 79.987254][ T5005] REISERFS (device loop3): Using r5 hash to sort names [ 80.043567][ T5029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.257'. [ 80.070149][ T5005] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 80.117455][ T5005] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 80.290809][ T5036] loop2: detected capacity change from 0 to 1024 [ 80.416992][ T5036] EXT4-fs (loop2): Ignoring removed bh option [ 80.495661][ T5036] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 80.770550][ T5053] loop4: detected capacity change from 0 to 32768 [ 80.822979][ T5053] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 80.838328][ T5053] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 80.871573][ T5053] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 80.889681][ T4530] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 80.916801][ T4530] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 80.934495][ T5055] loop1: detected capacity change from 0 to 8192 [ 80.978543][ T4530] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 61ms [ 80.992161][ T4530] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 81.024941][ T5055] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 81.057474][ T5055] REISERFS (device loop1): using ordered data mode [ 81.066453][ T5053] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 81.068406][ T5055] reiserfs: using flush barriers [ 81.080006][ T5053] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no resource groups found in the file system. [ 81.128553][ T5055] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.171733][ T5064] loop0: detected capacity change from 0 to 1024 [ 81.216018][ T5057] loop3: detected capacity change from 0 to 32768 [ 81.224078][ T5055] REISERFS (device loop1): checking transaction log (loop1) [ 81.261314][ T5055] REISERFS (device loop1): Using r5 hash to sort names [ 81.288060][ T5055] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 81.333222][ T5057] (syz.3.264,5057,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.402797][ T5057] (syz.3.264,5057,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.655883][ T5073] loop0: detected capacity change from 0 to 64 [ 81.676775][ T5057] JBD2: Ignoring recovery information on journal [ 81.725171][ T5075] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 81.744033][ T5075] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 81.747287][ T5057] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 82.032366][ T4270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.149392][ T5089] loop1: detected capacity change from 0 to 128 [ 82.212572][ T4270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.225915][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 82.245577][ T5089] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 82.258304][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.298812][ T5089] hpfs: filesystem error: improperly stopped [ 82.304933][ T5089] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 82.313264][ T5089] hpfs: You really don't want any checks? You are crazy... [ 82.321210][ T5089] hpfs: hpfs_map_sector(): read error [ 82.327110][ T5089] hpfs: code page support is disabled [ 82.333291][ T5089] hpfs: hpfs_map_4sectors(): unaligned read [ 82.347809][ T4761] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.361996][ T5089] hpfs: hpfs_map_4sectors(): unaligned read [ 82.394549][ T4270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.414484][ T5089] hpfs: filesystem error: unable to find root dir [ 82.506851][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 82.530178][ T4270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.586585][ T5094] loop3: detected capacity change from 0 to 64 [ 82.616693][ T4761] usb 1-1: Using ep0 maxpacket: 32 [ 82.637473][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.674592][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.708135][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.726111][ T4234] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.741117][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.766897][ T4761] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.774304][ T4234] usb 5-1: config 0 descriptor?? [ 82.787558][ T4761] usb 1-1: config 0 has no interface number 0 [ 82.969857][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 82.997309][ T4761] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 83.006387][ T4761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.047014][ T4761] usb 1-1: Product: syz [ 83.051306][ T4761] usb 1-1: Manufacturer: syz [ 83.116727][ T4761] usb 1-1: SerialNumber: syz [ 83.130778][ T4761] usb 1-1: config 0 descriptor?? [ 83.183670][ T4761] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 83.192673][ T4761] usb 1-1: selecting invalid altsetting 1 [ 83.199226][ T4761] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 83.219832][ T4761] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.230741][ T4761] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 83.239988][ T4761] usb 1-1: media controller created [ 83.258919][ T4761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.262010][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.295003][ T4234] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 83.327524][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.367672][ T4234] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input7 [ 83.390383][ T5091] device bridge_slave_0 entered promiscuous mode [ 83.412017][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.464038][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.490066][ T5091] device bridge_slave_1 entered promiscuous mode [ 83.592664][ T4234] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 83.598870][ T5112] XFS (loop1): Mounting V5 Filesystem [ 83.641005][ T4234] usb 5-1: USB disconnect, device number 4 [ 83.693091][ T5112] XFS (loop1): Ending clean mount [ 83.747818][ T5112] XFS (loop1): Quotacheck needed: Please wait. [ 83.759585][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.773314][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.807999][ T5091] team0: Port device team_slave_0 added [ 83.911897][ T5112] XFS (loop1): Quotacheck: Done. [ 83.941329][ T5091] team0: Port device team_slave_1 added [ 84.048732][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.083201][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.138355][ T4183] XFS (loop1): Unmounting Filesystem [ 84.146042][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.161270][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.168585][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.239845][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.430515][ T4761] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 84.443567][ T5091] device hsr_slave_0 entered promiscuous mode [ 84.452695][ T4761] zl10353_read_register: readreg error (reg=127, ret==-110) [ 84.467788][ T5091] device hsr_slave_1 entered promiscuous mode [ 84.481226][ T5165] netlink: 92 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.486968][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 84.497558][ T5087] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 84.519580][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.529670][ T5167] netlink: 120 bytes leftover after parsing attributes in process `syz.3.306'. [ 84.547069][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.554655][ T5091] Cannot create hsr debugfs directory [ 84.590261][ T5167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.306'. [ 84.603362][ T4761] usb 1-1: USB disconnect, device number 2 [ 84.633416][ T5169] set_capacity_and_notify: 1 callbacks suppressed [ 84.633432][ T5169] loop4: detected capacity change from 0 to 256 [ 84.706497][ T5169] exfat: Deprecated parameter 'utf8' [ 84.776528][ T5169] exfat: Deprecated parameter 'namecase' [ 84.826128][ T5169] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 85.117368][ T5091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.175895][ T5190] loop1: detected capacity change from 0 to 256 [ 85.201592][ T5194] program syz.3.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.205989][ T5091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.335681][ T5190] FAT-fs (loop1): Directory bread(block 64) failed [ 85.366905][ T5190] FAT-fs (loop1): Directory bread(block 65) failed [ 85.387117][ T5190] FAT-fs (loop1): Directory bread(block 66) failed [ 85.455240][ T5190] FAT-fs (loop1): Directory bread(block 67) failed [ 85.463219][ T5190] FAT-fs (loop1): Directory bread(block 68) failed [ 85.475320][ T5190] FAT-fs (loop1): Directory bread(block 69) failed [ 85.497066][ T5190] FAT-fs (loop1): Directory bread(block 70) failed [ 85.506434][ T5190] FAT-fs (loop1): Directory bread(block 71) failed [ 85.535263][ T5091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.590223][ T5190] FAT-fs (loop1): Directory bread(block 72) failed [ 85.621863][ T5091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.649430][ T5190] FAT-fs (loop1): Directory bread(block 73) failed [ 85.905600][ T4270] device hsr_slave_0 left promiscuous mode [ 85.922916][ T4270] device hsr_slave_1 left promiscuous mode [ 85.990262][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.023251][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.054059][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.081010][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.084814][ T5235] loop0: detected capacity change from 0 to 1024 [ 86.117387][ T4270] device bridge_slave_1 left promiscuous mode [ 86.126452][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.193032][ T4270] device bridge_slave_0 left promiscuous mode [ 86.216123][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.217232][ T5235] hfsplus: bad catalog entry type [ 86.265185][ T4270] device veth1_macvtap left promiscuous mode [ 86.277839][ T4270] device veth0_macvtap left promiscuous mode [ 86.284151][ T4270] device veth1_vlan left promiscuous mode [ 86.292273][ T4270] device veth0_vlan left promiscuous mode [ 86.303909][ T1281] hfsplus: b-tree write err: -5, ino 4 [ 86.309829][ T5244] syz.4.331 uses obsolete (PF_INET,SOCK_PACKET) [ 86.416798][ T4531] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.566294][ T4760] Bluetooth: hci4: command 0x041b tx timeout [ 86.742455][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 86.757982][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 86.776967][ T4531] usb 2-1: config 0 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 86.788753][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.797684][ T4531] usb 2-1: config 0 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 86.810688][ T4531] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.817639][ T4531] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 86.826866][ T4531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.844929][ T4531] usb 2-1: config 0 descriptor?? [ 86.852399][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.867013][ T5240] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.931794][ T4270] bond0 (unregistering): Released all slaves [ 87.150104][ T5262] netdevsim netdevsim4: Firmware load for '/../file0' refused, path contains '..' component [ 87.267047][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.293611][ T5267] loop3: detected capacity change from 0 to 512 [ 87.309765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.329304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.337143][ T4531] wacom 0003:056A:0333.0005: hidraw0: USB HID v0.01 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 87.347724][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.395242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.412773][ T5267] FAT-fs (loop3): bogus sectors per cluster 0 [ 87.429420][ T5267] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 87.444022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.461729][ T5267] FAT-fs (loop3): Can't find a valid FAT filesystem [ 87.495298][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.502639][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.569002][ T4761] usb 2-1: USB disconnect, device number 2 [ 87.648797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.652308][ T5277] fido_id[5277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.668132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.705303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.724262][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.731400][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.796233][ T5288] xt_hashlimit: max too large, truncated to 1048576 [ 87.824417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.853978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.856140][ T5288] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 87.883826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.923360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.935844][ T5291] loop4: detected capacity change from 0 to 4096 [ 87.972430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.007008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.029060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.053607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.070047][ T5291] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 88.085485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.130200][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.171817][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.209903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.238124][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.410448][ T5313] loop0: detected capacity change from 0 to 64 [ 88.533723][ T1281] ntfs3: loop4: ntfs3_write_inode r=1a failed, -22. [ 88.586516][ T5313] hfs: keylen 94 too large [ 88.608821][ T4188] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 88.622956][ T4188] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 88.638383][ T4761] Bluetooth: hci4: command 0x040f tx timeout [ 88.666966][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 88.750781][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.835974][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.881736][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.908001][ T5324] loop4: detected capacity change from 0 to 64 [ 89.381388][ T5305] loop1: detected capacity change from 0 to 32768 [ 89.510274][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.545317][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.548907][ T5356] loop0: detected capacity change from 0 to 4096 [ 89.589893][ T5305] XFS (loop1): Mounting V5 Filesystem [ 89.628319][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.638233][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.649893][ T5091] device veth0_vlan entered promiscuous mode [ 89.668676][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.677783][ T5356] __ntfs_warning: 6 callbacks suppressed [ 89.677798][ T5356] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 89.720037][ T5365] nfs4: Unexpected value for 'tcp' [ 89.736393][ T5305] XFS (loop1): Ending clean mount [ 89.745798][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.804097][ T5356] ntfs: volume version 3.1. [ 89.822212][ T5091] device veth1_vlan entered promiscuous mode [ 89.910388][ T5368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.955911][ T5356] ntfs: (device loop0): ntfs_read_locked_inode(): $INDEX_ROOT attribute is corrupt. [ 89.959283][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.976765][ T5356] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 90.003674][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.011180][ T4183] XFS (loop1): Unmounting Filesystem [ 90.059131][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.106287][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.144276][ T5091] device veth0_macvtap entered promiscuous mode [ 90.163263][ T4193] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 90.189152][ T5091] device veth1_macvtap entered promiscuous mode [ 90.236329][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.256854][ T5374] usb usb1: usbfs: process 5374 (syz.0.370) did not claim interface 5 before use [ 90.272383][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.284540][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.310411][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.329698][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.341917][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.352331][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.363140][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.374809][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.423108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.449518][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 90.459683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.489151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.497401][ T5376] netlink: 288 bytes leftover after parsing attributes in process `syz.0.371'. [ 90.517728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.539492][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.586765][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.608704][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.629740][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.656986][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.689582][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.722353][ T4755] Bluetooth: hci4: command 0x0419 tx timeout [ 90.750687][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.780064][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.795869][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.816208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.825456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.853537][ T5091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.908283][ T5091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.924344][ T5388] loop4: detected capacity change from 0 to 1024 [ 90.931603][ T5091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974345][ T5091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.176312][ T5082] hfsplus: b-tree write err: -5, ino 4 [ 91.252691][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.279604][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.326354][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.393930][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.414055][ T5401] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 91.425836][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437555][ T5401] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 91.443117][ T5405] loop3: detected capacity change from 0 to 1024 [ 91.444182][ T5401] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 91.462222][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.611757][ T5401] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 91.666819][ T5401] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 91.716768][ T5401] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 91.723505][ T5401] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 91.796929][ T5401] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 91.803508][ T5401] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 92.003397][ T5421] loop5: detected capacity change from 0 to 2048 [ 92.138919][ T5392] loop1: detected capacity change from 0 to 32768 [ 92.174324][ T5421] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.234294][ T5429] loop0: detected capacity change from 0 to 256 [ 92.335833][ T5429] exfat: Deprecated parameter 'utf8' [ 92.419171][ T5429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 92.466764][ T5421] EXT4-fs (loop5): can't change dax mount option while remounting [ 92.608306][ T5409] loop4: detected capacity change from 0 to 32768 [ 92.705997][ T5409] (syz.4.383,5409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.771838][ T5409] (syz.4.383,5409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.861013][ T5446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 92.886985][ T5409] JBD2: Ignoring recovery information on journal [ 92.998358][ T5417] loop3: detected capacity change from 0 to 32768 [ 93.037963][ T5409] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.182382][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 93.255435][ T5417] XFS (loop3): Mounting V5 Filesystem [ 93.481953][ T5417] XFS (loop3): Ending clean mount [ 93.507784][ T5409] syz.4.383 (5409) used greatest stack depth: 21144 bytes left [ 93.549155][ T5417] XFS (loop3): Quotacheck needed: Please wait. [ 93.630123][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 93.675357][ T5417] XFS (loop3): Quotacheck: Done. [ 93.880639][ T5495] syz.1.402 (5495): drop_caches: 2 [ 93.906987][ T5497] loop0: detected capacity change from 0 to 64 [ 93.915997][ T4184] XFS (loop3): Unmounting Filesystem [ 94.021016][ T5497] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 94.213237][ T5506] loop0: detected capacity change from 0 to 1024 [ 94.426837][ T5506] overlayfs: filesystem on './file0' not supported [ 94.549211][ T150] hfsplus: b-tree write err: -5, ino 4 [ 94.762935][ T5490] loop5: detected capacity change from 0 to 32768 [ 94.884256][ T5490] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 94.884256][ T5490] [ 94.966893][ T5490] non-latin1 character 0x3ff found in JFS file name [ 94.996497][ T5490] mount with iocharset=utf8 to access [ 95.232759][ T5511] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.345998][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 95.371925][ T4761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.529807][ T5520] XFS (loop4): Mounting V5 Filesystem [ 95.596874][ T4756] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.646267][ T5520] XFS (loop4): Ending clean mount [ 95.657149][ T4761] usb 1-1: Using ep0 maxpacket: 8 [ 95.721666][ T5520] XFS (loop4): Quotacheck needed: Please wait. [ 95.792338][ T5520] XFS (loop4): Quotacheck: Done. [ 95.797065][ T4761] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.844537][ T4761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.870930][ T4761] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 95.881715][ T4756] usb 4-1: Using ep0 maxpacket: 16 [ 95.891037][ T4188] XFS (loop4): Unmounting Filesystem [ 95.909598][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 95.925966][ T4761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.950006][ T4761] usb 1-1: config 0 descriptor?? [ 96.227500][ T4756] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 96.246813][ T4756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.254850][ T4756] usb 4-1: Product: syz [ 96.289865][ T4756] usb 4-1: Manufacturer: syz [ 96.294692][ T4756] usb 4-1: SerialNumber: syz [ 96.328412][ T4756] usb 4-1: config 0 descriptor?? [ 96.348310][ T5569] set_capacity_and_notify: 2 callbacks suppressed [ 96.348324][ T5569] loop5: detected capacity change from 0 to 32768 [ 96.378464][ T4756] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 96.449259][ T5569] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.417 (5569) [ 96.471406][ T4761] uclogic 0003:5543:0042.0006: unbalanced collection at end of report description [ 96.514196][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.421'. [ 96.517928][ T4761] uclogic 0003:5543:0042.0006: parse failed [ 96.540684][ T4761] uclogic: probe of 0003:5543:0042.0006 failed with error -22 [ 96.593488][ T5569] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.647134][ T5569] BTRFS info (device loop5): force zlib compression, level 3 [ 96.654571][ T5569] BTRFS info (device loop5): force clearing of disk cache [ 96.704054][ T5569] BTRFS info (device loop5): setting nodatasum [ 96.715355][ T5583] loop1: detected capacity change from 0 to 32768 [ 96.725727][ T4761] usb 1-1: USB disconnect, device number 3 [ 96.731790][ T5569] BTRFS info (device loop5): allowing degraded mounts [ 96.749753][ T5569] BTRFS info (device loop5): enabling disk space caching [ 96.792334][ T5569] BTRFS info (device loop5): disk space caching is enabled [ 96.822040][ T5569] BTRFS info (device loop5): has skinny extents [ 96.873410][ T5583] XFS (loop1): Mounting V5 Filesystem [ 96.933429][ T5583] XFS (loop1): Ending clean mount [ 96.979469][ T5583] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 97.040320][ T4183] XFS (loop1): Unmounting Filesystem [ 97.054510][ T4756] ssu100: probe of 4-1:0.0 failed with error -71 [ 97.066722][ T4756] usb 4-1: USB disconnect, device number 3 [ 97.100925][ T5569] BTRFS info (device loop5): clearing free space tree [ 97.113876][ T5569] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.155928][ T5569] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.265960][ T5569] BTRFS info (device loop5): balance: start -s [ 97.267808][ T5569] BTRFS info (device loop5): relocating block group 1048576 flags system [ 97.291232][ T5624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 97.334378][ T5569] BTRFS info (device loop5): balance: ended with status: 0 [ 97.578984][ T5633] device ip6gretap1 entered promiscuous mode [ 97.867914][ T5643] loop3: detected capacity change from 0 to 512 [ 97.920388][ T5643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.953789][ T5647] hfs: can't find a HFS filesystem on dev nullb0 [ 97.963596][ T5643] EXT4-fs (loop3): 1 truncate cleaned up [ 97.963624][ T5643] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,bsdgroups,noload,,errors=continue. Quota mode: none. [ 98.009031][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.114440][ T26] audit: type=1326 audit(1770403334.437:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.117045][ T26] audit: type=1326 audit(1770403334.437:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.127788][ T26] audit: type=1326 audit(1770403334.457:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.127990][ T26] audit: type=1326 audit(1770403334.457:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.128244][ T26] audit: type=1326 audit(1770403334.457:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.128415][ T26] audit: type=1326 audit(1770403334.457:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.128837][ T26] audit: type=1326 audit(1770403334.457:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.128991][ T26] audit: type=1326 audit(1770403334.457:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.129171][ T26] audit: type=1326 audit(1770403334.457:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2879fe3eb9 code=0x7ffc0000 [ 98.173297][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.190139][ T26] audit: type=1326 audit(1770403334.517:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2879fa478e code=0x7ffc0000 [ 98.277165][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.356535][ T5662] loop3: detected capacity change from 0 to 256 [ 98.379471][ T5663] loop1: detected capacity change from 0 to 256 [ 98.448560][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 98.448640][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 98.512170][ T5662] FAT-fs (loop3): Directory bread(block 64) failed [ 98.512210][ T5662] FAT-fs (loop3): Directory bread(block 65) failed [ 98.512439][ T5662] FAT-fs (loop3): Directory bread(block 66) failed [ 98.512472][ T5662] FAT-fs (loop3): Directory bread(block 67) failed [ 98.512539][ T5662] FAT-fs (loop3): Directory bread(block 68) failed [ 98.512568][ T5662] FAT-fs (loop3): Directory bread(block 69) failed [ 98.512622][ T5662] FAT-fs (loop3): Directory bread(block 70) failed [ 98.512647][ T5662] FAT-fs (loop3): Directory bread(block 71) failed [ 98.512709][ T5662] FAT-fs (loop3): Directory bread(block 72) failed [ 98.512734][ T5662] FAT-fs (loop3): Directory bread(block 73) failed [ 99.034873][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.452'. [ 99.207871][ T5684] loop1: detected capacity change from 0 to 4096 [ 99.310696][ T5684] ntfs: volume version 3.1. [ 99.901227][ T5716] loop1: detected capacity change from 0 to 512 [ 99.948210][ T5721] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 99.958412][ T5718] program syz.3.467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.997232][ T5718] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 99.998410][ T5716] EXT4-fs (loop1): Ignoring removed oldalloc option [ 100.037900][ T5716] EXT4-fs (loop1): Ignoring removed bh option [ 100.070944][ T5719] loop0: detected capacity change from 0 to 4096 [ 100.082031][ T5688] loop5: detected capacity change from 0 to 32768 [ 100.098170][ T5716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 100.106196][ T5716] System zones: 1-12 [ 100.122361][ T5716] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.466: corrupted in-inode xattr [ 100.168998][ T5719] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 100.250116][ T5716] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.466: couldn't read orphan inode 15 (err -117) [ 100.269787][ T5716] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none. [ 100.292135][ T5688] XFS (loop5): Mounting V5 Filesystem [ 100.331771][ T5719] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 100.480903][ T5742] loop4: detected capacity change from 0 to 128 [ 100.488090][ T5688] XFS (loop5): Ending clean mount [ 100.643964][ T5742] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.679688][ T5091] XFS (loop5): Unmounting Filesystem [ 100.754646][ T5082] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 100.761074][ T5742] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.776029][ T4193] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 100.793328][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.860505][ T4193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.869505][ T4193] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 100.876009][ T4301] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 100.893451][ T4193] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 101.592946][ T5788] set_capacity_and_notify: 1 callbacks suppressed [ 101.592960][ T5788] loop4: detected capacity change from 0 to 24 [ 101.737461][ T5788] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 101.754118][ T5788] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 101.810325][ T5800] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.995798][ T5816] program syz.3.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.436310][ T5852] loop3: detected capacity change from 0 to 512 [ 102.518329][ T5852] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.614179][ T5858] loop1: detected capacity change from 0 to 64 [ 102.624271][ T5852] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.508: invalid indirect mapped block 4294967295 (level 1) [ 102.741409][ T5858] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 102.764301][ T5852] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.508: invalid indirect mapped block 4294967295 (level 1) [ 102.871690][ T5852] EXT4-fs (loop3): 2 truncates cleaned up [ 102.905426][ T5852] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000009e81,init_itable=0x0000000000000025,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 103.062322][ T5852] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 103.111776][ T5866] loop1: detected capacity change from 0 to 1024 [ 103.460035][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 103.762279][ T5888] netlink: 64 bytes leftover after parsing attributes in process `syz.4.523'. [ 104.245741][ T5906] loop3: detected capacity change from 0 to 1764 [ 104.258710][ T5904] device vlan0 entered promiscuous mode [ 104.271482][ T5869] loop5: detected capacity change from 0 to 32768 [ 104.356573][ T5902] loop4: detected capacity change from 0 to 8192 [ 104.424890][ T5879] loop0: detected capacity change from 0 to 40427 [ 104.457607][ T5869] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 104.503092][ T5879] F2FS-fs (loop0): invalid crc value [ 104.533992][ T5902] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 104.553258][ T5902] REISERFS (device loop4): using ordered data mode [ 104.567396][ T5902] reiserfs: using flush barriers [ 104.586466][ T5879] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.650622][ T5902] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.754754][ T5902] REISERFS (device loop4): checking transaction log (loop4) [ 104.767827][ T5091] ocfs2: Unmounting device (7,5) on (node local) [ 104.839210][ T5902] REISERFS (device loop4): Using r5 hash to sort names [ 104.849053][ T5902] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.898841][ T5879] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 104.961384][ T5879] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.963300][ T5932] loop3: detected capacity change from 0 to 512 [ 104.989052][ T5902] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=129, len=7 - odd [ 105.039979][ T5879] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=50000, run fsck to fix. [ 105.080037][ T5879] F2FS-fs (loop0): sanity_check_inode: inode (ino=5) has corrupted i_xattr_nid: 327680, run fsck to fix. [ 105.135909][ T5932] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.537: bg 0: block 16: invalid block bitmap [ 105.160595][ T5932] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 105.166967][ T4515] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.211862][ T5932] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.537: attempt to clear invalid blocks 1669132790 len 1 [ 105.245857][ T5932] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.537: invalid indirect mapped block 4294967295 (level 1) [ 105.330857][ T5932] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.537: invalid indirect mapped block 4294967295 (level 2) [ 105.348827][ T5932] EXT4-fs (loop3): 1 truncate cleaned up [ 105.354517][ T5932] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 105.426852][ T4515] usb 6-1: Using ep0 maxpacket: 32 [ 105.552927][ T4515] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 105.591681][ T4515] usb 6-1: config 0 has no interface number 0 [ 105.601242][ T5949] loop1: detected capacity change from 0 to 2048 [ 105.606732][ T4515] usb 6-1: config 0 interface 12 has no altsetting 0 [ 105.705760][ T5949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.736812][ T5955] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 105.797995][ T4515] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 105.818506][ T4515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.836133][ T4515] usb 6-1: Product: syz [ 105.840914][ T4515] usb 6-1: Manufacturer: syz [ 105.861242][ T4515] usb 6-1: SerialNumber: syz [ 105.880881][ T4515] usb 6-1: config 0 descriptor?? [ 105.926835][ T4421] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.057352][ T5952] XFS: noikeep mount option is deprecated. [ 106.082905][ T5965] xt_l2tp: missing protocol rule (udp|l2tpip) [ 106.192659][ T5952] XFS (loop3): Mounting V5 Filesystem [ 106.333198][ T5952] XFS (loop3): Ending clean mount [ 106.349468][ T4421] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.354269][ T5952] XFS (loop3): Quotacheck needed: Please wait. [ 106.366700][ T4421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.376082][ T4421] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 106.385969][ T4421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.396046][ T4421] usb 5-1: config 0 descriptor?? [ 106.441365][ T5961] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 106.492507][ T5952] XFS (loop3): Quotacheck: Done. [ 106.520087][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 106.576787][ T4756] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.581850][ T4184] XFS (loop3): Unmounting Filesystem [ 106.776847][ T4515] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 106.784553][ T4515] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 106.799214][ T4515] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 106.816912][ T4515] f81534: probe of 6-1:0.12 failed with error -71 [ 106.838245][ T4515] usb 6-1: USB disconnect, device number 2 [ 106.889270][ T4421] hid-alps 0003:044E:1215.0007: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.4-1/input0 [ 106.986942][ T4756] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.006680][ T4756] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.026052][ T4756] usb 2-1: config 1 has no interface number 0 [ 107.036250][ T4756] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.067000][ T5981] set_capacity_and_notify: 3 callbacks suppressed [ 107.067015][ T5981] loop0: detected capacity change from 0 to 32768 [ 107.085982][ T4515] usb 5-1: USB disconnect, device number 5 [ 107.195316][ T5981] XFS (loop0): Mounting V5 Filesystem [ 107.216831][ T4756] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.227149][ T4756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.248285][ T4756] usb 2-1: Product: syz [ 107.298142][ T4756] usb 2-1: Manufacturer: syz [ 107.302865][ T6000] loop3: detected capacity change from 0 to 512 [ 107.302870][ T4756] usb 2-1: SerialNumber: syz [ 107.326637][ T5981] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 107.352338][ T6002] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 107.364013][ T6002] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 107.383651][ T6000] EXT4-fs (loop3): Ignoring removed oldalloc option [ 107.392896][ T5981] XFS (loop0): Starting recovery (logdev: internal) [ 107.408051][ T4756] usb 2-1: selecting invalid altsetting 1 [ 107.412427][ T6000] EXT4-fs (loop3): Ignoring removed bh option [ 107.445654][ T5981] XFS (loop0): Ending recovery (logdev: internal) [ 107.455517][ T6000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 107.464299][ T6000] System zones: 1-12 [ 107.468601][ T5981] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 107.477843][ T5981] XFS (loop0): Failed to initialize disk quotas. [ 107.483522][ T6000] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.558: corrupted in-inode xattr [ 107.532933][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.558: couldn't read orphan inode 15 (err -117) [ 107.556437][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none. [ 107.638211][ T6010] loop5: detected capacity change from 0 to 1024 [ 107.699355][ T5981] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 107.770015][ T4193] XFS (loop0): Unmounting Filesystem [ 107.856897][ T4756] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 107.866142][ T4756] cdc_ncm 2-1:1.1: bind() failure [ 107.877977][ T6013] loop4: detected capacity change from 0 to 4096 [ 107.897671][ T4756] usb 2-1: USB disconnect, device number 3 [ 107.976324][ T6013] __ntfs_error: 62 callbacks suppressed [ 107.976342][ T6013] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 108.038809][ T6013] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 108.078266][ T6013] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 108.112047][ T6013] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.146779][ T6013] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.205507][ T6013] ntfs: volume version 3.1. [ 108.223617][ T6026] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.278911][ T6013] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 108.352568][ T6013] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 108.403005][ T6013] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 108.468785][ T6013] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 108.496379][ T6013] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 108.686814][ T4515] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.763315][ T6048] netlink: 'syz.5.572': attribute type 1 has an invalid length. [ 108.967060][ T4515] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 109.052387][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.082297][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.119605][ T6066] mmap: syz.5.578 (6066) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 109.128768][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.246928][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.278013][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.319736][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.396897][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.426024][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.476731][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.550005][ T4531] kernel write not supported for file /stat (pid: 4531 comm: kworker/0:17) [ 109.577008][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.587165][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.647922][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.665358][ T6043] loop0: detected capacity change from 0 to 32768 [ 109.736902][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.768088][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.797161][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.817845][ T6043] XFS (loop0): Mounting V5 Filesystem [ 109.928131][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.952019][ T6054] loop3: detected capacity change from 0 to 40427 [ 109.965872][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.008015][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.032113][ T6043] XFS (loop0): Ending clean mount [ 110.045267][ T6043] XFS (loop0): Quotacheck needed: Please wait. [ 110.072542][ T6054] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 110.092666][ T6054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.107288][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.126725][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.146532][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.225140][ T6043] XFS (loop0): Quotacheck: Done. [ 110.225767][ T6054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.231622][ T4515] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.250590][ T4515] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.306763][ T4515] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.416227][ T6054] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.432603][ T6054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.467131][ T4515] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.499760][ T4515] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.510492][ T6100] loop5: detected capacity change from 0 to 32768 [ 110.523958][ T4515] usb 2-1: Product: syz [ 110.541210][ T4515] usb 2-1: Manufacturer: syz [ 110.545865][ T4515] usb 2-1: SerialNumber: syz [ 110.573327][ T4515] usb 2-1: config 0 descriptor?? [ 110.591893][ T4193] XFS (loop0): Unmounting Filesystem [ 110.636799][ T6100] [ 110.636799][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.636799][ T6100] [ 110.734061][ T6100] ERROR: (device loop5): ea_get: invalid ea.flag [ 110.734061][ T6100] [ 110.745208][ T4515] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 110.763362][ T6137] delete_channel: no stack [ 110.771117][ T6135] ERROR: (device loop5): ea_get: invalid ea.flag [ 110.771117][ T6135] [ 110.829344][ T6135] ERROR: (device loop5): remounting filesystem as read-only [ 110.914716][ T6100] ERROR: (device loop5): remounting filesystem as read-only [ 111.052254][ T4234] usb 2-1: USB disconnect, device number 4 [ 111.073702][ T4234] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 111.481331][ T6159] loop4: detected capacity change from 0 to 2048 [ 111.507051][ T6154] loop5: detected capacity change from 0 to 4096 [ 111.570933][ T6154] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 111.609565][ T6159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.917384][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 112.038084][ T6194] damon: kdamond (6194) starts [ 112.319784][ T6210] rdma_op ffff88802bcc61f0 conn xmit_rdma 0000000000000000 [ 112.531818][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.624'. [ 112.823139][ T6242] loop5: detected capacity change from 0 to 1024 [ 113.023291][ T144] hfsplus: b-tree write err: -5, ino 4 [ 113.092705][ T6265] loop0: detected capacity change from 0 to 128 [ 113.152800][ T6269] loop5: detected capacity change from 0 to 512 [ 113.166849][ T6265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 113.218263][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 113.218277][ T26] audit: type=1800 audit(1770403349.547:81): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.642" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 113.221229][ T6269] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.305614][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 113.381442][ T6285] loop1: detected capacity change from 0 to 8 [ 113.385442][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 113.428553][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 113.464343][ T6269] EXT4-fs (loop5): 1 truncate cleaned up [ 113.504595][ T6269] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 113.573183][ T6295] loop3: detected capacity change from 0 to 256 [ 114.090471][ T6326] loop5: detected capacity change from 0 to 16 [ 114.115388][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 114.139721][ T6329] loop4: detected capacity change from 0 to 2048 [ 114.174069][ T6326] erofs: (device loop5): mounted with root inode @ nid 36. [ 114.204493][ T6326] overlayfs: upper fs is r/o, try multi-lower layers mount [ 114.227951][ T6329] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.280989][ T6329] NILFS (loop4): mounting unchecked fs [ 114.356699][ T4421] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.396331][ T6329] NILFS (loop4): recovery complete [ 114.431109][ T6339] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.536167][ T6344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.647795][ T4421] usb 1-1: Using ep0 maxpacket: 16 [ 114.811702][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 115.066909][ T4421] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 115.090287][ T6376] loop4: detected capacity change from 0 to 512 [ 115.091500][ T4421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.133975][ T6379] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 115.151592][ T4421] usb 1-1: Product: syz [ 115.156060][ T4421] usb 1-1: Manufacturer: syz [ 115.186829][ T4421] usb 1-1: SerialNumber: syz [ 115.211084][ T4421] usb 1-1: config 0 descriptor?? [ 115.255863][ T6385] loop5: detected capacity change from 0 to 512 [ 115.309288][ T6385] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 115.358280][ T4421] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 115.374566][ T6385] EXT4-fs (loop5): mount failed [ 115.435382][ T6392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.477049][ T1281] usb 1-1: Failed to submit usb control message: -71 [ 115.491376][ T4756] usb 1-1: USB disconnect, device number 4 [ 115.498344][ T1281] usb 1-1: unable to send the bmi data to the device: -71 [ 115.505601][ T1281] usb 1-1: unable to get target info from device [ 115.576791][ T1281] usb 1-1: could not get target info (-71) [ 115.601341][ T1281] usb 1-1: could not probe fw (-71) [ 115.691591][ T6370] loop1: detected capacity change from 0 to 32768 [ 115.733776][ T6405] MPTCP: kernel_bind error, err=-22 [ 115.734374][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 115.831023][ T6370] XFS (loop1): Mounting V5 Filesystem [ 115.843968][ T6399] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 115.860502][ T6410] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 115.932603][ T6410] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.017764][ T6410] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.694: Block bitmap for bg 0 marked uninitialized [ 116.065745][ T6399] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 116.073306][ T6410] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 116.079304][ T6370] XFS (loop1): Ending clean mount [ 116.106789][ T6410] EXT4-fs (loop3): 1 orphan inode deleted [ 116.110869][ T6370] XFS (loop1): Quotacheck needed: Please wait. [ 116.113834][ T6410] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.256752][ T6370] XFS (loop1): Quotacheck: Done. [ 116.374342][ T6421] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 116.454346][ T6430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.501159][ T6430] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.537245][ T6430] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.700: inode #15: comm syz.3.700: iget: illegal inode # [ 116.561694][ T4183] XFS (loop1): Unmounting Filesystem [ 116.586539][ T6430] EXT4-fs (loop3): Remounting filesystem read-only [ 116.599122][ T6430] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.700: couldn't read orphan inode 15 (err -117) [ 116.728651][ T6430] EXT4-fs (loop3): Remounting filesystem read-only [ 116.775051][ T6430] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 116.903814][ T6446] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 116.962706][ T6446] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.980393][ T6446] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.708: Block bitmap for bg 0 marked uninitialized [ 117.024690][ T6446] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 117.051065][ T6446] EXT4-fs (loop4): 1 orphan inode deleted [ 117.087028][ T6446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.192844][ T6446] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 117.234098][ T6446] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 117.262489][ T6446] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.708: Block bitmap for bg 0 marked uninitialized [ 117.273185][ T6446] EXT4-fs error (device loop4): ext4_xattr_block_set:2195: inode #15: comm syz.4.708: bad block 0 [ 117.605721][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 117.644722][ T6480] netlink: 88 bytes leftover after parsing attributes in process `syz.4.723'. [ 117.679314][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'. [ 117.733922][ T6482] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.765469][ T6482] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 117.801904][ T6482] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 117.835120][ T6482] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 117.919686][ T6482] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 117.966808][ T6482] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 118.007359][ T146] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 118.046833][ T6482] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 118.145175][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 118.147234][ T6482] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 118.180055][ T6482] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 118.200327][ T26] audit: type=1800 audit(1770403354.527:82): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.722" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 118.247942][ T6505] netlink: 'syz.5.733': attribute type 4 has an invalid length. [ 118.277880][ T6505] netlink: 'syz.5.733': attribute type 8 has an invalid length. [ 118.286280][ T6505] netlink: 197324 bytes leftover after parsing attributes in process `syz.5.733'. [ 118.371324][ T6482] syz.3.722 (6482) used greatest stack depth: 21112 bytes left [ 118.424451][ T4753] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.469032][ T6513] set_capacity_and_notify: 9 callbacks suppressed [ 118.469054][ T6513] loop5: detected capacity change from 0 to 1024 [ 118.544723][ T6513] hfsplus: bad catalog entry type [ 118.594901][ T5082] hfsplus: b-tree write err: -5, ino 4 [ 118.807763][ T6524] loop5: detected capacity change from 0 to 512 [ 118.822501][ T6520] loop3: detected capacity change from 0 to 8192 [ 118.866936][ T4753] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.870390][ T6524] EXT4-fs (loop5): Ignoring removed nobh option [ 118.894097][ T6524] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 118.908119][ T4753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.920522][ T6520] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 118.960491][ T6524] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.742: iget: bad i_size value: 38620345925642 [ 118.960811][ T6520] REISERFS (device loop3): using ordered data mode [ 119.006855][ T6520] reiserfs: using flush barriers [ 119.019726][ T6520] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.032604][ T6524] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.742: couldn't read orphan inode 15 (err -117) [ 119.049521][ T6524] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 119.077091][ T6520] REISERFS (device loop3): checking transaction log (loop3) [ 119.095971][ T6520] REISERFS (device loop3): Using r5 hash to sort names [ 119.097172][ T4753] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.122977][ T4753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.136723][ T4753] usb 1-1: SerialNumber: syz [ 119.154283][ T6520] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.157513][ T6508] loop1: detected capacity change from 0 to 40427 [ 119.182194][ T6508] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.193698][ T6508] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.238415][ T6508] F2FS-fs (loop1): invalid crc value [ 119.275251][ T6508] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.289087][ T6518] loop4: detected capacity change from 0 to 32768 [ 119.289168][ T6524] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.742: invalid indirect mapped block 3973251072 (level 0) [ 119.344619][ T6520] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006" [ 119.345190][ T6518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.739 (6518) [ 119.432438][ T4753] usb 1-1: 0:2 : does not exist [ 119.441100][ T4753] usb 1-1: unit 5: unexpected type 0x03 [ 119.446799][ T6508] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.454578][ T6508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.522433][ T6518] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 119.546124][ T6518] BTRFS info (device loop4): using free space tree [ 119.566765][ T6518] BTRFS info (device loop4): has skinny extents [ 119.799958][ T6518] BTRFS info (device loop4): enabling ssd optimizations [ 119.864328][ T6559] loop3: detected capacity change from 0 to 256 [ 119.870985][ T4753] usb 1-1: USB disconnect, device number 5 [ 119.919741][ T6559] exfat: Deprecated parameter 'namecase' [ 119.943864][ T6559] exfat: Deprecated parameter 'utf8' [ 120.019913][ T6559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 120.115901][ T6559] exFAT-fs (loop3): error, found bogus dentry(16) beyond unused empty group(15) (start_clu : 5, cur_clu : 5) [ 120.192203][ T6559] exFAT-fs (loop3): Filesystem has been set read-only [ 120.195147][ T6573] loop0: detected capacity change from 0 to 256 [ 120.212916][ T6570] [U] ¦ [ 120.249602][ T5154] udevd[5154]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.391989][ T6573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 120.436409][ T6579] loop3: detected capacity change from 0 to 1024 [ 120.543008][ T6582] loop1: detected capacity change from 0 to 1024 [ 120.664122][ T6587] loop0: detected capacity change from 0 to 512 [ 120.717349][ T6582] hfsplus: bad catalog entry type [ 120.739667][ T6587] EXT4-fs (loop0): inline encryption not supported [ 120.789208][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.759: inode has both inline data and extents flags [ 120.816508][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.759: couldn't read orphan inode 15 (err -117) [ 120.830680][ T150] hfsplus: b-tree write err: -5, ino 4 [ 120.834661][ T6587] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,acl,i_version,grpquota,nombcache,noinit_itable,,errors=continue. Quota mode: writeback. [ 120.953298][ T1281] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 121.354653][ T6610] EXT4-fs (loop5): Ignoring removed bh option [ 121.575425][ T6610] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 121.764403][ T6616] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.773523][ T6616] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.787640][ T6616] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 121.787640][ T6616] inode = 1 19 [ 121.787640][ T6616] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 121.806491][ T6616] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 121.814964][ T6616] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 121.824086][ T6616] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 121.830881][ T6616] gfs2: fsid=syz:syz.s: File system withdrawn [ 121.837115][ T6616] CPU: 1 PID: 6616 Comm: syz.1.774 Not tainted syzkaller #0 [ 121.844575][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.854671][ T6616] Call Trace: [ 121.857962][ T6616] [ 121.860910][ T6616] dump_stack_lvl+0x188/0x250 [ 121.865613][ T6616] ? kobject_uevent_env+0x371/0x890 [ 121.870833][ T6616] ? show_regs_print_info+0x20/0x20 [ 121.876058][ T6616] ? load_image+0x400/0x400 [ 121.880667][ T6616] ? kobject_uevent_env+0x371/0x890 [ 121.885891][ T6616] gfs2_withdraw+0x1149/0x1490 [ 121.890682][ T6616] ? gfs2_lm+0x240/0x240 [ 121.894945][ T6616] ? _raw_spin_unlock+0x24/0x40 [ 121.899813][ T6616] ? gfs2_glock_nq+0xcb0/0x1550 [ 121.904700][ T6616] ? gfs2_consist_inode_i+0xc0/0xe0 [ 121.909923][ T6616] gfs2_jdesc_check+0x137/0x290 [ 121.914883][ T6616] check_journal_clean+0x186/0x360 [ 121.920021][ T6616] ? gfs2_trans_remove_revoke+0x370/0x370 [ 121.925805][ T6616] ? check_journal_clean+0x142/0x360 [ 121.931117][ T6616] ? __rwlock_init+0x140/0x140 [ 121.935992][ T6616] ? do_raw_spin_unlock+0x11d/0x230 [ 121.941301][ T6616] ? _raw_spin_unlock+0x24/0x40 [ 121.946168][ T6616] ? gfs2_jdesc_find+0xa7/0xc0 [ 121.950962][ T6616] init_journal+0x17a5/0x22f0 [ 121.955766][ T6616] ? end_bio_io_page+0x100/0x100 [ 121.960871][ T6616] ? vsnprintf+0x1b21/0x1c20 [ 121.965491][ T6616] ? snprintf+0xe5/0x140 [ 121.969761][ T6616] ? init_journal+0x74d/0x22f0 [ 121.974553][ T6616] ? vscnprintf+0x80/0x80 [ 121.978912][ T6616] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 121.984132][ T6616] init_inodes+0xdb/0x320 [ 121.988486][ T6616] gfs2_fill_super+0x16b2/0x1f00 [ 121.993463][ T6616] ? gfs2_reconfigure+0xd30/0xd30 [ 121.998541][ T6616] ? gfs2_glock_nq_num+0x82/0x1b0 [ 122.003594][ T6616] ? sb_set_blocksize+0xa5/0xe0 [ 122.008462][ T6616] get_tree_bdev+0x3f1/0x610 [ 122.013073][ T6616] ? gfs2_reconfigure+0xd30/0xd30 [ 122.018126][ T6616] gfs2_get_tree+0x4d/0x1e0 [ 122.022740][ T6616] vfs_get_tree+0x88/0x270 [ 122.027260][ T6616] do_new_mount+0x24a/0xa40 [ 122.031964][ T6616] __se_sys_mount+0x2e3/0x3d0 [ 122.036676][ T6616] ? __x64_sys_mount+0xc0/0xc0 [ 122.041460][ T6616] ? lockdep_hardirqs_on+0x94/0x140 [ 122.046684][ T6616] ? __x64_sys_mount+0x1c/0xc0 [ 122.051523][ T6616] do_syscall_64+0x4c/0xa0 [ 122.055951][ T6616] ? clear_bhb_loop+0x30/0x80 [ 122.060727][ T6616] ? clear_bhb_loop+0x30/0x80 [ 122.065426][ T6616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.071351][ T6616] RIP: 0033:0x7f3de1a3414a [ 122.075791][ T6616] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.095774][ T6616] RSP: 002b:00007f3ddfc8de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.104216][ T6616] RAX: ffffffffffffffda RBX: 00007f3ddfc8dee0 RCX: 00007f3de1a3414a [ 122.112309][ T6616] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007f3ddfc8dea0 [ 122.120512][ T6616] RBP: 0000200000000400 R08: 00007f3ddfc8dee0 R09: 0000000002a00041 [ 122.128689][ T6616] R10: 0000000002a00041 R11: 0000000000000246 R12: 0000200000000000 [ 122.136683][ T6616] R13: 00007f3ddfc8dea0 R14: 000000000001260d R15: 0000200000000440 [ 122.144686][ T6616] [ 122.147856][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.155232][ T6616] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 122.865857][ T6626] JBD2: Ignoring recovery information on journal [ 122.883360][ T6645] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.934133][ T6650] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.984070][ T6628] XFS (loop4): Mounting V5 Filesystem [ 123.037059][ T6626] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.078063][ T6628] XFS (loop4): Ending clean mount [ 123.272988][ T6626] (syz.3.778,6626,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 123.343357][ T6626] (syz.3.778,6626,1):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 123.343382][ T4188] XFS (loop4): Unmounting Filesystem [ 123.396120][ T6658] XFS (loop1): invalid logbufs value: 1 [not 2-8] [ 123.467776][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 123.713208][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 124.156511][ T6680] set_capacity_and_notify: 7 callbacks suppressed [ 124.156529][ T6680] loop3: detected capacity change from 0 to 4096 [ 124.235914][ T6680] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 124.303016][ T6692] loop5: detected capacity change from 0 to 512 [ 124.483963][ T6692] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000000000200,,errors=continue. Quota mode: writeback. [ 124.500562][ T6692] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.575477][ T6692] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 124.600619][ T6703] loop1: detected capacity change from 0 to 512 [ 124.637329][ T6695] syz.1.802 (6695) used greatest stack depth: 20792 bytes left [ 124.691392][ T6703] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.726524][ T6703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.758627][ T6692] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 124.764162][ T6703] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.805: corrupted xattr entries [ 124.786849][ T6703] EXT4-fs (loop1): 1 orphan inode deleted [ 124.796218][ T6703] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 124.817868][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.954342][ T6716] loop1: detected capacity change from 0 to 512 [ 125.059019][ T6716] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.810: inode #1: comm syz.1.810: iget: illegal inode # [ 125.228923][ T6716] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.810: error while reading EA inode 1 err=-117 [ 125.323167][ T6716] EXT4-fs (loop1): 1 orphan inode deleted [ 125.333207][ T6716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.421966][ T6688] loop0: detected capacity change from 0 to 40427 [ 125.496964][ T6688] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.516851][ T6688] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.606687][ T6688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.768196][ T6688] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.775466][ T6688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.177602][ T6759] loop1: detected capacity change from 0 to 2048 [ 126.313349][ T6759] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.318352][ T6729] loop5: detected capacity change from 0 to 32768 [ 126.385009][ T5154] udevd[5154]: incorrect nilfs2 checksum on /dev/loop1 [ 126.392856][ T6770] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.411300][ T6729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.426697][ T6729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.499671][ T6729] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 126.502933][ T26] audit: type=1800 audit(1770403362.827:83): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 126.550753][ T6773] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 126.576809][ T6773] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 126.605405][ T6777] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 126.633194][ T6773] Remounting filesystem read-only [ 126.645242][ T6773] NILFS (loop1): error -5 truncating bmap (ino=15) [ 126.685186][ T6759] syz.1.830 (6759) used greatest stack depth: 20112 bytes left [ 126.709998][ T6779] loop0: detected capacity change from 0 to 736 [ 126.716366][ T6729] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 126.754617][ T4183] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 127.361083][ T6801] netlink: 'syz.5.847': attribute type 16 has an invalid length. [ 127.463206][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.848'. [ 127.512215][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.848'. [ 127.607990][ T6784] loop3: detected capacity change from 0 to 32768 [ 127.622052][ T6786] loop1: detected capacity change from 0 to 32768 [ 127.773942][ T6786] XFS (loop1): Mounting V5 Filesystem [ 127.915903][ T6786] XFS (loop1): Ending clean mount [ 127.963853][ T6786] XFS (loop1): Quotacheck needed: Please wait. [ 128.026693][ T4531] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 128.122274][ T6786] XFS (loop1): Quotacheck: Done. [ 128.246797][ T4183] XFS (loop1): Unmounting Filesystem [ 128.401594][ T4531] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 128.417312][ T4531] usb 6-1: config 0 has no interface number 0 [ 128.446996][ T4531] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 128.493824][ T4531] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 128.645965][ T6840] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.860: invalid indirect mapped block 10 (level 1) [ 128.666123][ T4531] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 128.675664][ T4531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.684044][ T4531] usb 6-1: Product: syz [ 128.688360][ T4531] usb 6-1: Manufacturer: syz [ 128.692204][ T6840] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.860: invalid indirect mapped block 8 (level 1) [ 128.692960][ T4531] usb 6-1: SerialNumber: syz [ 128.719506][ T6840] EXT4-fs (loop4): 1 truncate cleaned up [ 128.721235][ T4531] usb 6-1: config 0 descriptor?? [ 128.727949][ T6840] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 128.788014][ T4531] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 128.929235][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 129.001763][ T4531] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 129.211564][ T6867] set_capacity_and_notify: 2 callbacks suppressed [ 129.211580][ T6867] loop0: detected capacity change from 0 to 128 [ 129.252687][ T4531] usb 6-1: USB disconnect, device number 3 [ 129.265025][ T4531] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 129.302450][ T4531] cypress_m8 6-1:0.35: device disconnected [ 129.753749][ T6893] loop0: detected capacity change from 0 to 4096 [ 129.805720][ T6893] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.841151][ T6893] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 129.871580][ T6893] System zones: 0-5 [ 129.879505][ T6893] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 129.917869][ T4515] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.047888][ T6909] loop4: detected capacity change from 0 to 16 [ 130.068835][ T6909] erofs: (device loop4): mounted with root inode @ nid 36. [ 130.090090][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.888'. [ 130.129693][ T6909] attempt to access beyond end of device [ 130.129693][ T6909] loop4: rw=524288, want=1342177304, limit=16 [ 130.133247][ T6893] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 130.142592][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.888'. [ 130.165990][ T6909] attempt to access beyond end of device [ 130.165990][ T6909] loop4: rw=0, want=1342177280, limit=16 [ 130.176864][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.888'. [ 130.181349][ T26] audit: type=1800 audit(1770403366.507:84): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.889" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 130.186151][ T4515] usb 2-1: Using ep0 maxpacket: 32 [ 130.338413][ T4515] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.366275][ T4515] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 130.382766][ T4515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.392401][ T6893] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 130.411822][ T4515] usb 2-1: config 0 descriptor?? [ 130.556527][ T6927] loop5: detected capacity change from 0 to 512 [ 130.606260][ T6927] EXT4-fs (loop5): Ignoring removed oldalloc option [ 130.686141][ T6927] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 130.718237][ T4234] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.767228][ T6927] fscrypt (loop5, inode 18): Mutually exclusive encryption flags (0x14) [ 130.919545][ T4515] logitech-djreceiver 0003:046D:C531.0008: item fetching failed at offset 0/1 [ 130.937190][ T4515] logitech-djreceiver 0003:046D:C531.0008: logi_dj_probe: parse failed [ 130.949885][ T4515] logitech-djreceiver: probe of 0003:046D:C531.0008 failed with error -22 [ 131.096930][ T4234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.107534][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.132224][ T4234] usb 5-1: config 0 descriptor?? [ 131.138421][ T4304] usb 2-1: USB disconnect, device number 5 [ 131.178715][ T4234] cp210x 5-1:0.0: cp210x converter detected [ 131.616874][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: 2 [ 131.816419][ T6955] loop1: detected capacity change from 0 to 32768 [ 131.836907][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 131.845711][ T4234] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 131.863890][ T4234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 131.875001][ T4234] usb 5-1: USB disconnect, device number 6 [ 131.914835][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 131.927451][ T4234] cp210x 5-1:0.0: device disconnected [ 131.989187][ T6955] XFS (loop1): Mounting V5 Filesystem [ 132.085788][ T6955] XFS (loop1): Ending clean mount [ 132.192438][ T4183] XFS (loop1): Unmounting Filesystem [ 132.622702][ T6977] loop5: detected capacity change from 0 to 32768 [ 132.648832][ T6988] loop1: detected capacity change from 0 to 47 [ 132.743077][ T6977] XFS (loop5): Mounting V5 Filesystem [ 132.799631][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806021][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.829745][ T6977] XFS (loop5): Ending clean mount [ 132.892312][ T5091] XFS (loop5): Unmounting Filesystem [ 133.328875][ T7012] loop5: detected capacity change from 0 to 4096 [ 133.550548][ T7026] input: syz0 as /devices/virtual/input/input11 [ 133.737629][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 133.742268][ T7034] loop3: detected capacity change from 0 to 1024 [ 133.825389][ T7034] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 133.849570][ T7042] loop5: detected capacity change from 0 to 16 [ 133.894854][ T7034] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 133.936826][ T7042] erofs: (device loop5): mounted with root inode @ nid 36. [ 133.944696][ T7034] netlink: 277 bytes leftover after parsing attributes in process `syz.3.928'. [ 133.987873][ T7042] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 134.042729][ T146] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 134.073741][ T7042] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 134.140688][ T26] audit: type=1800 audit(1770403370.467:85): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.932" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 134.381237][ T7066] loop4: detected capacity change from 0 to 256 [ 134.397843][ T7060] loop0: detected capacity change from 0 to 4096 [ 134.462162][ T7066] FAT-fs (loop4): Directory bread(block 64) failed [ 134.477092][ T7066] FAT-fs (loop4): Directory bread(block 65) failed [ 134.494243][ T7066] FAT-fs (loop4): Directory bread(block 66) failed [ 134.510779][ T7060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.512869][ T7066] FAT-fs (loop4): Directory bread(block 67) failed [ 134.529179][ T7066] FAT-fs (loop4): Directory bread(block 68) failed [ 134.535743][ T7069] loop1: detected capacity change from 0 to 1024 [ 134.535747][ T7066] FAT-fs (loop4): Directory bread(block 69) failed [ 134.535826][ T7066] FAT-fs (loop4): Directory bread(block 70) failed [ 134.556019][ T7066] FAT-fs (loop4): Directory bread(block 71) failed [ 134.562846][ T7066] FAT-fs (loop4): Directory bread(block 72) failed [ 134.572332][ T7066] FAT-fs (loop4): Directory bread(block 73) failed [ 134.596710][ T4753] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.651546][ T26] audit: type=1800 audit(1770403370.977:86): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.943" name="file1" dev="loop4" ino=1048647 res=0 errno=0 [ 134.698594][ T7066] attempt to access beyond end of device [ 134.698594][ T7066] loop4: rw=0, want=1196, limit=256 [ 134.743795][ T7069] attempt to access beyond end of device [ 134.743795][ T7069] loop1: rw=0, want=5780, limit=1024 [ 134.822281][ T7069] attempt to access beyond end of device [ 134.822281][ T7069] loop1: rw=0, want=5780, limit=1024 [ 134.850674][ T7060] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.939: corrupted inode contents [ 134.866813][ T4753] usb 4-1: Using ep0 maxpacket: 32 [ 134.889282][ T7069] attempt to access beyond end of device [ 134.889282][ T7069] loop1: rw=0, want=5780, limit=1024 [ 134.941276][ T7060] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #15: comm syz.0.939: mark_inode_dirty error [ 134.994504][ T7075] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 135.024855][ T7060] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.939: corrupted inode contents [ 135.047105][ T4753] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.111474][ T7060] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.939: mark_inode_dirty error [ 135.115115][ T4753] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.272314][ T7060] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.939: corrupted inode contents [ 135.328235][ T4753] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.353467][ T4753] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 135.384132][ T7085] loop4: detected capacity change from 0 to 512 [ 135.387241][ T4753] usb 4-1: Product: syz [ 135.408767][ T7060] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.939: mark_inode_dirty error [ 135.432861][ T4753] usb 4-1: Manufacturer: syz [ 135.465664][ T7085] EXT4-fs (loop4): Ignoring removed oldalloc option [ 135.483046][ T4753] hub 4-1:4.0: USB hub found [ 135.501033][ T7085] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 135.505896][ T7060] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.939: corrupted inode contents [ 135.578554][ T7085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.949'. [ 135.592124][ T7060] EXT4-fs error (device loop0): ext4_truncate:4279: inode #15: comm syz.0.939: mark_inode_dirty error [ 135.614423][ T7060] EXT4-fs error (device loop0) in ext4_setattr:5626: Corrupt filesystem [ 135.704195][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 135.797038][ T4753] hub 4-1:4.0: 5 ports detected [ 135.828861][ T4753] hub 4-1:4.0: insufficient power available to use all downstream ports [ 136.016908][ T4753] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 136.023948][ T4753] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 136.103299][ T7060] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.939: corrupted inode contents [ 136.103380][ T4753] usb 4-1: USB disconnect, device number 4 [ 136.174415][ T4193] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 136.336429][ T7103] loop0: detected capacity change from 0 to 16 [ 136.364023][ T7103] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.441332][ T7099] loop1: detected capacity change from 0 to 32768 [ 136.517358][ T7101] loop5: detected capacity change from 0 to 32768 [ 136.560479][ T7099] XFS (loop1): Mounting V5 Filesystem [ 136.723181][ T7099] XFS (loop1): Ending clean mount [ 136.778694][ T7099] XFS (loop1): Quotacheck needed: Please wait. [ 136.852304][ T7129] sch_tbf: burst 3 is lower than device bond0 mtu (1514) ! [ 136.877444][ T7131] loop3: detected capacity change from 0 to 128 [ 136.932173][ T7099] XFS (loop1): Quotacheck: Done. [ 136.937073][ T7131] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.962886][ T7131] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.060291][ T150] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.094191][ T4183] XFS (loop1): Unmounting Filesystem [ 137.281528][ T7148] bond0: ARP monitoring cannot be used with MII monitoring [ 137.292059][ T7134] loop5: detected capacity change from 0 to 8192 [ 137.425982][ T7151] loop4: detected capacity change from 0 to 256 [ 137.443664][ T7134] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 137.466111][ T7134] REISERFS (device loop5): using ordered data mode [ 137.476986][ T7134] reiserfs: using flush barriers [ 137.514364][ T7134] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.531588][ T7134] REISERFS (device loop5): checking transaction log (loop5) [ 137.545622][ T7134] REISERFS (device loop5): Using r5 hash to sort names [ 137.572482][ T7134] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 137.850077][ T7155] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 137.866863][ T7155] REISERFS (device loop3): using ordered data mode [ 137.887447][ T7155] reiserfs: using flush barriers [ 137.939886][ T7155] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.058290][ T7155] REISERFS (device loop3): checking transaction log (loop3) [ 138.381656][ T7155] REISERFS (device loop3): Using tea hash to sort names [ 138.407050][ T7155] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 138.606710][ T4752] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.906737][ T4752] usb 2-1: Using ep0 maxpacket: 8 [ 138.934542][ T7172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.988 (7172) [ 138.999482][ T7172] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 139.027452][ T7172] BTRFS info (device loop5): using free space tree [ 139.044659][ T7172] BTRFS info (device loop5): has skinny extents [ 139.062995][ T7195] overlayfs: conflicting lowerdir path [ 139.086955][ T4752] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.174420][ T7172] BTRFS info (device loop5): enabling ssd optimizations [ 139.202043][ T4752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 139.216807][ T4752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.227138][ T4752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 139.238670][ T4752] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 139.249049][ T4752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 139.259282][ T4752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 139.270848][ T4752] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 139.292442][ T7207] attempt to access beyond end of device [ 139.292442][ T7207] loop4: rw=0, want=268435470, limit=64 [ 139.351012][ T7207] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 139.364607][ T7207] attempt to access beyond end of device [ 139.364607][ T7207] loop4: rw=0, want=268435470, limit=64 [ 139.380923][ T7207] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 139.473843][ T4752] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 139.500834][ T4752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.524107][ T4752] usb 2-1: Product: syz [ 139.531869][ T7222] set_capacity_and_notify: 3 callbacks suppressed [ 139.531884][ T7222] loop4: detected capacity change from 0 to 1024 [ 139.550386][ T4752] usb 2-1: Manufacturer: syz [ 139.559320][ T4752] usb 2-1: SerialNumber: syz [ 139.570221][ T4752] usb 2-1: config 0 descriptor?? [ 139.598329][ T7176] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.611745][ T7176] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.765651][ T7222] attempt to access beyond end of device [ 139.765651][ T7222] loop4: rw=0, want=5780, limit=1024 [ 139.810116][ T7226] attempt to access beyond end of device [ 139.810116][ T7226] loop4: rw=0, want=5780, limit=1024 [ 139.827044][ T7226] attempt to access beyond end of device [ 139.827044][ T7226] loop4: rw=0, want=5780, limit=1024 [ 140.359532][ T7247] loop5: detected capacity change from 0 to 512 [ 140.384087][ T7247] EXT4-fs (loop5): Ignoring removed oldalloc option [ 140.434610][ T7250] loop3: detected capacity change from 0 to 128 [ 140.440659][ T7247] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 140.499214][ T4530] usb 2-1: USB disconnect, device number 6 [ 140.638938][ T7255] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1015'. [ 140.650517][ T7255] netlink: 'syz.3.1015': attribute type 2 has an invalid length. [ 140.667954][ T7247] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes [ 140.775809][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 141.078078][ T7276] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1024'. [ 141.106908][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1024'. [ 141.368337][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1031'. [ 141.388345][ T7292] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1031'. [ 141.521698][ T7304] xt_connbytes: Forcing CT accounting to be enabled [ 141.573087][ T7306] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 141.822130][ T4752] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.047545][ T7314] netlink: 'syz.4.1042': attribute type 2 has an invalid length. [ 142.085722][ T7298] loop0: detected capacity change from 0 to 32768 [ 142.154089][ T7298] [ 142.154089][ T7298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.154089][ T7298] [ 142.177227][ T7318] misc userio: Can't change port type on an already running userio instance [ 142.181109][ T7308] loop5: detected capacity change from 0 to 40427 [ 142.228012][ T4752] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 142.228194][ T7298] ERROR: (device loop0): diWrite: ixpxd invalid [ 142.228194][ T7298] [ 142.243451][ T4752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.257122][ T7298] ERROR: (device loop0): txCommit: [ 142.257122][ T7298] [ 142.272785][ T4752] usb 2-1: config 0 descriptor?? [ 142.285433][ T7308] F2FS-fs (loop5): invalid crc value [ 142.300615][ T7308] F2FS-fs (loop5): Found nat_bits in checkpoint [ 142.318810][ T4752] gspca_main: spca508-2.14.0 probing 8086:0110 [ 142.349597][ T7298] ERROR: (device loop0): dtReadFirst: btstack overrun [ 142.349597][ T7298] [ 142.369934][ T7308] F2FS-fs (loop5): Start checkpoint disabled! [ 142.390242][ T7298] btstack dump: [ 142.404304][ T7298] bn = 0, index = 0 [ 142.410541][ T7308] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 142.416741][ T7298] bn = 0, index = 0 [ 142.421981][ T7298] bn = 0, index = 0 [ 142.425810][ T7298] bn = 0, index = 0 [ 142.439509][ T7298] bn = 0, index = 0 [ 142.446955][ T7298] bn = 0, index = 0 [ 142.456439][ T7298] bn = 0, index = 0 [ 142.460364][ T7298] bn = 0, index = 0 [ 142.534380][ T5082] ERROR: (device loop0): diWrite: ixpxd invalid [ 142.534380][ T5082] [ 142.536828][ T4752] gspca_spca508: reg_read err -32 [ 142.559173][ T5082] ERROR: (device loop0): txCommit: [ 142.559173][ T5082] [ 142.580507][ T5082] jfs_write_inode: jfs_commit_inode failed! [ 142.599815][ T4193] [ 142.599815][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.599815][ T4193] [ 142.650886][ T1281] attempt to access beyond end of device [ 142.650886][ T1281] loop5: rw=2049, want=40984, limit=40427 [ 142.671186][ T4193] [ 142.671186][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.671186][ T4193] [ 142.837152][ T4752] gspca_spca508: reg_read err -71 [ 142.866765][ T4752] gspca_spca508: reg_read err -71 [ 142.887062][ T4752] gspca_spca508: reg_read err -71 [ 142.916854][ T4752] gspca_spca508: reg write: error -71 [ 142.937278][ T4752] spca508: probe of 2-1:0.0 failed with error -71 [ 142.974939][ T4752] usb 2-1: USB disconnect, device number 7 [ 143.047142][ T7332] netem: incorrect ge model size [ 143.063333][ T7332] netem: change failed [ 143.290575][ T7342] tap0: tun_chr_ioctl cmd 1074025675 [ 143.296078][ T7342] tap0: persist disabled [ 143.399071][ T7346] loop1: detected capacity change from 0 to 512 [ 143.451257][ T7346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.484001][ T7346] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1055: bad orphan inode 131083 [ 143.500523][ T7346] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 143.673042][ T7346] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.1055: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 143.770752][ T7363] __sock_release: fasync list not empty! [ 143.832152][ T4183] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.974941][ T7372] loop4: detected capacity change from 0 to 128 [ 144.029440][ T7357] loop5: detected capacity change from 0 to 32768 [ 144.131229][ T7357] JBD2: Ignoring recovery information on journal [ 144.191445][ T7357] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 144.386897][ T7387] loop4: detected capacity change from 0 to 2048 [ 144.429285][ T5091] ocfs2: Unmounting device (7,5) on (node local) [ 144.514139][ T1281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.520087][ T7387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.661692][ T1281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.812286][ T7398] loop0: detected capacity change from 0 to 512 [ 144.818434][ T1281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.868639][ T7406] loop3: detected capacity change from 0 to 128 [ 144.939672][ T7398] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.019196][ T7398] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.032207][ T7406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c118, mo2=0102] [ 145.064646][ T7412] loop5: detected capacity change from 0 to 512 [ 145.073465][ T1281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.076961][ T7406] System zones: 1-3, 19-19, 35-36 [ 145.103282][ T7406] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,abort,debug,noinit_itable,usrjquota=,,errors=continue. Quota mode: none. [ 145.119196][ T7406] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.266307][ T7412] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1083: iget: bad i_size value: 38620345925642 [ 145.380994][ T7412] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1083: couldn't read orphan inode 15 (err -117) [ 145.482783][ T7412] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.553753][ T7421] loop3: detected capacity change from 0 to 2048 [ 145.664657][ T7412] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1083: bg 0: block 5: invalid block bitmap [ 145.719856][ T7421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.886568][ T7431] loop0: detected capacity change from 0 to 512 [ 145.890852][ T7407] loop4: detected capacity change from 0 to 32768 [ 145.954923][ T7431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.049416][ T7431] EXT4-fs (loop0): 1 truncate cleaned up [ 146.077001][ T7431] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.137159][ T7437] loop5: detected capacity change from 0 to 128 [ 146.160537][ T7437] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 146.233414][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 146.287556][ T7437] FAT-fs (loop5): Filesystem has been set read-only [ 146.296259][ T7431] fscrypt (loop0, inode 18): Reserved bits set in encryption policy [ 146.612160][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.633334][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.668975][ T7418] device bridge_slave_0 entered promiscuous mode [ 146.715899][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.784614][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.821178][ T7418] device bridge_slave_1 entered promiscuous mode [ 146.838285][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 146.920202][ T7481] loop0: detected capacity change from 0 to 1024 [ 146.933719][ T7481] EXT4-fs (loop0): Ignoring removed orlov option [ 146.954764][ T4530] kernel read not supported for file /rfkill (pid: 4530 comm: kworker/0:16) [ 147.029036][ T7481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 147.056936][ T7481] System zones: 0-1, 3-12 [ 147.091873][ T7481] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 147.120051][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.135805][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.254032][ T7418] team0: Port device team_slave_0 added [ 147.308831][ T7418] team0: Port device team_slave_1 added [ 147.366200][ T7487] xt_connbytes: Forcing CT accounting to be enabled [ 147.419469][ T7491] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.425208][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.434494][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.460595][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.575820][ T7489] loop0: detected capacity change from 0 to 8192 [ 147.604740][ T4753] Bluetooth: hci0: command 0x0409 tx timeout [ 147.611008][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.642122][ T7489] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 147.731914][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.774877][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.797229][ T7489] REISERFS (device loop0): using ordered data mode [ 147.821679][ T7489] reiserfs: using flush barriers [ 147.827670][ T7493] loop4: detected capacity change from 0 to 8192 [ 147.834212][ T7489] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.854557][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.894909][ T1281] IPVS: stopping backup sync thread 4957 ... [ 147.902636][ T7489] REISERFS (device loop0): checking transaction log (loop0) [ 147.946566][ T7489] REISERFS (device loop0): Using r5 hash to sort names [ 147.947101][ T7493] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 147.963820][ T7489] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 148.026857][ T7489] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 148.036293][ T7493] REISERFS (device loop4): using ordered data mode [ 148.076312][ T7493] reiserfs: using flush barriers [ 148.120090][ T7418] device hsr_slave_0 entered promiscuous mode [ 148.127709][ T7493] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.164055][ T7418] device hsr_slave_1 entered promiscuous mode [ 148.188280][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.195915][ T7418] Cannot create hsr debugfs directory [ 148.212823][ T7493] REISERFS (device loop4): checking transaction log (loop4) [ 148.268243][ T7493] REISERFS (device loop4): Using r5 hash to sort names [ 148.342200][ T7493] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 148.510732][ T26] audit: type=1800 audit(1770403384.837:87): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1104" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 148.579742][ T1281] device hsr_slave_0 left promiscuous mode [ 148.616876][ T1281] device hsr_slave_1 left promiscuous mode [ 148.639670][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.647609][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.674981][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.696562][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.743540][ T1281] device bridge_slave_1 left promiscuous mode [ 148.775299][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.803789][ T1281] device bridge_slave_0 left promiscuous mode [ 148.810962][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.832554][ T1281] device veth1_macvtap left promiscuous mode [ 148.838848][ T1281] device veth0_macvtap left promiscuous mode [ 148.845131][ T1281] device veth1_vlan left promiscuous mode [ 149.133123][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 149.153152][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 149.165374][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.181954][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.256546][ T1281] bond0 (unregistering): Released all slaves [ 149.486731][ T7532] tap0: tun_chr_ioctl cmd 1074025677 [ 149.492251][ T7532] tap0: linktype set to 778 [ 149.506993][ T7537] bridge0: port 3(syz_tun) entered blocking state [ 149.516810][ T7537] bridge0: port 3(syz_tun) entered disabled state [ 149.570968][ T7537] device syz_tun entered promiscuous mode [ 149.586251][ T7537] bridge0: port 3(syz_tun) entered blocking state [ 149.593738][ T7537] bridge0: port 3(syz_tun) entered forwarding state [ 149.678315][ T4753] Bluetooth: hci0: command 0x041b tx timeout [ 149.801651][ T7552] capability: warning: `syz.0.1120' uses 32-bit capabilities (legacy support in use) [ 149.821804][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 149.844774][ T7418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.883040][ T7552] program syz.0.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.895166][ T7418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.934979][ T7418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.970236][ T7418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.001745][ T7559] loop5: detected capacity change from 0 to 8 [ 150.139074][ T7573] input: syz1 as /devices/virtual/input/input14 [ 150.252488][ T7576] loop4: detected capacity change from 0 to 512 [ 150.371783][ T7576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.413536][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.451540][ T7576] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1125: bad orphan inode 131083 [ 150.490397][ T7576] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 150.521511][ T7589] loop5: detected capacity change from 0 to 1024 [ 150.553337][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.607221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.615421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.634031][ T7576] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.1125: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 150.671304][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.687984][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.721195][ T7589] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 150.749772][ T4188] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 150.759500][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.777258][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.817668][ T7597] loop3: detected capacity change from 0 to 4096 [ 150.875860][ T7589] EXT4-fs warning (device loop5): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 150.887254][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.911171][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.923494][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.947170][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.954299][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.030144][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.169098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.188149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.233241][ T7597] ntfs3: loop3: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" fiemap is not supported for compressed file (cp -r) [ 151.264680][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.298507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.350378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.404876][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.421347][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.525569][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 151.542785][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.563899][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.603898][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.652885][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.698290][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.739037][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.770916][ T4750] Bluetooth: hci0: command 0x040f tx timeout [ 152.030501][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 152.108551][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 152.234299][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.277402][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.321347][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.513416][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.570811][ T7665] ipt_CLUSTERIP: Please specify destination IP [ 152.776777][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 152.928541][ T23] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 152.937607][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.946150][ T23] usb 6-1: config 0 has no interface number 0 [ 152.953735][ T23] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 152.974727][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.005221][ T7653] chnl_net:caif_netlink_parms(): no params data found [ 153.132143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.147106][ T23] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 153.167469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.175862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.183824][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.203085][ T23] usb 6-1: Product: syz [ 153.222037][ T23] usb 6-1: Manufacturer: syz [ 153.234791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.252281][ T23] usb 6-1: SerialNumber: syz [ 153.274360][ T7418] device veth0_vlan entered promiscuous mode [ 153.313943][ T23] usb 6-1: config 0 descriptor?? [ 153.384721][ T7418] device veth1_vlan entered promiscuous mode [ 153.424740][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.436378][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.453208][ T7653] device bridge_slave_0 entered promiscuous mode [ 153.489011][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.515097][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.535947][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.564502][ T7653] device bridge_slave_1 entered promiscuous mode [ 153.663217][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.690900][ T7683] loop3: detected capacity change from 0 to 32768 [ 153.701460][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.778213][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.833410][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.845255][ T7683] UFO tlock:0xffffc900028c21b0 [ 153.850489][ T4750] Bluetooth: hci0: command 0x0419 tx timeout [ 153.871546][ T7653] team0: Port device team_slave_0 added [ 153.894422][ T7418] device veth0_macvtap entered promiscuous mode [ 153.925359][ T7418] device veth1_macvtap entered promiscuous mode [ 153.970035][ T7653] team0: Port device team_slave_1 added [ 154.023237][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.048586][ T23] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input15 [ 154.091745][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.126897][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.147780][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.168999][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.189535][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.199850][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.216955][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.262991][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.289801][ T4752] usb 6-1: USB disconnect, device number 4 [ 154.365131][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.381427][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.410728][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.436373][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.460604][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.474239][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.482836][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 154.500436][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.524779][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.542664][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.561989][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.573891][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.584332][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.595518][ T7709] loop0: detected capacity change from 0 to 2048 [ 154.595529][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.595557][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.632059][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.645871][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.654572][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.670064][ T7709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.679671][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.711155][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.762014][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.781149][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.800438][ T7418] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.810947][ T7418] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.820483][ T7418] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.829550][ T7418] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.995761][ T7653] device hsr_slave_0 entered promiscuous mode [ 155.027469][ T7653] device hsr_slave_1 entered promiscuous mode [ 155.057024][ T7653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.086544][ T7653] Cannot create hsr debugfs directory [ 155.222962][ T7725] Can't find ip_set type [ 155.234160][ T5091] bridge0: port 3(syz_tun) entered disabled state [ 155.267673][ T5091] device syz_tun left promiscuous mode [ 155.275373][ T5091] bridge0: port 3(syz_tun) entered disabled state [ 155.336442][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 155.390230][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.406854][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.424039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.523766][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.541720][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.598043][ T1281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.619266][ T7743] netlink: 'syz.3.1173': attribute type 25 has an invalid length. [ 155.642297][ T7743] netlink: 'syz.3.1173': attribute type 7 has an invalid length. SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 155.683863][ T7743] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 155.694205][ T7743] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1173'. [ 155.710538][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.720260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.849263][ T1281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.111262][ T1281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.255456][ T1281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.145005][ T1281] device hsr_slave_0 left promiscuous mode [ 157.151278][ T1281] device hsr_slave_1 left promiscuous mode [ 157.157759][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.167155][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.176272][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.183884][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.192888][ T1281] device bridge_slave_1 left promiscuous mode [ 157.200466][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.208988][ T1281] device bridge_slave_0 left promiscuous mode [ 157.215129][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.225991][ T1281] device veth1_macvtap left promiscuous mode [ 157.233186][ T1281] device veth0_macvtap left promiscuous mode [ 157.241037][ T1281] device veth1_vlan left promiscuous mode [ 157.247069][ T1281] device veth0_vlan left promiscuous mode [ 157.403150][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 157.424632][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 157.444996][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.461512][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.536651][ T1281] bond0 (unregistering): Released all slaves [ 158.647790][ T1281] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.702478][ T1281] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.744124][ T1281] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.793410][ T1281] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.895843][ T1281] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.970729][ T1281] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.031703][ T1281] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.104842][ T1281] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.223797][ T1281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.263343][ T1281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.313064][ T1281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.363831][ T1281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.482054][ T1281] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.514006][ T1281] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.572800][ T1281] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.622979][ T1281] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.308662][ T1281] device hsr_slave_0 left promiscuous mode [ 161.318221][ T1281] device hsr_slave_1 left promiscuous mode [ 161.331476][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.339217][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.351083][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.361025][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.371007][ T1281] device bridge_slave_1 left promiscuous mode [ 161.381783][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.400103][ T1281] device bridge_slave_0 left promiscuous mode [ 161.406352][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.420547][ T1281] device hsr_slave_0 left promiscuous mode [ 161.427215][ T1281] device hsr_slave_1 left promiscuous mode [ 161.433653][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.441870][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.450072][ T1281] device bridge_slave_1 left promiscuous mode [ 161.456873][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.465436][ T1281] device bridge_slave_0 left promiscuous mode [ 161.473826][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.486842][ T1281] device hsr_slave_0 left promiscuous mode [ 161.493462][ T1281] device hsr_slave_1 left promiscuous mode [ 161.502326][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.510411][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.518785][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.526504][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.542803][ T1281] device bridge_slave_1 left promiscuous mode [ 161.549141][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.559825][ T1281] device bridge_slave_0 left promiscuous mode [ 161.566003][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.578721][ T1281] device hsr_slave_0 left promiscuous mode [ 161.587424][ T1281] device hsr_slave_1 left promiscuous mode [ 161.594229][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.602201][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.613795][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.621873][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.630968][ T1281] device bridge_slave_1 left promiscuous mode [ 161.637617][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.646078][ T1281] device bridge_slave_0 left promiscuous mode [ 161.652915][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.664879][ T1281] device hsr_slave_0 left promiscuous mode [ 161.671250][ T1281] device hsr_slave_1 left promiscuous mode [ 161.678128][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.685559][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.697012][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.704700][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.712759][ T1281] device bridge_slave_1 left promiscuous mode [ 161.719542][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.728543][ T1281] device bridge_slave_0 left promiscuous mode [ 161.734937][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.752685][ T1281] device veth1_macvtap left promiscuous mode [ 161.758853][ T1281] device veth0_macvtap left promiscuous mode [ 161.764927][ T1281] device veth1_vlan left promiscuous mode [ 161.771877][ T1281] device veth0_vlan left promiscuous mode [ 161.785577][ T1281] device veth1_macvtap left promiscuous mode [ 161.792830][ T1281] device veth0_macvtap left promiscuous mode [ 161.801199][ T1281] device veth1_vlan left promiscuous mode [ 161.807716][ T1281] device veth0_vlan left promiscuous mode [ 161.827817][ T1281] device veth1_macvtap left promiscuous mode [ 161.833889][ T1281] device veth0_macvtap left promiscuous mode [ 161.840523][ T1281] device veth1_vlan left promiscuous mode [ 161.846397][ T1281] device veth0_vlan left promiscuous mode [ 161.859057][ T1281] device veth1_macvtap left promiscuous mode [ 161.865104][ T1281] device veth0_macvtap left promiscuous mode [ 161.872337][ T1281] device veth1_vlan left promiscuous mode [ 161.878675][ T1281] device veth0_vlan left promiscuous mode [ 162.289589][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 162.311941][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 162.327144][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.352567][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.430316][ T1281] bond0 (unregistering): Released all slaves [ 162.568915][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 162.583385][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 162.595472][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.612206][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.681886][ T1281] bond0 (unregistering): Released all slaves [ 162.801902][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 162.816048][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 162.828054][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.841096][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.901138][ T1281] bond0 (unregistering): Released all slaves [ 163.040162][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 163.052595][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 163.066253][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.083114][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.144458][ T1281] bond0 (unregistering): Released all slaves [ 163.256101][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 163.278703][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 163.294267][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.308587][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.374756][ T1281] bond0 (unregistering): Released all slaves