last executing test programs: 2m37.83425636s ago: executing program 1 (id=915): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x8, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x35f, @tick=0x4, 0xfe, {}, 0x0, 0x2}) 2m37.682472678s ago: executing program 1 (id=919): socket(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) 2m37.489936289s ago: executing program 1 (id=922): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 2m37.060804594s ago: executing program 1 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.837487777s ago: executing program 1 (id=928): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m35.883071532s ago: executing program 1 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 2m20.803721784s ago: executing program 32 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 1m13.972469918s ago: executing program 4 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000f7ff00000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000014000000020a03"], 0xac}}, 0x0) 1m13.794864918s ago: executing program 4 (id=1936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1b99acb2dcb11085, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000090) 1m13.615074239s ago: executing program 4 (id=1940): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x34) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f00000017c0)=0x3) 1m13.501222925s ago: executing program 4 (id=1944): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 1m12.451415156s ago: executing program 4 (id=1960): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022ae00"], 0x0}, 0x0) 1m11.442227994s ago: executing program 4 (id=1962): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1m11.34562445s ago: executing program 33 (id=1962): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 10.431111164s ago: executing program 3 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000f7ff00000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000014000000020a03"], 0xac}}, 0x0) 10.383400037s ago: executing program 3 (id=2592): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xa, 0x4, 0x2, 0x7fff, 0x2, "773d8ecdef384aa0"}) 10.32936272s ago: executing program 3 (id=2594): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) 10.233298036s ago: executing program 3 (id=2596): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 9.63654498s ago: executing program 3 (id=2603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x2}) 9.017475247s ago: executing program 3 (id=2604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030d25bd7000fbdbdf251b000000080015000200000005001900a7006df00800010060"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4c814) 8.893067393s ago: executing program 34 (id=2604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030d25bd7000fbdbdf251b000000080015000200000005001900a7006df00800010060"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4c814) 3.76952003s ago: executing program 5 (id=2637): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0x4030580b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2.619430138s ago: executing program 2 (id=2648): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.448573457s ago: executing program 2 (id=2649): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x1}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 2.330313224s ago: executing program 2 (id=2651): unshare(0x28020480) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) 2.214240981s ago: executing program 2 (id=2654): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x400) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 1.947783336s ago: executing program 2 (id=2664): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="0b0386dd", 0x4, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.668521633s ago: executing program 2 (id=2666): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 1.667416733s ago: executing program 6 (id=2667): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 1.511654931s ago: executing program 5 (id=2657): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c800800030003000000080002160600000006000300"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.511548431s ago: executing program 6 (id=2658): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f0000000bc0)="cf", 0x1, 0x7fff) 1.095528675s ago: executing program 6 (id=2660): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x512, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 1.094748715s ago: executing program 0 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x28000004) 933.863225ms ago: executing program 0 (id=2661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x4e26, 0x4, 0x4e21, 0x800, 0xa, 0x80, 0x80}, {0x0, 0x2000000000000401, 0xb8, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 560.729086ms ago: executing program 5 (id=2662): r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 559.956157ms ago: executing program 0 (id=2675): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f029}) 501.36349ms ago: executing program 6 (id=2663): r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 485.106871ms ago: executing program 0 (id=2665): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x400) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 288.243682ms ago: executing program 5 (id=2668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) 287.410732ms ago: executing program 0 (id=2679): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000e00)={0x9, 0x9, 0x0, 'queue0\x00', 0x401}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) 138.820261ms ago: executing program 5 (id=2669): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 138.692421ms ago: executing program 6 (id=2670): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) 49.330276ms ago: executing program 0 (id=2671): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0x4030580b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 198.669µs ago: executing program 5 (id=2673): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setuid(0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x0, 0x6, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=2674): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) kernel console output (not intermixed with test programs): 9056][ T7924] hpfs: filesystem error: unable to find root dir [ 200.122518][ T4298] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.142134][ T7907] loop3: detected capacity change from 0 to 32768 [ 200.372525][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 200.430016][ T7944] program syz.0.1451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.455320][ T7942] loop4: detected capacity change from 0 to 2048 [ 200.492798][ T4298] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.512518][ T4298] usb 3-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.528049][ T4298] usb 3-1: config 2 interface 0 has no altsetting 0 [ 200.592278][ T7950] net_ratelimit: 443 callbacks suppressed [ 200.592296][ T7950] netlink: zone id is out of range [ 200.690242][ T7907] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 200.697979][ T4298] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 200.711058][ T7950] netlink: zone id is out of range [ 200.742476][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.750748][ T7950] netlink: zone id is out of range [ 200.771019][ T7950] netlink: zone id is out of range [ 200.777266][ T4298] usb 3-1: Product: syz [ 200.791795][ T4298] usb 3-1: Manufacturer: syz [ 200.801971][ T7950] netlink: zone id is out of range [ 200.813698][ T4298] usb 3-1: SerialNumber: syz [ 200.814108][ T7907] (syz.3.1434,7907,1):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 200.830726][ T7950] netlink: zone id is out of range [ 200.874991][ T7950] netlink: zone id is out of range [ 200.894328][ T7907] (syz.3.1434,7907,1):ocfs2_group_add:503 ERROR: status = -22 [ 200.909262][ T7950] netlink: zone id is out of range [ 200.941938][ T7950] netlink: zone id is out of range [ 200.961627][ T7950] netlink: zone id is out of range [ 201.021095][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 201.127549][ T4298] usb 3-1: USB disconnect, device number 8 [ 201.729852][ T7977] loop5: detected capacity change from 0 to 512 [ 201.778352][ T7979] loop2: detected capacity change from 0 to 256 [ 201.959194][ T7987] loop0: detected capacity change from 0 to 64 [ 201.998316][ T7979] exfat: Deprecated parameter 'namecase' [ 202.015933][ T7979] exfat: Deprecated parameter 'utf8' [ 202.105267][ T7977] EXT4-fs (loop5): 1 orphan inode deleted [ 202.151496][ T7987] MINIX-fs: bad superblock or unable to read bitmaps [ 202.165984][ T7979] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 202.191998][ T7977] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,user_xattr,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 202.656149][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 202.957419][ T8029] netlink: 'syz.3.1491': attribute type 16 has an invalid length. [ 202.998382][ T8031] loop5: detected capacity change from 0 to 1024 [ 203.011961][ T8033] loop2: detected capacity change from 0 to 8 [ 203.088598][ T8031] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 203.103709][ T8033] SQUASHFS error: lzo decompression failed, data probably corrupt [ 203.139723][ T8031] EXT4-fs error (device loop5): ext4_get_journal_inode:5185: inode #32: comm syz.5.1490: iget: special inode unallocated [ 203.140367][ T8033] SQUASHFS error: Failed to read block 0x91: -5 [ 203.189896][ T8031] EXT4-fs (loop5): no journal found [ 203.202476][ T4298] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.209512][ T8033] SQUASHFS error: Unable to read metadata cache entry [8f] [ 203.225315][ T8031] EXT4-fs (loop5): can't get journal size [ 203.241768][ T8033] SQUASHFS error: Unable to read inode 0x11f [ 203.268979][ T8031] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 203.442530][ T4298] usb 5-1: Using ep0 maxpacket: 8 [ 203.592752][ T4298] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 203.637106][ T4298] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 203.718450][ T4298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.766022][ T4298] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 203.821549][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.917465][ T4298] usb 5-1: config 0 descriptor?? [ 203.958440][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 204.309131][ T8074] loop2: detected capacity change from 0 to 256 [ 204.386934][ T8078] loop0: detected capacity change from 0 to 512 [ 204.404659][ T4298] gt683r_led 0003:1770:FF00.0012: ignoring exceeding usage max [ 204.425457][ T4298] gt683r_led 0003:1770:FF00.0012: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 204.488966][ T8078] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.1511: iget: immutable or append flags not allowed on symlinks [ 204.590146][ T8078] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1511: couldn't read orphan inode 17 (err -117) [ 204.637886][ T8078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.680523][ T4655] usb 5-1: USB disconnect, device number 9 [ 204.706667][ T4660] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 204.719753][ T4660] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 204.819008][ T8086] device wlan1 entered promiscuous mode [ 204.834572][ T8086] device macvtap1 entered promiscuous mode [ 204.890270][ T8086] device wlan1 left promiscuous mode [ 205.006441][ T8088] loop0: detected capacity change from 0 to 64 [ 205.020853][ T8074] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 205.390656][ T8089] fido_id[8089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 205.448268][ T8100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1517'. [ 205.506342][ T8093] netem: change failed [ 205.686761][ T8105] loop2: detected capacity change from 0 to 512 [ 205.696134][ T8107] loop5: detected capacity change from 0 to 256 [ 205.738862][ T8112] loop3: detected capacity change from 0 to 256 [ 205.795918][ T8111] loop0: detected capacity change from 0 to 2048 [ 205.812791][ T8105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.893572][ T8114] loop4: detected capacity change from 0 to 2048 [ 205.901918][ T8105] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1524: missing EA_INODE flag [ 205.960717][ T8114] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 206.004517][ T8107] FAT-fs (loop5): Directory bread(block 64) failed [ 206.008241][ T8116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.034712][ T8107] FAT-fs (loop5): Directory bread(block 65) failed [ 206.041399][ T8107] FAT-fs (loop5): Directory bread(block 66) failed [ 206.066374][ T8105] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1524: error while reading EA inode 2 err=-117 [ 206.088633][ T8107] FAT-fs (loop5): Directory bread(block 67) failed [ 206.095754][ T8107] FAT-fs (loop5): Directory bread(block 68) failed [ 206.108677][ T8107] FAT-fs (loop5): Directory bread(block 69) failed [ 206.123842][ T8114] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 206.130465][ T8107] FAT-fs (loop5): Directory bread(block 70) failed [ 206.172673][ T8107] FAT-fs (loop5): Directory bread(block 71) failed [ 206.179466][ T8107] FAT-fs (loop5): Directory bread(block 72) failed [ 206.203065][ T8105] EXT4-fs (loop2): 1 truncate cleaned up [ 206.248407][ T8105] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,nogrpid,,errors=continue. Quota mode: none. [ 206.271171][ T4298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.285317][ T8107] FAT-fs (loop5): Directory bread(block 73) failed [ 206.302448][ T8114] EXT4-fs error (device loop4): empty_inline_dir:1873: inode #12: block 5: comm syz.4.1527: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 206.323606][ T8111] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 206.396834][ T8114] EXT4-fs (loop4): Remounting filesystem read-only [ 206.404669][ T8114] EXT4-fs warning (device loop4): empty_inline_dir:1880: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 206.437359][ T8111] Remounting filesystem read-only [ 206.522466][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 206.642738][ T4298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.651242][ T4298] usb 4-1: config 179 has no interface number 0 [ 206.731374][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.777520][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.824554][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.880782][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 206.932866][ T4298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.996837][ T4298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.025132][ T8120] loop4: detected capacity change from 0 to 32768 [ 207.038945][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.092821][ T8112] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.151561][ T8120] XFS: noikeep mount option is deprecated. [ 207.246935][ T4188] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 207.366792][ T8120] XFS (loop4): Mounting V5 Filesystem [ 207.431048][ T8134] loop0: detected capacity change from 0 to 8 [ 207.552919][ T5796] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.579731][ T8134] SQUASHFS error: xz decompression failed, data probably corrupt [ 207.602110][ T23] usb 4-1: USB disconnect, device number 12 [ 207.602643][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.631185][ T8134] SQUASHFS error: Failed to read block 0x108: -5 [ 207.664661][ T8134] SQUASHFS error: Unable to read metadata cache entry [106] [ 207.712215][ T8134] SQUASHFS error: Unable to read inode 0x11f [ 207.819037][ T8120] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 207.916326][ T8120] XFS (loop4): Starting recovery (logdev: internal) [ 207.932981][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.952260][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.022590][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.064947][ T5796] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 208.079214][ T8146] loop0: detected capacity change from 0 to 8 [ 208.086586][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.105060][ T5796] usb 3-1: config 0 descriptor?? [ 208.163650][ T8120] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 208.179228][ T8120] XFS (loop4): Metadata corruption detected at xfs_agi_verify+0x211/0x4f0, xfs_agi block 0x2 [ 208.189596][ T8120] XFS (loop4): Unmount and run xfs_repair [ 208.195388][ T8120] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 208.202856][ T8120] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 208.211824][ T8120] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 208.220749][ T8120] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 208.229848][ T8120] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.239163][ T8120] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.248212][ T8120] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.257147][ T8120] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.266093][ T8120] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.274998][ T8120] XFS (loop4): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x20c/0x670 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 208.289620][ T8120] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 208.298712][ T8120] XFS (loop4): log mount/recovery failed: error -117 [ 208.339529][ T8148] loop5: detected capacity change from 0 to 64 [ 208.350981][ T8120] XFS (loop4): log mount failed [ 208.554428][ T8146] SQUASHFS error: lzo decompression failed, data probably corrupt [ 208.573118][ T8146] SQUASHFS error: Failed to read block 0x91: -5 [ 208.579639][ T8146] SQUASHFS error: Unable to read metadata cache entry [8f] [ 208.647828][ T8146] SQUASHFS error: Unable to read inode 0x11f [ 208.686107][ T5796] acrux 0003:1A34:0802.0013: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 208.739117][ T5796] acrux 0003:1A34:0802.0013: no inputs found [ 208.775958][ T5796] acrux 0003:1A34:0802.0013: Failed to enable force feedback support, error: -19 [ 208.922358][ T5796] usb 3-1: USB disconnect, device number 9 [ 209.138695][ T8163] fido_id[8163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 209.226937][ T8171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.385779][ T8201] set_capacity_and_notify: 2 callbacks suppressed [ 210.385797][ T8201] loop2: detected capacity change from 0 to 256 [ 210.454250][ T8201] exfat: Deprecated parameter 'namecase' [ 210.460018][ T8201] exfat: Deprecated parameter 'utf8' [ 210.588475][ T8213] loop0: detected capacity change from 0 to 128 [ 210.685613][ T8220] sctp: [Deprecated]: syz.5.1572 (pid 8220) Use of int in maxseg socket option. [ 210.685613][ T8220] Use struct sctp_assoc_value instead [ 210.701493][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 210.715318][ T8222] loop3: detected capacity change from 0 to 512 [ 210.727687][ T8213] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.739292][ T8213] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.882228][ T8201] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 211.007615][ T8222] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 211.063187][ T8222] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.307700][ T8222] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 211.494099][ T8222] EXT4-fs (loop3): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,grpquota,user_xattr,grpjquota=,data_err=ignore,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 212.083468][ T8241] infiniband syz1: set active [ 212.096930][ T8267] loop3: detected capacity change from 0 to 256 [ 212.109421][ T8241] infiniband syz1: added batadv_slave_0 [ 212.233726][ T8241] RDS/IB: syz1: added [ 212.258632][ T8241] smc: adding ib device syz1 with port count 1 [ 212.292819][ T8241] smc: ib device syz1 port 1 has pnetid [ 212.350528][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.662668][ T8272] loop3: detected capacity change from 0 to 128 [ 212.674957][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 212.762091][ T8269] loop5: detected capacity change from 0 to 32768 [ 212.767154][ T8272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.822707][ T8272] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.861593][ T23] usb 3-1: config 0 interface 0 altsetting 145 endpoint 0x81 has invalid maxpacket 1027, setting to 1024 [ 212.876064][ T8269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1594 (8269) [ 212.890782][ T23] usb 3-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.924884][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.931583][ T23] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 212.946745][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.970707][ T23] usb 3-1: config 0 descriptor?? [ 213.023206][ T8265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.032983][ T8269] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 213.041676][ T8269] BTRFS info (device loop5): using free space tree [ 213.078229][ T8269] BTRFS info (device loop5): has skinny extents [ 213.282564][ T8269] BTRFS info (device loop5): enabling ssd optimizations [ 213.489880][ T23] elo 0003:04E7:0030.0014: item fetching failed at offset 0/2 [ 213.509333][ T23] elo 0003:04E7:0030.0014: parse failed [ 213.532478][ T23] elo: probe of 0003:04E7:0030.0014 failed with error -22 [ 214.038976][ T5801] usb 3-1: USB disconnect, device number 10 [ 214.295548][ T8308] syz.5.1601 uses old SIOCAX25GETINFO [ 214.445655][ T8312] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1603'. [ 214.534708][ T8316] loop2: detected capacity change from 0 to 512 [ 214.583000][ T8316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.651852][ T8320] loop3: detected capacity change from 0 to 512 [ 214.762282][ T8316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 214.800485][ T8316] EXT4-fs (loop2): 1 truncate cleaned up [ 214.807299][ T8316] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 214.907574][ T8325] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1608'. [ 214.946240][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 215.013693][ T26] audit: type=1800 audit(1771004617.357:91): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1606" name="/newroot/107/bus/#572//deleted" dev="tmpfs" ino=572 res=0 errno=0 [ 215.108720][ T8330] device ipvlan2 entered promiscuous mode [ 215.142901][ T8330] bridge0: port 3(ipvlan2) entered blocking state [ 215.164374][ T8330] bridge0: port 3(ipvlan2) entered disabled state [ 215.366584][ T8320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.473208][ T8320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 215.493685][ T8320] System zones: 1-12 [ 215.524140][ T8320] EXT4-fs (loop3): 1 truncate cleaned up [ 215.537316][ T8341] loop5: detected capacity change from 0 to 128 [ 215.555360][ T8320] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 215.627999][ T8341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 215.643938][ T4298] kernel write not supported for file /snd/seq (pid: 4298 comm: kworker/0:7) [ 215.687894][ T8341] hpfs: filesystem error: improperly stopped [ 215.722504][ T8341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 215.730303][ T8341] hpfs: You really don't want any checks? You are crazy... [ 215.773145][ T8341] hpfs: Code page index out of array [ 215.778523][ T8341] hpfs: code page support is disabled [ 215.799044][ T8341] hpfs: hpfs_map_4sectors(): unaligned read [ 215.823954][ T8341] hpfs: hpfs_map_4sectors(): unaligned read [ 215.829929][ T8341] hpfs: filesystem error: unable to find root dir [ 215.840659][ T8347] loop0: detected capacity change from 0 to 128 [ 215.909184][ T8349] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 215.960523][ T8341] hpfs: hpfs_map_4sectors(): unaligned read [ 216.019123][ T8347] ADFS-fs (loop0): unrecognised mount option "gid=0x0000000000000000ÿÿÿÿ0x0000000000000000" or missing value [ 216.093585][ T8355] netlink: 'syz.3.1621': attribute type 2 has an invalid length. [ 216.110143][ T8357] loop2: detected capacity change from 0 to 8 [ 216.121517][ T8355] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1621'. [ 216.205786][ T8357] SQUASHFS error: xz decompression failed, data probably corrupt [ 216.228290][ T8357] SQUASHFS error: Failed to read block 0x108: -5 [ 216.250814][ T8357] SQUASHFS error: Unable to read metadata cache entry [106] [ 216.271196][ T8357] SQUASHFS error: Unable to read inode 0x11f [ 216.673072][ T8378] loop2: detected capacity change from 0 to 512 [ 216.728182][ T8378] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.743984][ T8384] netlink: 'syz.3.1635': attribute type 46 has an invalid length. [ 216.756995][ T8378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.881052][ T8378] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1632: bad orphan inode 131083 [ 216.969732][ T8378] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 217.338649][ T8378] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 217.389292][ T8378] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.1632: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 217.854117][ T8419] MPTCP: kernel_bind error, err=-22 [ 217.889109][ T8373] loop5: detected capacity change from 0 to 32768 [ 218.090863][ T8373] XFS (loop5): Mounting V5 Filesystem [ 218.119182][ T8433] loop2: detected capacity change from 0 to 64 [ 218.200027][ T8439] loop3: detected capacity change from 0 to 512 [ 218.399426][ T8439] EXT4-fs (loop3): 1 truncate cleaned up [ 218.456670][ T8439] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 218.520673][ T8373] XFS (loop5): Ending clean mount [ 218.538606][ T8373] XFS (loop5): Quotacheck needed: Please wait. [ 218.628246][ T8454] loop4: detected capacity change from 0 to 764 [ 218.746904][ T8454] Symlink component flag not implemented [ 218.760977][ T8454] Symlink component flag not implemented [ 218.768864][ T8454] Symlink component flag not implemented (128) [ 218.775789][ T8373] XFS (loop5): Quotacheck: Done. [ 218.781930][ T8454] Symlink component flag not implemented (122) [ 218.801582][ T8456] loop3: detected capacity change from 0 to 1024 [ 218.907779][ T7129] XFS (loop5): Unmounting Filesystem [ 219.027549][ T8460] bridge0: port 4(bond0) entered disabled state [ 219.034172][ T8460] bridge0: port 3(team0) entered disabled state [ 219.040701][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.049946][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.179287][ T8460] team0: Device bridge0 is already an upper device of the team interface [ 219.587970][ T4275] hfsplus: b-tree write err: -5, ino 4 [ 219.731002][ T8481] loop5: detected capacity change from 0 to 256 [ 220.042580][ T6425] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.304033][ T6425] usb 5-1: Using ep0 maxpacket: 8 [ 220.426754][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024 [ 220.454649][ T6425] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.479086][ T6425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.524718][ T6425] usb 5-1: config 0 descriptor?? [ 220.542723][ T8485] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.786754][ T6425] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.050122][ T1108] usb 5-1: USB disconnect, device number 10 [ 221.295235][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1693'. [ 221.343928][ T8522] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1693'. [ 221.592575][ T8531] loop3: detected capacity change from 0 to 512 [ 221.691405][ T8531] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1696: Directory hole found for htree index block 0 [ 221.728395][ T8531] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 221.779075][ T8531] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue. Quota mode: writeback. [ 221.925323][ T8548] loop0: detected capacity change from 0 to 1024 [ 222.071299][ T8554] loop2: detected capacity change from 0 to 512 [ 222.164111][ T8554] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1707: inode has both inline data and extents flags [ 222.196435][ T8554] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1707: couldn't read orphan inode 15 (err -117) [ 222.215066][ T8554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.367460][ T8561] ALSA: mixer_oss: invalid OSS volume '' [ 222.561855][ T8545] loop5: detected capacity change from 0 to 32768 [ 222.613321][ T8545] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1704 (8545) [ 222.662827][ T8567] loop4: detected capacity change from 0 to 512 [ 222.676715][ T8545] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 222.695534][ T8545] BTRFS info (device loop5): enabling auto defrag [ 222.707515][ T8545] BTRFS info (device loop5): use no compression [ 222.716661][ T8545] BTRFS info (device loop5): force clearing of disk cache [ 222.729368][ T8545] BTRFS info (device loop5): max_inline at 4096 [ 222.738642][ T8545] BTRFS info (device loop5): disabling free space tree [ 222.750847][ T8545] BTRFS info (device loop5): has skinny extents [ 222.900977][ T8545] BTRFS info (device loop5): enabling ssd optimizations [ 222.919501][ T8545] BTRFS info (device loop5): clearing free space tree [ 222.928096][ T8545] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.945425][ T8545] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.014480][ T26] audit: type=1800 audit(1771004625.357:92): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1704" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 223.554554][ T8567] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1715: invalid indirect mapped block 256 (level 2) [ 223.589146][ T8567] EXT4-fs (loop4): 2 truncates cleaned up [ 223.596360][ T8567] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 223.613207][ T5805] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.659951][ T4285] hfsplus: b-tree write err: -5, ino 4 [ 223.690492][ T8597] mkiss: ax0: crc mode is auto. [ 223.862604][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 223.877990][ T26] audit: type=1107 audit(1771004626.227:93): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 223.978286][ T8605] loop0: detected capacity change from 0 to 64 [ 224.065513][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.079227][ T5805] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 224.098738][ T5805] usb 4-1: config 0 has no interface number 0 [ 224.124051][ T5805] usb 4-1: config 0 interface 182 has no altsetting 0 [ 224.292766][ T5805] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 224.312144][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.362605][ T5805] usb 4-1: Product: syz [ 224.366939][ T5805] usb 4-1: Manufacturer: syz [ 224.371723][ T5805] usb 4-1: SerialNumber: syz [ 224.386194][ T5805] usb 4-1: config 0 descriptor?? [ 224.433358][ T5805] hub 4-1:0.182: bad descriptor, ignoring hub [ 224.440758][ T5805] hub: probe of 4-1:0.182 failed with error -5 [ 224.675808][ T5805] kaweth 4-1:0.182: Firmware present in device. [ 224.826513][ T8621] loop4: detected capacity change from 0 to 512 [ 224.872826][ T5805] kaweth 4-1:0.182: Statistics collection: 0 [ 224.888237][ T5805] kaweth 4-1:0.182: Multicast filter limit: 0 [ 224.899930][ T5805] kaweth 4-1:0.182: MTU: 0 [ 224.913987][ T5805] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 225.096337][ T5805] kaweth: probe of 4-1:0.182 failed with error -5 [ 225.190733][ T5805] usb 4-1: USB disconnect, device number 13 [ 225.211942][ T8621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.272779][ T8621] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.382999][ T8621] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 2175 (only 1 groups) [ 225.575233][ T8650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.362573][ T6425] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.612496][ T6425] usb 4-1: Using ep0 maxpacket: 16 [ 226.733378][ T6425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.773907][ T6425] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 226.823143][ T6425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.839879][ T8697] 9pnet: p9_fd_create_unix (8697): problem connecting socket: éq‰Y’3aK: -111 [ 226.864451][ T6425] usb 4-1: config 0 descriptor?? [ 226.917698][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 227.088395][ T8703] loop2: detected capacity change from 0 to 2048 [ 227.113074][ T8705] loop5: detected capacity change from 0 to 1024 [ 227.213819][ T8706] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.256447][ T8705] hfsplus: bad catalog entry type [ 227.319700][ T8703] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 227.335994][ T8703] Remounting filesystem read-only [ 227.370028][ T6425] uclogic 0003:2179:0077.0015: item fetching failed at offset 0/2 [ 227.403191][ T6425] uclogic 0003:2179:0077.0015: parse failed [ 227.427604][ T6425] uclogic: probe of 0003:2179:0077.0015 failed with error -22 [ 227.492668][ T4185] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 227.633164][ T5805] usb 4-1: USB disconnect, device number 14 [ 227.801614][ T8720] loop2: detected capacity change from 0 to 1024 [ 227.985007][ T8728] syz.4.1780 uses obsolete (PF_INET,SOCK_PACKET) [ 228.469382][ T8749] loop5: detected capacity change from 0 to 128 [ 228.645923][ T8749] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 228.696359][ T8749] hpfs: filesystem error: improperly stopped [ 228.723238][ T8749] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 228.731480][ T8749] hpfs: You really don't want any checks? You are crazy... [ 228.819127][ T8749] hpfs: hpfs_map_sector(): read error [ 228.861462][ T8749] hpfs: code page support is disabled [ 228.878849][ T8763] loop3: detected capacity change from 0 to 128 [ 228.887051][ T8749] hpfs: hpfs_map_4sectors(): unaligned read [ 228.900709][ T8761] loop2: detected capacity change from 0 to 2048 [ 228.901613][ T8765] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1797'. [ 228.914797][ T8749] hpfs: hpfs_map_4sectors(): unaligned read [ 228.937627][ T8749] hpfs: filesystem error: unable to find root dir [ 229.003098][ T8763] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.025567][ T8761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.126132][ T8763] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.188776][ T8761] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 229.370959][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.093068][ T4248] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.106417][ T8803] loop3: detected capacity change from 0 to 4096 [ 230.290041][ T8810] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 230.374563][ T8812] tipc: Enabled bearer , priority 10 [ 230.458571][ T8803] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 230.483182][ T4248] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 230.540273][ T4248] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 230.567477][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.660193][ T4248] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 231.137574][ T8834] loop5: detected capacity change from 0 to 2048 [ 231.308284][ T8841] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.503187][ T4660] tipc: Node number set to 2046665164 [ 231.721568][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 231.755817][ T4248] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 231.770775][ T4248] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 231.824044][ T4248] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 232.041428][ T4248] usb 3-1: USB disconnect, device number 11 [ 232.093202][ T21] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 232.513358][ T21] usb 6-1: config 0 has an invalid interface number: 241 but max is 0 [ 232.532190][ T21] usb 6-1: config 0 has no interface number 0 [ 232.733089][ T21] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=69.a6 [ 232.763383][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.771676][ T21] usb 6-1: Product: syz [ 232.787268][ T21] usb 6-1: Manufacturer: syz [ 232.791939][ T21] usb 6-1: SerialNumber: syz [ 232.850204][ T21] usb 6-1: config 0 descriptor?? [ 232.885531][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.963935][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.992839][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.029300][ T8884] net_ratelimit: 19 callbacks suppressed [ 233.029318][ T8884] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.054052][ C1] Illegal XDP return value 16128, expect packet loss! [ 233.213284][ T21] pegasus: probe of 6-1:0.241 failed with error -71 [ 233.254866][ T21] usb 6-1: USB disconnect, device number 2 [ 233.390602][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 233.474088][ T8906] netlink: 'syz.0.1861': attribute type 25 has an invalid length. [ 233.520793][ T8906] netlink: 'syz.0.1861': attribute type 25 has an invalid length. [ 233.597628][ T8910] loop0: detected capacity change from 0 to 8 [ 233.873520][ T8920] loop0: detected capacity change from 0 to 512 [ 233.954275][ T8926] loop2: detected capacity change from 0 to 256 [ 234.083689][ T26] audit: type=1800 audit(1771004636.437:94): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1871" name="file1" dev="loop2" ino=1048727 res=0 errno=0 [ 234.129893][ T6425] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.144697][ T8920] EXT4-fs (loop0): Ignoring removed nobh option [ 234.167145][ T8926] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 234.176787][ T8920] EXT4-fs (loop0): inline encryption not supported [ 234.215831][ T8920] EXT4-fs (loop0): Test dummy encryption mode enabled [ 234.304653][ T8920] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 234.398529][ T8920] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1868: invalid indirect mapped block 2683928664 (level 1) [ 234.461399][ T8936] loop5: detected capacity change from 0 to 8 [ 234.489673][ T6425] usb 5-1: Using ep0 maxpacket: 16 [ 234.527041][ T8920] EXT4-fs (loop0): Remounting filesystem read-only [ 234.561924][ T8920] EXT4-fs (loop0): 1 truncate cleaned up [ 234.575711][ T8920] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,errors=remount-ro,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,. Quota mode: writeback. [ 234.681966][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.702572][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.726844][ T6425] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 234.768252][ T6425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.777592][ T8920] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1868: Invalid block bitmap block 3 in block_group 0 [ 234.817395][ T8920] EXT4-fs (loop0): Remounting filesystem read-only [ 234.849436][ T6425] usb 5-1: config 0 descriptor?? [ 235.324994][ T8953] loop2: detected capacity change from 0 to 8192 [ 235.377486][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1887'. [ 235.402975][ T6425] hid-multitouch 0003:1FD2:6007.0016: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 235.473540][ T8953] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 235.513041][ T8953] REISERFS (device loop2): using ordered data mode [ 235.525691][ T8953] reiserfs: using flush barriers [ 235.590199][ T8953] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 235.607611][ T8953] REISERFS (device loop2): checking transaction log (loop2) [ 235.628746][ T8953] REISERFS (device loop2): Using r5 hash to sort names [ 235.648881][ T8974] nbd: must specify at least one socket [ 235.655459][ T8953] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 235.696710][ T5805] usb 5-1: USB disconnect, device number 11 [ 235.707754][ T8953] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 235.736806][ T8967] loop0: detected capacity change from 0 to 8192 [ 235.829397][ T8970] fido_id[8970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 236.362234][ T8984] loop3: detected capacity change from 0 to 4096 [ 236.602962][ T8996] loop4: detected capacity change from 0 to 512 [ 236.695761][ T8984] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 236.827386][ T9004] loop5: detected capacity change from 0 to 8 [ 237.107726][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 237.123788][ T8996] EXT4-fs (loop4): Ignoring removed oldalloc option [ 237.178079][ T8996] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1903: dx entry: limit 1024 != root limit 124 [ 237.282724][ T8996] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1903: Corrupt directory, running e2fsck is recommended [ 237.374316][ T8996] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 237.430258][ T8996] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1903: corrupted in-inode xattr [ 237.487068][ T8996] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1903: couldn't read orphan inode 15 (err -117) [ 237.549234][ T8996] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 237.672542][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1922'. [ 237.863812][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 238.357295][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1937'. [ 238.630130][ T9084] loop4: detected capacity change from 0 to 1024 [ 238.948641][ T9084] EXT4-fs (loop4): Ignoring removed bh option [ 239.143808][ T9084] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 239.463324][ T4655] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.489881][ T9119] loop2: detected capacity change from 0 to 128 [ 239.583187][ T4248] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.842826][ T4655] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.845767][ T9119] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 239.900655][ T4655] usb 4-1: config 0 interface 0 has no altsetting 0 [ 239.916391][ T4655] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 239.949668][ T5805] Process accounting resumed [ 239.953943][ T4655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.964209][ T5805] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 239.972208][ T5805] FAT-fs (loop2): Filesystem has been set read-only [ 239.983272][ T4248] usb 6-1: config index 0 descriptor too short (expected 59684, got 36) [ 239.997025][ T4248] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 240.006998][ T4655] usb 4-1: config 0 descriptor?? [ 240.036688][ T4248] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 240.067568][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.102544][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.144357][ T4248] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.08 [ 240.170302][ T4248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.222349][ T4248] usb 6-1: config 0 descriptor?? [ 240.248500][ T4185] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 240.497524][ T4655] uclogic 0003:145F:0212.0017: interface is invalid, ignoring [ 240.620603][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.725178][ T4248] lg-g15 0003:046D:C222.0018: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 240.775530][ T4248] usb 4-1: USB disconnect, device number 15 [ 240.841836][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.954980][ T21] usb 6-1: USB disconnect, device number 3 [ 240.977756][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.174776][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.321610][ T9132] loop3: detected capacity change from 0 to 164 [ 241.328956][ T9125] lo speed is unknown, defaulting to 1000 [ 241.419010][ T9132] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 242.221534][ T9] tipc: Disabling bearer [ 242.323699][ T9] tipc: Left network mode [ 242.516158][ T9160] loop2: detected capacity change from 0 to 1764 [ 242.529060][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 242.601423][ T9161] loop0: detected capacity change from 0 to 4096 [ 242.796914][ T9161] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 242.871463][ T9161] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 242.969644][ T9161] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 243.018084][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.025970][ T9161] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 243.038963][ T9137] loop5: detected capacity change from 0 to 32768 [ 243.069082][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.087442][ T9175] loop2: detected capacity change from 0 to 512 [ 243.101163][ T9125] device bridge_slave_0 entered promiscuous mode [ 243.145440][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.188908][ T9161] ntfs: volume version 3.1. [ 243.226083][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.232636][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 243.283088][ T9125] device bridge_slave_1 entered promiscuous mode [ 243.309421][ T9161] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 243.435789][ T9175] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.528502][ T9161] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 243.540180][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.581125][ T9145] loop3: detected capacity change from 0 to 32768 [ 243.589144][ T9175] EXT4-fs error (device loop2): ext4_lookup:1858: inode #14: comm syz.2.1978: casefold flag without casefold feature [ 243.593595][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.720741][ T9145] [ 243.720741][ T9145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.720741][ T9145] [ 243.780452][ T9145] ERROR: (device loop3): diWrite: ixpxd invalid [ 243.780452][ T9145] [ 243.859099][ T9125] team0: Port device team_slave_0 added [ 243.891104][ T9145] ERROR: (device loop3): remounting filesystem as read-only [ 243.902525][ T9125] team0: Port device team_slave_1 added [ 243.932450][ T9145] ERROR: (device loop3): txCommit: [ 243.932450][ T9145] [ 244.013030][ T9185] sp0: Synchronizing with TNC [ 244.056209][ T9184] [U] è [ 244.057070][ T9145] ERROR: (device loop3): dtSearch: stack overrun! [ 244.057070][ T9145] [ 244.080266][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.119760][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.155033][ T9145] btstack dump: [ 244.158902][ T9145] bn = 0, index = 0 [ 244.189819][ T9145] bn = 0, index = 0 [ 244.210466][ T9145] bn = 0, index = 0 [ 244.240542][ T9145] bn = 0, index = 0 [ 244.261050][ T9145] bn = 0, index = 0 [ 244.271327][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.311931][ T9145] bn = 0, index = 0 [ 244.317562][ T9145] bn = 0, index = 0 [ 244.321433][ T9145] bn = 0, index = 0 [ 244.338754][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.375496][ T9145] jfs_lookup: dtSearch returned -5 [ 244.383943][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.460341][ T5796] kernel write not supported for file /comedi4 (pid: 5796 comm: kworker/0:10) [ 244.529811][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.596143][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'. [ 244.728265][ T9125] device hsr_slave_0 entered promiscuous mode [ 244.763242][ T9125] device hsr_slave_1 entered promiscuous mode [ 244.813907][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.849763][ T9125] Cannot create hsr debugfs directory [ 245.175815][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 245.247541][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1990'. [ 245.313028][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 245.475728][ T9125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 245.581353][ T9125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 245.677744][ T9125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 245.761633][ T9125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 245.799541][ T9190] loop0: detected capacity change from 0 to 40427 [ 245.857988][ T9190] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x1ffff [ 245.927033][ T9190] F2FS-fs (loop0): invalid crc value [ 245.966159][ T9205] loop5: detected capacity change from 0 to 32768 [ 245.993110][ T9190] F2FS-fs (loop0) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67c0 [ 246.070025][ T9190] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 246.104834][ T9246] loop3: detected capacity change from 0 to 256 [ 246.275829][ T9246] exfat: Deprecated parameter 'namecase' [ 246.311791][ T9246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 246.367976][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.430616][ T9205] XFS (loop5): Mounting V5 Filesystem [ 246.520239][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.535286][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.646406][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.745270][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.771501][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.779670][ T9205] XFS (loop5): Ending clean mount [ 246.832910][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.840042][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.962910][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.004527][ T7129] XFS (loop5): Unmounting Filesystem [ 247.110449][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.135149][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.229470][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.236669][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.320250][ T9242] loop2: detected capacity change from 0 to 32768 [ 247.327910][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.361523][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.393867][ T4660] Bluetooth: hci4: command 0x040f tx timeout [ 247.489491][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.521931][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.531505][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.558281][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.582085][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 247.602332][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.637475][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.668947][ T9242] XFS (loop2): Mounting V5 Filesystem [ 247.765194][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.847278][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.865107][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.885362][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.895359][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.920125][ T9242] XFS (loop2): Ending clean mount [ 248.056741][ T4185] XFS (loop2): Unmounting Filesystem [ 248.348394][ T9300] loop3: detected capacity change from 0 to 1024 [ 248.427291][ T9] device hsr_slave_0 left promiscuous mode [ 248.466102][ T9] device hsr_slave_1 left promiscuous mode [ 248.489281][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.553670][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.583199][ T9] rdma_rxe: ignoring netdev event = 26 for batadv_slave_0 [ 248.590969][ T9] rdma_rxe: ignoring netdev event = 21 for batadv_slave_0 [ 248.654532][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.662294][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.748634][ T9] bridge0: port 4(bond0) entered disabled state [ 248.816886][ T9300] hfsplus: bad catalog entry type [ 248.824529][ T9] bridge0: port 3(team0) entered disabled state [ 248.849016][ T9] device bridge_slave_1 left promiscuous mode [ 248.858723][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.923203][ T9] device bridge_slave_0 left promiscuous mode [ 248.943349][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.953285][ T4285] hfsplus: b-tree write err: -5, ino 4 [ 249.111737][ T9323] loop2: detected capacity change from 0 to 256 [ 249.140066][ T9] rdma_rxe: ignoring netdev event = 10 for batadv_slave_0 [ 249.149095][ T9323] exfat: Deprecated parameter 'utf8' [ 249.182783][ T9] device veth1_macvtap left promiscuous mode [ 249.199993][ T9] device veth0_macvtap left promiscuous mode [ 249.268834][ T9] device veth1_vlan left promiscuous mode [ 249.310967][ T9] device veth0_vlan left promiscuous mode [ 249.346769][ T9323] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 249.463080][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 249.630836][ T9] infiniband syz1: set down [ 249.757317][ T9331] loop2: detected capacity change from 0 to 4096 [ 249.833840][ T9331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 249.860040][ T9331] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 249.910104][ T9312] loop5: detected capacity change from 0 to 32768 [ 249.918223][ T9331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 249.939890][ T9331] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 250.033883][ T9331] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 250.048637][ T9331] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 250.083281][ T9331] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 250.108706][ T9331] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 250.131461][ T9331] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 250.172563][ T9331] ntfs: volume version 3.1. [ 250.181315][ T9331] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 250.292747][ T9312] JBD2: Ignoring recovery information on journal [ 250.447916][ T9312] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 250.513218][ T4328] smc: removing ib device syz1 [ 250.542100][ T9] device team_slave_1 left promiscuous mode [ 250.593503][ T9312] (syz.5.2012,9312,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 250.621453][ T9] team0 (unregistering): Port device team_slave_1 removed [ 250.680310][ T9] device team_slave_0 left promiscuous mode [ 250.712318][ T9] team0 (unregistering): Port device team_slave_0 removed [ 250.756971][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.758034][ T7129] ocfs2: Unmounting device (7,5) on (node local) [ 250.785825][ T9] device bond_slave_1 left promiscuous mode [ 250.863760][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.881755][ T9] device bond_slave_0 left promiscuous mode [ 251.151033][ T9] bond0 (unregistering): Released all slaves [ 251.273139][ T4655] infiniband syz1: ib_query_port failed (-19) [ 251.334582][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.348838][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.394691][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.816554][ T9367] loop5: detected capacity change from 0 to 1024 [ 251.823187][ T5796] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.852580][ T5796] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.192714][ T5796] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.246766][ T9367] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.290569][ T9345] loop2: detected capacity change from 0 to 32768 [ 252.458485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.508298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.645698][ T9125] device veth0_vlan entered promiscuous mode [ 252.731521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.740626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.811280][ T9345] XFS (loop2): Mounting V5 Filesystem [ 252.819764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.838751][ T9403] loop0: detected capacity change from 0 to 512 [ 252.863317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.966501][ T5796] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 252.974880][ T9125] device veth1_vlan entered promiscuous mode [ 253.031856][ T9345] XFS (loop2): Ending clean mount [ 253.079055][ T9345] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 253.095195][ T6425] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.110952][ T6425] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.143520][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 253.154478][ T9403] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2037: invalid indirect mapped block 4294967295 (level 1) [ 253.195087][ T9403] EXT4-fs (loop0): Remounting filesystem read-only [ 253.202139][ T9403] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2037: invalid indirect mapped block 4294967295 (level 1) [ 253.217504][ T9403] EXT4-fs (loop0): Remounting filesystem read-only [ 253.225186][ T9403] EXT4-fs (loop0): 2 truncates cleaned up [ 253.245905][ T9403] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 253.353111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.371602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.382801][ T5796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.398580][ T5796] usb 4-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 253.427791][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 253.474038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.491146][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.513047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.536093][ T4185] XFS (loop2): Unmounting Filesystem [ 253.558112][ T9125] device veth0_macvtap entered promiscuous mode [ 253.566829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.579047][ T5796] usb 4-1: config 0 descriptor?? [ 253.617232][ T9125] device veth1_macvtap entered promiscuous mode [ 253.640792][ T5796] pwc: Samsung MPC-C30 USB webcam detected. [ 253.813395][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.880601][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.927158][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 253.938271][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.000301][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.027858][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.056724][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.090281][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.104166][ T5807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.163290][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.197071][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.230944][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.280559][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.360864][ T9420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.363457][ T5796] pwc: send_video_command error -71 [ 254.394604][ T9420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.404746][ T5796] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 254.435179][ T5796] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 254.444605][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.493743][ T5796] usb 4-1: USB disconnect, device number 16 [ 254.503365][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.542555][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.603888][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.626515][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.680182][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.710255][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.749540][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.771532][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.812342][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.828335][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.869041][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.895279][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.951486][ T9125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.002611][ T9125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.011383][ T9125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.070356][ T9125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.333928][ T1570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.361270][ T1570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.414807][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.458350][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.492405][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.552634][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.718263][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.732449][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.832023][ T9466] loop5: detected capacity change from 0 to 4096 [ 255.959458][ T9468] loop0: detected capacity change from 0 to 4096 [ 256.602537][ T9468] ntfs: volume version 3.1. [ 256.665765][ T9466] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 256.718893][ T9466] ntfs3: loop5: Failed to load $Extend. [ 256.792388][ T9510] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2068'. [ 256.811836][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 256.811853][ T26] audit: type=1800 audit(1771004659.157:95): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2055" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 256.823552][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.118982][ T9521] loop0: detected capacity change from 0 to 512 [ 257.410465][ T9521] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.445379][ T9521] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.560068][ T9521] EXT4-fs (loop0): 1 truncate cleaned up [ 257.594486][ T9521] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 258.061477][ T9556] loop0: detected capacity change from 0 to 512 [ 258.080300][ T4654] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 258.165514][ T9556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.256383][ T9556] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.340738][ T9565] loop2: detected capacity change from 0 to 256 [ 258.352418][ T9556] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2084: bg 0: block 145: padding at end of block bitmap is not set [ 258.451881][ T4654] usb 6-1: Using ep0 maxpacket: 16 [ 258.613470][ T4654] usb 6-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.643156][ T4654] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.667211][ T4654] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 258.702075][ T4654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.762091][ T4654] usb 6-1: config 0 descriptor?? [ 259.023985][ T9565] FAT-fs (loop2): Directory bread(block 64) failed [ 259.039611][ T9565] FAT-fs (loop2): Directory bread(block 65) failed [ 259.072564][ T9565] FAT-fs (loop2): Directory bread(block 66) failed [ 259.079396][ T9565] FAT-fs (loop2): Directory bread(block 67) failed [ 259.123282][ T9554] loop3: detected capacity change from 0 to 32768 [ 259.125116][ T9565] FAT-fs (loop2): Directory bread(block 68) failed [ 259.162499][ T9565] FAT-fs (loop2): Directory bread(block 69) failed [ 259.190369][ T9565] FAT-fs (loop2): Directory bread(block 70) failed [ 259.225925][ T9565] FAT-fs (loop2): Directory bread(block 71) failed [ 259.252433][ T9565] FAT-fs (loop2): Directory bread(block 72) failed [ 259.264221][ T9565] FAT-fs (loop2): Directory bread(block 73) failed [ 259.281409][ T4654] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 259.310486][ T4654] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 259.326033][ T9554] XFS (loop3): Mounting V5 Filesystem [ 259.348430][ T4654] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 259.368097][ T4654] microsoft 0003:045E:00F9.0019: hidraw0: USB HID vff.ff Device [HID 045e:00f9] on usb-dummy_hcd.5-1/input0 [ 259.393786][ T4654] microsoft 0003:045E:00F9.0019: no inputs found [ 259.400219][ T4654] microsoft 0003:045E:00F9.0019: could not initialize ff, continuing anyway [ 259.531246][ T4654] usb 6-1: USB disconnect, device number 4 [ 259.584174][ T9554] XFS (loop3): Ending clean mount [ 259.713514][ T9594] loop0: detected capacity change from 0 to 64 [ 259.851528][ T4187] XFS (loop3): Unmounting Filesystem [ 259.958209][ T9592] fido_id[9592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 260.099507][ T9598] loop2: detected capacity change from 0 to 8 [ 260.535291][ T9598] SQUASHFS error: Unable to read directory block [629:46] [ 260.692216][ T26] audit: type=1326 audit(1771004663.037:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.0.2101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6794b72f79 code=0x0 [ 260.816283][ T9622] loop5: detected capacity change from 0 to 2048 [ 260.959910][ T9628] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.282842][ T4654] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 261.471366][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.478925][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.563722][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.571653][ T9634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.580682][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.587985][ T9634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.677395][ T4654] usb 4-1: Using ep0 maxpacket: 8 [ 261.749233][ T9634] team0: Port device bridge0 added [ 261.891227][ T4654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.912164][ T4654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.954007][ T4654] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 261.998762][ T4654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.053942][ T4654] usb 4-1: config 0 descriptor?? [ 262.173704][ T9638] syz.0.2109 (9638) used greatest stack depth: 16688 bytes left [ 262.233119][ T9643] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2111'. [ 262.249140][ T9629] loop2: detected capacity change from 0 to 32768 [ 262.383095][ T9629] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 262.494925][ T9629] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 262.576427][ T4654] wacom 0003:056A:0000.001A: unbalanced collection at end of report description [ 262.593534][ T4654] wacom 0003:056A:0000.001A: parse failed [ 262.645679][ T9646] loop5: detected capacity change from 0 to 4096 [ 262.666246][ T4654] wacom: probe of 0003:056A:0000.001A failed with error -22 [ 262.813673][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 262.854194][ T4654] usb 4-1: USB disconnect, device number 17 [ 262.870007][ T9646] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 262.888660][ T9646] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 263.031617][ T9646] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 263.110240][ T9646] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 263.218566][ T9646] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 263.275753][ T9646] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 263.350628][ T9646] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 263.451599][ T9646] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 263.555310][ T9646] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 263.599377][ T9676] loop3: detected capacity change from 0 to 1024 [ 263.679662][ T9646] ntfs: volume version 3.1. [ 263.736186][ T9646] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 263.824270][ T9677] loop2: detected capacity change from 0 to 8192 [ 263.992196][ T9680] loop0: detected capacity change from 0 to 8192 [ 264.022509][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.152165][ T9677] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 264.189574][ T9677] REISERFS (device loop2): using ordered data mode [ 264.218660][ T9677] reiserfs: using flush barriers [ 264.239854][ T9680] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 264.253669][ T9680] REISERFS (device loop0): using journaled data mode [ 264.260406][ T9680] reiserfs: using flush barriers [ 264.292555][ T9677] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.329785][ T9680] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.359243][ T9677] REISERFS (device loop2): checking transaction log (loop2) [ 264.432807][ T9680] REISERFS (device loop0): checking transaction log (loop0) [ 264.467070][ T9677] REISERFS (device loop2): Using r5 hash to sort names [ 264.498739][ T9680] REISERFS (device loop0): Using r5 hash to sort names [ 264.509482][ T9677] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 264.533188][ T9680] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 264.600258][ T9420] hfsplus: b-tree write err: -5, ino 4 [ 264.723389][ T9680] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 265.619047][ T9739] loop6: detected capacity change from 0 to 256 [ 266.213422][ T9763] loop0: detected capacity change from 0 to 1024 [ 266.392869][ T9767] hfsplus: xattr exists yet [ 266.654303][ T9773] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2159'. [ 266.901657][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 267.102603][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 267.113607][ T9784] loop5: detected capacity change from 0 to 128 [ 267.174427][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 267.210108][ T9784] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 267.835262][ T9805] loop5: detected capacity change from 0 to 512 [ 267.996832][ T9821] loop0: detected capacity change from 0 to 256 [ 268.095991][ T9825] loop2: detected capacity change from 0 to 512 [ 268.131333][ T9821] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 268.727521][ T9822] loop3: detected capacity change from 0 to 32768 [ 268.781000][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2191'. [ 268.879259][ T9822] XFS (loop3): Mounting V5 Filesystem [ 268.893620][ T9825] EXT4-fs (loop2): Ignoring removed nobh option [ 268.900109][ T9825] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 268.974437][ T9805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2172: inode #1: comm syz.5.2172: iget: illegal inode # [ 269.024429][ T9825] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2182: iget: bad i_size value: 38620345925642 [ 269.145890][ T9805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2172: error while reading EA inode 1 err=-117 [ 269.173936][ T9825] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2182: couldn't read orphan inode 15 (err -117) [ 269.222425][ T9825] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 269.259019][ T9822] XFS (loop3): Ending clean mount [ 269.306008][ T9871] loop0: detected capacity change from 0 to 256 [ 269.333616][ T9805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2172: inode #1: comm syz.5.2172: iget: illegal inode # [ 269.400705][ T9805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2172: error while reading EA inode 1 err=-117 [ 269.432752][ T9825] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2182: invalid indirect mapped block 3973251072 (level 0) [ 269.434501][ T9871] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.465584][ T9805] EXT4-fs (loop5): 1 orphan inode deleted [ 269.523390][ T9805] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 269.555597][ T4187] XFS (loop3): Unmounting Filesystem [ 270.249354][ T9897] loop5: detected capacity change from 0 to 512 [ 270.269323][ T9894] program syz.2.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.396214][ T21] Bluetooth: hci2: command 0x0811 tx timeout [ 270.507875][ T9904] netlink: 'syz.3.2196': attribute type 16 has an invalid length. [ 270.583819][ T9897] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.599747][ T9904] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.2196'. [ 270.723623][ T9897] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.048559][ T9897] EXT4-fs error (device loop5): ext4_get_first_dir_block:3619: inode #12: comm syz.5.2201: directory missing '..' [ 271.063762][ T9927] loop0: detected capacity change from 0 to 256 [ 271.234422][ T9936] loop6: detected capacity change from 0 to 1024 [ 271.331745][ T9938] loop3: detected capacity change from 0 to 2048 [ 271.420239][ T9927] FAT-fs (loop0): Directory bread(block 64) failed [ 271.428232][ T9927] FAT-fs (loop0): Directory bread(block 65) failed [ 271.461737][ T9927] FAT-fs (loop0): Directory bread(block 66) failed [ 271.468769][ T9927] FAT-fs (loop0): Directory bread(block 67) failed [ 271.483586][ T9927] FAT-fs (loop0): Directory bread(block 68) failed [ 271.490230][ T9927] FAT-fs (loop0): Directory bread(block 69) failed [ 271.511715][ T9943] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.539788][ T9927] FAT-fs (loop0): Directory bread(block 70) failed [ 271.572444][ T9927] FAT-fs (loop0): Directory bread(block 71) failed [ 271.579202][ T9927] FAT-fs (loop0): Directory bread(block 72) failed [ 271.603911][ T9938] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '..' [ 271.639027][ T9938] Remounting filesystem read-only [ 271.668592][ T9927] FAT-fs (loop0): Directory bread(block 73) failed [ 271.802465][ T4187] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 271.853991][ T9936] hfsplus: bad catalog entry type [ 271.962713][ T9955] loop5: detected capacity change from 0 to 8 [ 272.429015][ T9955] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.442748][ T9955] SQUASHFS error: Failed to read block 0x28d: -5 [ 272.449166][ T9955] SQUASHFS error: Unable to read metadata cache entry [28b] [ 272.492447][ T9955] SQUASHFS error: Unable to read inode 0x11f [ 272.635493][ T9967] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=27485, location=27485 [ 272.700780][ T9967] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 272.764844][ T9967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.246055][ T9954] set_capacity_and_notify: 1 callbacks suppressed [ 273.246072][ T9954] loop2: detected capacity change from 0 to 40427 [ 273.355921][ T4198] Bluetooth: hci5: unexpected event for opcode 0x100c [ 273.446946][ T9954] F2FS-fs (loop2): invalid crc value [ 273.524827][ T9954] F2FS-fs (loop2): Found nat_bits in checkpoint [ 273.540875][ T9973] loop0: detected capacity change from 0 to 40427 [ 273.646252][T10001] loop3: detected capacity change from 0 to 64 [ 273.701392][ T9954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 273.789659][ T4248] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 274.026093][ T9973] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 274.038675][ T9973] F2FS-fs (loop0): invalid crc value [ 274.067951][ T9973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.111165][T10010] attempt to access beyond end of device [ 274.111165][T10010] loop3: rw=2049, want=268435470, limit=64 [ 274.172862][T10010] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 274.186375][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.210720][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 274.256266][ T4248] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 274.313036][ T9973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.337757][ T4248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.401511][ T4248] usb 6-1: config 0 descriptor?? [ 274.443510][ T9998] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 274.525155][ T4188] attempt to access beyond end of device [ 274.525155][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 274.591466][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 274.926315][ T4248] hid-led 0003:1294:1320.001B: unbalanced collection at end of report description [ 274.986222][ T4248] hid-led: probe of 0003:1294:1320.001B failed with error -22 [ 275.166145][ T4654] usb 6-1: USB disconnect, device number 5 [ 275.169757][T10043] loop2: detected capacity change from 0 to 64 [ 275.551231][T10054] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.2240'. [ 275.593907][T10043] hfs: unable to locate alternate MDB [ 275.616827][T10043] hfs: continuing without an alternate MDB [ 275.811936][T10060] loop0: detected capacity change from 0 to 64 [ 276.060558][T10073] loop5: detected capacity change from 0 to 164 [ 276.186290][T10079] loop6: detected capacity change from 0 to 1024 [ 276.285611][T10079] EXT4-fs (loop6): Ignoring removed orlov option [ 276.301837][T10087] loop0: detected capacity change from 0 to 764 [ 276.369512][T10079] EXT4-fs (loop6): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 276.488815][T10087] Symlink component flag not implemented [ 276.544817][T10087] Symlink component flag not implemented [ 276.641867][T10094] Symlink component flag not implemented (128) [ 276.670863][T10094] Symlink component flag not implemented (122) [ 276.873946][T10106] mkiss: ax0: crc mode is auto. [ 277.088288][T10112] loop3: detected capacity change from 0 to 2048 [ 277.195291][T10122] loop0: detected capacity change from 0 to 512 [ 277.364411][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 277.394001][T10129] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.568070][T10122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.652588][T10122] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.781076][T10122] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 2175 (only 1 groups) [ 278.036775][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2279'. [ 278.400150][T10161] loop3: detected capacity change from 0 to 1024 [ 278.747068][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.914212][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 280.192983][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 280.313873][ T21] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 280.332557][ T21] usb 3-1: config 0 has no interface number 0 [ 280.338729][ T21] usb 3-1: config 0 interface 151 has no altsetting 0 [ 280.356115][ T21] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=43.24 [ 280.372440][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.403497][ T21] usb 3-1: config 0 descriptor?? [ 280.693125][ T21] usb 3-1: string descriptor 0 read error: -71 [ 280.727310][T10225] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.753415][ T21] rtsx_usb: probe of 3-1:0.151 failed with error -22 [ 280.776854][ T21] usb 3-1: USB disconnect, device number 12 [ 281.769257][ T6425] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 281.881956][T10243] loop2: detected capacity change from 0 to 32768 [ 281.917836][T10243] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2322 (10243) [ 281.959231][T10243] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 281.974300][T10243] BTRFS info (device loop2): enabling auto defrag [ 281.985469][T10243] BTRFS info (device loop2): use no compression [ 281.991911][T10243] BTRFS info (device loop2): force clearing of disk cache [ 282.002113][T10243] BTRFS info (device loop2): max_inline at 4096 [ 282.009280][T10243] BTRFS info (device loop2): disabling free space tree [ 282.017864][T10243] BTRFS info (device loop2): has skinny extents [ 282.170534][T10243] BTRFS info (device loop2): enabling ssd optimizations [ 282.185766][T10243] BTRFS info (device loop2): clearing free space tree [ 282.221851][T10243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.225254][ T6425] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.248901][T10243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.282782][ T6425] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 282.291920][ T6425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.345936][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 282.345952][ T26] audit: type=1800 audit(1771004684.697:97): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2322" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 282.381495][ T6425] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 283.502637][ T6425] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 283.514287][ T6425] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 283.562612][ T6425] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 283.795676][ T6425] usb 4-1: USB disconnect, device number 18 [ 284.406230][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 284.625435][T10285] loop6: detected capacity change from 0 to 8 [ 285.058948][T10299] loop6: detected capacity change from 0 to 64 [ 285.344574][T10313] loop3: detected capacity change from 0 to 8 [ 285.349836][T10311] attempt to access beyond end of device [ 285.349836][T10311] loop6: rw=2049, want=268435470, limit=64 [ 285.394503][T10311] Buffer I/O error on dev loop6, logical block 134217734, lost async page write [ 285.519458][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'. [ 285.546829][T10323] loop5: detected capacity change from 0 to 128 [ 285.693874][T10323] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.722708][T10329] loop0: detected capacity change from 0 to 64 [ 285.761599][T10323] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.810421][T10329] attempt to access beyond end of device [ 285.810421][T10329] loop0: rw=2049, want=268435470, limit=64 [ 285.829802][T10329] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 285.890765][T10336] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2356'. [ 285.979043][ T4328] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.032784][T10338] loop2: detected capacity change from 0 to 512 [ 286.117839][T10338] EXT4-fs (loop2): Ignoring removed oldalloc option [ 286.199851][T10338] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.2369: dx entry: limit 1024 != root limit 124 [ 286.299239][T10338] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2369: Corrupt directory, running e2fsck is recommended [ 286.362066][T10338] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 286.419965][T10338] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.2369: corrupted in-inode xattr [ 286.514393][T10338] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2369: couldn't read orphan inode 15 (err -117) [ 286.590176][T10338] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 286.681562][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2370'. [ 287.006668][T10378] loop2: detected capacity change from 0 to 128 [ 287.135163][T10378] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.207927][T10378] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.313569][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2380'. [ 287.387521][ T144] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.397089][ T5796] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 287.805690][ T5796] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 287.839325][ T5796] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 287.895984][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.025316][ T5796] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 288.872601][ T5801] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 289.108089][ T5796] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 289.126926][ T5796] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 289.177953][ T5796] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 289.255047][ T5801] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 289.297456][ T5801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.314054][ T5801] usb 3-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.00 [ 289.330263][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.341569][ T5801] usb 3-1: config 0 descriptor?? [ 289.372872][T10420] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 289.427783][ T4652] usb 6-1: USB disconnect, device number 6 [ 289.460768][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2404'. [ 289.668176][T10441] loop3: detected capacity change from 0 to 4096 [ 289.773826][T10441] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 289.808169][T10441] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 289.831194][T10441] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 289.859850][T10447] loop6: detected capacity change from 0 to 512 [ 289.875941][ T5801] wacom 0003:056A:00C2.001C: unknown main item tag 0x0 [ 289.883589][T10441] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 289.902571][ T5801] wacom 0003:056A:00C2.001C: unknown main item tag 0x0 [ 289.920234][ T5801] wacom 0003:056A:00C2.001C: unknown main item tag 0x0 [ 289.935946][ T5801] wacom 0003:056A:00C2.001C: unknown main item tag 0x0 [ 289.959947][T10441] ntfs: volume version 3.1. [ 289.969683][ T5801] wacom 0003:056A:00C2.001C: unknown main item tag 0x0 [ 290.012752][ T5801] wacom 0003:056A:00C2.001C: hidraw0: USB HID vff.ff Device [HID 056a:00c2] on usb-dummy_hcd.2-1/input0 [ 290.098109][ T5801] usb 3-1: USB disconnect, device number 13 [ 290.186481][T10441] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 290.234066][T10441] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 290.243571][T10441] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 290.264817][T10441] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 290.360997][T10447] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.367600][T10452] fido_id[10452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 290.459470][T10447] EXT4-fs error (device loop6): ext4_lookup:1858: inode #14: comm syz.6.2407: casefold flag without casefold feature [ 290.472086][T10460] loop0: detected capacity change from 0 to 128 [ 290.544848][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 290.630146][T10460] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 290.753864][ T4248] Process accounting resumed [ 290.758663][ T4248] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 290.803725][ T4248] FAT-fs (loop0): Filesystem has been set read-only [ 290.908022][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 290.920173][ T4188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 290.972835][T10473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2420'. [ 291.331567][T10493] tipc: Started in network mode [ 291.364252][T10493] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 291.397528][T10493] tipc: Enabled bearer , priority 10 [ 291.812629][T10504] loop0: detected capacity change from 0 to 128 [ 291.872866][T10508] loop6: detected capacity change from 0 to 164 [ 292.138548][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 292.412513][ T5801] tipc: Node number set to 10463914 [ 292.467664][T10498] loop3: detected capacity change from 0 to 32768 [ 292.504023][T10495] loop2: detected capacity change from 0 to 40427 [ 292.541832][T10504] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.573170][T10504] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.596744][T10495] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x1ffff [ 292.628119][T10498] XFS (loop3): Mounting V5 Filesystem [ 292.653792][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.662952][T10495] F2FS-fs (loop2): invalid crc value [ 292.701760][T10495] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67c0 [ 292.714431][T10495] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 292.761379][T10508] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 292.819611][T10498] XFS (loop3): Ending clean mount [ 292.864127][ T4187] XFS (loop3): Unmounting Filesystem [ 293.838266][T10552] loop2: detected capacity change from 0 to 4096 [ 293.890633][T10559] loop3: detected capacity change from 0 to 512 [ 293.915031][ T4653] kernel write not supported for file /comedi4 (pid: 4653 comm: kworker/1:11) [ 293.954455][T10559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.975336][T10559] EXT4-fs error (device loop3): ext4_lookup:1858: inode #14: comm syz.3.2450: casefold flag without casefold feature [ 294.005420][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2455'. [ 294.099317][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 294.539120][T10588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.578802][T10552] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 294.616013][T10588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.641808][T10588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.701232][T10584] loop5: detected capacity change from 0 to 4096 [ 294.710485][T10588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.826505][T10584] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 294.900775][T10584] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 295.018498][T10584] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 295.087898][T10584] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 295.145496][T10584] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 295.207176][T10584] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 295.303073][T10584] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 295.322956][T10584] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 295.388012][T10584] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 295.455211][T10584] ntfs: volume version 3.1. [ 295.461957][T10584] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 295.503969][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 295.527033][T10586] loop6: detected capacity change from 0 to 32768 [ 295.620610][T10586] JBD2: Ignoring recovery information on journal [ 295.712926][T10620] netlink: 'syz.3.2479': attribute type 25 has an invalid length. [ 295.722317][T10620] netlink: 'syz.3.2479': attribute type 25 has an invalid length. [ 295.789184][T10586] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 295.905186][T10628] loop3: detected capacity change from 0 to 1024 [ 295.927773][T10586] (syz.6.2464,10586,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 296.022698][ T9125] ocfs2: Unmounting device (7,6) on (node local) [ 296.037951][T10628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.260327][T10640] sp0: Synchronizing with TNC [ 296.268605][T10639] [U] è [ 296.468147][T10648] loop5: detected capacity change from 0 to 512 [ 296.578791][T10648] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2502: invalid block [ 296.606853][T10648] EXT4-fs (loop5): Remounting filesystem read-only [ 296.634535][T10648] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2502: invalid indirect mapped block 4294967295 (level 1) [ 296.655282][T10648] EXT4-fs (loop5): Remounting filesystem read-only [ 296.662260][T10648] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2502: invalid indirect mapped block 4294967295 (level 1) [ 296.764939][T10648] EXT4-fs (loop5): Remounting filesystem read-only [ 296.779909][T10648] EXT4-fs (loop5): 2 truncates cleaned up [ 296.786077][T10648] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 296.943215][T10666] netlink: 'syz.6.2495': attribute type 25 has an invalid length. [ 296.979180][T10666] netlink: 'syz.6.2495': attribute type 25 has an invalid length. [ 297.037890][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2498'. [ 297.277136][T10682] nbd: must specify at least one socket [ 297.428404][T10683] loop5: detected capacity change from 0 to 8192 [ 297.777998][T10714] loop0: detected capacity change from 0 to 1024 [ 297.888781][T10714] EXT4-fs (loop0): Ignoring removed orlov option [ 297.917226][T10723] loop5: detected capacity change from 0 to 64 [ 297.981469][T10714] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 298.421603][T10747] loop5: detected capacity change from 0 to 512 [ 298.432457][ T4298] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 298.442883][T10743] loop3: detected capacity change from 0 to 164 [ 298.473724][T10747] EXT4-fs (loop5): Ignoring removed oldalloc option [ 298.491054][T10741] loop6: detected capacity change from 0 to 8192 [ 298.596220][T10747] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.2535: dx entry: limit 1024 != root limit 124 [ 298.640874][T10747] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2535: Corrupt directory, running e2fsck is recommended [ 298.688659][T10747] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 298.743230][ T4653] Bluetooth: hci5: command 0x0406 tx timeout [ 298.772720][T10747] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.2535: corrupted in-inode xattr [ 298.835902][T10747] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2535: couldn't read orphan inode 15 (err -117) [ 298.848496][ T4298] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.868765][ T4298] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 298.897038][T10747] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 298.921004][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.946078][ T4298] usb 3-1: config 0 descriptor?? [ 299.004996][ T4298] pwc: Samsung MPC-C30 USB webcam detected. [ 299.108505][T10768] EXT4-fs (loop3): Ignoring removed orlov option [ 299.181293][T10768] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 299.262597][ T4298] pwc: send_video_command error -71 [ 299.272422][ T4298] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 299.282264][ T4298] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 299.296192][ T4298] usb 3-1: USB disconnect, device number 14 [ 299.727203][T10794] netlink: 209848 bytes leftover after parsing attributes in process `syz.6.2565'. [ 299.744993][T10791] set_capacity_and_notify: 1 callbacks suppressed [ 299.745012][T10791] loop3: detected capacity change from 0 to 64 [ 300.051553][T10808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2560'. [ 300.077914][T10797] loop2: detected capacity change from 0 to 4096 [ 300.187369][T10814] loop0: detected capacity change from 0 to 8 [ 300.218012][T10797] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 300.239858][T10797] ntfs3: loop2: Failed to load $Extend. [ 300.310586][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 300.310602][ T26] audit: type=1800 audit(1771004702.657:98): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2557" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 300.358266][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 300.666160][T10833] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.2574'. [ 300.733031][ T4653] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 300.890754][T10847] loop3: detected capacity change from 0 to 512 [ 300.975055][T10847] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.005040][T10847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.043478][T10847] EXT4-fs (loop3): 1 truncate cleaned up [ 301.053338][T10847] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 301.093164][ T4653] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.102113][ T4653] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 301.170298][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.201369][ T4653] usb 6-1: config 0 descriptor?? [ 301.245310][ T4653] pwc: Samsung MPC-C30 USB webcam detected. [ 301.365755][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 301.463116][ T4653] pwc: send_video_command error -71 [ 301.468387][ T4653] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 301.483164][ T4653] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 301.515779][ T4653] usb 6-1: USB disconnect, device number 7 [ 301.703124][ T4652] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.879787][T10877] loop3: detected capacity change from 0 to 1024 [ 301.947972][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 301.957825][ T4652] usb 3-1: Using ep0 maxpacket: 16 [ 301.964503][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'. [ 302.025734][T10877] EXT4-fs (loop3): Ignoring removed bh option [ 302.103140][ T4652] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.142977][ T4652] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.153926][T10877] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 302.390009][ T4652] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.418694][ T4652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.443158][ T4652] usb 3-1: Product: syz [ 302.447449][ T4652] usb 3-1: Manufacturer: syz [ 302.471466][ T4652] usb 3-1: SerialNumber: syz [ 302.750200][T10883] loop6: detected capacity change from 0 to 40427 [ 302.781800][T10883] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 302.808561][T10883] F2FS-fs (loop6): invalid crc value [ 302.841924][T10891] loop5: detected capacity change from 0 to 40427 [ 302.880781][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.894781][T10883] F2FS-fs (loop6): Found nat_bits in checkpoint [ 302.933242][T10891] F2FS-fs (loop5): build fault injection attr: rate: 25, type: 0x1ffff [ 302.957272][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.983621][ T4652] usb 3-1: cannot find UAC_HEADER [ 303.003524][T10894] loop0: detected capacity change from 0 to 32768 [ 303.014608][T10891] F2FS-fs (loop5): invalid crc value [ 303.031097][T10891] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67c0 [ 303.075657][T10891] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 303.124272][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.189900][T10894] XFS (loop0): Mounting V5 Filesystem [ 303.208257][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.219262][ T4652] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 303.243194][ T4652] usb 3-1: USB disconnect, device number 15 [ 303.254489][T10883] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.365387][T10894] XFS (loop0): Ending clean mount [ 303.372247][ T9125] attempt to access beyond end of device [ 303.372247][ T9125] loop6: rw=2049, want=45104, limit=40427 [ 303.494205][ T5717] udevd[5717]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.616291][ T4188] XFS (loop0): Unmounting Filesystem [ 303.923610][ T4285] tipc: Resetting bearer [ 303.929524][ T144] tipc: Disabling bearer [ 303.942660][ T144] tipc: Disabling bearer [ 303.948026][ T144] tipc: Disabling bearer [ 304.044324][ T144] tipc: Left network mode [ 304.267274][T10910] loop5: detected capacity change from 0 to 32768 [ 304.340871][T10914] lo speed is unknown, defaulting to 1000 [ 304.521135][T10910] XFS (loop5): Mounting V5 Filesystem [ 304.655184][T10910] XFS (loop5): Ending clean mount [ 304.771214][ T7129] XFS (loop5): Unmounting Filesystem [ 305.071286][T10914] chnl_net:caif_netlink_parms(): no params data found [ 305.102240][T10952] loop0: detected capacity change from 0 to 2048 [ 305.167661][T10960] loop2: detected capacity change from 0 to 256 [ 305.227256][T10952] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 305.273274][T10952] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 305.286576][T10952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.404058][T10960] FAT-fs (loop2): Directory bread(block 64) failed [ 305.410672][T10960] FAT-fs (loop2): Directory bread(block 65) failed [ 305.532591][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.545850][T10960] FAT-fs (loop2): Directory bread(block 66) failed [ 305.562598][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.564576][T10960] FAT-fs (loop2): Directory bread(block 67) failed [ 305.580690][T10914] device bridge_slave_0 entered promiscuous mode [ 305.601822][T10960] FAT-fs (loop2): Directory bread(block 68) failed [ 305.621016][ T144] IPVS: stopping backup sync thread 5102 ... [ 305.626307][T10960] FAT-fs (loop2): Directory bread(block 69) failed [ 305.635808][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.663075][T10960] FAT-fs (loop2): Directory bread(block 70) failed [ 305.669691][T10960] FAT-fs (loop2): Directory bread(block 71) failed [ 305.712762][T10960] FAT-fs (loop2): Directory bread(block 72) failed [ 305.719384][T10960] FAT-fs (loop2): Directory bread(block 73) failed [ 305.728525][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.766504][T10914] device bridge_slave_1 entered promiscuous mode [ 305.871135][T10914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.932943][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 305.980488][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2613'. [ 306.008837][T10914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.119585][ T4652] Bluetooth: hci3: command 0x0409 tx timeout [ 306.173707][T10962] loop6: detected capacity change from 0 to 32768 [ 306.192168][T10914] team0: Port device team_slave_0 added [ 306.261481][T10914] team0: Port device team_slave_1 added [ 306.427550][T10990] loop0: detected capacity change from 0 to 4096 [ 306.436310][T10962] XFS (loop6): Mounting V5 Filesystem [ 306.451055][ T144] device hsr_slave_0 left promiscuous mode [ 306.465842][T10990] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 306.478206][T10990] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 306.498552][ T144] device hsr_slave_1 left promiscuous mode [ 306.499557][T10990] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 306.517980][T10990] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 306.538505][T10990] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 306.546923][T10990] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 306.560866][T10990] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 306.581400][T10990] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 306.603736][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.611887][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.627189][T10990] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 306.648395][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.652902][T10962] XFS (loop6): Ending clean mount [ 306.679438][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.708217][T10990] ntfs: volume version 3.1. [ 306.725298][ T144] device bridge_slave_1 left promiscuous mode [ 306.739828][T10990] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 306.747224][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.796108][ T9125] XFS (loop6): Unmounting Filesystem [ 306.817558][ T144] device bridge_slave_0 left promiscuous mode [ 306.827490][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.953427][ T144] device veth1_macvtap left promiscuous mode [ 306.959523][ T144] device veth0_macvtap left promiscuous mode [ 306.992688][ T144] device veth1_vlan left promiscuous mode [ 306.998543][ T144] device veth0_vlan left promiscuous mode [ 307.166124][T10986] loop2: detected capacity change from 0 to 40427 [ 307.249657][T10986] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 307.290898][T10986] F2FS-fs (loop2): invalid crc value [ 307.363389][T10986] F2FS-fs (loop2): Found nat_bits in checkpoint [ 307.467589][T10986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 307.656405][ T4185] attempt to access beyond end of device [ 307.656405][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 307.717993][ T144] team0 (unregistering): Port device team_slave_1 removed [ 307.739078][ T144] team0 (unregistering): Port device team_slave_0 removed [ 307.755898][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.785176][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.904181][ T144] bond0 (unregistering): Released all slaves [ 308.083058][T10914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.090082][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.190016][ T5801] Bluetooth: hci3: command 0x041b tx timeout [ 308.212102][T10914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.276494][T11025] loop0: detected capacity change from 0 to 256 [ 308.280179][T10914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.309780][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.357384][T11028] loop6: detected capacity change from 0 to 1024 [ 308.364726][T10914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.392996][T11025] exfat: Deprecated parameter 'utf8' [ 308.435738][T11025] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 308.488945][T10914] device hsr_slave_0 entered promiscuous mode [ 308.501181][T11028] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.526717][T10914] device hsr_slave_1 entered promiscuous mode [ 308.691336][T10914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.729959][T10914] Cannot create hsr debugfs directory [ 308.822527][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.890263][T11044] loop6: detected capacity change from 0 to 8 [ 309.047986][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2643'. [ 309.069963][T11044] SQUASHFS error: lzo decompression failed, data probably corrupt [ 309.125126][T11044] SQUASHFS error: Failed to read block 0x28d: -5 [ 309.131543][T11044] SQUASHFS error: Unable to read metadata cache entry [28b] [ 309.139569][T11050] loop0: detected capacity change from 0 to 512 [ 309.163489][T11044] SQUASHFS error: Unable to read inode 0x11f [ 309.232061][T11050] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.297420][T11050] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.405915][T10914] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.469831][T11050] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.2644: directory missing '..' [ 309.495381][T10914] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.531395][T10914] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.590668][T10914] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.807695][T11031] loop5: detected capacity change from 0 to 32768 [ 310.051364][T11031] XFS (loop5): Mounting V5 Filesystem [ 310.054421][T10914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.137375][T10914] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.190561][T10914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.210566][T10914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.272478][ T5796] Bluetooth: hci3: command 0x040f tx timeout [ 310.283063][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.291290][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.335539][T11031] XFS (loop5): Ending clean mount [ 310.361836][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.409933][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.410433][ T1570] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.410529][ T1570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.413769][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.414986][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.419906][ T1570] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.419946][ T1570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.420551][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.459272][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.460265][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.461397][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.462192][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.477072][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.479580][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.480223][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.480980][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.481566][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.482212][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.486410][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.503663][ T1570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.531831][T11103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2656'. [ 310.563383][ T7129] XFS (loop5): Unmounting Filesystem [ 310.664582][T11106] loop6: detected capacity change from 0 to 512 [ 310.686493][T11106] EXT4-fs (loop6): Ignoring removed nobh option [ 310.686527][T11106] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 310.838477][T11106] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2658: iget: bad i_size value: 38620345925642 [ 310.839616][T11106] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2658: couldn't read orphan inode 15 (err -117) [ 310.843242][T11106] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 310.864742][T11106] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2658: invalid indirect mapped block 3973251072 (level 0) [ 311.055997][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.056142][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.142997][T10914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.147364][T11123] loop6: detected capacity change from 0 to 512 [ 311.331645][T11123] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.331760][T11123] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.450494][T11123] EXT4-fs error (device loop6): ext4_get_first_dir_block:3619: inode #12: comm syz.6.2660: directory missing '..' [ 312.038099][ T27] INFO: task syz-executor:4186 blocked for more than 143 seconds. [ 312.038122][ T27] Not tainted syzkaller #0 [ 312.038134][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.038144][ T27] task:syz-executor state:D stack:22000 pid: 4186 ppid: 1 flags:0x00004004 [ 312.038199][ T27] Call Trace: [ 312.038207][ T27] [ 312.038221][ T27] __schedule+0x11ef/0x43c0 [ 312.038260][ T27] ? release_firmware_map_entry+0x190/0x190 [ 312.038312][ T27] ? mark_lock+0x94/0x320 [ 312.038341][ T27] ? preempt_schedule+0xbc/0xd0 [ 312.038367][ T27] ? preempt_schedule_common+0xa5/0xd0 [ 312.038390][ T27] ? release_firmware_map_entry+0x190/0x190 [ 312.038412][ T27] ? preempt_schedule+0xbc/0xd0 [ 312.038435][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 312.038457][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 312.038492][ T27] schedule+0x11b/0x1e0 [ 312.038516][ T27] io_schedule+0x7c/0xd0 [ 312.038542][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 312.038578][ T27] ? wait_on_page_bit+0x50/0x50 [ 312.038601][ T27] ? rcu_lock_release+0x20/0x20 [ 312.038637][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 312.038672][ T27] ? invalidate_inode_page+0x360/0x360 [ 312.038707][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 312.038747][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 312.038776][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 312.038806][ T27] evict+0x4dc/0x8d0 [ 312.038840][ T27] ? proc_nr_inodes+0x320/0x320 [ 312.038873][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 312.038901][ T27] evict_inodes+0x60c/0x6a0 [ 312.038923][ T27] ? __dentry_kill+0x530/0x650 [ 312.038950][ T27] ? clear_inode+0x150/0x150 [ 312.038984][ T27] generic_shutdown_super+0x93/0x300 [ 312.039013][ T27] kill_block_super+0x7c/0xe0 [ 312.039040][ T27] deactivate_locked_super+0x93/0xf0 [ 312.039066][ T27] cleanup_mnt+0x42d/0x4e0 [ 312.039092][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 312.039119][ T27] task_work_run+0x125/0x1a0 [ 312.039149][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 312.039171][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 312.039194][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 312.039218][ T27] do_syscall_64+0x58/0xa0 [ 312.039237][ T27] ? clear_bhb_loop+0x30/0x80 [ 312.039259][ T27] ? clear_bhb_loop+0x30/0x80 [ 312.039282][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.039315][ T27] RIP: 0033:0x7fc5973dc1d7 [ 312.039335][ T27] RSP: 002b:00007fff3280bdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 312.039360][ T27] RAX: 0000000000000000 RBX: 00007fc597470c3b RCX: 00007fc5973dc1d7 [ 312.039374][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3280beb0 [ 312.039388][ T27] RBP: 00007fff3280beb0 R08: 00007fff3280ceb0 R09: 00000000ffffffff [ 312.039404][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3280cf40 [ 312.039418][ T27] R13: 00007fc597470c3b R14: 00000000000261ae R15: 00007fff3280cf80 [ 312.039447][ T27] [ 312.039519][ T27] [ 312.039519][ T27] Showing all locks held in the system: [ 312.039532][ T27] 1 lock held by khungtaskd/27: [ 312.039545][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 312.039609][ T27] 3 locks held by kworker/u4:1/144: [ 312.039656][ T27] 2 locks held by udevd/3560: [ 312.039670][ T27] 1 lock held by dhcpcd/3853: [ 312.039683][ T27] 2 locks held by getty/3940: [ 312.039696][ T27] #0: ffff88802bc87098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 312.039757][ T27] #1: ffffc900021ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 312.039826][ T27] 1 lock held by syz-executor/4186: [ 312.039839][ T27] #0: ffff8880788fe0e0 (&type->s_umount_key#117){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 312.039907][ T27] 3 locks held by syz-executor/4188: [ 312.039928][ T27] 3 locks held by kworker/0:7/4298: [ 312.039941][ T27] 2 locks held by kworker/u4:7/4328: [ 312.039964][ T27] 5 locks held by syz.2.2666/11100: [ 312.039978][ T27] [ 312.039983][ T27] ============================================= [ 312.039983][ T27] [ 312.039999][ T27] NMI backtrace for cpu 0 [ 312.040018][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 312.040037][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.040048][ T27] Call Trace: [ 312.040055][ T27] [ 312.040062][ T27] dump_stack_lvl+0x188/0x250 [ 312.040089][ T27] ? show_regs_print_info+0x20/0x20 [ 312.040110][ T27] ? load_image+0x400/0x400 [ 312.040133][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 312.040161][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 312.040185][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 312.040207][ T27] ? _printk+0xda/0x130 [ 312.040229][ T27] ? load_image+0x400/0x400 [ 312.040256][ T27] ? load_image+0x400/0x400 [ 312.040281][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 312.040306][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 312.040332][ T27] watchdog+0xe0f/0xe50 [ 312.040362][ T27] kthread+0x436/0x520 [ 312.040380][ T27] ? hungtask_pm_notify+0x40/0x40 [ 312.040398][ T27] ? kthread_blkcg+0xd0/0xd0 [ 312.040418][ T27] ret_from_fork+0x1f/0x30 [ 312.040452][ T27] [ 312.040459][ T27] Sending NMI from CPU 0 to CPUs 1: [ 312.040487][ C1] NMI backtrace for cpu 1 [ 312.040496][ C1] CPU: 1 PID: 10914 Comm: syz-executor Not tainted syzkaller #0 [ 312.040519][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.040528][ C1] RIP: 0010:neigh_flush_dev+0x8ba/0x990 [ 312.040548][ C1] Code: ff ff 4c 89 f7 e8 86 89 d7 f9 e9 ac fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c bf fe ff ff 4c 89 f7 e8 bb 89 d7 f9 e9 b2 fe ff ff b1 7d 92 f9 4c 89 e8 e9 97 f8 ff ff e8 a4 7d 92 f9 4c 89 e8 e9 [ 312.040562][ C1] RSP: 0018:ffffc9000365eaa0 EFLAGS: 00000206 [ 312.040576][ C1] RAX: 1ffff1100e7ffd5f RBX: ffff888073ffeaf8 RCX: ffff88804f623b80 [ 312.040589][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 312.040599][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 312.040609][ C1] R10: dffffc0000000000 R11: fffff520006cbd5c R12: ffff888029c8b780 [ 312.040622][ C1] R13: ffff888073ffe800 R14: 000000000000022c R15: ffff8880791b6000 [ 312.040634][ C1] FS: 0000555557445500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 312.040649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.040660][ C1] CR2: 00007f0ebf46fe9c CR3: 000000002b5db000 CR4: 00000000003506e0 [ 312.040675][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.040684][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.040695][ C1] Call Trace: [ 312.040699][ C1] [ 312.040711][ C1] ? neigh_changeaddr+0x1f/0x40 [ 312.040728][ C1] neigh_changeaddr+0x2c/0x40 [ 312.040744][ C1] ndisc_netdev_event+0x10a/0x330 [ 312.040766][ C1] raw_notifier_call_chain+0xcb/0x160 [ 312.040787][ C1] dev_set_mac_address+0x2e8/0x400 [ 312.040812][ C1] ? dev_pre_changeaddr_notify+0x120/0x120 [ 312.040829][ C1] ? rwsem_write_trylock+0x135/0x1c0 [ 312.040848][ C1] ? clear_nonspinnable+0x60/0x60 [ 312.040872][ C1] dev_set_mac_address_user+0x2d/0x50 [ 312.040890][ C1] do_setlink+0x8b0/0x3d60 [ 312.040915][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 312.040935][ C1] ? stack_trace_save+0xa6/0xf0 [ 312.040950][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 312.040973][ C1] ? __nla_validate_parse+0x1e23/0x2780 [ 312.040993][ C1] ? rtnetlink_rcv_msg+0x844/0xf30 [ 312.041010][ C1] ? netlink_rcv_skb+0x1f5/0x440 [ 312.041024][ C1] ? netlink_unicast+0x774/0x920 [ 312.041053][ C1] ? __nla_validate+0x50/0x50 [ 312.041080][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 312.041100][ C1] rtnl_newlink+0x1658/0x1a50 [ 312.041117][ C1] ? arch_stack_walk+0xf2/0x140 [ 312.041139][ C1] ? rtnl_newlink+0x4a1/0x1a50 [ 312.041157][ C1] ? rtnl_setlink+0x500/0x500 [ 312.041173][ C1] ? mark_lock+0x94/0x320 [ 312.041189][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 312.041231][ C1] ? kmem_cache_free+0x8f/0x210 [ 312.041289][ C1] ? rtnl_setlink+0x500/0x500 [ 312.041306][ C1] rtnetlink_rcv_msg+0x844/0xf30 [ 312.041327][ C1] ? rtnetlink_bind+0x80/0x80 [ 312.041346][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 312.041361][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 312.041380][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 312.041395][ C1] ? _local_bh_enable+0xa0/0xa0 [ 312.041415][ C1] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 312.041441][ C1] ? dev_queue_xmit+0x20/0x20 [ 312.041456][ C1] ? memcpy+0x3c/0x60 [ 312.041473][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 312.041493][ C1] ? __skb_clone+0x480/0x790 [ 312.041521][ C1] netlink_rcv_skb+0x1f5/0x440 [ 312.041536][ C1] ? rtnetlink_bind+0x80/0x80 [ 312.041554][ C1] ? netlink_ack+0xb50/0xb50 [ 312.041577][ C1] netlink_unicast+0x774/0x920 [ 312.041601][ C1] netlink_sendmsg+0x8ba/0xbe0 [ 312.041620][ C1] ? netlink_getsockopt+0x570/0x570 [ 312.041637][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 312.041655][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 312.041673][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 312.041691][ C1] __sys_sendto+0x46d/0x620 [ 312.041711][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 312.041735][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 312.041760][ C1] ? lock_chain_count+0x20/0x20 [ 312.041779][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 312.041799][ C1] __x64_sys_sendto+0xda/0xf0 [ 312.041818][ C1] do_syscall_64+0x4c/0xa0 [ 312.041832][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.041848][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.041864][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.041881][ C1] RIP: 0033:0x7f5eb068584e [ 312.041895][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.041908][ C1] RSP: 002b:00007ffde28c7ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.041924][ C1] RAX: ffffffffffffffda RBX: 0000555557445500 RCX: 00007f5eb068584e [ 312.041936][ C1] RDX: 000000000000002c RSI: 00007f5eb146d670 RDI: 0000000000000003 [ 312.041946][ C1] RBP: 0000000000000001 R08: 00007ffde28c7d64 R09: 000000000000000c [ 312.041956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 312.041966][ C1] R13: 0000000000000000 R14: 00007f5eb146d670 R15: 0000000000000000 [ 312.041984][ C1] [ 312.051162][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 312.051179][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 312.051200][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.051214][ T27] Call Trace: [ 312.051221][ T27] [ 312.051229][ T27] dump_stack_lvl+0x188/0x250 [ 312.051262][ T27] ? show_regs_print_info+0x20/0x20 [ 312.051287][ T27] ? load_image+0x400/0x400 [ 312.051323][ T27] panic+0x2e5/0x810 [ 312.051344][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 312.051371][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 312.051393][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 312.051422][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 312.051453][ T27] watchdog+0xe4e/0xe50 [ 312.051484][ T27] kthread+0x436/0x520 [ 312.051503][ T27] ? hungtask_pm_notify+0x40/0x40 [ 312.051523][ T27] ? kthread_blkcg+0xd0/0xd0 [ 312.051544][ T27] ret_from_fork+0x1f/0x30 [ 312.051579][ T27] [ 312.051933][ T27] Kernel Offset: disabled [ 313.199230][ T27] Rebooting in 86400 seconds..