last executing test programs: 2m32.007715124s ago: executing program 0 (id=1): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x34}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2m31.74819257s ago: executing program 0 (id=14): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m30.586595418s ago: executing program 0 (id=24): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89e0, 0xffffffffffffffff) 2m15.450181497s ago: executing program 32 (id=24): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89e0, 0xffffffffffffffff) 3.128026716s ago: executing program 1 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40, 0x5d, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 2.904620699s ago: executing program 1 (id=1515): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r0, &(0x7f0000002c00)=[{&(0x7f0000001840)="d2", 0x1}], 0x1) 2.760047218s ago: executing program 4 (id=1517): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x1000000000000001, 0x5, 0x42, 0x1, 0xfffffffffffffffd, 0x66c}) 2.73806878s ago: executing program 1 (id=1518): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000340)={[{@rodir}, {@fat=@nocase}, {@utf8no}, {@fat=@discard}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.320871373s ago: executing program 2 (id=1521): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) 2.319439994s ago: executing program 1 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) 2.261358847s ago: executing program 4 (id=1523): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 2.001388522s ago: executing program 1 (id=1525): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) 1.990182773s ago: executing program 2 (id=1526): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) 1.704793s ago: executing program 2 (id=1528): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 1.583669777s ago: executing program 4 (id=1530): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000121401"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 1.572803528s ago: executing program 1 (id=1531): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102e0d703010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c0900030424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.403742057s ago: executing program 3 (id=1532): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) 1.347650861s ago: executing program 4 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) 1.258914906s ago: executing program 3 (id=1534): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20, 0x2]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@ip={@broadcast, @local, 0xff000000, 0xffffffff, 'caif0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x8}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.18327457s ago: executing program 4 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000040000000160a0101000b000000000000010000080900020073797a31000000000900010073797a30000000001400038008000240000000fb070001"], 0xc8}, 0x1, 0x0, 0x0, 0x20040802}, 0x0) 1.078118406s ago: executing program 3 (id=1536): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x45, 0x0, &(0x7f0000000240)) 984.235912ms ago: executing program 4 (id=1537): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x180c850, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x9, 0x369, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 909.923546ms ago: executing program 3 (id=1538): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x1210080, &(0x7f0000000180)={[{@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0x3538}}, {@part={'part', 0x3d, 0xffffffffffff8001}}, {@codepage={'codepage', 0x3d, 'cp865'}}, {@umask={'umask', 0x3d, 0x32b}}, {}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) 770.669495ms ago: executing program 2 (id=1539): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 383.103067ms ago: executing program 2 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 332.286851ms ago: executing program 3 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 99.971314ms ago: executing program 2 (id=1542): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1) 0s ago: executing program 3 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) kernel console output (not intermixed with test programs): 71, 0 bytes [ 106.316211][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.323791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.332362][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.339926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.347491][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.355104][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.362740][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.370440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.380613][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.389049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.396631][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.410440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.418060][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.425474][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.433059][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.440433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.447981][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.455795][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.463602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.471849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.482455][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.490156][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.497617][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.505431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.513070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.520516][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.527888][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.535808][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.543199][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.552098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.559743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.568183][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.576287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.583884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.591264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.598921][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.608114][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.615688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.623354][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.632838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.641523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.649231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.656913][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.666215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.683980][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.695606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.703756][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.715055][ T8] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 106.724845][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.724979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725170][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725383][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725478][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.725570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.808041][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.819077][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.825651][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 106.827154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.827235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.827304][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.827844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.869346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.879112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.888734][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.897438][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.906522][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.915468][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.923575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.932536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.940463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.950248][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.960848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.968946][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.977103][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.987458][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 106.996911][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.005979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.017362][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.026774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.036986][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.045523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.055480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.065645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.074342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.082407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.095077][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.102510][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.111122][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.119036][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.127113][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.134653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.142904][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.156772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.164268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.172009][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.179656][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.187177][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.194730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.202118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.212658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.221487][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.229021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.238633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.247039][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.255418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.264147][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.280418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.287908][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.295446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.303339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.313624][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.322979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.330492][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.338505][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.346046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.353626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.361520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.369050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.378382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.387935][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.396580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.404489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.412440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.420353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.428101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.437850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.446140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.454698][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.462098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.472698][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.480683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.490486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.500118][ T8] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 107.512773][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.521462][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.532281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.540959][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.555921][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.568372][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.576717][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.584885][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.592840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.600854][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.609042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.617645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.626445][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.636782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.644702][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.652411][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.661090][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.668933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.677825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.687116][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.695064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.709744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.717872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.725603][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.736439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.745162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.752899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.764532][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.772450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.780831][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.789206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.798478][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.807233][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.816413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.823982][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.831521][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.839365][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.847599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.856231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.863819][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.872572][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.881311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.890199][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.898497][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.906109][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.915153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.923176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.930712][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.938662][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.946830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.954730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.963471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.971665][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.979639][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.987076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 107.995077][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.003248][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.012749][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.020724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.029414][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.036803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.044691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.053010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.067962][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.076472][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.084724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.094380][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.102076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.109706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.117480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.125640][ T8] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 108.134836][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135111][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135424][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.135730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.200623][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.208499][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.216090][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.223965][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.232176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.240443][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.248427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.257947][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.266197][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.274272][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 108.281892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.290769][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.298439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.306337][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.314460][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.322350][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.330769][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 108.358185][ T8] smsusb:smsusb_probe: Device initialized with return code -22 [ 108.452638][ T8] smsusb: probe of 3-1:0.0 failed with error -22 [ 108.507380][ T8] usb 3-1: USB disconnect, device number 2 [ 108.667860][ T6138] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 108.677297][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 108.780050][ T6140] loop3: detected capacity change from 0 to 64 [ 109.088746][ T6148] loop1: detected capacity change from 0 to 256 [ 109.189876][ T6148] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 109.253572][ T6150] loop2: detected capacity change from 0 to 1024 [ 109.312997][ T6150] hfsplus: Filesystem is marked locked, mounting read-only. [ 109.344172][ T6148] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 109.357704][ T6148] exFAT-fs (loop1): Filesystem has been set read-only [ 109.387457][ T6150] hfsplus: filesystem is marked locked, leaving read-only. [ 109.613708][ T6156] ptrace attach of "./syz-executor exec"[5774] was attempted by ""[6156] [ 110.079365][ T6172] loop1: detected capacity change from 0 to 8 [ 110.170320][ T6172] SQUASHFS error: Failed to read block 0x2d7: -5 [ 110.194700][ T6172] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 110.204978][ T6172] SQUASHFS error: Failed to read block 0x8f: -5 [ 110.223981][ T28] audit: type=1800 audit(1769058536.702:7): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.134" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 110.371454][ T6177] loop2: detected capacity change from 0 to 4096 [ 110.413690][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.490050][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.906056][ T6194] loop2: detected capacity change from 0 to 256 [ 111.118039][ T6198] netlink: 96 bytes leftover after parsing attributes in process `syz.3.145'. [ 111.406443][ T6202] loop3: detected capacity change from 0 to 4096 [ 111.429444][ T6202] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 111.543252][ T6202] ntfs: volume version 3.1. [ 112.205634][ T6220] No source specified [ 112.433134][ T6226] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 112.476941][ T6226] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 112.634987][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.657842][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.670888][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.679771][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.688442][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.701120][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.960413][ T6238] loop1: detected capacity change from 0 to 1024 [ 113.058917][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.144162][ T6238] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.164: Attempting to read directory block (623) that is past i_size (638464) [ 113.210949][ T6238] EXT4-fs (loop1): Remounting filesystem read-only [ 113.237682][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 113.404486][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.462629][ T6251] loop2: detected capacity change from 0 to 4096 [ 113.496223][ T6251] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 113.668175][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.683925][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.727899][ T6231] bridge_slave_0: entered allmulticast mode [ 113.735857][ T6231] bridge_slave_0: entered promiscuous mode [ 113.790193][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.810803][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.832233][ T6231] bridge_slave_1: entered allmulticast mode [ 113.866979][ T6231] bridge_slave_1: entered promiscuous mode [ 113.999878][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.030494][ T6266] program syz.1.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.038480][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.071738][ T6266] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.151007][ T6231] team0: Port device team_slave_0 added [ 114.294611][ T6231] team0: Port device team_slave_1 added [ 114.407812][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.415121][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.535631][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.582079][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.594507][ T6278] ax25_connect(): syz.1.179 uses autobind, please contact jreuter@yaina.de [ 114.618100][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.654969][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.807208][ T5085] Bluetooth: hci4: command tx timeout [ 114.854445][ T6231] hsr_slave_0: entered promiscuous mode [ 114.873256][ T6231] hsr_slave_1: entered promiscuous mode [ 114.887272][ T6231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.895820][ T6231] Cannot create hsr debugfs directory [ 115.136944][ T6288] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 115.145855][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 115.157329][ T6290] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 115.552699][ T6231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.591879][ T6231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.610193][ T6298] loop2: detected capacity change from 0 to 4096 [ 115.638862][ T6231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.646170][ T6298] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 115.674452][ T6231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.190936][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.295687][ T6319] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 116.303641][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.344914][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.347101][ T6320] loop1: detected capacity change from 0 to 256 [ 116.352429][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.398864][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.406578][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.462406][ T6320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 116.652729][ T6322] loop3: detected capacity change from 0 to 2048 [ 116.722948][ T6322] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.773884][ T6322] NILFS (loop3): mounting unchecked fs [ 116.836818][ T6322] NILFS (loop3): recovery required for readonly filesystem [ 116.853499][ T6103] udevd[6103]: incorrect nilfs2 checksum on /dev/loop3 [ 116.865110][ T6322] NILFS (loop3): write access will be enabled during recovery [ 116.889872][ T6322] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 116.893626][ T5085] Bluetooth: hci4: command tx timeout [ 117.042044][ T5777] udevd[5777]: incorrect nilfs2 checksum on /dev/loop3 [ 117.117968][ T6322] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 117.176620][ T6337] loop2: detected capacity change from 0 to 16 [ 117.243142][ T6337] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.393226][ T6337] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 117.405033][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.019254][ T6353] mmap: syz.1.204 (6353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.385452][ T6231] veth0_vlan: entered promiscuous mode [ 118.421904][ T6363] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 118.435401][ T6231] veth1_vlan: entered promiscuous mode [ 118.480686][ T6360] loop2: detected capacity change from 0 to 8192 [ 118.562692][ T6360] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.632037][ T6231] veth0_macvtap: entered promiscuous mode [ 118.703321][ T6360] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 118.722566][ T6231] veth1_macvtap: entered promiscuous mode [ 118.761142][ T6360] REISERFS (device loop2): using ordered data mode [ 118.788109][ T6360] reiserfs: using flush barriers [ 118.802051][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.802119][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.802132][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.802146][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.802157][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.802171][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.802182][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.802195][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.804057][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.809072][ T6360] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.810436][ T6360] REISERFS (device loop2): checking transaction log (loop2) [ 118.834447][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.834482][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.834493][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.834505][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.834515][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.834527][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.834537][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.834549][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.836276][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.862330][ T6231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.862423][ T6231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.862465][ T6231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.862494][ T6231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.882361][ T6360] REISERFS (device loop2): Using rupasov hash to sort names [ 118.968173][ T5085] Bluetooth: hci4: command tx timeout [ 119.104077][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.104128][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.211440][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.211464][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.312728][ T6395] capability: warning: `syz.3.227' uses 32-bit capabilities (legacy support in use) [ 120.408522][ T6398] QAT: failed to copy from user cfg_data. [ 120.680482][ T6406] netlink: 'syz.4.232': attribute type 5 has an invalid length. [ 120.838967][ T6383] loop2: detected capacity change from 0 to 32768 [ 120.906486][ T6383] (syz.2.221,6383,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.979271][ T6412] batadv1: entered allmulticast mode [ 120.986815][ T6383] (syz.2.221,6383,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.027023][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 121.047227][ T5085] Bluetooth: hci4: command tx timeout [ 121.102523][ T6383] JBD2: Ignoring recovery information on journal [ 121.278999][ T6383] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.598821][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 121.713649][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 122.262936][ T6437] binder: 6436:6437 ioctl c018620c 200000000380 returned -22 [ 122.363540][ T6411] loop3: detected capacity change from 0 to 40427 [ 122.498309][ T6411] F2FS-fs (loop3): invalid crc value [ 122.581149][ T6411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.821077][ T6411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 122.831241][ T6451] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 122.883829][ T28] audit: type=1326 audit(1769058549.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 122.967193][ T28] audit: type=1326 audit(1769058549.372:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.076053][ T28] audit: type=1326 audit(1769058549.402:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.142726][ T6456] loop1: detected capacity change from 0 to 1024 [ 123.172066][ T28] audit: type=1326 audit(1769058549.402:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.201840][ T28] audit: type=1326 audit(1769058549.412:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.331676][ T28] audit: type=1326 audit(1769058549.412:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.373254][ T28] audit: type=1326 audit(1769058549.412:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.495638][ T28] audit: type=1326 audit(1769058549.412:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.585073][ T28] audit: type=1326 audit(1769058549.412:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 123.613095][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.850030][ T6470] loop1: detected capacity change from 0 to 8 [ 124.507970][ T6485] netlink: 'syz.1.267': attribute type 24 has an invalid length. [ 124.617438][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 124.626541][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 124.891276][ T6499] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.049584][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 125.196528][ T28] audit: type=1326 audit(1769058551.682:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 125.224541][ T6508] syz.3.277 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.411288][ T6513] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 125.453161][ T6513] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 125.975274][ T6532] loop2: detected capacity change from 0 to 1024 [ 127.194484][ T6562] loop3: detected capacity change from 0 to 256 [ 127.347256][ T6562] FAT-fs (loop3): Directory bread(block 64) failed [ 127.355213][ T6562] FAT-fs (loop3): Directory bread(block 65) failed [ 127.405960][ T6562] FAT-fs (loop3): Directory bread(block 66) failed [ 127.434510][ T6562] FAT-fs (loop3): Directory bread(block 67) failed [ 127.463712][ T6562] FAT-fs (loop3): Directory bread(block 68) failed [ 127.483885][ T6570] loop2: detected capacity change from 0 to 8 [ 127.500720][ T6562] FAT-fs (loop3): Directory bread(block 69) failed [ 127.520303][ T6562] FAT-fs (loop3): Directory bread(block 70) failed [ 127.553785][ T6562] FAT-fs (loop3): Directory bread(block 71) failed [ 127.597958][ T6562] FAT-fs (loop3): Directory bread(block 72) failed [ 127.605258][ T6562] FAT-fs (loop3): Directory bread(block 73) failed [ 128.514075][ T6592] loop3: detected capacity change from 0 to 128 [ 129.103523][ T6598] netlink: 'syz.3.320': attribute type 5 has an invalid length. [ 129.168956][ T6580] loop4: detected capacity change from 0 to 32768 [ 129.244133][ T6580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.311 (6580) [ 129.328302][ T6580] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.367807][ T6580] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 129.400445][ T6580] BTRFS info (device loop4): use no compression [ 129.436971][ T6580] BTRFS info (device loop4): setting nodatacow, compression disabled [ 129.476195][ T6588] loop2: detected capacity change from 0 to 32768 [ 129.486800][ T6580] BTRFS info (device loop4): enabling disk space caching [ 129.525946][ T6580] BTRFS info (device loop4): ignoring data csums [ 129.556093][ T6580] BTRFS info (device loop4): disabling disk space caching [ 129.590661][ T6588] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 129.617034][ T6580] BTRFS info (device loop4): enabling auto defrag [ 129.644301][ T6580] BTRFS error (device loop4): ignoredatacsums must be used with ro mount option [ 129.689519][ T6580] BTRFS error (device loop4): cannot disable free space tree [ 129.748179][ T6580] BTRFS error (device loop4): open_ctree failed: -22 [ 129.897858][ T6580] gfs2: Unexpected value for 'barrier' [ 130.118962][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 130.204120][ T6617] gretap1: entered promiscuous mode [ 130.607808][ T6624] dlm: Unknown command passed to DLM device : 11 [ 130.607808][ T6624] [ 130.864033][ T6627] loop1: detected capacity change from 0 to 4096 [ 130.932063][ T6627] __ntfs_error: 3 callbacks suppressed [ 130.932081][ T6627] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 130.987004][ T6627] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.022601][ T6627] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 131.055899][ T6627] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 131.103835][ T6627] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 131.177172][ T6627] ntfs: volume version 3.1. [ 131.211307][ T6627] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 131.242043][ T6635] overlayfs: conflicting options: metacopy=off,verity=on [ 131.252804][ T6627] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 131.338012][ T6627] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 131.364477][ T6613] loop3: detected capacity change from 0 to 32768 [ 131.373282][ T6627] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 131.397043][ T6627] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 131.560823][ T6613] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.051823][ T6613] XFS (loop3): Ending clean mount [ 132.111992][ T6613] XFS (loop3): Quotacheck needed: Please wait. [ 132.341589][ T6613] XFS (loop3): Quotacheck: Done. [ 132.560017][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.758039][ T6668] xt_CT: No such helper "pptp" [ 132.918375][ T6674] loop4: detected capacity change from 0 to 4096 [ 132.982774][ T6679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.062192][ T6674] syz.4.353: attempt to access beyond end of device [ 133.062192][ T6674] loop4: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 133.088017][ T6674] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 133.271588][ T6683] loop1: detected capacity change from 0 to 256 [ 133.296396][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.304586][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.460096][ T6707] netlink: 14 bytes leftover after parsing attributes in process `syz.1.368'. [ 134.497328][ T6707] hsr_slave_0: left promiscuous mode [ 134.538672][ T6707] hsr_slave_1: left promiscuous mode [ 134.718095][ T6711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.485945][ T6732] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 135.618901][ T6732] overlayfs: missing 'lowerdir' [ 136.160745][ T6756] loop1: detected capacity change from 0 to 256 [ 136.202947][ T6756] exfat: Deprecated parameter 'utf8' [ 136.239039][ T6756] exfat: Deprecated parameter 'namecase' [ 136.363604][ T6756] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 136.431594][ T6762] netlink: 'syz.2.395': attribute type 21 has an invalid length. [ 136.461598][ T6762] netlink: 128 bytes leftover after parsing attributes in process `syz.2.395'. [ 136.487599][ T6762] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 137.027775][ T6778] loop3: detected capacity change from 0 to 64 [ 137.560307][ T6790] loop3: detected capacity change from 0 to 4096 [ 137.619544][ T6790] __ntfs_error: 6 callbacks suppressed [ 137.619566][ T6790] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 137.641308][ T6790] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 137.656899][ T6790] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 137.687442][ T6790] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 137.833006][ T6790] ntfs: volume version 3.1. [ 137.857273][ T966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.881539][ T6790] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 137.917108][ T6790] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 137.946538][ T6790] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 138.066842][ T966] usb 2-1: Using ep0 maxpacket: 8 [ 138.086079][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 138.124751][ T966] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 138.156786][ T966] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 138.173938][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 138.186854][ T966] usb 2-1: Product: syz [ 138.204191][ T966] usb 2-1: Manufacturer: syz [ 138.216811][ T966] usb 2-1: SerialNumber: syz [ 138.482867][ T966] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 138.507892][ T966] usb 2-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 138.559170][ T966] usb 2-1: Handspring Visor / Palm OS: port 187, is for Console use [ 138.581059][ T966] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 138.681384][ T966] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 138.720072][ T966] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 138.787158][ T966] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 138.836874][ T966] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 138.878967][ T966] usb 2-1: USB disconnect, device number 3 [ 138.962138][ T6785] loop4: detected capacity change from 0 to 32768 [ 138.974662][ T966] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 139.024822][ T6785] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.037180][ T6785] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.106186][ T966] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 139.161435][ T6785] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 139.180429][ T966] visor 2-1:1.0: device disconnected [ 139.206392][ T968] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 139.241891][ T968] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 139.436791][ T968] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms [ 139.512527][ T968] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.547489][ T6785] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 139.747640][ T6827] loop3: detected capacity change from 0 to 128 [ 139.822020][ T6827] FAT-fs (loop3): Directory bread(block 162) failed [ 139.855631][ T6827] FAT-fs (loop3): Directory bread(block 163) failed [ 139.892164][ T6827] FAT-fs (loop3): Directory bread(block 164) failed [ 139.927281][ T6827] FAT-fs (loop3): Directory bread(block 165) failed [ 139.966209][ T6827] FAT-fs (loop3): Directory bread(block 166) failed [ 140.006270][ T6827] FAT-fs (loop3): Directory bread(block 167) failed [ 140.025356][ T6827] FAT-fs (loop3): Directory bread(block 168) failed [ 140.066836][ T6827] FAT-fs (loop3): Directory bread(block 169) failed [ 140.174731][ T6827] FAT-fs (loop3): Directory bread(block 162) failed [ 140.237212][ T6827] FAT-fs (loop3): Directory bread(block 163) failed [ 140.258939][ T6827] syz.3.421: attempt to access beyond end of device [ 140.258939][ T6827] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 140.297449][ T6827] syz.3.421: attempt to access beyond end of device [ 140.297449][ T6827] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 140.419167][ T6785] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 140.419167][ T6785] bh = 2051 (type: exp=14, found=8) [ 140.419167][ T6785] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417 [ 140.443320][ T6785] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 140.454257][ T6785] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 140.473618][ T6785] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 140.504257][ T6785] gfs2: fsid=syz:syz.0: File system withdrawn [ 140.519276][ T6837] loop2: detected capacity change from 0 to 2048 [ 140.526839][ T6785] CPU: 0 PID: 6785 Comm: syz.4.406 Not tainted syzkaller #0 [ 140.535936][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.550348][ T6785] Call Trace: [ 140.554168][ T6785] [ 140.557448][ T6785] dump_stack_lvl+0x18c/0x250 [ 140.563676][ T6785] ? kobject_uevent_env+0x363/0x8b0 [ 140.569754][ T6785] ? show_regs_print_info+0x20/0x20 [ 140.576535][ T6785] ? load_image+0x400/0x400 [ 140.582111][ T6785] ? kobject_uevent_env+0x363/0x8b0 [ 140.588044][ T6785] gfs2_withdraw+0xb24/0x13d0 [ 140.593979][ T6785] ? gfs2_lm+0x240/0x240 [ 140.599022][ T6785] ? bit_wait+0xd0/0xd0 [ 140.604046][ T6785] ? __wait_on_bit+0x2d0/0x2d0 [ 140.609889][ T6785] ? bit_waitqueue+0x30/0x30 [ 140.616618][ T6785] gfs2_metatype_check_ii+0x78/0x90 [ 140.623403][ T6785] gfs2_quota_init+0xca9/0xea0 [ 140.630606][ T6785] ? qd_put+0x1a0/0x1a0 [ 140.636038][ T6785] ? inode_go_inval+0x12d/0x2b0 [ 140.642042][ T6785] gfs2_make_fs_rw+0x411/0x580 [ 140.650678][ T6785] ? gfs2_jdesc_check+0x2a0/0x2a0 [ 140.656722][ T6785] ? do_raw_spin_lock+0x11f/0x2c0 [ 140.662975][ T6785] ? __rwlock_init+0x150/0x150 [ 140.672902][ T6785] ? do_raw_spin_unlock+0x121/0x230 [ 140.679896][ T6785] gfs2_reconfigure+0x612/0xb10 [ 140.687115][ T6785] reconfigure_super+0x21e/0x8a0 [ 140.693602][ T6785] path_mount+0xd2f/0xff0 [ 140.700308][ T6785] __se_sys_mount+0x2e7/0x3d0 [ 140.707053][ T6785] ? __x64_sys_mount+0xc0/0xc0 [ 140.712208][ T6785] ? lockdep_hardirqs_on+0x98/0x150 [ 140.718374][ T6785] ? __x64_sys_mount+0x20/0xc0 [ 140.724838][ T6785] do_syscall_64+0x55/0xa0 [ 140.729783][ T6785] ? clear_bhb_loop+0x40/0x90 [ 140.737732][ T6785] ? clear_bhb_loop+0x40/0x90 [ 140.743584][ T6785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.753213][ T6785] RIP: 0033:0x7fe2c4b9acb9 [ 140.761537][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.788638][ T6785] RSP: 002b:00007fe2c5a78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.800983][ T6785] RAX: ffffffffffffffda RBX: 00007fe2c4e15fa0 RCX: 00007fe2c4b9acb9 [ 140.811145][ T6785] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 140.821447][ T6785] RBP: 00007fe2c4c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 140.831013][ T6785] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 140.840998][ T6785] R13: 00007fe2c4e16038 R14: 00007fe2c4e15fa0 R15: 00007ffe68f9daf8 [ 140.850739][ T6785] [ 140.921537][ T6785] gfs2: unable to remount read-write [ 140.956905][ T6841] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.077792][ T6837] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 141.144774][ T6837] Remounting filesystem read-only [ 141.511796][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 142.054595][ T6862] loop4: detected capacity change from 0 to 2048 [ 142.199070][ T6862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.645025][ T6876] loop3: detected capacity change from 0 to 4096 [ 142.679846][ T6876] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 142.699446][ T6880] sctp: [Deprecated]: syz.2.446 (pid 6880) Use of int in maxseg socket option. [ 142.699446][ T6880] Use struct sctp_assoc_value instead [ 142.888491][ T6876] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 143.068693][ T6876] ntfs3: loop3: ino=1b, "file0" failed to parse mft record [ 143.098914][ T6876] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 143.120382][ T6890] loop4: detected capacity change from 0 to 256 [ 143.160704][ T6876] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 143.275316][ T6890] FAT-fs (loop4): Directory bread(block 64) failed [ 143.307383][ T6890] FAT-fs (loop4): Directory bread(block 65) failed [ 143.314601][ T6890] FAT-fs (loop4): Directory bread(block 66) failed [ 143.342228][ T6890] FAT-fs (loop4): Directory bread(block 67) failed [ 143.358535][ T6890] FAT-fs (loop4): Directory bread(block 68) failed [ 143.366013][ T6890] FAT-fs (loop4): Directory bread(block 69) failed [ 143.379840][ T5776] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 143.389611][ T6890] FAT-fs (loop4): Directory bread(block 70) failed [ 143.402603][ T6890] FAT-fs (loop4): Directory bread(block 71) failed [ 143.429113][ T6890] FAT-fs (loop4): Directory bread(block 72) failed [ 143.439897][ T6892] loop2: detected capacity change from 0 to 2048 [ 143.465147][ T6890] FAT-fs (loop4): Directory bread(block 73) failed [ 143.504360][ T6895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.636932][ T6892] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 143.685040][ T6892] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 143.747907][ T6892] Remounting filesystem read-only [ 143.764032][ T6892] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 143.795120][ T6892] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 143.820100][ T6892] NILFS (loop2): error -5 truncating bmap (ino=16) [ 143.943516][ T5774] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 143.968026][ T5774] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 143.989759][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.016902][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.064165][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.111072][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 144.372209][ T6912] loop1: detected capacity change from 0 to 256 [ 144.586973][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 144.762419][ T6921] loop1: detected capacity change from 0 to 256 [ 144.946945][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'. [ 145.080285][ T6923] loop4: detected capacity change from 0 to 4096 [ 145.111160][ T6923] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 145.272367][ T6931] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 145.343388][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.471'. [ 146.185222][ T6949] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 146.454995][ T6926] loop2: detected capacity change from 0 to 32768 [ 146.466848][ T5816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.502741][ T6926] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 146.527125][ T6926] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 146.562931][ T6926] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (first in block) [ 146.586923][ T6926] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 146.586923][ T6926] inode = 2 2073 [ 146.586923][ T6926] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 146.609355][ T6926] gfs2: fsid=syz:syz.s: G: s:SH n:2/819 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 146.623630][ T6926] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6926 [syz.2.468] gfs2_lookup_meta+0xb0/0x180 [ 146.634762][ T6926] gfs2: fsid=syz:syz.s: I: n:2/2073 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 146.643780][ T6926] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 146.654050][ T6926] gfs2: fsid=syz:syz.s: File system withdrawn [ 146.660796][ T6926] CPU: 0 PID: 6926 Comm: syz.2.468 Not tainted syzkaller #0 [ 146.668451][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.679294][ T6926] Call Trace: [ 146.683089][ T6926] [ 146.686591][ T6926] dump_stack_lvl+0x18c/0x250 [ 146.692406][ T6926] ? kobject_uevent_env+0x363/0x8b0 [ 146.697964][ T6926] ? show_regs_print_info+0x20/0x20 [ 146.704053][ T6926] ? load_image+0x400/0x400 [ 146.708632][ T6926] ? kobject_uevent_env+0x363/0x8b0 [ 146.714379][ T6926] gfs2_withdraw+0xb24/0x13d0 [ 146.719495][ T6926] ? gfs2_lm+0x240/0x240 [ 146.724040][ T6926] ? load_image+0x400/0x400 [ 146.729453][ T6926] ? gfs2_consist_inode_i+0xf5/0x110 [ 146.735214][ T6926] gfs2_dirent_scan+0x525/0x650 [ 146.740992][ T6926] ? gfs2_meta_buffer+0x1bc/0x310 [ 146.746610][ T6926] ? gfs2_dirent_search+0x7f0/0x7f0 [ 146.752107][ T6926] gfs2_dirent_search+0x2ed/0x7f0 [ 146.758419][ T6926] ? inode_owner_or_capable+0x1c0/0x1c0 [ 146.765198][ T6926] ? gfs2_dirent_search+0x7f0/0x7f0 [ 146.770839][ T6926] ? gfs2_inode_metasync+0xf0/0xf0 [ 146.776485][ T6926] ? gfs2_dir_search+0x220/0x220 [ 146.781856][ T6926] ? gfs2_glock_nq+0xd4f/0x1420 [ 146.787398][ T6926] ? do_raw_spin_lock+0x11f/0x2c0 [ 146.793731][ T6926] gfs2_dir_search+0x4d/0x220 [ 146.799749][ T6926] gfs2_lookupi+0x45c/0x640 [ 146.805747][ T6926] ? gfs2_lookup_meta+0x180/0x180 [ 146.811304][ T6926] ? gfs2_lookup_meta+0xb0/0x180 [ 146.816868][ T6926] ? crc32_le_base+0x759/0xcf0 [ 146.821977][ T6926] gfs2_lookup_meta+0xb0/0x180 [ 146.826996][ T6926] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 146.832264][ T6926] init_journal+0x1c2/0x2330 [ 146.837265][ T6926] ? __rwlock_init+0x150/0x150 [ 146.842184][ T6926] ? format_decode+0x19b/0x1400 [ 146.847277][ T6926] ? vsnprintf+0x85c/0x1ba0 [ 146.852036][ T6926] ? _compound_head+0x120/0x120 [ 146.857274][ T6926] ? vsnprintf+0x1ac7/0x1ba0 [ 146.862119][ T6926] ? snprintf+0xe9/0x140 [ 146.866503][ T6926] ? vscnprintf+0x80/0x80 [ 146.871491][ T6926] ? gfs2_glock_nq_num+0x183/0x1c0 [ 146.877061][ T6926] init_inodes+0xdb/0x320 [ 146.881727][ T6926] gfs2_fill_super+0x17bc/0x1f30 [ 146.887004][ T6926] ? __might_sleep+0xe0/0xe0 [ 146.891781][ T6926] ? gfs2_reconfigure+0xb10/0xb10 [ 146.896993][ T6926] ? init_locking+0xb8/0x200 [ 146.903268][ T6926] ? setup_bdev_super+0x56b/0x660 [ 146.909280][ T6926] get_tree_bdev+0x3f3/0x520 [ 146.914091][ T6926] ? end_current_label_crit_section+0x170/0x170 [ 146.921140][ T6926] ? gfs2_reconfigure+0xb10/0xb10 [ 146.926796][ T6926] ? setup_bdev_super+0x660/0x660 [ 146.932716][ T6926] gfs2_get_tree+0x51/0x1e0 [ 146.937561][ T6926] vfs_get_tree+0x8c/0x280 [ 146.942108][ T6926] do_new_mount+0x24b/0xa40 [ 146.947036][ T6926] __se_sys_mount+0x2e7/0x3d0 [ 146.952040][ T6926] ? __x64_sys_mount+0xc0/0xc0 [ 146.956951][ T6926] ? lockdep_hardirqs_on+0x98/0x150 [ 146.962956][ T6926] ? __x64_sys_mount+0x20/0xc0 [ 146.968216][ T6926] do_syscall_64+0x55/0xa0 [ 146.972996][ T6926] ? clear_bhb_loop+0x40/0x90 [ 146.978902][ T6926] ? clear_bhb_loop+0x40/0x90 [ 146.984111][ T6926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.990390][ T6926] RIP: 0033:0x7efdea19bf4a [ 146.995151][ T6926] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.017061][ T6926] RSP: 002b:00007efdeafd9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.026234][ T6926] RAX: ffffffffffffffda RBX: 00007efdeafd9ee0 RCX: 00007efdea19bf4a [ 147.034529][ T6926] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007efdeafd9ea0 [ 147.042962][ T6926] RBP: 0000200000000400 R08: 00007efdeafd9ee0 R09: 0000000002a00041 [ 147.054596][ T6926] R10: 0000000002a00041 R11: 0000000000000246 R12: 0000200000000000 [ 147.064131][ T6926] R13: 00007efdeafd9ea0 R14: 0000000000012645 R15: 0000200000000240 [ 147.073275][ T6926] [ 147.100401][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 147.127798][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 147.145095][ T5816] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 147.156453][ T6926] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 147.164715][ T5816] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 147.185043][ T5816] usb 2-1: config 0 has no interface number 0 [ 147.225398][ T5816] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 147.235589][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.287000][ T5816] usb 2-1: Product: syz [ 147.292437][ T5816] usb 2-1: Manufacturer: syz [ 147.337945][ T5816] usb 2-1: SerialNumber: syz [ 147.385746][ T5816] usb 2-1: config 0 descriptor?? [ 147.459233][ T5816] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 147.484071][ T5816] usb 2-1: No valid video chain found. [ 147.697341][ T966] usb 2-1: USB disconnect, device number 4 [ 148.398115][ T6984] loop2: detected capacity change from 0 to 4096 [ 148.420184][ T6984] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 148.481718][ T6984] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 148.515308][ T6984] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 148.590193][ T6984] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 148.649764][ T6984] ntfs: volume version 3.1. [ 148.718452][ T6984] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 148.766961][ T6984] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 148.827052][ T6984] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 148.884999][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 148.898677][ T6984] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 148.916846][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.503'. [ 148.927331][ T6984] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 148.956978][ T6984] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 149.707899][ T7014] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 149.747364][ T7014] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 149.757932][ T7016] loop2: detected capacity change from 0 to 256 [ 150.042239][ T7020] loop1: detected capacity change from 0 to 256 [ 150.164961][ T7020] FAT-fs (loop1): Directory bread(block 64) failed [ 150.217585][ T7020] FAT-fs (loop1): Directory bread(block 65) failed [ 150.225508][ T7020] FAT-fs (loop1): Directory bread(block 66) failed [ 150.274829][ T7020] FAT-fs (loop1): Directory bread(block 67) failed [ 150.314523][ T7020] FAT-fs (loop1): Directory bread(block 68) failed [ 150.322505][ T7023] netlink: 5 bytes leftover after parsing attributes in process `syz.2.515'. [ 150.357774][ T7020] FAT-fs (loop1): Directory bread(block 69) failed [ 150.378713][ T7020] FAT-fs (loop1): Directory bread(block 70) failed [ 150.395516][ T7023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.419037][ T7020] FAT-fs (loop1): Directory bread(block 71) failed [ 150.452666][ T7020] FAT-fs (loop1): Directory bread(block 72) failed [ 150.487756][ T7020] FAT-fs (loop1): Directory bread(block 73) failed [ 151.643301][ T7053] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.075364][ T7060] loop2: detected capacity change from 0 to 4096 [ 152.114786][ T7060] ntfs3: loop2: ino=3, Correct links count -> 2. [ 152.196111][ T7069] unsupported nlmsg_type 40 [ 152.572485][ T7077] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 152.761399][ T7081] syz.4.544 uses obsolete (PF_INET,SOCK_PACKET) [ 153.524543][ T7107] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 153.564063][ T7107] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 154.209736][ T7129] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 154.247614][ T7131] xt_TCPMSS: Only works on TCP SYN packets [ 154.502304][ T7137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.744116][ T7143] trusted_key: encrypted_key: master key parameter is missing [ 154.786141][ T7141] loop2: detected capacity change from 0 to 4096 [ 155.203355][ T7151] loop4: detected capacity change from 0 to 128 [ 155.257182][ T7151] EXT4-fs (loop4): Test dummy encryption mode enabled [ 155.351185][ T7151] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.507094][ T7151] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.649573][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 155.656310][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 155.708696][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 155.739662][ T6231] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.762052][ T7163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.862704][ T7163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.903578][ T7169] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 156.119106][ T7171] loop4: detected capacity change from 0 to 4096 [ 156.147062][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 156.209856][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 156.241183][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 156.253940][ T7174] loop3: detected capacity change from 0 to 2048 [ 156.300641][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 156.321787][ T7174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.362602][ T7163] xfrm0 speed is unknown, defaulting to 1000 [ 156.777008][ T7179] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 156.895378][ T7185] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.595'. [ 156.957046][ T7183] usb usb9: usbfs: process 7183 (syz.3.592) did not claim interface 0 before use [ 157.141267][ T7189] netlink: 76 bytes leftover after parsing attributes in process `syz.4.597'. [ 157.171656][ T7189] netlink: 72 bytes leftover after parsing attributes in process `syz.4.597'. [ 157.224782][ T7189] netlink: 'syz.4.597': attribute type 3 has an invalid length. [ 157.254699][ T7189] netlink: 11 bytes leftover after parsing attributes in process `syz.4.597'. [ 157.535790][ T7201] loop1: detected capacity change from 0 to 256 [ 157.555275][ T7201] exfat: Deprecated parameter 'utf8' [ 157.701479][ T7201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 157.843143][ T7201] overlay: filesystem on ./file0 not supported [ 158.342547][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 158.366326][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 158.383823][ T7217] netlink: 'syz.1.611': attribute type 28 has an invalid length. [ 158.397797][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 158.408792][ T7217] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 158.418544][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.611'. [ 159.215619][ T7235] loop2: detected capacity change from 0 to 4096 [ 159.237513][ T7235] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 159.391692][ T7235] ntfs3: loop2: failed to convert "c46c" to iso8859-2 [ 159.782359][ T7252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.247754][ T7239] loop1: detected capacity change from 0 to 32768 [ 161.039569][ T7276] loop2: detected capacity change from 0 to 4096 [ 161.068298][ T7276] __ntfs_warning: 1 callbacks suppressed [ 161.068315][ T7276] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 161.181787][ T7276] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 161.213761][ T7276] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 161.268642][ T7276] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 161.352857][ T7276] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 161.434827][ T7276] ntfs: volume version 3.1. [ 161.624910][ T7276] ntfs: (device loop2): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 162.707646][ T7322] loop3: detected capacity change from 0 to 2048 [ 162.796853][ T7322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.057147][ T7330] "syz.1.669" (7330) uses obsolete ecb(arc4) skcipher [ 163.367133][ T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 163.577081][ T7346] netlink: 'syz.4.675': attribute type 21 has an invalid length. [ 163.585507][ T7346] netlink: 128 bytes leftover after parsing attributes in process `syz.4.675'. [ 163.596765][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 163.612238][ T966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.627487][ T7346] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 163.634184][ T966] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 163.653651][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.658154][ T7346] netlink: 3 bytes leftover after parsing attributes in process `syz.4.675'. [ 163.677126][ T966] usb 4-1: Product: syz [ 163.682249][ T966] usb 4-1: Manufacturer: syz [ 163.707061][ T966] usb 4-1: SerialNumber: syz [ 163.739377][ T966] usb 4-1: config 0 descriptor?? [ 163.763188][ T966] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 163.797634][ T966] gspca_stv06xx: st6422 sensor detected [ 164.081966][ T7354] loop4: detected capacity change from 0 to 4096 [ 164.122827][ T7354] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.155186][ T7354] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.224677][ T7354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.310855][ T966] STV06xx: probe of 4-1:0.0 failed with error -71 [ 164.354771][ T966] usb 4-1: USB disconnect, device number 2 [ 164.508752][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.786026][ T7372] loop2: detected capacity change from 0 to 64 [ 165.768260][ T7396] netlink: 'syz.4.699': attribute type 64 has an invalid length. [ 165.786214][ T7396] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 165.807201][ T7396] netlink: 152 bytes leftover after parsing attributes in process `syz.4.699'. [ 165.897290][ T7398] Illegal XDP return value 3129855505 on prog (id 30) dev N/A, expect packet loss! [ 165.994790][ T7368] loop1: detected capacity change from 0 to 32768 [ 166.044596][ T7368] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.067256][ T7368] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.186081][ T7406] netlink: 'syz.4.704': attribute type 13 has an invalid length. [ 166.198569][ T7406] netlink: 'syz.4.704': attribute type 27 has an invalid length. [ 166.220568][ T7368] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 166.275725][ T5823] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.299027][ T5823] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.443590][ T7411] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.705'. [ 166.588471][ T5823] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 166.631035][ T5823] gfs2: fsid=syz:syz.0: jid=0: Done [ 166.642798][ T7368] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.062059][ T7423] loop3: detected capacity change from 0 to 8192 [ 167.122326][ T7423] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.240888][ T7423] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 167.274976][ T7425] loop4: detected capacity change from 0 to 8192 [ 167.287288][ T7423] REISERFS (device loop3): using ordered data mode [ 167.295925][ T7423] reiserfs: using flush barriers [ 167.335996][ T7423] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.402262][ T7423] REISERFS (device loop3): checking transaction log (loop3) [ 167.495381][ T7423] REISERFS (device loop3): Using tea hash to sort names [ 167.509884][ T7423] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 167.600987][ T7368] gfs2: fsid=syz:syz.0: found 1 quota changes [ 167.906893][ T5779] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 167.949081][ T5779] CPU: 1 PID: 5779 Comm: syz-executor Not tainted syzkaller #0 [ 167.957228][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.967629][ T5779] Call Trace: [ 167.970975][ T5779] [ 167.974256][ T5779] dump_stack_lvl+0x18c/0x250 [ 167.979028][ T5779] ? show_regs_print_info+0x20/0x20 [ 167.984542][ T5779] ? load_image+0x400/0x400 [ 167.989950][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 167.995530][ T5779] gfs2_assert_warn_i+0x193/0x2c0 [ 168.001118][ T5779] gfs2_qd_dispose+0x4aa/0x5b0 [ 168.006069][ T5779] gfs2_quota_cleanup+0x410/0x720 [ 168.011986][ T5779] ? spin_lock_bucket+0x150/0x150 [ 168.017589][ T5779] ? __might_sleep+0xe0/0xe0 [ 168.022566][ T5779] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 168.028390][ T5779] ? gfs2_quota_sync+0x591/0x5a0 [ 168.033955][ T5779] gfs2_make_fs_ro+0x2aa/0x320 [ 168.040249][ T5779] ? gfs2_dinode_out+0xb10/0xb10 [ 168.046414][ T5779] ? __lock_acquire+0x7d40/0x7d40 [ 168.052220][ T5779] ? __rwlock_init+0x150/0x150 [ 168.057702][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 168.063984][ T5779] gfs2_put_super+0x224/0x930 [ 168.070008][ T5779] ? gfs2_evict_inode+0x1350/0x1350 [ 168.078100][ T5779] generic_shutdown_super+0x134/0x2b0 [ 168.086807][ T5779] kill_block_super+0x44/0x90 [ 168.091779][ T5779] deactivate_locked_super+0x97/0x100 [ 168.098053][ T5779] cleanup_mnt+0x43b/0x4d0 [ 168.102795][ T5779] task_work_run+0x1d4/0x260 [ 168.108680][ T5779] ? task_work_cancel+0x220/0x220 [ 168.115099][ T5779] ? exit_to_user_mode_loop+0x3b/0x110 [ 168.120860][ T5779] exit_to_user_mode_loop+0xe6/0x110 [ 168.127488][ T5779] exit_to_user_mode_prepare+0xee/0x180 [ 168.134190][ T5779] syscall_exit_to_user_mode+0x1a/0x50 [ 168.140001][ T5779] do_syscall_64+0x61/0xa0 [ 168.144503][ T5779] ? clear_bhb_loop+0x40/0x90 [ 168.149812][ T5779] ? clear_bhb_loop+0x40/0x90 [ 168.155025][ T5779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.161621][ T5779] RIP: 0033:0x7f45e599bf17 [ 168.166288][ T5779] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 168.186148][ T5779] RSP: 002b:00007ffe68576c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 168.195601][ T5779] RAX: 0000000000000000 RBX: 00007f45e5a0471f RCX: 00007f45e599bf17 [ 168.204326][ T5779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe68576d10 [ 168.212717][ T5779] RBP: 00007ffe68576d10 R08: 00007ffe68577d10 R09: 00000000ffffffff [ 168.221198][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe68577da0 [ 168.229861][ T5779] R13: 00007f45e5a0471f R14: 000000000002825b R15: 00007ffe68577de0 [ 168.238360][ T5779] [ 169.270474][ T7447] loop4: detected capacity change from 0 to 32768 [ 169.606163][ T7471] loop3: detected capacity change from 0 to 256 [ 169.871470][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 170.713873][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'. [ 171.067115][ T7503] mmap: syz.2.751 (7503): VmData 47947776 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 171.156003][ T7480] loop4: detected capacity change from 0 to 32768 [ 171.276312][ T7480] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.615013][ T7480] XFS (loop4): Ending clean mount [ 171.693869][ T7480] XFS (loop4): Quotacheck needed: Please wait. [ 171.857519][ T7527] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 171.901367][ T7480] XFS (loop4): Quotacheck: Done. [ 171.974852][ T7529] sctp: [Deprecated]: syz.2.759 (pid 7529) Use of int in max_burst socket option deprecated. [ 171.974852][ T7529] Use struct sctp_assoc_value instead [ 172.266150][ T6231] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.495847][ T7521] loop1: detected capacity change from 0 to 32768 [ 172.521443][ T7521] XFS (loop1): invalid log iosize: 0 [not 12-30] [ 172.877243][ T7523] loop3: detected capacity change from 0 to 32768 [ 172.986039][ T7523] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.224865][ T7550] capability: warning: `syz.4.761' uses deprecated v2 capabilities in a way that may be insecure [ 173.261104][ T7523] XFS (loop3): Ending clean mount [ 173.299866][ T7523] XFS (loop3): Quotacheck needed: Please wait. [ 173.447989][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.448137][ T7554] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 173.487278][ T7523] XFS (loop3): Quotacheck: Done. [ 173.642139][ T7554] veth0_vlan: left promiscuous mode [ 173.651428][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.686448][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 173.713677][ T27] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 173.760772][ T7554] veth0_vlan: entered promiscuous mode [ 173.786471][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.806403][ T7554] team0: Device veth0_vlan failed to register rx_handler [ 173.827671][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.857018][ T27] usb 2-1: config 0 descriptor?? [ 174.329560][ T27] Bluetooth: Can't get state to change to load configuration err [ 174.376792][ T27] Bluetooth: Loading sysconfig file failed [ 174.401289][ T27] ath3k: probe of 2-1:0.0 failed with error -16 [ 174.449977][ T27] usb 2-1: USB disconnect, device number 5 [ 174.460560][ T7564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.772'. [ 174.495348][ T7564] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 175.894628][ T7600] loop2: detected capacity change from 0 to 2048 [ 175.908349][ T7602] netlink: 'syz.1.791': attribute type 4 has an invalid length. [ 175.940630][ T7600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.542351][ T7610] loop1: detected capacity change from 0 to 256 [ 176.554094][ T7590] loop4: detected capacity change from 0 to 32768 [ 176.670199][ T7590] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.926361][ T7590] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 177.062137][ T7608] loop2: detected capacity change from 0 to 40427 [ 177.122966][ T7590] XFS (loop4): Starting recovery (logdev: internal) [ 177.136770][ T7608] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 177.198582][ T7608] F2FS-fs (loop2): invalid crc value [ 177.215021][ T7590] XFS (loop4): Ending recovery (logdev: internal) [ 177.244808][ T7590] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 177.266516][ T7590] XFS (loop4): Failed to initialize disk quotas. [ 177.294900][ T7608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.492151][ T7608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.509146][ T7590] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 177.693414][ T7604] loop3: detected capacity change from 0 to 40427 [ 177.703604][ T6231] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.716831][ T7608] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 177.743298][ T7604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 177.801916][ T7604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 177.937253][ T7604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.198132][ T7604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.248261][ T7604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.902371][ T7645] loop4: detected capacity change from 0 to 2048 [ 179.108481][ T7645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.468961][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.061593][ T7670] loop3: detected capacity change from 0 to 4096 [ 180.098240][ T7670] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 180.343045][ T7670] ntfs: (device loop3): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 180.403242][ T7670] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 180.458252][ T7670] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 180.561028][ T7670] ntfs: volume version 3.1. [ 180.593010][ T7670] ntfs: (device loop3): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 180.623982][ T7670] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 180.677194][ T7670] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 181.025105][ T7698] loop1: detected capacity change from 0 to 16 [ 181.033355][ T7698] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 181.217688][ T7696] loop4: detected capacity change from 0 to 4096 [ 181.301244][ T7696] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 181.420062][ T7696] ntfs3: loop4: Failed to load $Extend (-22). [ 181.458259][ T7696] ntfs3: loop4: Failed to initialize $Extend. [ 182.077031][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 182.117578][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 183.232447][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'. [ 183.281890][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'. [ 183.311681][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 183.660739][ T7766] loop3: detected capacity change from 0 to 64 [ 183.784453][ T7770] netlink: 5 bytes leftover after parsing attributes in process `syz.4.862'. [ 183.865736][ T7770] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 183.912783][ T7770] 0ªX¹¦D: entered allmulticast mode [ 183.928794][ T7770] veth0_macvtap: entered allmulticast mode [ 183.936165][ T7770] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 184.625154][ T7797] loop3: detected capacity change from 0 to 256 [ 185.228382][ T7808] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 185.841549][ T7833] netlink: 52 bytes leftover after parsing attributes in process `syz.4.892'. [ 186.780273][ T7862] ieee802154 phy0 wpan0: encryption failed: -90 [ 186.816775][ T7861] loop1: detected capacity change from 0 to 128 [ 186.883862][ T7861] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 186.920016][ T7861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.688006][ T7882] netlink: 'syz.1.915': attribute type 21 has an invalid length. [ 188.322678][ T7897] x_tables: duplicate entry at hook 3 [ 188.408858][ T7870] loop2: detected capacity change from 0 to 32768 [ 188.538314][ T7870] read_mapping_page failed! [ 188.554620][ T7870] diRead: read_metapage failed [ 188.569629][ T7870] jfs_lookup: iget failed on inum 32 [ 188.861298][ T7908] loop3: detected capacity change from 0 to 512 [ 188.953967][ T7908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.975818][ T7908] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.139904][ T7908] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 189.170624][ T7908] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 189.227181][ T7908] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.928: Failed to acquire dquot type 0 [ 189.292299][ T7921] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.557624][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.032656][ T7967] loop2: detected capacity change from 0 to 1024 [ 191.107911][ T7967] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.120546][ T7969] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 191.155477][ T7943] loop4: detected capacity change from 0 to 32768 [ 191.164745][ T7967] EXT4-fs: inline encryption not supported [ 191.179695][ T7967] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.227221][ T7943] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.943 (7943) [ 191.264741][ T7967] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.955: bad orphan inode 11 [ 191.280044][ T7967] EXT4-fs (loop2): Remounting filesystem read-only [ 191.288271][ T7967] ext4_test_bit(bit=10, block=4) = 1 [ 191.294287][ T7967] is_bad_inode(inode)=0 [ 191.299687][ T7967] NEXT_ORPHAN(inode)=3254779904 [ 191.306044][ T7967] max_ino=32 [ 191.312498][ T7967] i_nlink=0 [ 191.318370][ T7967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.362988][ T7943] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.437074][ T7943] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.448332][ T7943] BTRFS info (device loop4): force zlib compression, level 3 [ 191.507060][ T7943] BTRFS info (device loop4): force clearing of disk cache [ 191.516125][ T7943] BTRFS info (device loop4): setting nodatasum [ 191.565484][ T7943] BTRFS info (device loop4): allowing degraded mounts [ 191.578254][ T7943] BTRFS info (device loop4): enabling disk space caching [ 191.586564][ T7943] BTRFS info (device loop4): disk space caching is enabled [ 191.598591][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.707984][ T28] audit: type=1326 audit(1769058618.192:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 191.733406][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.760982][ T28] audit: type=1326 audit(1769058618.192:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 191.791244][ T28] audit: type=1326 audit(1769058618.242:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 191.816292][ T28] audit: type=1326 audit(1769058618.242:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 191.976293][ T28] audit: type=1326 audit(1769058618.242:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 192.001975][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.082798][ T7943] BTRFS info (device loop4): auto enabling async discard [ 192.118012][ T7943] BTRFS info (device loop4): rebuilding free space tree [ 192.322907][ T7943] BTRFS info (device loop4): disabling free space tree [ 192.350448][ T7943] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.399100][ T7943] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.452713][ T8005] ipvlan0: entered promiscuous mode [ 192.486827][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.725131][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 192.747773][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 192.756357][ T9] usb 4-1: Product: syz [ 192.786751][ T9] usb 4-1: SerialNumber: syz [ 192.804165][ T6231] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 192.830853][ T9] usb 4-1: config 0 descriptor?? [ 193.142665][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 193.178589][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 193.251055][ T8016] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 193.380906][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.402505][ T27] usb 4-1: USB disconnect, device number 3 [ 193.411903][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.452854][ T23] usb 2-1: config 0 descriptor?? [ 193.535759][ T23] cp210x 2-1:0.0: cp210x converter detected [ 193.779918][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 194.032764][ T5823] usb 2-1: USB disconnect, device number 6 [ 194.078623][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.149556][ T5823] cp210x 2-1:0.0: device disconnected [ 194.276997][ T8030] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525325][ T8034] geneve2: entered promiscuous mode [ 194.751319][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.758714][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.867963][ T8042] loop1: detected capacity change from 0 to 1024 [ 194.941269][ T8047] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 194.956444][ T8047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.104655][ T49] hfsplus: b-tree write err: -5, ino 4 [ 195.477391][ T8054] loop2: detected capacity change from 0 to 4096 [ 195.527401][ T8054] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 195.595016][ T8064] loop1: detected capacity change from 0 to 8 [ 195.661410][ T8064] SQUASHFS error: lzo decompression failed, data probably corrupt [ 195.707700][ T8064] SQUASHFS error: Failed to read block 0x1c0: -5 [ 195.727594][ T8064] SQUASHFS error: Unable to read metadata cache entry [1be] [ 195.851477][ T8054] ntfs3: loop2: failed to convert "c46c" to macromanian [ 195.987170][ T28] audit: type=1326 audit(1769058622.482:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 196.098037][ T28] audit: type=1326 audit(1769058622.482:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 196.123543][ T8073] overlayfs: conflicting options: userxattr,metacopy=on [ 196.154816][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.998'. [ 196.176735][ T28] audit: type=1326 audit(1769058622.502:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 196.256775][ T28] audit: type=1326 audit(1769058622.502:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 196.369345][ T28] audit: type=1326 audit(1769058622.502:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c4b9acb9 code=0x7ffc0000 [ 196.784074][ T8090] netlink: 'syz.1.1007': attribute type 10 has an invalid length. [ 196.886607][ T8090] batman_adv: batadv0: Adding interface: team0 [ 196.890777][ T8095] loop2: detected capacity change from 0 to 16 [ 196.925840][ T8090] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.946258][ T8095] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 196.975126][ T8090] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 197.295804][ T8106] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1013'. [ 197.497423][ T8108] netlink: 'syz.1.1017': attribute type 32 has an invalid length. [ 197.731591][ T8118] netlink: 'syz.2.1019': attribute type 15 has an invalid length. [ 197.768670][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 197.778923][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 197.898250][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 197.937258][ T8122] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.026814][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.253115][ T27] usb 2-1: too many configurations: 37, using maximum allowed: 8 [ 198.338028][ T27] usb 2-1: string descriptor 0 read error: -71 [ 198.344817][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.392850][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.423632][ T27] usb 2-1: can't set config #1, error -71 [ 198.473415][ T27] usb 2-1: USB disconnect, device number 7 [ 198.743904][ T8145] loop3: detected capacity change from 0 to 256 [ 198.820360][ T8145] FAT-fs (loop3): Directory bread(block 64) failed [ 198.856483][ T8145] FAT-fs (loop3): Directory bread(block 65) failed [ 198.884816][ T8145] FAT-fs (loop3): Directory bread(block 66) failed [ 198.912646][ T8145] FAT-fs (loop3): Directory bread(block 67) failed [ 198.964040][ T8145] FAT-fs (loop3): Directory bread(block 68) failed [ 199.003798][ T8145] FAT-fs (loop3): Directory bread(block 69) failed [ 199.049272][ T8145] FAT-fs (loop3): Directory bread(block 70) failed [ 199.098278][ T8145] FAT-fs (loop3): Directory bread(block 71) failed [ 199.127115][ T8145] FAT-fs (loop3): Directory bread(block 72) failed [ 199.142553][ T8145] FAT-fs (loop3): Directory bread(block 73) failed [ 199.154018][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 199.182922][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 199.495550][ T8159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1039'. [ 199.519413][ T8159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1039'. [ 199.752890][ T8166] vlan0: entered promiscuous mode [ 200.718122][ T8195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.068319][ T8206] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 201.361907][ T8215] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 201.430958][ T8215] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1067'. [ 201.484831][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 201.566111][ T8220] loop4: detected capacity change from 0 to 512 [ 201.600703][ T8220] EXT4-fs: Ignoring removed i_version option [ 201.636902][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.728745][ T8220] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1071: inode #13: comm syz.4.1071: iget: illegal inode # [ 201.763617][ T8220] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1071: couldn't read orphan inode 13 (err -117) [ 201.834997][ T8220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.859313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.056181][ T8220] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.1071: resize_inode disabled but reserved GDT blocks non-zero [ 202.137149][ T8233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.239227][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.637099][ T966] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.707359][ T8231] loop1: detected capacity change from 0 to 32768 [ 202.826918][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 202.850346][ T966] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 202.875074][ T966] usb 5-1: config 0 has no interface number 0 [ 202.906893][ T966] usb 5-1: config 0 interface 163 has no altsetting 0 [ 202.940873][ T966] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 202.986726][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.016037][ T966] usb 5-1: Product: syz [ 203.036428][ T966] usb 5-1: Manufacturer: syz [ 203.055249][ T966] usb 5-1: SerialNumber: syz [ 203.062072][ T5777] udevd[5777]: incorrect btrfs checksum on /dev/loop1 [ 203.087674][ T966] usb 5-1: config 0 descriptor?? [ 203.125340][ T8247] loop3: detected capacity change from 0 to 4096 [ 203.153115][ T8247] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 203.565951][ T5823] usb 5-1: USB disconnect, device number 2 [ 203.584328][ T5823] f81534a_ctrl 5-1:0.163: failed to set register 0x116: -19 [ 203.628789][ T5823] f81534a_ctrl 5-1:0.163: failed to enable ports: -19 [ 203.915001][ T8264] loop3: detected capacity change from 0 to 8 [ 203.923331][ T8264] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 203.969350][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop3 [ 204.002054][ T8264] cramfs: Error -3 while decompressing! [ 204.021627][ T8264] cramfs: ffffffff973f7368(26)->ffff88805c7a7000(4096) [ 204.037507][ T8264] cramfs: Error -3 while decompressing! [ 204.044892][ T8264] cramfs: ffffffff973f7382(26)->ffff88806c9d8000(4096) [ 204.069019][ T8264] cramfs: Error -3 while decompressing! [ 204.086283][ T8264] cramfs: ffffffff973f739c(16)->ffff88805e20d000(4096) [ 204.097096][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop3 [ 204.150681][ T8264] cramfs: Error -3 while decompressing! [ 204.193897][ T8264] cramfs: ffffffff973f7368(26)->ffff88805c7a7000(4096) [ 204.969947][ T8291] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.373390][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 205.447329][ T8304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.755744][ T8347] loop3: detected capacity change from 0 to 2048 [ 206.817143][ T8347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.187570][ T8356] loop1: detected capacity change from 0 to 4096 [ 207.273997][ T8360] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.358868][ T8362] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 207.374096][ T8357] loop2: detected capacity change from 0 to 4096 [ 207.416506][ T8362] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1139'. [ 207.447471][ T8362] NCSI netlink: No device for ifindex 0 [ 208.277976][ T8382] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 208.286186][ T8382] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1148'. [ 208.581137][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 209.477037][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1168'. [ 209.503388][ T8419] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1168'. [ 209.535883][ T8419] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1168'. [ 209.579491][ T8419] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 209.727756][ T8397] loop3: detected capacity change from 0 to 32768 [ 209.827869][ T8397] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.012314][ T8397] XFS (loop3): Ending clean mount [ 210.190284][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.386948][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 210.396119][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 210.940172][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 210.967099][ T8459] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 210.996860][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 211.140488][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.356866][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 211.382110][ T5823] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 211.397185][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.405404][ T5823] usb 2-1: Product: syz [ 211.466893][ T5823] usb 2-1: Manufacturer: syz [ 211.486826][ T5823] usb 2-1: SerialNumber: syz [ 211.497788][ T8469] overlayfs: disabling nfs_export due to verity=require [ 211.513334][ T8469] overlayfs: conflicting options: userxattr,verity=require [ 211.524426][ T5823] usb 2-1: config 0 descriptor?? [ 211.553530][ T5823] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 211.567224][ T8473] openvswitch: netlink: Message has 4 unknown bytes. [ 212.001090][ T5823] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 212.023126][ T5823] visor: probe of 2-1:0.0 failed with error -71 [ 212.069992][ T5823] usb 2-1: USB disconnect, device number 8 [ 212.143269][ T28] audit: type=1326 audit(1769058638.632:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 212.167919][ T8441] Bluetooth: hci2: command 0x0406 tx timeout [ 212.180044][ T8441] Bluetooth: hci1: command 0x0406 tx timeout [ 212.188298][ T8441] Bluetooth: hci3: command 0x0406 tx timeout [ 212.227719][ T28] audit: type=1326 audit(1769058638.632:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 212.319377][ T28] audit: type=1326 audit(1769058638.632:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 212.344400][ T28] audit: type=1326 audit(1769058638.632:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 212.374192][ T28] audit: type=1326 audit(1769058638.632:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221059acb9 code=0x7ffc0000 [ 213.094988][ T8512] loop1: detected capacity change from 0 to 512 [ 213.181362][ T8512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.212254][ T8512] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.249503][ T8516] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.468824][ T8512] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 213.528162][ T8512] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 213.562918][ T8512] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1207: Failed to acquire dquot type 0 [ 213.764123][ T8529] loop4: detected capacity change from 0 to 8192 [ 213.778589][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.791852][ T8529] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.904602][ T8529] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 213.980846][ T8529] FAT-fs (loop4): Filesystem has been set read-only [ 214.556723][ T28] audit: type=1326 audit(1769058641.022:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e599acb9 code=0x7ffc0000 [ 214.640205][ T28] audit: type=1326 audit(1769058641.072:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e599acb9 code=0x7ffc0000 [ 214.749021][ T28] audit: type=1326 audit(1769058641.082:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e599acb9 code=0x7ffc0000 [ 215.683486][ T8588] loop1: detected capacity change from 0 to 64 [ 216.841160][ T8620] netlink: 'syz.3.1260': attribute type 15 has an invalid length. [ 216.876857][ T8620] __nla_validate_parse: 1 callbacks suppressed [ 216.876878][ T8620] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1260'. [ 217.374332][ T8633] loop1: detected capacity change from 0 to 64 [ 217.395170][ T8605] loop2: detected capacity change from 0 to 32768 [ 217.497440][ T8605] ialloc: diAlloc returned -5! [ 217.827241][ T8642] sock: sock_timestamping_bind_phc: sock not bind to device [ 217.850247][ T8640] loop1: detected capacity change from 0 to 1024 [ 217.920278][ T8640] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.058333][ T8640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.251691][ T8640] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 218.283451][ T8640] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1270: missing EA_INODE flag [ 218.315891][ T8640] EXT4-fs (loop1): Remounting filesystem read-only [ 218.503937][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.552250][ T8659] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 218.587487][ T8659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 218.668942][ T8659] .`: renamed from bond0 (while UP) [ 219.527437][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 219.600169][ T8684] netlink: 'syz.1.1290': attribute type 32 has an invalid length. [ 219.653903][ T8657] loop3: detected capacity change from 0 to 40427 [ 219.678316][ T8657] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 219.704773][ T8657] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.750203][ T5823] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.772524][ T8657] F2FS-fs (loop3): invalid crc value [ 219.779719][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.798321][ T5823] usb 5-1: config 0 descriptor?? [ 219.854105][ T8657] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.051993][ T8687] loop1: detected capacity change from 0 to 4096 [ 220.073477][ T8657] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 220.125208][ T8657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.290675][ T5823] [drm:udl_init] *ERROR* Selecting channel failed [ 220.392400][ T5823] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 220.427338][ T5823] [drm] Initialized udl on minor 2 [ 220.474861][ T5823] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.509214][ T8694] loop2: detected capacity change from 0 to 64 [ 220.536534][ T5823] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 220.572398][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.595650][ T5823] usb 5-1: USB disconnect, device number 3 [ 220.617542][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 220.975058][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 221.707587][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 222.356830][ T5823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.581778][ T5823] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.616873][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.666881][ T5823] usb 3-1: Product: syz [ 222.676596][ T5823] usb 3-1: Manufacturer: syz [ 222.700550][ T5823] usb 3-1: SerialNumber: syz [ 222.749758][ T5823] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 222.861241][ T968] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.992715][ T8769] loop1: detected capacity change from 0 to 2048 [ 224.056956][ T9] usb 3-1: USB disconnect, device number 3 [ 224.078445][ T968] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 224.089548][ T968] ath9k_htc: Failed to initialize the device [ 224.098549][ T8769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.159531][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 224.681670][ T8759] loop3: detected capacity change from 0 to 32768 [ 224.761089][ T8759] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1327 (8759) [ 224.803224][ T8759] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 224.820099][ T8782] ALSA: mixer_oss: invalid OSS volume 'u' [ 224.875101][ T8759] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.899199][ T8759] BTRFS info (device loop3): force zlib compression, level 3 [ 224.926119][ T8759] BTRFS info (device loop3): force clearing of disk cache [ 224.957154][ T8759] BTRFS info (device loop3): setting nodatasum [ 224.964320][ T8759] BTRFS info (device loop3): allowing degraded mounts [ 224.980840][ T8759] BTRFS info (device loop3): enabling disk space caching [ 224.990104][ T8759] BTRFS info (device loop3): disk space caching is enabled [ 225.008554][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 225.174475][ T8759] BTRFS info (device loop3): auto enabling async discard [ 225.226988][ T8759] BTRFS info (device loop3): rebuilding free space tree [ 225.234922][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 225.235054][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 225.315172][ T8805] loop2: detected capacity change from 0 to 4096 [ 225.332095][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.340946][ T8759] BTRFS info (device loop3): disabling free space tree [ 225.373537][ T8805] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 225.377540][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 225.393508][ T8759] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.429415][ T8759] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.446129][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.506799][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 225.515553][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 225.575718][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.614691][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 225.643847][ T8805] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 225.672222][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.678958][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 225.743001][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 225.763678][ T8759] BTRFS info (device loop3): balance: start -sconvert=raid0,soft,usage=10625749090306,limit=51539609600 [ 225.788641][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 225.836875][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.869227][ T8759] BTRFS info (device loop3): balance: ended with status: 0 [ 225.888117][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 225.908863][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 225.937276][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.955656][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.986895][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.012605][ T9] usb 2-1: string descriptor 0 read error: -22 [ 226.036995][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.050531][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.066120][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.115151][ T23] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.135525][ T23] usb 5-1: Product: syz [ 226.142136][ T23] usb 5-1: Manufacturer: syz [ 226.149869][ T5776] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.172729][ T23] hub 5-1:4.0: USB hub found [ 226.314599][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 226.331550][ T5777] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop3 scanned by udevd (5777) [ 226.398784][ T23] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 226.543850][ T9] usb 2-1: USB disconnect, device number 9 [ 226.857197][ T27] usb 5-1: USB disconnect, device number 4 [ 228.265087][ T8840] libceph: resolve '400' (ret=-3): failed [ 228.808677][ T8860] loop2: detected capacity change from 0 to 2048 [ 228.884524][ T8860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.018997][ T8860] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 229.183634][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 229.467799][ T8881] loop2: detected capacity change from 0 to 512 [ 229.483491][ T8880] SET target dimension over the limit! [ 229.540035][ T8881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.584221][ T8881] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.738606][ T8881] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.1373: corrupted xattr block 32: invalid header [ 229.787564][ T8888] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 230.074659][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.542649][ T8905] ubi0: attaching mtd0 [ 230.565076][ T8905] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 230.716449][ T8870] loop3: detected capacity change from 0 to 40427 [ 230.783191][ T8870] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 230.827632][ T8870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 230.891468][ T8870] F2FS-fs (loop3): invalid crc value [ 230.958255][ T8870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.170651][ T8870] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 231.203723][ T8870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.402266][ T8870] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 231.418599][ T8931] ipip0: entered allmulticast mode [ 231.787147][ T8939] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 232.566873][ T8959] program syz.1.1400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.718534][ T8927] loop4: detected capacity change from 0 to 32768 [ 232.839007][ T8927] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.857851][ T8965] program syz.2.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.872762][ T8965] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 232.962283][ T8974] openvswitch: netlink: Missing valid actions attribute. [ 232.994543][ T8927] XFS (loop4): Ending clean mount [ 233.012544][ T8974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.040307][ T8927] XFS (loop4): Quotacheck needed: Please wait. [ 233.081613][ T8977] program syz.2.1405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.231228][ T8927] XFS (loop4): Quotacheck: Done. [ 233.498068][ T8986] xt_bpf: check failed: parse error [ 233.551859][ T6231] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.906353][ T8992] loop1: detected capacity change from 0 to 4096 [ 233.979756][ T8992] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.054419][ T8992] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 234.235098][ T9003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.937338][ T9019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.778454][ T9008] loop3: detected capacity change from 0 to 32768 [ 235.795951][ T9037] loop4: detected capacity change from 0 to 8 [ 235.834709][ T9037] SQUASHFS error: Unable to read inode 0xa7 [ 235.912881][ T9008] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.099024][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 236.144170][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1431'. [ 236.281160][ T9008] XFS (loop3): Ending clean mount [ 236.334877][ T9008] XFS (loop3): Quotacheck needed: Please wait. [ 236.512306][ T9057] netlink: 'syz.1.1434': attribute type 16 has an invalid length. [ 236.542383][ T9008] XFS (loop3): Quotacheck: Done. [ 236.561774][ T9057] netlink: 'syz.1.1434': attribute type 17 has an invalid length. [ 236.688671][ T9061] loop2: detected capacity change from 0 to 256 [ 236.720403][ T9061] exfat: Deprecated parameter 'namecase' [ 236.750091][ T9061] exfat: Deprecated parameter 'namecase' [ 236.786780][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.863866][ T9061] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 237.767332][ T5772] Bluetooth: hci4: command 0x0406 tx timeout [ 239.071337][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1464'. [ 239.096818][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 239.147754][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 239.638678][ T9108] loop2: detected capacity change from 0 to 32768 [ 239.652161][ T9108] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1461 (9108) [ 239.737298][ T9108] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 239.774382][ T9108] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 239.817331][ T9108] BTRFS info (device loop2): enabling ssd optimizations [ 239.824615][ T9108] BTRFS info (device loop2): not using ssd optimizations [ 239.866906][ T9108] BTRFS info (device loop2): turning off barriers [ 239.895375][ T9108] BTRFS info (device loop2): using free space tree [ 240.027698][ T9110] loop3: detected capacity change from 0 to 40427 [ 240.046767][ T9110] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 240.092423][ T9110] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 240.127131][ T9110] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x7ffff [ 240.228684][ T9110] F2FS-fs (loop3): invalid crc value [ 240.290116][ T9110] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.298841][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 240.317032][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 240.577115][ T9110] F2FS-fs (loop3): Start checkpoint disabled! [ 240.622967][ T9110] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 240.636958][ T9110] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 240.677273][ T5774] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 241.058476][ T9164] erspan0: entered promiscuous mode [ 241.076763][ T9164] erspan0: entered allmulticast mode [ 241.134541][ T9165] netlink: 'syz.4.1480': attribute type 10 has an invalid length. [ 241.269482][ T9165] team0: Cannot enslave team device to itself [ 241.319270][ T2953] kworker/u4:8: attempt to access beyond end of device [ 241.319270][ T2953] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 241.385989][ T2953] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 241.415118][ T2953] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 242.800921][ T9198] comedi comedi0: dt2814: a I/O base address must be specified [ 242.905322][ T9179] loop4: detected capacity change from 0 to 32768 [ 243.041542][ T9179] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 243.461073][ T6231] ocfs2: Unmounting device (7,4) on (node local) [ 243.634393][ T9222] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 243.642742][ T9222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.659751][ T9220] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 243.697768][ T9220] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.909248][ T9226] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 244.587058][ T9247] loop4: detected capacity change from 0 to 512 [ 244.601482][ T9249] loop1: detected capacity change from 0 to 256 [ 244.645509][ T9247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.659621][ T9247] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.940193][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.067123][ T9259] deleting an unspecified loop device is not supported. [ 245.077098][ T9260] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 245.377386][ T9269] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.720494][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 246.007607][ T968] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.027292][ T9287] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 246.119772][ T9289] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 246.230422][ T968] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 246.260254][ T968] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 246.298543][ T968] usb 2-1: config 220 has no interface number 2 [ 246.308867][ T9293] loop4: detected capacity change from 0 to 256 [ 246.320686][ T968] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 246.382637][ T968] usb 2-1: config 220 interface 0 has no altsetting 0 [ 246.400180][ T968] usb 2-1: config 220 interface 76 has no altsetting 0 [ 246.426865][ T968] usb 2-1: config 220 interface 1 has no altsetting 0 [ 246.457886][ T968] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 246.490265][ T9293] FAT-fs (loop4): Directory bread(block 64) failed [ 246.502511][ T9295] loop3: detected capacity change from 0 to 64 [ 246.517442][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.539440][ T9293] FAT-fs (loop4): Directory bread(block 65) failed [ 246.546949][ T968] usb 2-1: Product: syz [ 246.546976][ T968] usb 2-1: Manufacturer: syz [ 246.546993][ T968] usb 2-1: SerialNumber: syz [ 246.605747][ T9293] FAT-fs (loop4): Directory bread(block 66) failed [ 246.648270][ T9293] FAT-fs (loop4): Directory bread(block 67) failed [ 246.673566][ T9293] FAT-fs (loop4): Directory bread(block 68) failed [ 246.712934][ T9293] FAT-fs (loop4): Directory bread(block 69) failed [ 246.732796][ T9293] FAT-fs (loop4): Directory bread(block 70) failed [ 246.748179][ T9293] FAT-fs (loop4): Directory bread(block 71) failed [ 246.768573][ T9293] FAT-fs (loop4): Directory bread(block 72) failed [ 246.786173][ T9293] FAT-fs (loop4): Directory bread(block 73) failed [ 246.839387][ T968] usb 2-1: selecting invalid altsetting 0 [ 246.871620][ T968] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 246.882012][ T968] usb 2-1: No valid video chain found. [ 246.938986][ T968] usb 2-1: selecting invalid altsetting 0 [ 246.944963][ T968] usbtest: probe of 2-1:220.1 failed with error -22 [ 247.013838][ T968] usb 2-1: USB disconnect, device number 10 [ 247.207371][ T29] INFO: task syz-executor:5769 blocked for more than 143 seconds. [ 247.246741][ T29] Not tainted syzkaller #0 [ 247.252152][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.316952][ T9304] loop2: detected capacity change from 0 to 512 [ 247.327169][ T29] task:syz-executor state:D stack:21704 pid:5769 ppid:1 flags:0x00004004 [ 247.376697][ T29] Call Trace: [ 247.380393][ T29] [ 247.383386][ T29] __schedule+0x1553/0x45a0 [ 247.409102][ T29] ? asan.module_dtor+0x20/0x20 [ 247.414345][ T29] ? mark_lock+0x94/0x320 [ 247.428530][ T29] ? lock_chain_count+0x20/0x20 [ 247.444231][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 247.469035][ T9304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.477194][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 247.500479][ T9304] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.517167][ T29] schedule+0xbd/0x170 [ 247.521851][ T29] io_schedule+0x80/0xd0 [ 247.534396][ T29] folio_wait_bit_common+0x714/0xfa0 [ 247.565916][ T29] ? folio_wait_bit+0x30/0x30 [ 247.598033][ T29] ? filemap_get_entry+0x379/0x3f0 [ 247.603369][ T29] ? _compound_head+0x120/0x120 [ 247.631430][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 247.637346][ T29] __filemap_get_folio+0xbc/0xbb0 [ 247.642873][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 247.649107][ T29] ? mapping_evict_folio+0x510/0x510 [ 247.654725][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 247.660158][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.665595][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 247.671228][ T29] evict+0x4dd/0x8d0 [ 247.675378][ T29] ? proc_nr_inodes+0x230/0x230 [ 247.681371][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 247.688036][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 247.693432][ T29] evict_inodes+0x606/0x6a0 [ 247.700517][ T29] ? clear_inode+0x150/0x150 [ 247.716738][ T29] generic_shutdown_super+0x97/0x2b0 [ 247.722184][ T29] kill_block_super+0x44/0x90 [ 247.736815][ T29] deactivate_locked_super+0x97/0x100 [ 247.742400][ T29] cleanup_mnt+0x43b/0x4d0 [ 247.752380][ T29] task_work_run+0x1d4/0x260 [ 247.757269][ T29] ? task_work_cancel+0x220/0x220 [ 247.762516][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 247.768756][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 247.774333][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 247.780417][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 247.787047][ T29] do_syscall_64+0x61/0xa0 [ 247.792341][ T29] ? clear_bhb_loop+0x40/0x90 [ 247.798562][ T29] ? clear_bhb_loop+0x40/0x90 [ 247.804044][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.810212][ T29] RIP: 0033:0x7fc8abd9bf17 [ 247.814874][ T29] RSP: 002b:00007ffe4a68bbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 247.824666][ T29] RAX: 0000000000000000 RBX: 00007fc8abe0471f RCX: 00007fc8abd9bf17 [ 247.833237][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4a68bc70 [ 247.841557][ T29] RBP: 00007ffe4a68bc70 R08: 00007ffe4a68cc70 R09: 00000000ffffffff [ 247.855289][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4a68cd00 [ 247.864055][ T29] R13: 00007fc8abe0471f R14: 00000000000178ca R15: 00007ffe4a68cd40 [ 247.872763][ T29] [ 247.876224][ T29] [ 247.876224][ T29] Showing all locks held in the system: [ 247.886202][ T29] 1 lock held by khungtaskd/29: [ 247.897425][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.908621][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 247.936015][ T29] 2 locks held by kworker/1:2/966: [ 247.966706][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 247.992119][ T29] #1: ffffc900037f7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 248.004586][ T29] 3 locks held by kworker/u4:8/2953: [ 248.010251][ T29] 2 locks held by getty/5531: [ 248.015695][ T29] #0: ffff88802d0b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 248.036682][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 248.055104][ T29] 1 lock held by syz-executor/5769: [ 248.060699][ T29] #0: ffff88807c4f40e0 (&type->s_umount_key#55){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 248.083589][ T29] 2 locks held by udevd/5777: [ 248.091647][ T29] 2 locks held by dhcpcd/9307: [ 248.105871][ T29] #0: ffff88805fdfd020 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 248.124747][ T29] #1: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 248.144623][ T29] [ 248.161711][ T29] ============================================= [ 248.161711][ T29] [ 248.173092][ T29] NMI backtrace for cpu 0 [ 248.177679][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 248.186376][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.196779][ T29] Call Trace: [ 248.200204][ T29] [ 248.203624][ T29] dump_stack_lvl+0x18c/0x250 [ 248.208459][ T29] ? show_regs_print_info+0x20/0x20 [ 248.213920][ T29] ? load_image+0x400/0x400 [ 248.219125][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 248.225044][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 248.232320][ T29] ? _printk+0xde/0x130 [ 248.236972][ T29] ? load_image+0x400/0x400 [ 248.242178][ T29] ? load_image+0x400/0x400 [ 248.247268][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 248.253685][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 248.260640][ T29] watchdog+0xf3d/0xf80 [ 248.265129][ T29] ? watchdog+0x1e1/0xf80 [ 248.269515][ T29] kthread+0x2fa/0x390 [ 248.273921][ T29] ? hungtask_pm_notify+0x90/0x90 [ 248.279262][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.284255][ T29] ret_from_fork+0x48/0x80 [ 248.288897][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.293725][ T29] ret_from_fork_asm+0x11/0x20 [ 248.298660][ T29] [ 248.302842][ T29] Sending NMI from CPU 0 to CPUs 1: [ 248.309161][ C1] NMI backtrace for cpu 1 [ 248.309174][ C1] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 248.309192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.309207][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 248.309232][ C1] RIP: 0010:unwind_next_frame+0xa6/0x2970 [ 248.309254][ C1] Code: 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 2b 84 c0 0f 85 df 21 00 00 41 8b 2c 24 31 ff 89 ee e8 11 e0 4b 00 89 ac 24 8c 00 00 00 <85> ed 74 77 4c 89 74 24 60 48 89 5c 24 18 bf 01 00 00 00 e8 52 47 [ 248.309269][ C1] RSP: 0018:ffffc900015a7578 EFLAGS: 00000293 [ 248.309283][ C1] RAX: ffffffff813b36bf RBX: 1ffff920002b4ec9 RCX: 0000000000000000 [ 248.309296][ C1] RDX: ffff88801e680000 RSI: 0000000000000001 RDI: 0000000000000000 [ 248.309307][ C1] RBP: 0000000000000001 R08: ffffc900015a7710 R09: 0000000000000001 [ 248.309318][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900015a7648 [ 248.309329][ C1] R13: dffffc0000000000 R14: ffffc900015a7680 R15: ffffffff81df161f [ 248.309342][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 248.309356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.309368][ C1] CR2: 000055db42e46168 CR3: 000000007ad82000 CR4: 00000000003506e0 [ 248.309385][ C1] Call Trace: [ 248.309391][ C1] [ 248.309405][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 248.309427][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 248.309446][ C1] ? stack_trace_save+0x100/0x100 [ 248.309467][ C1] arch_stack_walk+0x144/0x190 [ 248.309489][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 248.309511][ C1] stack_trace_save+0xaa/0x100 [ 248.309532][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 248.309562][ C1] ? skb_release_data+0x634/0x800 [ 248.309592][ C1] ? kasan_set_track+0x4e/0x70 [ 248.309609][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 248.309629][ C1] kasan_set_track+0x4e/0x70 [ 248.309647][ C1] ? kasan_set_track+0x4e/0x70 [ 248.309664][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 248.309707][ C1] ? __kmem_cache_alloc_node+0x13a/0x250 [ 248.309732][ C1] ? __alloc_skb+0x138/0x2c0 [ 248.309797][ C1] __kasan_kmalloc+0x8f/0xa0 [ 248.309816][ C1] ? __alloc_skb+0x138/0x2c0 [ 248.309841][ C1] __kmalloc_node_track_caller+0xb2/0x230 [ 248.309866][ C1] ? rcu_is_watching+0x15/0xb0 [ 248.309891][ C1] ? __alloc_skb+0x138/0x2c0 [ 248.309915][ C1] kmalloc_reserve+0x116/0x240 [ 248.309943][ C1] __alloc_skb+0x138/0x2c0 [ 248.309971][ C1] nsim_dev_trap_report_work+0x293/0xb00 [ 248.309998][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 248.310021][ C1] process_scheduled_works+0xa5d/0x15d0 [ 248.310058][ C1] ? assign_work+0x430/0x430 [ 248.310082][ C1] ? assign_work+0x3d0/0x430 [ 248.310106][ C1] worker_thread+0xa55/0xfc0 [ 248.310128][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 248.310148][ C1] ? _raw_spin_unlock+0x40/0x40 [ 248.310163][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 248.310192][ C1] kthread+0x2fa/0x390 [ 248.310208][ C1] ? pr_cont_work+0x560/0x560 [ 248.310230][ C1] ? kthread_blkcg+0xd0/0xd0 [ 248.310247][ C1] ret_from_fork+0x48/0x80 [ 248.310267][ C1] ? kthread_blkcg+0xd0/0xd0 [ 248.310283][ C1] ret_from_fork_asm+0x11/0x20 [ 248.310315][ C1] [ 248.312253][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 248.650565][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 248.657980][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.668071][ T29] Call Trace: [ 248.671385][ T29] [ 248.674638][ T29] dump_stack_lvl+0x18c/0x250 [ 248.679460][ T29] ? show_regs_print_info+0x20/0x20 [ 248.685153][ T29] ? load_image+0x400/0x400 [ 248.689716][ T29] panic+0x2dc/0x730 [ 248.693664][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 248.699345][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 248.703987][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 248.709774][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 248.716008][ T29] watchdog+0xf7c/0xf80 [ 248.720394][ T29] ? watchdog+0x1e1/0xf80 [ 248.724783][ T29] kthread+0x2fa/0x390 [ 248.729470][ T29] ? hungtask_pm_notify+0x90/0x90 [ 248.734572][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.739383][ T29] ret_from_fork+0x48/0x80 [ 248.743856][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.748511][ T29] ret_from_fork_asm+0x11/0x20 [ 248.753344][ T29] [ 248.757010][ T29] Kernel Offset: disabled [ 248.761593][ T29] Rebooting in 86400 seconds..