last executing test programs: 33.97038625s ago: executing program 0 (id=734): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x0}, 0x20) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000380)=""/149) 33.820139839s ago: executing program 0 (id=737): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 33.225975094s ago: executing program 0 (id=746): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 33.069522713s ago: executing program 0 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x200040, &(0x7f0000000880)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff653f3440fb21c877da1d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09b4a7e7dac3c3000"/252, @ANYRES64=0x0], 0x3, 0x263, &(0x7f0000000600)="$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") mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 32.793185879s ago: executing program 0 (id=754): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 31.746180231s ago: executing program 0 (id=764): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r1, r0, 0x0, 0xfffffffc) 31.377668512s ago: executing program 32 (id=764): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r1, r0, 0x0, 0xfffffffc) 5.499046718s ago: executing program 3 (id=1066): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20329b0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.215237963s ago: executing program 1 (id=1081): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.079253001s ago: executing program 1 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.878599603s ago: executing program 5 (id=1086): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xffffffff, @loopback, 0x8}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000400)) 3.574335611s ago: executing program 5 (id=1089): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 3.311976086s ago: executing program 1 (id=1091): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="10797fcd898a0c2446900f4f21072e39c6d0c26cd957d2b903c6bf46b4abf3629f", 0x21) 3.238141871s ago: executing program 3 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000400000000000090000002c0004"], 0xac}}, 0x0) 2.982711085s ago: executing program 3 (id=1093): r0 = syz_io_uring_setup(0x2780, &(0x7f0000000340)={0x0, 0x6d89, 0x1, 0x1, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2.819253965s ago: executing program 3 (id=1095): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {}, 0x42, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x6, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080018000000030006000600800a0000080002"], 0x1034}}, 0x0) 2.615077837s ago: executing program 5 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 2.492795204s ago: executing program 3 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r1, 0x1, 0x5, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x50}}, 0x0) 2.39499694s ago: executing program 1 (id=1100): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x2, 0x1}, {0x45, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x6, 0x20d}, {0x0, 0xa0, 0x3, 0x5, 0x800, 0xff01}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2.285273776s ago: executing program 3 (id=1101): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@grpquota}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x4040c405}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2.21763611s ago: executing program 1 (id=1103): syz_mount_image$exfat(&(0x7f0000003100), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001980)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp775,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESOCT, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303000303030303030302c001a4af40afdf2008daebfe0008a71d27a1fbdb03ca45609020000000000003541b21712409b2be51dbf8ac71f8bed396828b513284df710f07abeaa71ffc9874e1e247e98de84b6a448f1bb2a8a25c4b9e37c374b45edd5270a8e38fb93f07b922d"], 0x1, 0x152a, &(0x7f0000000340)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 2.159236984s ago: executing program 5 (id=1105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.825156833s ago: executing program 1 (id=1108): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.71708413s ago: executing program 2 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.598520376s ago: executing program 5 (id=1111): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000001180)='./file0\x00', 0x804401, &(0x7f0000001e40)=ANY=[], 0xff, 0x5efd, &(0x7f00000013c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x4000}) 1.560418909s ago: executing program 2 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) 1.418099747s ago: executing program 2 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000001000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)="7a8aaa3d", &(0x7f0000002500), 0xc, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 1.281779965s ago: executing program 4 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.246932827s ago: executing program 2 (id=1117): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) fcntl$setpipe(r0, 0x407, 0x20000000) 1.138573303s ago: executing program 4 (id=1118): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000800)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x28d, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 994.664642ms ago: executing program 2 (id=1119): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20085}, 0x2) 930.648786ms ago: executing program 4 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 859.69848ms ago: executing program 2 (id=1121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed2) 582.671676ms ago: executing program 4 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x208000, &(0x7f0000000180), 0x11, 0x547, &(0x7f00000011c0)="$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") 226.550967ms ago: executing program 4 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000400f"], 0x1200) 45.665767ms ago: executing program 5 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 0s ago: executing program 4 (id=1125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x2c, r1, 0x4a3, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): ended [ 69.948683][ T4575] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.014379][ T4575] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 70.103659][ T4575] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.470532][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.114'. [ 70.536428][ T4609] loop0: detected capacity change from 0 to 1024 [ 70.612466][ T4570] loop3: detected capacity change from 0 to 65536 [ 70.709116][ T3086] hfsplus: b-tree write err: -5, ino 4 [ 70.779057][ T4570] XFS (loop3): Mounting V5 Filesystem [ 70.794598][ T4617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.118'. [ 70.908806][ T4570] XFS (loop3): Ending clean mount [ 71.127528][ T4195] XFS (loop3): Unmounting Filesystem [ 71.383848][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.391076][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398269][ T4599] loop2: detected capacity change from 0 to 40427 [ 71.580361][ T4599] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 71.617371][ T4599] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.686185][ T4599] F2FS-fs (loop2): invalid crc value [ 71.746880][ T4599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.763862][ T4649] loop0: detected capacity change from 0 to 32768 [ 71.817897][ T4649] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.826720][ T4649] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 71.842827][ T4649] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 71.842827][ T4649] bh = 2073 (magic number) [ 71.842827][ T4649] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 71.863133][ T4649] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 71.870610][ T4649] gfs2: fsid=syz:syz.s: File system withdrawn [ 71.876701][ T4649] CPU: 0 PID: 4649 Comm: syz.0.131 Not tainted syzkaller #0 [ 71.884035][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.894216][ T4649] Call Trace: [ 71.897623][ T4649] [ 71.900759][ T4649] dump_stack_lvl+0x188/0x250 [ 71.905570][ T4649] ? kobject_uevent_env+0x371/0x890 [ 71.910910][ T4649] ? show_regs_print_info+0x20/0x20 [ 71.916152][ T4649] ? load_image+0x400/0x400 [ 71.920694][ T4649] ? kobject_uevent_env+0x371/0x890 [ 71.925924][ T4649] ? load_image+0x400/0x400 [ 71.930480][ T4649] gfs2_withdraw+0x1149/0x1490 [ 71.935292][ T4649] ? gfs2_lm+0x240/0x240 [ 71.939569][ T4649] ? gfs2_meta_read+0x8a9/0xa60 [ 71.944465][ T4649] ? gfs2_meta_new+0x160/0x160 [ 71.949358][ T4649] gfs2_meta_check_ii+0x6e/0x80 [ 71.954428][ T4649] gfs2_meta_buffer+0x232/0x310 [ 71.959326][ T4649] gfs2_inode_refresh+0xbb/0xff0 [ 71.964303][ T4649] ? do_promote+0x71a/0xab0 [ 71.968923][ T4649] ? gfs2_inode_metasync+0xf0/0xf0 [ 71.974218][ T4649] ? __lock_acquire+0x7d10/0x7d10 [ 71.979375][ T4649] inode_go_lock+0x127/0x470 [ 71.984154][ T4649] do_promote+0x741/0xab0 [ 71.988619][ T4649] finish_xmote+0x4df/0xb00 [ 71.993437][ T4649] do_xmote+0x7b6/0x1120 [ 71.997734][ T4649] gfs2_glock_nq+0xc7a/0x1550 [ 72.002555][ T4649] gfs2_lookupi+0x416/0x600 [ 72.007411][ T4649] ? verify_lock_unused+0x140/0x140 [ 72.012935][ T4649] ? gfs2_lookup_simple+0x100/0x100 [ 72.018466][ T4649] ? gfs2_lookupi+0x40e/0x600 [ 72.023281][ T4649] ? crc32_le_base+0x755/0xcf0 [ 72.028095][ T4649] gfs2_lookup_simple+0xab/0x100 [ 72.033078][ T4649] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 72.038408][ T4649] ? lockref_put_or_lock+0x6e/0xb0 [ 72.043731][ T4649] init_journal+0x1c3/0x22f0 [ 72.048440][ T4649] ? __rwlock_init+0x140/0x140 [ 72.053522][ T4649] ? format_decode+0x19d/0x1300 [ 72.058489][ T4649] ? vsnprintf+0x14e/0x1c20 [ 72.063039][ T4649] ? end_bio_io_page+0x100/0x100 [ 72.068067][ T4649] ? vsnprintf+0x1b21/0x1c20 [ 72.072802][ T4649] ? snprintf+0xe5/0x140 [ 72.077200][ T4649] ? vscnprintf+0x80/0x80 [ 72.081664][ T4649] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 72.086905][ T4649] init_inodes+0xdb/0x320 [ 72.091467][ T4649] gfs2_fill_super+0x16b2/0x1f00 [ 72.096663][ T4649] ? gfs2_reconfigure+0xd30/0xd30 [ 72.101723][ T4649] ? gfs2_glock_nq_num+0x82/0x1b0 [ 72.106794][ T4649] ? sb_set_blocksize+0xa5/0xe0 [ 72.106971][ T4599] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.111766][ T4649] get_tree_bdev+0x3f1/0x610 [ 72.111816][ T4649] ? gfs2_reconfigure+0xd30/0xd30 [ 72.111842][ T4649] gfs2_get_tree+0x4d/0x1e0 [ 72.133507][ T4649] vfs_get_tree+0x88/0x270 [ 72.138187][ T4649] do_new_mount+0x24a/0xa40 [ 72.142912][ T4649] __se_sys_mount+0x2e3/0x3d0 [ 72.147719][ T4649] ? __x64_sys_mount+0xc0/0xc0 [ 72.152626][ T4649] ? lockdep_hardirqs_on+0x94/0x140 [ 72.158025][ T4649] ? __x64_sys_mount+0x1c/0xc0 [ 72.163004][ T4649] do_syscall_64+0x4c/0xa0 [ 72.167454][ T4649] ? clear_bhb_loop+0x30/0x80 [ 72.172250][ T4649] ? clear_bhb_loop+0x30/0x80 [ 72.177046][ T4649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.182974][ T4649] RIP: 0033:0x7fd28aa5614a [ 72.185105][ T4599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.187497][ T4649] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.187516][ T4649] RSP: 002b:00007fd288cafe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.223427][ T4649] RAX: ffffffffffffffda RBX: 00007fd288cafee0 RCX: 00007fd28aa5614a [ 72.231659][ T4649] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007fd288cafea0 [ 72.239682][ T4649] RBP: 0000200000000400 R08: 00007fd288cafee0 R09: 0000000000200001 [ 72.248206][ T4649] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000000000 [ 72.256418][ T4649] R13: 00007fd288cafea0 R14: 00000000000125d5 R15: 0000200000000040 [ 72.258137][ T4664] loop4: detected capacity change from 0 to 2048 [ 72.264521][ T4649] [ 72.266776][ T4649] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 72.548177][ T4664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.697932][ T4673] loop1: detected capacity change from 0 to 1024 [ 72.729540][ T4675] netlink: 'syz.0.142': attribute type 10 has an invalid length. [ 72.774692][ T4675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'. [ 72.776611][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 72.802774][ T4675] batman_adv: batadv0: Adding interface: vlan1 [ 72.816095][ T4675] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.026876][ T4675] batman_adv: batadv0: Interface activated: vlan1 [ 73.294978][ T4691] overlayfs: conflicting options: nfs_export=on,index=off [ 73.945672][ T4719] netlink: 'syz.0.161': attribute type 29 has an invalid length. [ 73.984667][ T4679] loop4: detected capacity change from 0 to 32768 [ 74.007870][ T4719] netlink: 'syz.0.161': attribute type 29 has an invalid length. [ 74.050558][ T4724] netlink: 'syz.0.161': attribute type 29 has an invalid length. [ 74.162753][ T4728] loop1: detected capacity change from 0 to 256 [ 74.220121][ T4728] exfat: Deprecated parameter 'namecase' [ 74.293711][ T4728] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 74.613832][ T4742] loop1: detected capacity change from 0 to 256 [ 74.693137][ T4705] loop2: detected capacity change from 0 to 32768 [ 74.837636][ T4705] XFS (loop2): Mounting V5 Filesystem [ 75.053900][ T4763] loop3: detected capacity change from 0 to 256 [ 75.069838][ T4705] XFS (loop2): Ending clean mount [ 75.181470][ T4762] erofs: (device loop1): mounted with root inode @ nid 36. [ 75.237973][ T4769] mmap: syz.0.181 (4769) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.280498][ T26] audit: type=1800 audit(1770113769.039:3): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 75.338569][ T4188] XFS (loop2): Unmounting Filesystem [ 75.757900][ T4787] set_capacity_and_notify: 1 callbacks suppressed [ 75.757916][ T4787] loop1: detected capacity change from 0 to 512 [ 75.833965][ T4789] loop0: detected capacity change from 0 to 512 [ 75.918034][ T4792] loop2: detected capacity change from 0 to 512 [ 75.947546][ T4789] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.190: inode has both inline data and extents flags [ 75.982393][ T4787] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 76.012989][ T4789] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.190: couldn't read orphan inode 15 (err -117) [ 76.019297][ T4787] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.030753][ T4792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.051203][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 76.141735][ T4792] EXT4-fs (loop2): 1 orphan inode deleted [ 76.156701][ T4792] EXT4-fs (loop2): 1 truncate cleaned up [ 76.171185][ T4792] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 76.221612][ T4775] loop4: detected capacity change from 0 to 40427 [ 76.241934][ T4792] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.182: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 76.272730][ T4775] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 76.281001][ T4775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.298930][ T4775] F2FS-fs (loop4): build fault injection attr: rate: 2, type: 0x1ffff [ 76.300293][ T4792] EXT4-fs (loop2): Remounting filesystem read-only [ 76.307630][ T4775] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 76.344596][ T4798] loop0: detected capacity change from 0 to 16 [ 76.429841][ T4798] erofs: (device loop0): mounted with root inode @ nid 36. [ 76.444261][ T4800] loop1: detected capacity change from 0 to 512 [ 76.487777][ T4798] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.506711][ T4775] F2FS-fs (loop4): invalid crc value [ 76.552373][ T4798] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 76.607263][ T4775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.768346][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=never,bsddf,,errors=continue. Quota mode: writeback. [ 76.790666][ T4775] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.798189][ T4775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.878036][ T4800] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.026655][ T4800] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.192: invalid size [ 77.047796][ T4775] F2FS-fs (loop4) : inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x19e/0x300 [ 77.178802][ T4333] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 77.237459][ T4827] loop2: detected capacity change from 0 to 736 [ 77.339685][ T4833] loop1: detected capacity change from 0 to 256 [ 77.390054][ T4833] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.404410][ T4835] loop3: detected capacity change from 0 to 128 [ 77.455944][ T4827] rock: directory entry would overflow storage [ 77.482004][ T4833] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.493049][ T4827] rock: sig=0x3b10, size=4, remaining=3 [ 77.542822][ T4835] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.584336][ T4835] hpfs: filesystem error: improperly stopped [ 77.593320][ T4835] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.609798][ T4333] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 77.618216][ T4333] usb 1-1: config 0 has no interface number 0 [ 77.647284][ T4835] hpfs: You really don't want any checks? You are crazy... [ 77.668980][ T4333] usb 1-1: config 0 interface 84 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 77.711846][ T4835] hpfs: hpfs_map_sector(): read error [ 77.717638][ T4835] hpfs: code page support is disabled [ 77.729366][ T4333] usb 1-1: config 0 interface 84 has no altsetting 0 [ 77.736211][ T4333] usb 1-1: New USB device found, idVendor=0eef, idProduct=0002, bcdDevice=50.d6 [ 77.768539][ T4835] hpfs: hpfs_map_4sectors(): unaligned read [ 77.774719][ T4835] hpfs: hpfs_map_4sectors(): unaligned read [ 77.804373][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.813541][ T4835] hpfs: filesystem error: unable to find root dir [ 77.878141][ T4333] usb 1-1: config 0 descriptor?? [ 78.082167][ T4847] loop4: detected capacity change from 0 to 128 [ 78.198690][ T4333] usb 1-1: string descriptor 0 read error: -71 [ 78.228897][ T4333] usbtouchscreen: probe of 1-1:0.84 failed with error -71 [ 78.256152][ T4333] usb 1-1: USB disconnect, device number 3 [ 78.286790][ T4859] syz.2.218 (4859): /proc/4858/oom_adj is deprecated, please use /proc/4858/oom_score_adj instead. [ 78.299489][ T4855] EXT4-fs (loop3): Ignoring removed oldalloc option [ 78.378310][ T4855] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e018, mo2=0002] [ 78.401031][ T4855] System zones: 0-7 [ 78.409713][ T4855] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nouid32,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,block_validity,,errors=continue. Quota mode: none. [ 78.484093][ T4855] EXT4-fs error (device loop3): ext4_ext_precache:608: inode #2: comm syz.3.216: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 78.527363][ T4879] device team_slave_0 entered promiscuous mode [ 78.534122][ T4879] device team_slave_1 entered promiscuous mode [ 78.549457][ T4879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.680921][ T4884] loop4: p1 p3 p4 [ 78.711063][ T4884] loop4: p4 size 589824 extends beyond EOD, truncated [ 78.872253][ T3561] loop4: p1 p3 p4 [ 78.884812][ T3561] loop4: p4 size 589824 extends beyond EOD, truncated [ 79.120322][ T4573] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.160378][ T4577] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.201995][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.202036][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.215737][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.244275][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.248696][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.260847][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.316921][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.317029][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.350805][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.388676][ T4573] usb 2-1: Using ep0 maxpacket: 32 [ 79.519117][ T4573] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.536251][ T4573] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.546736][ T4577] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 79.558787][ T4577] usb 4-1: config 0 has no interface number 0 [ 79.568756][ T4577] usb 4-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 79.578154][ T4577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.592326][ T4573] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.607476][ T4914] isofs: isofs_export_get_parent(): child directory not normalized! [ 79.613257][ T4573] usb 2-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 79.643932][ T4577] usb 4-1: config 0 descriptor?? [ 79.657924][ T4573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.694471][ T4573] usb 2-1: config 0 descriptor?? [ 79.708190][ T4577] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 79.726250][ T4577] usb 4-1: setting power ON [ 79.731637][ T4577] dvb-usb: bulk message failed: -22 (2/0) [ 79.856410][ T4924] hfs: can't find a HFS filesystem on dev nullb0 [ 79.908594][ T4577] dvb-usb: bulk message failed: -22 (1/0) [ 80.034452][ T4577] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 80.077746][ T4577] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 80.096008][ T4577] dvb_usb_cxusb: probe of 4-1:0.30 failed with error -22 [ 80.139028][ T4577] usb 4-1: USB disconnect, device number 2 [ 80.202899][ T4573] wacom 0003:056A:0004.0002: unknown main item tag 0x0 [ 80.238631][ T4573] wacom 0003:056A:0004.0002: unknown main item tag 0x0 [ 80.267674][ T4573] wacom 0003:056A:0004.0002: Unknown device_type for 'HID 056a:0004'. Ignoring. [ 80.370524][ T4938] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 80.448092][ T4577] usb 2-1: USB disconnect, device number 3 [ 80.617973][ T4936] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.642513][ T4936] REISERFS (device loop0): using ordered data mode [ 80.668542][ T4936] reiserfs: using flush barriers [ 80.709022][ T4936] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.735601][ T4936] REISERFS (device loop0): checking transaction log (loop0) [ 80.806269][ T4922] XFS (loop2): Mounting V5 Filesystem [ 80.834608][ T4956] set_capacity_and_notify: 5 callbacks suppressed [ 80.834625][ T4956] loop4: detected capacity change from 0 to 128 [ 80.846193][ T4936] REISERFS (device loop0): Using r5 hash to sort names [ 80.862314][ T4936] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 80.884421][ T4936] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 80.926100][ T4956] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.969940][ T4956] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.133178][ T4922] XFS (loop2): Ending clean mount [ 81.295581][ T4969] loop4: detected capacity change from 0 to 8 [ 81.298730][ T4188] XFS (loop2): Unmounting Filesystem [ 81.413062][ T4969] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.459743][ T4969] SQUASHFS error: Failed to read block 0x9b: -5 [ 81.499285][ T4969] SQUASHFS error: Unable to read metadata cache entry [99] [ 81.506935][ T4969] SQUASHFS error: Unable to read inode 0x127 [ 81.625184][ T2856] cfg80211: failed to load regulatory.db [ 81.946360][ T4993] loop4: detected capacity change from 0 to 2048 [ 81.967676][ T4989] loop1: detected capacity change from 0 to 4096 [ 81.998260][ T4999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.268'. [ 82.005848][ T4993] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.062482][ T4989] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 82.113691][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop4 [ 82.126151][ T5002] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.376400][ T5010] loop2: detected capacity change from 0 to 1024 [ 82.717276][ T5016] loop1: detected capacity change from 0 to 32768 [ 82.745318][ T5016] XFS (loop1): Invalid device [./file0/file0], error=-2 [ 82.867782][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 82.999365][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 83.093537][ T5028] loop2: detected capacity change from 0 to 4096 [ 83.142441][ T5028] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 83.244799][ T5028] ntfs3: loop2: Failed to load $Extend. [ 83.299091][ T5004] loop3: detected capacity change from 0 to 32768 [ 83.345145][ T5036] loop1: detected capacity change from 0 to 512 [ 83.384187][ T5004] jfs_strtoUCS: char2uni returned -22. [ 83.398776][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.403287][ T5004] charset = cp950, char = 0xd4 [ 83.426493][ T7] usb 5-1: config 0 has no interface number 0 [ 83.447167][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 83.452313][ T5036] attempt to access beyond end of device [ 83.452313][ T5036] loop1: rw=2051, want=28736, limit=512 [ 83.459274][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.521791][ T7] usb 5-1: config 0 descriptor?? [ 83.538279][ T5037] FAT-fs (loop1): FAT read failed (blocknr 128) [ 83.599239][ T7] usb 5-1: selecting invalid altsetting 1 [ 83.628662][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 83.635326][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 83.828139][ T7] DVB: Unable to find symbol cx22700_attach() [ 83.878314][ T5039] loop2: detected capacity change from 0 to 4096 [ 83.928087][ T5039] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 83.941184][ T7] DVB: Unable to find symbol tda10046_attach() [ 83.949174][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 83.973173][ T7] usb 5-1: USB disconnect, device number 4 [ 84.018334][ T5039] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.038610][ T2856] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.048914][ T5039] ntfs3: loop2: Failed to load $Extend. [ 84.092606][ T5047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.136936][ T5047] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 144 with incorrect tag 0 [ 84.281585][ T2856] usb 1-1: Using ep0 maxpacket: 32 [ 84.398669][ T2856] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 84.416687][ T2856] usb 1-1: config 4 has no interface number 0 [ 84.442986][ T2856] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.470476][ T2856] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.500073][ T2856] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.523139][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.589798][ T2856] hub 1-1:4.128: USB hub found [ 84.808833][ T2856] hub 1-1:4.128: 2 ports detected [ 84.822832][ T2856] hub 1-1:4.128: Using single TT (err -22) [ 84.864456][ T5069] kernel read not supported for file / -Ö9÷mZr†œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ² (pid: 5069 comm: syz.3.310) [ 84.881280][ T26] audit: type=1800 audit(1770113778.639:4): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.310" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=35280 res=0 errno=0 [ 84.913827][ T26] audit: type=1804 audit(1770113778.639:5): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.310" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=35280 res=1 errno=0 [ 85.000547][ T5067] ntfs: volume version 3.1. [ 85.018680][ T2856] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 85.033118][ T2856] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 85.129960][ T2856] usb 1-1: USB disconnect, device number 4 [ 85.172563][ T5073] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 85.623662][ T5085] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 85.626482][ T155] hfsplus: b-tree write err: -5, ino 4 [ 85.697233][ T5085] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 85.771111][ T5085] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.778598][ T5089] device ipvlan2 entered promiscuous mode [ 85.782892][ T5085] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.318: Inode bitmap for bg 0 marked uninitialized [ 85.822298][ T5085] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 85.990413][ T5071] XFS (loop3): Mounting V5 Filesystem [ 86.157327][ T5085] EXT4-fs (loop1): Ignoring removed orlov option [ 86.168382][ T5071] XFS (loop3): Ending clean mount [ 86.176217][ T5085] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 86.239143][ T5085] EXT4-fs error (device loop1): ext4_remount:6060: comm syz.1.318: Abort forced by user [ 86.315042][ T5085] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,abort,usrjquota=,orlov,grpquota,barrier,data=journal,. Quota mode: writeback. [ 86.328060][ T5116] netlink: 'syz.2.329': attribute type 3 has an invalid length. [ 86.343344][ T5116] netlink: 666 bytes leftover after parsing attributes in process `syz.2.329'. [ 86.343889][ T4195] XFS (loop3): Unmounting Filesystem [ 86.444691][ T2856] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.818817][ T2856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.844793][ T2856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.875623][ T2856] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 86.911287][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.933298][ T2856] usb 1-1: config 0 descriptor?? [ 87.017800][ T5115] set_capacity_and_notify: 7 callbacks suppressed [ 87.017816][ T5115] loop4: detected capacity change from 0 to 32768 [ 87.088021][ T5115] XFS (loop4): Mounting V5 Filesystem [ 87.215129][ T5115] XFS (loop4): Ending clean mount [ 87.232434][ T5147] loop1: detected capacity change from 0 to 16 [ 87.260817][ T5115] XFS (loop4): Quotacheck needed: Please wait. [ 87.291616][ T5126] loop2: detected capacity change from 0 to 32768 [ 87.331411][ T5115] XFS (loop4): Quotacheck: Done. [ 87.362857][ T5147] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.420898][ T4189] XFS (loop4): Unmounting Filesystem [ 87.420898][ T5126] XFS (loop2): Mounting V5 Filesystem [ 87.449871][ T2856] kye 0003:0458:5019.0003: unknown main item tag 0x1 [ 87.473381][ T2856] kye 0003:0458:5019.0003: unknown main item tag 0x4 [ 87.532993][ T2856] kye 0003:0458:5019.0003: hidraw0: USB HID v2.07 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 87.559309][ T2856] kye 0003:0458:5019.0003: tablet-enabling feature report not found [ 87.567842][ T2856] kye 0003:0458:5019.0003: tablet enabling failed [ 87.628101][ T5126] XFS (loop2): Ending clean mount [ 87.731267][ T21] usb 1-1: USB disconnect, device number 5 [ 87.838935][ T4188] XFS (loop2): Unmounting Filesystem [ 88.155072][ T5170] loop3: detected capacity change from 0 to 512 [ 88.191451][ T5170] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.336611][ T26] audit: type=1800 audit(1770113782.089:6): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file2" dev="loop3" ino=1048599 res=0 errno=0 [ 88.337846][ T5170] attempt to access beyond end of device [ 88.337846][ T5170] loop3: rw=0, want=17179852722, limit=512 [ 88.436403][ T5181] loop4: detected capacity change from 0 to 256 [ 88.447833][ T5182] netlink: 'syz.1.354': attribute type 29 has an invalid length. [ 88.474920][ T5182] netlink: 'syz.1.354': attribute type 29 has an invalid length. [ 88.493837][ T5170] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.503825][ T5185] netlink: 'syz.1.354': attribute type 29 has an invalid length. [ 88.515492][ T5170] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 88.554963][ T5181] FAT-fs (loop4): Directory bread(block 64) failed [ 88.586998][ T5181] FAT-fs (loop4): Directory bread(block 65) failed [ 88.638635][ T5181] FAT-fs (loop4): Directory bread(block 66) failed [ 88.638942][ T5184] loop2: detected capacity change from 0 to 2048 [ 88.651423][ T5181] FAT-fs (loop4): Directory bread(block 67) failed [ 88.672708][ T5181] FAT-fs (loop4): Directory bread(block 68) failed [ 88.690090][ T5181] FAT-fs (loop4): Directory bread(block 69) failed [ 88.704016][ T5178] loop0: detected capacity change from 0 to 8192 [ 88.716613][ T5181] FAT-fs (loop4): Directory bread(block 70) failed [ 88.724023][ T5181] FAT-fs (loop4): Directory bread(block 71) failed [ 88.731517][ T5181] FAT-fs (loop4): Directory bread(block 72) failed [ 88.760757][ T5181] FAT-fs (loop4): Directory bread(block 73) failed [ 88.798193][ T5190] capability: warning: `syz.3.356' uses 32-bit capabilities (legacy support in use) [ 88.818563][ T5178] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 88.857615][ T5178] REISERFS (device loop0): using ordered data mode [ 88.865539][ T5178] reiserfs: using flush barriers [ 88.906354][ T5178] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.049703][ T5178] REISERFS (device loop0): checking transaction log (loop0) [ 89.053399][ T5198] loop2: detected capacity change from 0 to 8 [ 89.095365][ T5178] REISERFS (device loop0): Using r5 hash to sort names [ 89.119334][ T5198] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 89.136293][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop2 [ 89.140103][ T5178] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.218915][ T5178] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.219318][ T5204] loop3: detected capacity change from 0 to 1024 [ 89.243200][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop2 [ 89.357882][ T5210] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 89.432931][ T5204] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.448669][ T5210] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 89.489668][ T5210] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 89.496283][ T5210] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 89.531722][ T5204] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 89.563992][ T5210] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 89.570945][ T5210] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 89.577763][ T5210] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 89.584754][ T5210] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 89.591808][ T5210] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 89.598997][ T5210] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 89.605579][ T5210] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 89.612476][ T5210] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 89.619655][ T5210] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 89.627433][ T5210] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 89.637880][ T5210] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 89.644886][ T5210] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 89.653631][ T5210] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 89.688700][ T5210] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 89.715124][ T5210] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 90.165251][ T5245] loop2: detected capacity change from 0 to 512 [ 90.284129][ T5245] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.318535][ T5245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.358783][ T5256] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.370765][ T5255] exfat: Deprecated parameter 'namecase' [ 90.389995][ T5255] exfat: Deprecated parameter 'utf8' [ 90.397584][ T5245] EXT4-fs error (device loop2): __ext4_iget:4912: inode #15: block 1803188595: comm syz.2.381: invalid block [ 90.419165][ T5245] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.381: couldn't read orphan inode 15 (err -117) [ 90.444324][ T5255] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 90.458556][ T4333] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.486659][ T5245] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,dioread_nolock,acl,bsdgroups,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: none. [ 90.510674][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.543730][ T26] audit: type=1800 audit(1770113784.299:7): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.385" name="file1" dev="loop4" ino=1048623 res=0 errno=0 [ 90.928748][ T4333] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 90.983830][ T4333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 91.051029][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 91.058502][ T4333] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 91.095652][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 91.108541][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.154528][ T5272] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 91.155158][ T4333] usb 1-1: config 0 descriptor?? [ 91.202213][ T5272] netlink: 'syz.2.391': attribute type 11 has an invalid length. [ 91.357768][ T5278] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 91.420827][ T5276] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.465205][ T5276] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.478573][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.523131][ T5260] Dev loop1 SGI disklabel: csum bad, label corrupted [ 91.681332][ T4333] magicmouse 0003:05AC:0269.0004: collection stack underflow [ 91.701448][ T4333] magicmouse 0003:05AC:0269.0004: item 0 0 0 12 parsing failed [ 91.732302][ T4333] magicmouse 0003:05AC:0269.0004: magicmouse hid parse failed [ 91.751563][ T4333] magicmouse: probe of 0003:05AC:0269.0004 failed with error -22 [ 91.922727][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 91.933822][ T21] usb 1-1: USB disconnect, device number 6 [ 91.938772][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.982127][ T1108] usb 4-1: config 0 descriptor?? [ 92.063918][ T5289] set_capacity_and_notify: 6 callbacks suppressed [ 92.063934][ T5289] loop4: detected capacity change from 0 to 4096 [ 92.158940][ T5297] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.430012][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.493787][ T1108] wacom 0003:056A:00B8.0005: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 92.560598][ T1108] wacom 0003:056A:00B8.0005: hidraw0: USB HID v0.02 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 92.598406][ T1108] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0005/input/input9 [ 92.703279][ T1108] usb 4-1: USB disconnect, device number 3 [ 92.718569][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 92.920005][ T5318] fido_id[5318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 92.935856][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.038219][ T5324] loop0: detected capacity change from 0 to 4096 [ 93.055285][ T7] usb 3-1: config 4 interface 0 has no altsetting 0 [ 93.106548][ T5329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.144245][ T5331] loop4: detected capacity change from 0 to 1024 [ 93.277861][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.358816][ T7] usb 3-1: string descriptor 0 read error: -22 [ 93.367588][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 93.398491][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.481219][ T7] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 93.521931][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.548995][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 93.563744][ T7] usb 3-1: media controller created [ 93.611355][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.778660][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.929507][ T5353] loop0: detected capacity change from 0 to 4096 [ 93.962839][ T5353] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.171150][ T5359] loop1: detected capacity change from 0 to 4096 [ 94.199225][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.212446][ T4274] ntfs3: loop0: ntfs3_write_inode r=1a failed, -22. [ 94.226094][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.243505][ T4190] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 94.256891][ T4190] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 94.258685][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 94.275424][ T5360] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.290440][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.297934][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.350392][ T1108] usb 4-1: config 0 descriptor?? [ 94.597206][ T5343] loop4: detected capacity change from 0 to 32768 [ 94.633298][ T5343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.424 (5343) [ 94.643103][ T5364] loop0: detected capacity change from 0 to 8192 [ 94.728624][ T5364] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.759975][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 94.768194][ T5296] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 94.794263][ T5364] REISERFS (device loop0): using ordered data mode [ 94.808653][ T4333] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.845569][ T5364] reiserfs: using flush barriers [ 94.879408][ T1108] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 94.905767][ T5364] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.924339][ T7] usb 3-1: USB disconnect, device number 3 [ 94.929541][ T5343] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 94.991827][ T5364] REISERFS (device loop0): checking transaction log (loop0) [ 95.001676][ T5343] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.028682][ T5343] BTRFS info (device loop4): use lzo compression, level 0 [ 95.048660][ T5343] BTRFS info (device loop4): using free space tree [ 95.053054][ T5364] REISERFS (device loop0): Using r5 hash to sort names [ 95.059265][ T5343] BTRFS info (device loop4): has skinny extents [ 95.088520][ T4333] usb 2-1: Using ep0 maxpacket: 32 [ 95.119609][ T4577] usb 4-1: USB disconnect, device number 4 [ 95.137771][ T5364] reiserfs: enabling write barrier flush mode [ 95.157073][ T5364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 95.196048][ T5372] fido_id[5372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 95.208609][ T5364] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 95.249418][ T4333] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 95.268040][ T4333] usb 2-1: config 0 has no interface number 0 [ 95.277273][ T5364] REISERFS (device loop0): Remounting filesystem read-only [ 95.285085][ T5364] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 95.301511][ T5364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 95.318426][ T5364] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 95.331692][ T5364] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 95.331741][ T5364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 95.331764][ T5364] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 95.331790][ T5364] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 95.332138][ T5364] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 95.360771][ T5364] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 95.360843][ T5364] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 95.360862][ T5364] REISERFS (device loop0): Remounting filesystem read-only [ 95.360877][ T5364] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 95.408659][ T5343] BTRFS info (device loop4): enabling ssd optimizations [ 95.466725][ T5392] loop2: detected capacity change from 0 to 1024 [ 95.498847][ T4333] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 95.498882][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.498903][ T4333] usb 2-1: Product: syz [ 95.498919][ T4333] usb 2-1: Manufacturer: syz [ 95.498933][ T4333] usb 2-1: SerialNumber: syz [ 95.500894][ T4333] usb 2-1: config 0 descriptor?? [ 95.550841][ T4333] ftdi_sio 2-1:0.120: FTDI USB Serial Device converter detected [ 95.551570][ T4333] usb 2-1: Detected SIO [ 95.562135][ T4333] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.714569][ T3086] hfsplus: b-tree write err: -5, ino 4 [ 95.806034][ T4333] usb 2-1: USB disconnect, device number 4 [ 95.839329][ T4333] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 95.893132][ T4333] ftdi_sio 2-1:0.120: device disconnected [ 96.629775][ T5415] loop2: detected capacity change from 0 to 4096 [ 96.775832][ T5426] loop4: detected capacity change from 0 to 64 [ 96.799550][ T5428] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.879433][ T4333] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.148752][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 97.192812][ T5432] set_capacity_and_notify: 1 callbacks suppressed [ 97.192830][ T5432] loop2: detected capacity change from 0 to 1024 [ 97.232941][ T5397] XFS (loop3): Mounting V5 Filesystem [ 97.343558][ T4276] hfsplus: b-tree write err: -5, ino 4 [ 97.366456][ T5442] netlink: 'syz.1.452': attribute type 196 has an invalid length. [ 97.466590][ T5397] XFS (loop3): Ending clean mount [ 97.498885][ T4333] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 97.539197][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 97.547507][ T4333] usb 1-1: Product: syz [ 97.588619][ T4333] usb 1-1: Manufacturer: syz [ 97.608527][ T4333] usb 1-1: SerialNumber: syz [ 97.639645][ T4333] usb 1-1: config 0 descriptor?? [ 97.651861][ T4195] XFS (loop3): Unmounting Filesystem [ 97.673126][ T5452] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 97.950016][ T5458] loop4: detected capacity change from 0 to 1024 [ 98.001313][ T7] usb 1-1: USB disconnect, device number 7 [ 98.159202][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.169287][ T5472] loop1: detected capacity change from 0 to 128 [ 98.370986][ T5472] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.402985][ T5472] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.443595][ T5479] loop3: detected capacity change from 0 to 256 [ 98.585879][ T5479] FAT-fs (loop3): Directory bread(block 64) failed [ 98.594228][ T5479] FAT-fs (loop3): Directory bread(block 65) failed [ 98.647365][ T5479] FAT-fs (loop3): Directory bread(block 66) failed [ 98.701638][ T5479] FAT-fs (loop3): Directory bread(block 67) failed [ 98.721002][ T5479] FAT-fs (loop3): Directory bread(block 68) failed [ 98.734794][ T5479] FAT-fs (loop3): Directory bread(block 69) failed [ 98.777009][ T5479] FAT-fs (loop3): Directory bread(block 70) failed [ 98.805880][ T5479] FAT-fs (loop3): Directory bread(block 71) failed [ 98.820838][ T5479] FAT-fs (loop3): Directory bread(block 72) failed [ 98.830023][ T5481] loop0: detected capacity change from 0 to 4096 [ 98.846802][ T5479] FAT-fs (loop3): Directory bread(block 73) failed [ 98.911926][ T5481] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 98.988973][ T5481] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 99.026638][ T5485] loop4: detected capacity change from 0 to 1024 [ 99.038708][ T5481] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.124994][ T5481] ntfs: volume version 3.1. [ 99.135067][ T5481] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 99.165373][ T5481] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 99.244629][ T5481] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 99.294497][ T4577] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.299006][ T5481] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 99.385719][ T5476] loop2: detected capacity change from 0 to 32768 [ 99.395541][ T5481] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 99.409192][ T5481] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 99.440281][ T5481] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 99.473014][ T5476] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.467 (5476) [ 99.537508][ T5476] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 99.567828][ T5476] BTRFS info (device loop2): using free space tree [ 99.577573][ T5476] BTRFS info (device loop2): has skinny extents [ 99.688911][ T4577] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.689660][ T5504] loop3: detected capacity change from 0 to 512 [ 99.710526][ T4577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.726164][ T4577] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.749056][ T4577] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 99.773696][ T4577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.849359][ T5476] BTRFS info (device loop2): enabling ssd optimizations [ 99.870099][ T5504] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 99.887825][ T4577] usb 2-1: config 0 descriptor?? [ 99.928803][ T5504] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.196147][ T4176] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4176) [ 100.418044][ T4577] elecom 0003:056E:00FB.0007: report_id 22043 is invalid [ 100.454026][ T4577] elecom 0003:056E:00FB.0007: item 0 2 1 8 parsing failed [ 100.472219][ T4577] elecom: probe of 0003:056E:00FB.0007 failed with error -22 [ 100.647846][ T4246] usb 2-1: USB disconnect, device number 5 [ 100.671570][ T5549] netlink: 256 bytes leftover after parsing attributes in process `syz.2.490'. [ 100.760289][ T5549] netlink: 'syz.2.490': attribute type 9 has an invalid length. [ 100.847186][ T5560] loop2: detected capacity change from 0 to 256 [ 100.962242][ T5566] loop4: detected capacity change from 0 to 8 [ 101.026123][ T5560] FAT-fs (loop2): Directory bread(block 64) failed [ 101.034012][ T5560] FAT-fs (loop2): Directory bread(block 65) failed [ 101.065085][ T5560] FAT-fs (loop2): Directory bread(block 66) failed [ 101.090135][ T5560] FAT-fs (loop2): Directory bread(block 67) failed [ 101.108072][ T5560] FAT-fs (loop2): Directory bread(block 68) failed [ 101.151031][ T5560] FAT-fs (loop2): Directory bread(block 69) failed [ 101.202160][ T5560] FAT-fs (loop2): Directory bread(block 70) failed [ 101.246178][ T5560] FAT-fs (loop2): Directory bread(block 71) failed [ 101.270348][ T5560] FAT-fs (loop2): Directory bread(block 72) failed [ 101.290354][ T5560] FAT-fs (loop2): Directory bread(block 73) failed [ 101.777468][ T5591] FAT-fs (loop2): Directory bread(block 64) failed [ 101.795971][ T5591] FAT-fs (loop2): Directory bread(block 65) failed [ 101.825891][ T5591] FAT-fs (loop2): Directory bread(block 66) failed [ 101.845113][ T5591] FAT-fs (loop2): Directory bread(block 67) failed [ 101.880191][ T5591] FAT-fs (loop2): Directory bread(block 68) failed [ 101.890380][ T5591] FAT-fs (loop2): Directory bread(block 69) failed [ 101.913647][ T5591] FAT-fs (loop2): Directory bread(block 70) failed [ 101.917458][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 101.921346][ T5591] FAT-fs (loop2): Directory bread(block 71) failed [ 101.937142][ T5591] FAT-fs (loop2): Directory bread(block 72) failed [ 101.945366][ T5591] FAT-fs (loop2): Directory bread(block 73) failed [ 102.098681][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 102.256641][ T5610] set_capacity_and_notify: 1 callbacks suppressed [ 102.256658][ T5610] loop4: detected capacity change from 0 to 256 [ 102.378600][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 102.397518][ T5610] FAT-fs (loop4): Directory bread(block 64) failed [ 102.444681][ T5610] FAT-fs (loop4): Directory bread(block 65) failed [ 102.472281][ T5610] FAT-fs (loop4): Directory bread(block 66) failed [ 102.484748][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 102.497862][ T5610] FAT-fs (loop4): Directory bread(block 67) failed [ 102.505741][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.520178][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.531006][ T5610] FAT-fs (loop4): Directory bread(block 68) failed [ 102.542196][ T5610] FAT-fs (loop4): Directory bread(block 69) failed [ 102.549860][ T5610] FAT-fs (loop4): Directory bread(block 70) failed [ 102.556643][ T5610] FAT-fs (loop4): Directory bread(block 71) failed [ 102.578993][ T5610] FAT-fs (loop4): Directory bread(block 72) failed [ 102.585681][ T5610] FAT-fs (loop4): Directory bread(block 73) failed [ 102.708766][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.730559][ T7] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.752584][ T5623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.523'. [ 102.771496][ T7] usb 1-1: Product: syz [ 102.778847][ T7] usb 1-1: Manufacturer: syz [ 102.795072][ T5623] tipc: Enabling of bearer rejected, media not registered [ 102.870004][ T7] hub 1-1:4.0: USB hub found [ 102.931357][ T5627] loop4: detected capacity change from 0 to 1024 [ 102.973768][ T5627] EXT4-fs (loop4): Ignoring removed bh option [ 102.987998][ T5607] loop3: detected capacity change from 0 to 32768 [ 103.013605][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 103.064748][ T5635] loop1: detected capacity change from 0 to 256 [ 103.083416][ T5607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.517 (5607) [ 103.115249][ T5607] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 103.138698][ T7] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 103.163129][ T5607] BTRFS info (device loop3): force zlib compression, level 3 [ 103.245912][ T5607] BTRFS info (device loop3): disabling free space tree [ 103.275034][ T5607] BTRFS info (device loop3): enabling ssd optimizations [ 103.318538][ T5607] BTRFS info (device loop3): allowing degraded mounts [ 103.325685][ T5607] BTRFS info (device loop3): trying to use backup root at mount time [ 103.338319][ T5607] BTRFS info (device loop3): enabling free space tree [ 103.354300][ T5607] BTRFS info (device loop3): using free space tree [ 103.357526][ T5640] loop2: detected capacity change from 0 to 256 [ 103.362233][ T5607] BTRFS info (device loop3): has skinny extents [ 103.460652][ T5643] netlink: 140 bytes leftover after parsing attributes in process `syz.1.542'. [ 103.493415][ T5643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'. [ 103.525720][ T5640] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.539257][ T4246] usb 1-1: USB disconnect, device number 8 [ 103.715555][ T5607] BTRFS info (device loop3): checking UUID tree [ 103.935069][ T5672] loop2: detected capacity change from 0 to 1024 [ 104.099565][ T5672] hfsplus: bad catalog entry type [ 104.471795][ T3086] hfsplus: b-tree write err: -5, ino 4 [ 105.027590][ T5679] loop0: detected capacity change from 0 to 32768 [ 105.102235][ T5720] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 105.112749][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 105.243757][ T5679] XFS (loop0): Mounting V5 Filesystem [ 105.384736][ T5679] XFS (loop0): Ending clean mount [ 105.473566][ T5737] comedi: No check for data length of config insn id 1003 is implemented [ 105.483231][ T5737] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 105.488506][ T5712] loop1: detected capacity change from 0 to 32768 [ 105.495004][ T5737] comedi: Assuming n=15 is correct [ 105.508396][ T4190] XFS (loop0): Unmounting Filesystem [ 105.644240][ T5712] XFS (loop1): Mounting V5 Filesystem [ 105.761497][ T5712] XFS (loop1): Ending clean mount [ 105.806856][ T5712] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 105.868954][ T5753] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component [ 106.015194][ T4184] XFS (loop1): Unmounting Filesystem [ 106.194773][ T5763] loop4: detected capacity change from 0 to 2048 [ 106.349556][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.604822][ T5783] loop2: detected capacity change from 0 to 1024 [ 106.763621][ T5783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.904337][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 106.904353][ T26] audit: type=1326 audit(1770113800.659:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5587917eb9 code=0x0 [ 106.933999][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.449274][ T5809] set_capacity_and_notify: 1 callbacks suppressed [ 107.449290][ T5809] loop0: detected capacity change from 0 to 4096 [ 107.460602][ T5792] loop3: detected capacity change from 0 to 32768 [ 107.586211][ T5809] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 107.713878][ T5792] XFS (loop3): Mounting V5 Filesystem [ 107.754164][ T5809] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.789867][ T5827] xt_hashlimit: max too large, truncated to 1048576 [ 107.834908][ T5827] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 107.835937][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 107.853111][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 107.866818][ T5835] netlink: 'syz.1.600': attribute type 6 has an invalid length. [ 107.980731][ T5838] overlayfs: upper fs does not support tmpfile. [ 107.980733][ T5792] XFS (loop3): Ending clean mount [ 108.083734][ T5838] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.101980][ T5792] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 108.148353][ T5838] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 108.179554][ T5838] overlayfs: failed to verify upper root origin [ 108.265008][ T4195] XFS (loop3): Unmounting Filesystem [ 108.428722][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 108.525420][ T5851] netlink: 34 bytes leftover after parsing attributes in process `syz.2.610'. [ 108.560395][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'. [ 108.838897][ T5860] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 108.916502][ T5843] loop1: detected capacity change from 0 to 32768 [ 109.041679][ T5868] loop0: detected capacity change from 0 to 1024 [ 109.088237][ T5843] XFS (loop1): Mounting V5 Filesystem [ 109.161362][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.202146][ T5885] loop2: detected capacity change from 0 to 256 [ 109.222820][ T5843] XFS (loop1): Ending clean mount [ 109.282018][ T5885] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.328556][ T5885] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 109.411446][ T5885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.413905][ T4184] XFS (loop1): Unmounting Filesystem [ 109.855363][ T5875] loop4: detected capacity change from 0 to 32768 [ 109.951207][ T5875] XFS (loop4): Mounting V5 Filesystem [ 110.113032][ T5875] XFS (loop4): Ending clean mount [ 110.167164][ T5871] loop3: detected capacity change from 0 to 40427 [ 110.226197][ T5875] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 110.272452][ T5871] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 110.279854][ T4333] kernel write not supported for file /sg0 (pid: 4333 comm: kworker/0:7) [ 110.289377][ T5871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.324671][ T5871] F2FS-fs (loop3): invalid crc value [ 110.386310][ T5871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.393388][ T26] audit: type=1326 audit(1770113804.149:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.1.633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3897f4eeb9 code=0x0 [ 110.414823][ T4189] XFS (loop4): Unmounting Filesystem [ 110.459878][ T5925] loop0: detected capacity change from 0 to 512 [ 110.594644][ T5925] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.596330][ T5871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.655306][ T5925] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.635: bg 0: block 5: invalid block bitmap [ 110.672442][ T5871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.673367][ T5925] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 110.692031][ T5925] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.635: invalid indirect mapped block 3 (level 2) [ 110.713668][ T5925] EXT4-fs (loop0): 2 truncates cleaned up [ 110.724924][ T5925] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 110.905586][ T4246] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 110.936586][ T4246] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 110.953508][ T4246] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 111.195288][ T5935] fido_id[5935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.317850][ T5944] loop2: detected capacity change from 0 to 1024 [ 111.462281][ T5944] EXT4-fs (loop2): inline encryption not supported [ 111.483679][ T5944] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 111.507518][ T5954] netem: change failed [ 111.546947][ T5944] EXT4-fs (loop2): invalid journal inode [ 111.575966][ T5944] EXT4-fs (loop2): can't get journal size [ 111.603766][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 111.748687][ T4333] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.825822][ T5972] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 112.013538][ T5982] tipc: Enabling of bearer rejected, failed to enable media [ 112.158996][ T4333] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 112.159037][ T4333] usb 1-1: config 0 has no interface number 0 [ 112.159068][ T4333] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.159094][ T4333] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.159131][ T4333] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 112.159155][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.164537][ T4333] usb 1-1: config 0 descriptor?? [ 112.451625][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 112.563893][ T6001] bridge_slave_0: default FDB implementation only supports local addresses [ 112.577230][ T6002] loop2: detected capacity change from 0 to 256 [ 112.658214][ T5998] loop4: detected capacity change from 0 to 4096 [ 112.679168][ T4333] logitech-djreceiver 0003:046D:C534.0009: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input28 [ 112.765753][ T6006] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 112.774387][ T5998] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.787895][ T5984] loop3: detected capacity change from 0 to 32768 [ 112.832714][ T5998] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 112.870946][ T5998] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 112.890766][ T4246] usb 1-1: USB disconnect, device number 9 [ 112.898241][ T5998] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 112.909621][ T6010] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 112.941128][ T6010] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.674'. [ 112.965562][ T5998] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 112.985326][ T5998] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 113.045750][ T5998] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.124580][ T5998] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 113.132335][ T6011] fido_id[6011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.226065][ T5998] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.268716][ T5998] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 113.297124][ T6017] netlink: 72 bytes leftover after parsing attributes in process `syz.1.677'. [ 113.307928][ T5998] ntfs: volume version 3.1. [ 113.387396][ T6021] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 113.387396][ T6021] program syz.1.679 not setting count and/or reply_len properly [ 113.523481][ T6023] loop0: detected capacity change from 0 to 256 [ 113.677548][ T6023] FAT-fs (loop0): Directory bread(block 64) failed [ 113.701180][ T6023] FAT-fs (loop0): Directory bread(block 65) failed [ 113.753697][ T6023] FAT-fs (loop0): Directory bread(block 66) failed [ 113.785431][ T6023] FAT-fs (loop0): Directory bread(block 67) failed [ 113.824317][ T6023] FAT-fs (loop0): Directory bread(block 68) failed [ 113.844204][ T6023] FAT-fs (loop0): Directory bread(block 69) failed [ 113.868611][ T6023] FAT-fs (loop0): Directory bread(block 70) failed [ 113.875487][ T6023] FAT-fs (loop0): Directory bread(block 71) failed [ 113.894834][ T6029] loop1: detected capacity change from 0 to 4096 [ 113.916460][ T6023] FAT-fs (loop0): Directory bread(block 72) failed [ 113.928661][ T6023] FAT-fs (loop0): Directory bread(block 73) failed [ 113.978339][ T6029] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 114.020864][ T6029] ntfs3: loop1: try to read out of volume at offset 0x1ff000 [ 114.058794][ T6029] ntfs3: loop1: Failed to load $MFT. [ 114.213842][ T6037] loop4: detected capacity change from 0 to 4096 [ 114.304395][ T6044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.688'. [ 114.371548][ T6037] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 114.461978][ T6037] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 114.530295][ T6037] overlayfs: upper fs does not support tmpfile. [ 114.580416][ T6037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.628990][ T6037] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 114.661562][ T6037] overlayfs: failed to verify upper root origin [ 114.706651][ T6053] loop0: detected capacity change from 0 to 4096 [ 114.838037][ T6061] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.838844][ T6053] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 114.933955][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 114.973924][ T6053] Remounting filesystem read-only [ 115.074855][ T6069] loop4: detected capacity change from 0 to 1024 [ 115.145663][ T6069] EXT4-fs (loop4): Ignoring removed orlov option [ 115.274389][ T6077] netlink: 'syz.3.705': attribute type 2 has an invalid length. [ 115.282683][ T6077] netlink: 244 bytes leftover after parsing attributes in process `syz.3.705'. [ 115.295207][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 115.402694][ T6039] loop1: detected capacity change from 0 to 32768 [ 115.419198][ T6069] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 115.427332][ T6069] EXT4-fs warning (device loop4): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 115.509366][ T6039] XFS: ikeep mount option is deprecated. [ 115.702555][ T6039] XFS (loop1): Mounting V5 Filesystem [ 115.703677][ T6095] loop4: detected capacity change from 0 to 1024 [ 115.828766][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,inode_readahead_blks=0x0000000000000000,grpid,barrier,,errors=continue. Quota mode: none. [ 115.896166][ T6039] XFS (loop1): Ending clean mount [ 115.942198][ T6039] XFS (loop1): Quotacheck needed: Please wait. [ 115.990171][ T6095] EXT4-fs (loop4): Cannot specify journal on remount [ 116.150192][ T6101] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.170907][ T6039] XFS (loop1): Quotacheck: Done. [ 116.250648][ T6109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.285120][ T4184] XFS (loop1): Unmounting Filesystem [ 116.299387][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'. [ 116.316321][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 116.609111][ T6113] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 116.625508][ T6118] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.649167][ T6113] Remounting filesystem read-only [ 116.749432][ T6119] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 1: comm syz.0.719: invalid block [ 116.783774][ T6119] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.719: couldn't read orphan inode 11 (err -117) [ 116.784086][ T6119] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 116.985205][ T6124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.097212][ T6124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.721: bg 0: block 384: padding at end of block bitmap is not set [ 117.172707][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.190149][ T6124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 117.258267][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.265358][ T6124] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.721: attempt to clear invalid blocks 983260 len 1 [ 117.281836][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.333672][ T6124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.721: Invalid inode table block 0 in block_group 0 [ 117.425493][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.445229][ T6124] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 117.461660][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.508892][ T6124] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 117.538532][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.545560][ T6124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.721: Invalid inode table block 0 in block_group 0 [ 117.654388][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.680293][ T6124] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 117.736361][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.753544][ T6124] EXT4-fs error (device loop2): ext4_truncate:4279: inode #11: comm syz.2.721: mark_inode_dirty error [ 117.838298][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.841772][ T6160] set_capacity_and_notify: 7 callbacks suppressed [ 117.841789][ T6160] loop0: detected capacity change from 0 to 512 [ 117.852563][ T6124] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 117.870984][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 117.887947][ T6124] EXT4-fs (loop2): 1 truncate cleaned up [ 117.901053][ T6124] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 117.956380][ T6160] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 117.975657][ T6168] tmpfs: Bad value for 'gid' [ 118.039723][ T6160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.079276][ T6160] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 8: comm syz.0.737: invalid block [ 118.099624][ T13] IPVS: rr: FWM 3 0x00000003 - no destination available [ 118.106168][ T6124] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.721: Invalid block bitmap block 0 in block_group 0 [ 118.107918][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 118.138332][ T6160] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.737: couldn't read orphan inode 11 (err -117) [ 118.197627][ T6160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.215425][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 118.283895][ T6160] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 118.457428][ T6164] loop4: detected capacity change from 0 to 32768 [ 118.584595][ T6164] [ 118.584595][ T6164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.584595][ T6164] [ 118.595762][ T6187] loop0: detected capacity change from 0 to 128 [ 118.665385][ T6164] read_mapping_page failed! [ 118.709228][ T6164] ERROR: (device loop4): txCommit: [ 118.709228][ T6164] [ 118.764218][ T6194] jfs_rmdir: dtDelete returned -2 [ 118.770186][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.810713][ T4190] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 118.826861][ T4190] FAT-fs (loop0): Filesystem has been set read-only [ 118.855223][ T4190] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 118.876993][ T9] ERROR: (device loop4): diWrite: ixpxd invalid [ 118.876993][ T9] [ 118.892664][ T9] ERROR: (device loop4): txCommit: [ 118.892664][ T9] [ 118.909306][ T4190] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 118.939961][ T9] jfs_write_inode: jfs_commit_inode failed! [ 118.986787][ T4189] [ 118.986787][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.986787][ T4189] [ 119.027508][ T4189] [ 119.027508][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.027508][ T4189] [ 119.194966][ T13] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 119.224956][ T13] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 119.257662][ T13] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.285955][ T13] usb 3-1: config 220 has no interface number 2 [ 119.303079][ T13] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 119.331835][ T13] usb 3-1: config 220 interface 0 has no altsetting 0 [ 119.349095][ T13] usb 3-1: config 220 interface 76 has no altsetting 0 [ 119.356199][ T13] usb 3-1: config 220 interface 1 has no altsetting 0 [ 119.393982][ T6207] netlink: 356 bytes leftover after parsing attributes in process `syz.4.760'. [ 119.558865][ T13] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.578692][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.587686][ T13] usb 3-1: Product: syz [ 119.602378][ T13] usb 3-1: Manufacturer: syz [ 119.607314][ T13] usb 3-1: SerialNumber: syz [ 119.718343][ T6193] loop1: detected capacity change from 0 to 40427 [ 119.741197][ T6193] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.778768][ T6193] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.806071][ T6193] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 119.892373][ T6193] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.999717][ T13] usb 3-1: selecting invalid altsetting 0 [ 120.007296][ T13] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 120.007456][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.028150][ T13] usb 3-1: No valid video chain found. [ 120.034124][ T6193] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.034155][ T6193] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.097541][ T6203] loop3: detected capacity change from 0 to 32768 [ 120.209703][ T6203] non-latin1 character 0x230 found in JFS file name [ 120.231372][ T13] usb 3-1: selecting invalid altsetting 0 [ 120.242674][ T13] usbtest: probe of 3-1:220.1 failed with error -22 [ 120.246260][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.264689][ T6203] mount with iocharset=utf8 to access [ 120.323183][ T13] usb 3-1: USB disconnect, device number 4 [ 120.382823][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.426454][ T6225] atomic_op ffff888077b72998 conn xmit_atomic 0000000000000000 [ 120.532777][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.650008][ T6230] loop2: detected capacity change from 0 to 64 [ 120.921860][ T6237] loop4: detected capacity change from 0 to 512 [ 121.021598][ T6237] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 121.120222][ T6237] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.126952][ T6237] EXT4-fs error (device loop4): __ext4_iget:4912: inode #11: block 8: comm syz.4.774: invalid block [ 121.168681][ T6244] loop2: detected capacity change from 0 to 256 [ 121.265335][ T6244] FAT-fs (loop2): Directory bread(block 64) failed [ 121.278652][ T6237] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.774: couldn't read orphan inode 11 (err -117) [ 121.303251][ T13] IPVS: rr: FWM 3 0x00000003 - no destination available [ 121.310658][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 121.328766][ T6237] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.345607][ T6244] FAT-fs (loop2): Directory bread(block 65) failed [ 121.435484][ T6251] loop3: detected capacity change from 0 to 64 [ 121.438637][ T6244] FAT-fs (loop2): Directory bread(block 66) failed [ 121.454890][ T6237] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 121.536737][ T6244] FAT-fs (loop2): Directory bread(block 67) failed [ 121.549935][ T6244] FAT-fs (loop2): Directory bread(block 68) failed [ 121.558804][ T6244] FAT-fs (loop2): Directory bread(block 69) failed [ 121.565574][ T6244] FAT-fs (loop2): Directory bread(block 70) failed [ 121.617933][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 121.625723][ T6244] FAT-fs (loop2): Directory bread(block 71) failed [ 121.688712][ T6244] FAT-fs (loop2): Directory bread(block 72) failed [ 121.738623][ T6244] FAT-fs (loop2): Directory bread(block 73) failed [ 121.750244][ T6258] netlink: 'syz.3.780': attribute type 8 has an invalid length. [ 121.798309][ T6258] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.780'. [ 122.157896][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.188743][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.223213][ T6235] device bridge_slave_0 entered promiscuous mode [ 122.350458][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.355535][ T6281] unsupported nlmsg_type 40 [ 122.372568][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.392381][ T6235] device bridge_slave_1 entered promiscuous mode [ 122.482688][ T6259] loop4: detected capacity change from 0 to 40427 [ 122.526479][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.596851][ T6259] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 122.621081][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.636027][ T6259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.662942][ T6259] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 122.683323][ T6285] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 122.761645][ T6285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.779860][ T6259] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.839581][ T6235] team0: Port device team_slave_0 added [ 122.893451][ T6235] team0: Port device team_slave_1 added [ 122.974306][ T6302] set_capacity_and_notify: 1 callbacks suppressed [ 122.974324][ T6302] loop1: detected capacity change from 0 to 256 [ 123.035467][ T6259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 123.055817][ T6259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.059895][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 123.203741][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.236779][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.342028][ T6312] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.353182][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.480135][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.507346][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.534517][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.568033][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.755911][ T6235] device hsr_slave_0 entered promiscuous mode [ 123.796915][ T6235] device hsr_slave_1 entered promiscuous mode [ 123.837111][ T6235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.875001][ T6235] Cannot create hsr debugfs directory [ 124.198568][ T155] device hsr_slave_0 left promiscuous mode [ 124.209436][ T155] device hsr_slave_1 left promiscuous mode [ 124.260512][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.299939][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.326415][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.358592][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.383509][ T155] batman_adv: batadv0: Interface deactivated: vlan1 [ 124.402233][ T155] batman_adv: batadv0: Removing interface: vlan1 [ 124.426464][ T155] device bridge_slave_1 left promiscuous mode [ 124.469734][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.593562][ T155] device bridge_slave_0 left promiscuous mode [ 124.618723][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.696070][ T155] device veth1_macvtap left promiscuous mode [ 124.709603][ T155] device veth0_macvtap left promiscuous mode [ 124.728174][ T155] device veth1_vlan left promiscuous mode [ 124.745245][ T155] device veth0_vlan left promiscuous mode [ 124.858063][ T6347] loop2: detected capacity change from 0 to 32768 [ 124.959606][ T4574] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.979529][ T6347] XFS (loop2): Mounting V5 Filesystem [ 125.107324][ T6347] XFS (loop2): Ending clean mount [ 125.130944][ T6347] XFS (loop2): Quotacheck needed: Please wait. [ 125.221100][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 125.238052][ T6347] XFS (loop2): Quotacheck: Done. [ 125.260322][ T6362] loop3: detected capacity change from 0 to 40427 [ 125.322776][ T6362] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 125.328896][ T4574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.360331][ T6362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 125.368790][ T4574] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 125.391463][ T4188] XFS (loop2): Unmounting Filesystem [ 125.392906][ T4574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.417178][ T6362] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 125.457974][ T6362] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.458043][ T4574] usb 5-1: config 0 descriptor?? [ 125.588649][ T6362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.596649][ T6362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.804997][ T155] team0 (unregistering): Port device team_slave_1 removed [ 125.841547][ T155] team0 (unregistering): Port device team_slave_0 removed [ 125.899046][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.929092][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.963219][ T4574] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 125.994429][ T4574] hid_mf 0003:0079:1846.000A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 126.179967][ T155] bond0 (unregistering): Released all slaves [ 126.263069][ T4574] usb 5-1: USB disconnect, device number 5 [ 126.311156][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 126.332904][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 126.344913][ T6386] loop3: detected capacity change from 0 to 256 [ 126.348743][ T6353] netlink: 'syz.1.811': attribute type 12 has an invalid length. [ 126.365718][ T6353] netlink: 'syz.1.811': attribute type 14 has an invalid length. [ 126.402090][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 126.428549][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 126.449285][ T6386] FAT-fs (loop3): Directory bread(block 64) failed [ 126.456252][ T6386] FAT-fs (loop3): Directory bread(block 65) failed [ 126.476666][ T6379] device macvlan2 entered promiscuous mode [ 126.482523][ T6386] FAT-fs (loop3): Directory bread(block 66) failed [ 126.505207][ T6386] FAT-fs (loop3): Directory bread(block 67) failed [ 126.554176][ T6386] FAT-fs (loop3): Directory bread(block 68) failed [ 126.584505][ T6386] FAT-fs (loop3): Directory bread(block 69) failed [ 126.635928][ T6386] FAT-fs (loop3): Directory bread(block 70) failed [ 126.664457][ T6386] FAT-fs (loop3): Directory bread(block 71) failed [ 126.700605][ T6393] loop1: detected capacity change from 0 to 16 [ 126.704364][ T6386] FAT-fs (loop3): Directory bread(block 72) failed [ 126.722135][ T6386] FAT-fs (loop3): Directory bread(block 73) failed [ 126.773785][ T6393] erofs: (device loop1): mounted with root inode @ nid 36. [ 126.831992][ T6393] attempt to access beyond end of device [ 126.831992][ T6393] loop1: rw=524288, want=34359738368, limit=16 [ 126.914466][ T6393] attempt to access beyond end of device [ 126.914466][ T6393] loop1: rw=0, want=34359738368, limit=16 [ 126.936831][ T6235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.969100][ T6235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.027636][ T6235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.039301][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 127.039318][ T26] audit: type=1800 audit(1770113820.789:47): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.823" name="file3" dev="loop1" ino=41 res=0 errno=0 [ 127.110738][ T6235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.174761][ T6411] syz.2.829 uses obsolete (PF_INET,SOCK_PACKET) [ 127.298587][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 127.633742][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.723670][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.774582][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.853340][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.908597][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.939265][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.988841][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.996070][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.117091][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.141117][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.183601][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.213879][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.221848][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.291663][ T6459] loop2: detected capacity change from 0 to 65 [ 128.319332][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.348246][ T6459] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 128.351205][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.431096][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.526650][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.556146][ T6465] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.848'. [ 128.608112][ T6421] loop4: detected capacity change from 0 to 32768 [ 128.654127][ T6235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.703874][ T6235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.736843][ T6421] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 128.750019][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.759967][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.770107][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.779948][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.792079][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.802346][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.811762][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.828656][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.948297][ T6421] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.115605][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 129.295048][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.333462][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.378944][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 129.390978][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.473666][ T6501] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.859'. [ 130.008604][ T4574] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 130.152257][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.166987][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.191587][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.225153][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.234991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.283362][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.296835][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.317898][ T6536] loop3: detected capacity change from 0 to 1024 [ 130.335642][ T6235] device veth0_vlan entered promiscuous mode [ 130.371086][ T4574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.376530][ T6235] device veth1_vlan entered promiscuous mode [ 130.403546][ T4574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.419400][ T4574] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 130.440494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.452210][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.474363][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.483084][ T4574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.492722][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 130.504286][ T4574] usb 3-1: config 0 descriptor?? [ 130.563325][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.589136][ T144] hfsplus: b-tree write err: -5, ino 4 [ 130.622812][ T6235] device veth0_macvtap entered promiscuous mode [ 130.649383][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.668935][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.695674][ T6235] device veth1_macvtap entered promiscuous mode [ 130.768906][ T1108] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 130.782144][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.798632][ T1108] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.837468][ T1108] usb 5-1: config 4 has no interface number 0 [ 130.844985][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.896520][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.936033][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.951608][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 130.977447][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.990932][ T4574] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 131.016204][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.039159][ T4574] bigben 0003:146B:0902.000B: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 131.046448][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.078928][ T13] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 131.089418][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.093869][ T4574] bigben 0003:146B:0902.000B: not enough fields in HID_OUTPUT_REPORT 0 [ 131.100270][ T13] usb 2-1: config 0 has no interface number 0 [ 131.116810][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.124792][ T1108] usb 5-1: string descriptor 0 read error: -22 [ 131.135417][ T13] usb 2-1: config 0 interface 151 has no altsetting 0 [ 131.143326][ T1108] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 131.154178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.155571][ T13] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=43.24 [ 131.162969][ T4574] bigben 0003:146B:0902.000B: no output report found [ 131.172841][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.188081][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.189845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.217770][ T13] usb 2-1: config 0 descriptor?? [ 131.250315][ T1108] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 131.255479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.277848][ T1108] usb 5-1: No valid video chain found. [ 131.286589][ T4574] usb 3-1: USB disconnect, device number 5 [ 131.318733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.375605][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.412492][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.443597][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.487419][ T6560] fido_id[6560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 131.503452][ T13] usb 2-1: string descriptor 0 read error: -71 [ 131.517320][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.538689][ T7] usb 5-1: USB disconnect, device number 6 [ 131.548634][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.548948][ T13] rtsx_usb: probe of 2-1:0.151 failed with error -22 [ 131.571592][ T4336] IPVS: rr: FWM 3 0x00000003 - no destination available [ 131.579317][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 131.584370][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.610820][ T13] usb 2-1: USB disconnect, device number 6 [ 131.649249][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.682111][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.716252][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.742700][ T6565] tipc: Started in network mode [ 131.748071][ T6565] tipc: Node identity 2, cluster identity 3142 [ 131.774694][ T6565] tipc: Node number set to 2 [ 131.780848][ T6565] tipc: Cannot configure node identity twice [ 131.787534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.812442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.845504][ T6235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.895641][ T6235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.931491][ T6235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.941309][ T6235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.128606][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.150638][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.233957][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.303939][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.345003][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.404174][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.658085][ T6584] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.766'. [ 132.706607][ T6584] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 132.761439][ T6584] openvswitch: netlink: Message has 1 unknown bytes. [ 132.831248][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838348][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958120][ T6591] tipc: Started in network mode [ 132.966792][ T6567] loop2: detected capacity change from 0 to 32768 [ 132.980022][ T6591] tipc: Node identity , cluster identity 4711 [ 133.024178][ T6593] netlink: 'syz.5.884': attribute type 28 has an invalid length. [ 133.032339][ T6591] tipc: Failed to obtain node identity [ 133.058766][ T6591] tipc: Enabling of bearer rejected, failed to enable media [ 133.213625][ T6597] loop5: detected capacity change from 0 to 1024 [ 133.214533][ T6569] loop3: detected capacity change from 0 to 32768 [ 133.233179][ T2856] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 133.261968][ T2856] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.366059][ T6573] loop4: detected capacity change from 0 to 32768 [ 133.378216][ T6597] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.487617][ T6569] XFS (loop3): Mounting V5 Filesystem [ 133.547298][ T6614] fido_id[6614]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.662867][ T6569] XFS (loop3): Ending clean mount [ 133.888633][ T4195] XFS (loop3): Unmounting Filesystem [ 134.513572][ T6634] loop5: detected capacity change from 0 to 4096 [ 134.613197][ T6634] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 134.633116][ T6661] loop2: detected capacity change from 0 to 256 [ 134.734625][ T6665] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 134.891426][ T6667] loop3: detected capacity change from 0 to 1024 [ 135.129246][ T155] hfsplus: b-tree write err: -5, ino 4 [ 135.161052][ T6679] loop4: detected capacity change from 0 to 1024 [ 135.288117][ T6688] loop1: detected capacity change from 0 to 16 [ 135.339230][ T6679] hfsplus: bad catalog entry type [ 135.425789][ T6698] netlink: 'syz.5.918': attribute type 1 has an invalid length. [ 135.432662][ T6688] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.459137][ T155] hfsplus: b-tree write err: -5, ino 4 [ 135.510066][ T6699] loop2: detected capacity change from 0 to 2048 [ 135.563664][ T6699] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.694757][ T6712] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.807146][ T6718] loop4: detected capacity change from 0 to 1024 [ 135.946621][ T6718] hfsplus: bad catalog entry type [ 135.985244][ T6729] loop2: detected capacity change from 0 to 16 [ 136.041979][ T145] hfsplus: b-tree write err: -5, ino 4 [ 136.043236][ T6729] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.367156][ T6749] loop4: detected capacity change from 0 to 8 [ 136.383445][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 136.497967][ T6749] SQUASHFS error: Unable to read inode 0x11f [ 136.698877][ T6756] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.717389][ T6774] device bridge1 entered promiscuous mode [ 136.748196][ T6774] team0: Port device bridge1 added [ 136.854920][ T6756] EXT4-fs (loop2): can't change dax mount option while remounting [ 136.918619][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 137.288919][ T23] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 137.305863][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.328736][ T6794] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.343111][ T23] usb 4-1: config 0 descriptor?? [ 137.346626][ T6794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 137.368090][ T6794] System zones: 0-1, 15-15, 18-18, 34-34 [ 137.379708][ T6794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.386601][ T6794] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 137.400351][ T6794] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.417144][ T6794] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 137.445231][ T6794] EXT4-fs (loop1): 1 truncate cleaned up [ 137.453311][ T6794] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 137.487129][ T6794] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 137.535311][ T6794] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 137.570687][ T6814] netlink: 'syz.2.965': attribute type 3 has an invalid length. [ 137.733325][ T6816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.833863][ T23] uclogic 0003:28BD:0094.000D: No inputs registered, leaving [ 137.867219][ T23] uclogic 0003:28BD:0094.000D: hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input0 [ 138.028997][ T6835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.059072][ T4191] usb 4-1: USB disconnect, device number 5 [ 138.098387][ T6835] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.032883][ T6868] set_capacity_and_notify: 5 callbacks suppressed [ 139.032902][ T6868] loop1: detected capacity change from 0 to 128 [ 139.162870][ T6831] loop4: detected capacity change from 0 to 32768 [ 139.275564][ T6831] (syz.4.971,6831,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.366851][ T6831] (syz.4.971,6831,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.611646][ T6831] JBD2: Ignoring recovery information on journal [ 139.614400][ T6872] fido_id[6872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.939444][ T6831] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.054943][ T6889] loop1: detected capacity change from 0 to 64 [ 140.220649][ T4333] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.368816][ T6891] loop5: detected capacity change from 0 to 512 [ 140.396553][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 140.437023][ T6856] loop2: detected capacity change from 0 to 40427 [ 140.450208][ T6893] loop1: detected capacity change from 0 to 1764 [ 140.518616][ T4333] usb 4-1: Using ep0 maxpacket: 16 [ 140.530183][ T6856] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.574590][ T6891] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.5.996: corrupted xattr block 95 [ 140.592868][ T6856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.690335][ T6891] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 140.704895][ T6891] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.996: bg 0: block 7: invalid block bitmap [ 140.728046][ T6856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.743881][ T6891] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 140.768833][ T4333] usb 4-1: config 1 interface 0 altsetting 217 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 140.798564][ T4333] usb 4-1: config 1 interface 0 altsetting 217 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 140.869938][ T4333] usb 4-1: config 1 interface 0 has no altsetting 0 [ 140.908821][ T6891] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2922: inode #11: comm syz.5.996: corrupted xattr block 95 [ 140.968344][ T6891] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 140.978856][ T6856] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.988960][ T6856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.001041][ T6891] EXT4-fs (loop5): 1 orphan inode deleted [ 141.007037][ T6891] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.088633][ T6905] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 141.088791][ T4333] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c05, bcdDevice= 0.40 [ 141.139870][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.158894][ T6905] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 141.197905][ T4333] usb 4-1: Product: syz [ 141.228130][ T4333] usb 4-1: Manufacturer: syz [ 141.247122][ T4333] usb 4-1: SerialNumber: syz [ 141.254310][ T6905] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 141.281083][ T1345] IPVS: rr: FWM 3 0x00000003 - no destination available [ 141.289156][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 141.299943][ T6886] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.337733][ T6905] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 141.349619][ T6905] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 141.364720][ T6905] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 141.372935][ T6905] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 141.394265][ T6905] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 141.410700][ T6905] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 141.418046][ T6905] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 141.435422][ T6905] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 141.442551][ T6905] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 141.591659][ T6910] sock: sock_set_timeout: `syz.1.1003' (pid 6910) tries to set negative timeout [ 141.616117][ T6898] loop4: detected capacity change from 0 to 32768 [ 141.808807][ T4333] usbhid 4-1:1.0: can't add hid device: -71 [ 141.815604][ T4333] usbhid: probe of 4-1:1.0 failed with error -71 [ 141.899873][ T4333] usb 4-1: USB disconnect, device number 6 [ 141.916616][ T6898] XFS (loop4): Mounting V5 Filesystem [ 142.149491][ T6898] XFS (loop4): Ending clean mount [ 142.200065][ T6898] XFS (loop4): Quotacheck needed: Please wait. [ 142.216737][ T6944] loop2: detected capacity change from 0 to 1764 [ 142.321808][ T6944] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 142.342883][ T6898] XFS (loop4): Quotacheck: Done. [ 142.601926][ T4189] XFS (loop4): Unmounting Filesystem [ 142.807047][ T6967] loop5: detected capacity change from 0 to 2048 [ 142.902261][ T6977] loop2: detected capacity change from 0 to 64 [ 142.960523][ T6967] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.382429][ T7002] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.438788][ T7002] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 143.468402][ T7002] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.486320][ T7002] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 143.524497][ T7002] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.548605][ T7002] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 143.555748][ T7002] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.580141][ T7002] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.605807][ T7002] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 143.639385][ T7002] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 143.677965][ T7002] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 143.719272][ T7008] FAT-fs (loop2): Directory bread(block 64) failed [ 143.758578][ T7002] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 143.768136][ T7008] FAT-fs (loop2): Directory bread(block 65) failed [ 143.799953][ T7008] FAT-fs (loop2): Directory bread(block 66) failed [ 143.862176][ T7008] FAT-fs (loop2): Directory bread(block 67) failed [ 143.928159][ T7008] FAT-fs (loop2): Directory bread(block 68) failed [ 143.951516][ T7008] FAT-fs (loop2): Directory bread(block 69) failed [ 143.999036][ T7008] FAT-fs (loop2): Directory bread(block 70) failed [ 144.006124][ T7008] FAT-fs (loop2): Directory bread(block 71) failed [ 144.078569][ T7008] FAT-fs (loop2): Directory bread(block 72) failed [ 144.111586][ T7008] FAT-fs (loop2): Directory bread(block 73) failed [ 144.129821][ T7020] set_capacity_and_notify: 2 callbacks suppressed [ 144.129839][ T7020] loop3: detected capacity change from 0 to 2048 [ 144.286595][ T7020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.859716][ T7012] loop5: detected capacity change from 0 to 32768 [ 144.992399][ T7012] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1043 (7012) [ 145.027715][ T7043] loop1: detected capacity change from 0 to 512 [ 145.045874][ T7012] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 145.068183][ T7012] BTRFS info (device loop5): enabling disk space caching [ 145.085989][ T7012] BTRFS info (device loop5): force clearing of disk cache [ 145.114543][ T7012] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.136431][ T7012] BTRFS info (device loop5): use zstd compression, level 3 [ 145.155080][ T7043] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 145.200149][ T7012] BTRFS info (device loop5): disk space caching is enabled [ 145.208001][ T7012] BTRFS info (device loop5): has skinny extents [ 145.497836][ T7028] loop2: detected capacity change from 0 to 40427 [ 145.521764][ T7028] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 145.530545][ T7028] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 145.546371][ T7028] F2FS-fs (loop2): invalid crc value [ 145.554449][ T7028] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.558399][ T7030] loop4: detected capacity change from 0 to 40427 [ 145.595634][ T7012] BTRFS info (device loop5): enabling ssd optimizations [ 145.606127][ T7012] BTRFS info (device loop5): clearing free space tree [ 145.614353][ T7012] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.627192][ T7012] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.735630][ T7030] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 145.746097][ T7030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 145.757656][ T7028] F2FS-fs (loop2): Start checkpoint disabled! [ 145.791201][ T7030] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.831098][ T7028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 146.019886][ T7030] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.052388][ T7030] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.451256][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 146.615015][ T9] attempt to access beyond end of device [ 146.615015][ T9] loop2: rw=2049, want=40976, limit=40427 [ 146.715581][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1072'. [ 146.868747][ T7] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.884209][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 146.892087][ T7] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.925640][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.950457][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00 [ 146.984995][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.008316][ T7] usb 4-1: config 0 descriptor?? [ 147.180128][ T7113] device bridge_slave_0 left promiscuous mode [ 147.220671][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.420381][ T7123] loop5: detected capacity change from 0 to 2048 [ 147.510443][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.518038][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.538953][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.556270][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.574756][ T7123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.586242][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.620286][ T7131] loop4: detected capacity change from 0 to 4096 [ 147.637842][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.684220][ T7] apple 0003:05AC:024D.000E: unknown main item tag 0x0 [ 147.714224][ T7] apple 0003:05AC:024D.000E: hidraw0: USB HID v0.00 Device [HID 05ac:024d] on usb-dummy_hcd.3-1/input0 [ 147.743759][ T7131] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 147.745088][ T7] usb 4-1: USB disconnect, device number 7 [ 147.826044][ T7131] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.926359][ T7131] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 147.996243][ T7131] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 148.077954][ T7131] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 148.100943][ T7142] fido_id[7142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 148.173151][ T7131] ntfs: volume version 3.1. [ 148.232784][ T7131] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 148.266655][ T7152] loop2: detected capacity change from 0 to 512 [ 148.296413][ T7131] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 148.357537][ T7149] loop5: detected capacity change from 0 to 8192 [ 148.357768][ T7131] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 148.393821][ T7152] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.424904][ T7159] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1092'. [ 148.463691][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1092'. [ 148.464695][ T7152] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 148.485288][ T7131] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 148.506239][ T7131] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 148.531038][ T7149] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 148.560849][ T7149] REISERFS (device loop5): using ordered data mode [ 148.577917][ T7152] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 148.612357][ T7152] System zones: 0-2, 18-18, 34-34 [ 148.614606][ T7149] reiserfs: using flush barriers [ 148.633875][ T7149] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.664666][ T7152] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1090: bad orphan inode 15 [ 148.686155][ T7149] REISERFS (device loop5): checking transaction log (loop5) [ 148.723305][ T7149] REISERFS (device loop5): Using r5 hash to sort names [ 148.731275][ T7152] ext4_test_bit(bit=14, block=18) = 1 [ 148.767136][ T7149] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 148.777581][ T7152] is_bad_inode(inode)=0 [ 148.812048][ T7152] NEXT_ORPHAN(inode)=2264924160 [ 148.817063][ T7152] max_ino=32 [ 148.866818][ T7152] i_nlink=0 [ 148.883528][ T7175] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1095'. [ 148.920550][ T7152] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.1090: corrupted inode contents [ 148.964506][ T7175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.991100][ T7152] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #15: comm syz.2.1090: mark_inode_dirty error [ 149.079349][ T7152] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.1090: corrupted inode contents [ 149.140715][ T7152] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2951: inode #15: comm syz.2.1090: mark_inode_dirty error [ 149.192074][ T7152] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.1090: mark inode dirty (error -117) [ 149.258786][ T7152] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 149.286070][ T7152] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.431475][ T7202] loop1: detected capacity change from 0 to 256 [ 149.519962][ T7202] exfat: Deprecated parameter 'namecase' [ 149.586790][ T7202] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 150.100397][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1113'. [ 150.148545][ T2856] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 150.368900][ T7242] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 150.509807][ T7248] loop4: detected capacity change from 0 to 256 [ 150.518750][ T2856] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 150.527142][ T2856] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 150.578690][ T2856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.610588][ T7199] loop3: detected capacity change from 0 to 32768 [ 150.617678][ T2856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 150.638596][ T2856] usb 2-1: config 1 has no interface number 0 [ 150.644859][ T2856] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 150.675083][ T2856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.751559][ T2856] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 150.764680][ T7] IPVS: rr: FWM 3 0x00000003 - no destination available [ 150.772201][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 150.826095][ T7259] loop2: detected capacity change from 0 to 512 [ 150.854826][ T7227] loop5: detected capacity change from 0 to 32768 [ 150.868282][ T7199] XFS (loop3): Mounting V5 Filesystem [ 150.941353][ T7227] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root [ 150.941353][ T7227] [ 150.979059][ T2856] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 150.987472][ T2856] snd_usb_pod 2-1:1.1: invalid control EP [ 151.025020][ T7273] loop4: detected capacity change from 0 to 512 [ 151.027734][ T7259] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.048847][ T7259] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.072503][ T2856] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 151.074858][ T7273] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.080740][ T2856] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 151.089618][ T7273] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (4000000) [ 151.089645][ T7273] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 151.140321][ T7259] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.1121: corrupted inode contents [ 151.174294][ T2856] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 151.202291][ T7259] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.1121: mark_inode_dirty error [ 151.225946][ T2856] usb 2-1: USB disconnect, device number 7 [ 151.266953][ T7199] XFS (loop3): Ending clean mount [ 151.283583][ T7259] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.1121: corrupted inode contents [ 151.335975][ T7199] XFS (loop3): Quotacheck needed: Please wait. [ 151.395378][ T7275] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.1121: corrupted inode contents [ 151.540968][ T6235] BUG: Bad page state in process syz-executor pfn:6618a [ 151.549913][ T7275] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.1121: mark_inode_dirty error [ 151.579505][ T7199] XFS (loop3): Quotacheck: Done. [ 151.596119][ T6235] page:ffffea0001986280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x6618a [ 151.607905][ T6235] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 151.629551][ T7275] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.1121: corrupted inode contents [ 151.631730][ T6235] raw: 00fff00000002006 ffffea00017ee248 ffffc9000347fa00 0000000000000000 [ 151.693236][ T6235] raw: 0000000000000004 ffff88801b58ec98 00000000ffffffff 0000000000000000 [ 151.735128][ T4195] XFS (loop3): Unmounting Filesystem [ 151.743929][ T6235] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 151.771923][ T6235] page_owner tracks the page as allocated [ 151.801432][ T6235] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 7227, ts 150939398649, free_ts 143485124726 [ 151.897399][ T6235] get_page_from_freelist+0x1bbd/0x1ca0 [ 151.904795][ T6235] __alloc_pages+0x1ee/0x480 [ 151.933310][ T6235] __page_cache_alloc+0xce/0x440 [ 151.939095][ T6235] do_read_cache_page+0x1da/0x1030 [ 151.958530][ T6235] __get_metapage+0x35d/0x1060 [ 151.963450][ T6235] dbAllocCtl+0xd4/0x9b0 [ 151.969907][ T6235] dbAllocAG+0xc23/0xfe0 [ 151.990531][ T6235] dbDiscardAG+0x2c5/0x8e0 [ 151.995733][ T6235] jfs_ioc_trim+0x41e/0x680 [ 152.014773][ T6235] jfs_ioctl+0x2b6/0x3c0 [ 152.019857][ T6235] __se_sys_ioctl+0xfa/0x170 [ 152.024584][ T6235] do_syscall_64+0x4c/0xa0 [ 152.030141][ T6235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.038084][ T6235] page last free stack trace: [ 152.073211][ T6235] free_unref_page_prepare+0x637/0x6c0 [ 152.081250][ T6235] free_unref_page+0x8f/0x2a0 [ 152.086062][ T6235] __vunmap+0x8b9/0xa50 [ 152.095287][ T6235] vb2_vmalloc_put+0x64/0xa0 [ 152.138520][ T6235] __vb2_buf_mem_free+0x113/0x2c0 [ 152.143773][ T6235] __vb2_queue_free+0x447/0xd80 [ 152.149684][ T6235] vb2_core_queue_release+0x5b/0x80 [ 152.157671][ T6235] v4l2_m2m_ctx_release+0x1a/0x30 [ 152.178527][ T6235] vim2m_release+0xd4/0x130 [ 152.183346][ T6235] v4l2_release+0x1f9/0x390 [ 152.187970][ T6235] __fput+0x234/0x930 [ 152.201684][ T6235] task_work_run+0x125/0x1a0 [ 152.207037][ T6235] exit_to_user_mode_loop+0x10f/0x130 [ 152.226439][ T6235] exit_to_user_mode_prepare+0xee/0x180 [ 152.238007][ T6235] syscall_exit_to_user_mode+0x16/0x40 [ 152.245576][ T6235] do_syscall_64+0x58/0xa0 [ 152.257359][ T6235] Modules linked in: [ 152.263843][ T6235] CPU: 1 PID: 6235 Comm: syz-executor Not tainted syzkaller #0 [ 152.272095][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.282734][ T6235] Call Trace: [ 152.286496][ T6235] [ 152.289759][ T6235] dump_stack_lvl+0x188/0x250 [ 152.294750][ T6235] ? show_regs_print_info+0x20/0x20 [ 152.300286][ T6235] ? clockevents_increase_min_delta+0x130/0x130 [ 152.306891][ T6235] bad_page+0x14b/0x170 [ 152.311175][ T6235] free_unref_page_prepare+0x383/0x6c0 [ 152.317288][ T6235] free_unref_page_list+0x119/0x820 [ 152.322710][ T6235] ? uncharge_page+0x490/0x490 [ 152.327901][ T6235] ? free_unref_page_commit+0x4c0/0x4c0 [ 152.333601][ T6235] release_pages+0x186c/0x1be0 [ 152.338499][ T6235] ? lru_cache_disable+0x30/0x30 [ 152.344043][ T6235] __pagevec_release+0x6d/0xe0 [ 152.349151][ T6235] truncate_inode_pages_range+0x362/0xfe0 [ 152.354915][ T6235] ? rcu_force_quiescent_state+0x230/0x230 [ 152.360857][ T6235] ? invalidate_inode_page+0x360/0x360 [ 152.366463][ T6235] ? do_raw_spin_unlock+0x11d/0x230 [ 152.372161][ T6235] ? _raw_spin_unlock+0x24/0x40 [ 152.377491][ T6235] dbUnmount+0x105/0x170 [ 152.381909][ T6235] jfs_umount+0x1fa/0x360 [ 152.386595][ T6235] jfs_put_super+0x88/0x190 [ 152.391249][ T6235] ? jfs_free_inode+0x20/0x20 [ 152.396267][ T6235] generic_shutdown_super+0x130/0x300 [ 152.401888][ T6235] kill_block_super+0x7c/0xe0 [ 152.406698][ T6235] deactivate_locked_super+0x93/0xf0 [ 152.412158][ T6235] cleanup_mnt+0x42d/0x4e0 [ 152.416705][ T6235] ? lockdep_hardirqs_on+0x94/0x140 [ 152.422126][ T6235] task_work_run+0x125/0x1a0 [ 152.426889][ T6235] exit_to_user_mode_loop+0x10f/0x130 [ 152.432716][ T6235] exit_to_user_mode_prepare+0xee/0x180 [ 152.438476][ T6235] syscall_exit_to_user_mode+0x16/0x40 [ 152.444147][ T6235] do_syscall_64+0x58/0xa0 [ 152.448766][ T6235] ? clear_bhb_loop+0x30/0x80 [ 152.453477][ T6235] ? clear_bhb_loop+0x30/0x80 [ 152.458459][ T6235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.464575][ T6235] RIP: 0033:0x7f35f9b91117 [ 152.469110][ T6235] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 152.489832][ T6235] RSP: 002b:00007fff23160938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.498716][ T6235] RAX: 0000000000000000 RBX: 00007f35f9bf971f RCX: 00007f35f9b91117 [ 152.506907][ T6235] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff231609f0 [ 152.515105][ T6235] RBP: 00007fff231609f0 R08: 00007fff231619f0 R09: 00000000ffffffff [ 152.523110][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff23161a80 [ 152.531110][ T6235] R13: 00007f35f9bf971f R14: 0000000000024e30 R15: 00007fff23161ac0 [ 152.539236][ T6235] [ 152.551232][ T6235] Disabling lock debugging due to kernel taint [ 152.557583][ T6235] BUG: Bad page state in process syz-executor pfn:5fb89 [ 152.565710][ T6235] page:ffffea00017ee240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x5fb89 [ 152.577218][ T6235] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 152.590643][ T6235] raw: 00fff00000002006 ffffea0001875008 ffffc9000347fa00 0000000000000000 [ 152.600410][ T6235] raw: 0000000000000003 ffff8880237b1000 00000000ffffffff 0000000000000000 [ 152.613542][ T6235] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 152.622032][ T6235] page_owner tracks the page as allocated [ 152.628372][ T6235] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 7227, ts 150936070305, free_ts 144663220940 [ 152.646636][ T6235] get_page_from_freelist+0x1bbd/0x1ca0 [ 152.655878][ T6235] __alloc_pages+0x1ee/0x480 [ 152.661409][ T6235] __page_cache_alloc+0xce/0x440 [ 152.666574][ T6235] do_read_cache_page+0x1da/0x1030 [ 152.674534][ T6235] __get_metapage+0x35d/0x1060 [ 152.680223][ T6235] dbAllocAG+0x3dc/0xfe0 [ 152.684579][ T6235] dbDiscardAG+0x2c5/0x8e0 [ 152.691252][ T6235] jfs_ioc_trim+0x41e/0x680 [ 152.696056][ T6235] jfs_ioctl+0x2b6/0x3c0 [ 152.700816][ T6235] __se_sys_ioctl+0xfa/0x170 [ 152.705664][ T6235] do_syscall_64+0x4c/0xa0 [ 152.712434][ T6235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.720440][ T6235] page last free stack trace: [ 152.725530][ T6235] free_unref_page_prepare+0x637/0x6c0 [ 152.733856][ T6235] free_unref_page_list+0x119/0x820 [ 152.740305][ T6235] release_pages+0x186c/0x1be0 [ 152.745426][ T6235] __pagevec_release+0x6d/0xe0 [ 152.753087][ T6235] truncate_inode_pages_range+0x362/0xfe0 [ 152.760443][ T6235] blkdev_flush_mapping+0x188/0x360 [ 152.765950][ T6235] blkdev_put+0x4d1/0x7d0 [ 152.772755][ T6235] deactivate_locked_super+0x93/0xf0 [ 152.778253][ T6235] cleanup_mnt+0x42d/0x4e0 [ 152.783473][ T6235] task_work_run+0x125/0x1a0 [ 152.790545][ T6235] exit_to_user_mode_loop+0x10f/0x130 [ 152.796239][ T6235] exit_to_user_mode_prepare+0xee/0x180 [ 152.802368][ T6235] syscall_exit_to_user_mode+0x16/0x40 [ 152.808297][ T6235] do_syscall_64+0x58/0xa0 [ 152.816769][ T6235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.823224][ T6235] Modules linked in: [ 152.827332][ T6235] CPU: 1 PID: 6235 Comm: syz-executor Tainted: G B syzkaller #0 [ 152.836672][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.847543][ T6235] Call Trace: [ 152.850939][ T6235] [ 152.854115][ T6235] dump_stack_lvl+0x188/0x250 [ 152.859277][ T6235] ? show_regs_print_info+0x20/0x20 [ 152.864596][ T6235] ? clockevents_increase_min_delta+0x130/0x130 [ 152.870886][ T6235] bad_page+0x14b/0x170 [ 152.875337][ T6235] free_unref_page_prepare+0x383/0x6c0 [ 152.880828][ T6235] free_unref_page_list+0x119/0x820 [ 152.886437][ T6235] ? uncharge_page+0x490/0x490 [ 152.891342][ T6235] ? free_unref_page_commit+0x4c0/0x4c0 [ 152.897389][ T6235] release_pages+0x186c/0x1be0 [ 152.902366][ T6235] ? lru_cache_disable+0x30/0x30 [ 152.907796][ T6235] __pagevec_release+0x6d/0xe0 [ 152.912949][ T6235] truncate_inode_pages_range+0x362/0xfe0 [ 152.918826][ T6235] ? rcu_force_quiescent_state+0x230/0x230 [ 152.924924][ T6235] ? invalidate_inode_page+0x360/0x360 [ 152.930623][ T6235] ? do_raw_spin_unlock+0x11d/0x230 [ 152.936009][ T6235] ? _raw_spin_unlock+0x24/0x40 [ 152.941248][ T6235] dbUnmount+0x105/0x170 [ 152.945920][ T6235] jfs_umount+0x1fa/0x360 [ 152.950457][ T6235] jfs_put_super+0x88/0x190 [ 152.955273][ T6235] ? jfs_free_inode+0x20/0x20 [ 152.960154][ T6235] generic_shutdown_super+0x130/0x300 [ 152.965657][ T6235] kill_block_super+0x7c/0xe0 [ 152.970559][ T6235] deactivate_locked_super+0x93/0xf0 [ 152.976197][ T6235] cleanup_mnt+0x42d/0x4e0 [ 152.980948][ T6235] ? lockdep_hardirqs_on+0x94/0x140 [ 152.986449][ T6235] task_work_run+0x125/0x1a0 [ 152.991256][ T6235] exit_to_user_mode_loop+0x10f/0x130 [ 152.997547][ T6235] exit_to_user_mode_prepare+0xee/0x180 [ 153.003314][ T6235] syscall_exit_to_user_mode+0x16/0x40 [ 153.009158][ T6235] do_syscall_64+0x58/0xa0 [ 153.013885][ T6235] ? clear_bhb_loop+0x30/0x80 [ 153.018904][ T6235] ? clear_bhb_loop+0x30/0x80 [ 153.023798][ T6235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.030329][ T6235] RIP: 0033:0x7f35f9b91117 [ 153.035287][ T6235] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 153.056642][ T6235] RSP: 002b:00007fff23160938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.065836][ T6235] RAX: 0000000000000000 RBX: 00007f35f9bf971f RCX: 00007f35f9b91117 [ 153.074312][ T6235] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff231609f0 [ 153.083517][ T6235] RBP: 00007fff231609f0 R08: 00007fff231619f0 R09: 00000000ffffffff [ 153.092235][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff23161a80 [ 153.100416][ T6235] R13: 00007f35f9bf971f R14: 0000000000024e30 R15: 00007fff23161ac0 [ 153.109035][ T6235] [ 160.339605][ T1108] IPVS: rr: FWM 3 0x00000003 - no destination available [ 160.346852][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available