last executing test programs: 1.767382892s ago: executing program 3 (id=1114): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xdf26, 0x800}) 1.635126854s ago: executing program 3 (id=1116): r0 = socket(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 1.492911427s ago: executing program 3 (id=1119): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0) 1.429229223s ago: executing program 3 (id=1123): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x7, 0x9, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000800) 1.362142468s ago: executing program 3 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x4c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}}, 0x0) 1.352526589s ago: executing program 0 (id=1125): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x5, 0x58b, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) 1.333087401s ago: executing program 3 (id=1126): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8000090503"], 0x0) 1.186412114s ago: executing program 1 (id=1130): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa7, &(0x7f0000000300), &(0x7f00000002c0)=0x4) 1.172785535s ago: executing program 0 (id=1132): prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) timerfd_create(0x7, 0x80800) 1.071659654s ago: executing program 1 (id=1135): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.052880286s ago: executing program 0 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv4_delrule={0x38, 0x21, 0xb12becd5a2b54ddf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 937.816466ms ago: executing program 0 (id=1138): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x5, 0x9}]}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) 884.065421ms ago: executing program 1 (id=1140): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) pivot_root(0x0, 0x0) 790.374699ms ago: executing program 0 (id=1142): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4b, 0x1, 0x2, "40a7190200002000000008000000ff1057e31e9400dc79000000000006ff00", 0x32314742}) 787.86202ms ago: executing program 1 (id=1143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) 663.791061ms ago: executing program 0 (id=1145): getsockname(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 659.352501ms ago: executing program 4 (id=1146): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures}) 621.240124ms ago: executing program 1 (id=1147): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 570.531249ms ago: executing program 2 (id=1148): r0 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x200) ioctl$BLKSSZGET(r0, 0x1268, 0x0) 546.499211ms ago: executing program 4 (id=1149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) 538.126072ms ago: executing program 2 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x81}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x4000040) 398.509004ms ago: executing program 4 (id=1151): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 390.656846ms ago: executing program 2 (id=1152): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 247.054038ms ago: executing program 4 (id=1153): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x149380, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 208.162401ms ago: executing program 2 (id=1154): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) 50.425855ms ago: executing program 4 (id=1155): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0xc5, 0xfa00, {0x3, {0x5, 0x368, "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", 0xb, 0x1, 0x5, 0xbc, 0x0, 0xae, 0x0, 0x1}}}, 0x128) 50.337295ms ago: executing program 2 (id=1156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r0) 8.653459ms ago: executing program 2 (id=1157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.39913ms ago: executing program 4 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 0s ago: executing program 1 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) kernel console output (not intermixed with test programs): dding VLAN 0 to HW filter on device team0 [ 71.818482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.827096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.837281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.878112][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.893414][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.910496][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.920122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.930065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.939135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.948647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.959400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.968196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.976827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.986377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.995138][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.002265][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.010765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.020970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.029751][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.037184][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.046425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.058841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.070349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.088927][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.100860][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.125264][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.139110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.151405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.160241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.169276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.179737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.188789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.198360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.207950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.216571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.225344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.245713][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.268698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.284630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.301940][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.381784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.390934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.404991][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.450953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.478143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.498365][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.505536][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.523426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.545346][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.577273][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.586861][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.599760][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.607116][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.616117][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.625303][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.632942][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.651008][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.667436][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.677214][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.687805][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.697391][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.706206][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.716358][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.725802][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.736703][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.756809][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.768599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.778387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.787494][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.794742][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.804625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.813206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.821589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.844537][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.864552][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.883196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.892693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.901308][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.908463][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.913787][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 72.919556][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 72.928464][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 72.928598][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 72.937980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.951673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.959649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.968651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.977353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.987139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.995003][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 73.003422][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.020456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.029891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.041374][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.054724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.063842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.073653][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.080762][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.108130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.117460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.127389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.138270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.147761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.156914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.169972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.179072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.188210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.197092][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.204367][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.213167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.250250][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.267379][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.292057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.303700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.312508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.321300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.334454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.344106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.353728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.362719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.376894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.388171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.397896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.406166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.414777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.425817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.435179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.455729][ T4184] device veth0_vlan entered promiscuous mode [ 73.473453][ T4186] device veth0_vlan entered promiscuous mode [ 73.483588][ T4184] device veth1_vlan entered promiscuous mode [ 73.491477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.500951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.509938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.529569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.539617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.554485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.570557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.585795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.597013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.635539][ T4186] device veth1_vlan entered promiscuous mode [ 73.668929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.678179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.692598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.702334][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.718317][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.736911][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.752821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.768156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.777512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.839003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.849659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.860823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.871793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.881677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.893854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.904803][ T4184] device veth0_macvtap entered promiscuous mode [ 73.915746][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.926925][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.935014][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.960049][ T4186] device veth0_macvtap entered promiscuous mode [ 73.971749][ T4184] device veth1_macvtap entered promiscuous mode [ 73.986743][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.010923][ T4186] device veth1_macvtap entered promiscuous mode [ 74.029959][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.056858][ T4185] device veth0_vlan entered promiscuous mode [ 74.071391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.080666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.094230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.103981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.113669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.122624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.131073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.140354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.148764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.174413][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.191725][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202322][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.211070][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.221514][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.247665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.257417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.266542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.288473][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.300594][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.316620][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.328634][ T4185] device veth1_vlan entered promiscuous mode [ 74.347450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.357305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.366878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.377231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.386886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.394940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.416414][ T4187] device veth0_vlan entered promiscuous mode [ 74.433346][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.445055][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.456999][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.465524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.475371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.484869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.493839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.504410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.513128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.528282][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.555232][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.564698][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.575903][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.584722][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.599822][ T4187] device veth1_vlan entered promiscuous mode [ 74.622914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.631771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.641086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.652762][ T4185] device veth0_macvtap entered promiscuous mode [ 74.706460][ T4185] device veth1_macvtap entered promiscuous mode [ 74.776795][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.789729][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.800415][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.811366][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.824466][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.849986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.860584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.869975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.879257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.889270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.898378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.908267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.929330][ T4187] device veth0_macvtap entered promiscuous mode [ 74.949440][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.961642][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.972469][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.984902][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995937][ T4244] Bluetooth: hci2: command 0x040f tx timeout [ 75.001453][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.004222][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 75.021559][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 75.027821][ T4244] Bluetooth: hci0: command 0x040f tx timeout [ 75.044909][ T4187] device veth1_macvtap entered promiscuous mode [ 75.060031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.068796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.074701][ T4244] Bluetooth: hci4: command 0x040f tx timeout [ 75.089148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.099544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.117036][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.128724][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.138667][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.149024][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.191516][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.218830][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.228341][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.230743][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.266761][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.283282][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.293674][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.304517][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.315964][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.326965][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.338684][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.347912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.358941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.368056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.377800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.400088][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.414243][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.422860][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.430362][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.442278][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.453461][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.463674][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.475913][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.487507][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.507170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.515919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.525581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.534602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.544096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.582482][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.590981][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.607600][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.620259][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.641967][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.651516][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677615][ T4195] device veth0_vlan entered promiscuous mode [ 75.678228][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.694103][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.704353][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.719144][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.730132][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.745986][ T4195] device veth1_vlan entered promiscuous mode [ 75.793471][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.810887][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.828404][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.839149][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.914998][ T4301] netlink: 'syz.0.6': attribute type 8 has an invalid length. [ 75.930942][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.941712][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.961490][ T4195] device veth0_macvtap entered promiscuous mode [ 75.986225][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.001417][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.011598][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.038530][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.053101][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.078422][ T4195] device veth1_macvtap entered promiscuous mode [ 76.127242][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.148904][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.167091][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.178567][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.194614][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.209636][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.249323][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.276096][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.286237][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.297876][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.318625][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.355316][ T4311] loop0: detected capacity change from 0 to 1024 [ 76.368463][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.377557][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.386326][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.395950][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.419835][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.463219][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.496551][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.528978][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.558368][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.594452][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.632097][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.655735][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.694320][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.782934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.802581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.835101][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.876707][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.893304][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.908519][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.941559][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.984135][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.003304][ T4244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.072213][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 77.083876][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 77.090221][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 77.104365][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 77.118408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.152313][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 77.164437][ T4331] device ip6tnl1 entered promiscuous mode [ 77.203702][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.236039][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.252046][ T4244] usb 4-1: Using ep0 maxpacket: 16 [ 77.284180][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.294408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.315785][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.353532][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.382098][ T4244] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 77.390837][ T4244] usb 4-1: config 0 has no interface number 0 [ 77.435034][ T4244] usb 4-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 77.469484][ T4244] usb 4-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 77.505956][ T4244] usb 4-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.583782][ T4344] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 77.722486][ T4244] usb 4-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 77.731809][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.776964][ T4244] usb 4-1: Product: syz [ 77.781195][ T4244] usb 4-1: Manufacturer: syz [ 77.821952][ T4244] usb 4-1: SerialNumber: syz [ 77.866573][ T4244] usb 4-1: config 0 descriptor?? [ 77.913192][ T4315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.939260][ T4315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.994834][ T4244] usb-storage 4-1:0.216: USB Mass Storage device detected [ 78.072140][ T4244] scsi host1: usb-storage 4-1:0.216 [ 78.165073][ T4370] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 78.269467][ T4316] usb 4-1: USB disconnect, device number 2 [ 78.377384][ T4372] loop1: detected capacity change from 0 to 256 [ 78.498251][ T4368] loop2: detected capacity change from 0 to 32768 [ 78.745439][ T4368] [ 78.745439][ T4368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.745439][ T4368] [ 78.769675][ T4372] FAT-fs (loop1): Directory bread(block 64) failed [ 78.804882][ T4372] FAT-fs (loop1): Directory bread(block 65) failed [ 78.811610][ T4372] FAT-fs (loop1): Directory bread(block 66) failed [ 78.835884][ T4372] FAT-fs (loop1): Directory bread(block 67) failed [ 78.849831][ T4372] FAT-fs (loop1): Directory bread(block 68) failed [ 78.889305][ T4372] FAT-fs (loop1): Directory bread(block 69) failed [ 78.901665][ T4374] bond0: option arp_validate: invalid value (18446744073491447809) [ 78.917082][ T144] bond0: (slave bond_slave_0): interface is now down [ 78.947295][ T4372] FAT-fs (loop1): Directory bread(block 70) failed [ 78.954520][ T144] bond0: (slave bond_slave_1): interface is now down [ 78.990962][ T4372] FAT-fs (loop1): Directory bread(block 71) failed [ 79.005473][ T4327] read_mapping_page failed! [ 79.006817][ T144] bond0: now running without any active interface! [ 79.024103][ T4327] ERROR: (device loop2): txCommit: [ 79.024103][ T4327] [ 79.028453][ T4372] FAT-fs (loop1): Directory bread(block 72) failed [ 79.056818][ T4372] FAT-fs (loop1): Directory bread(block 73) failed [ 79.102363][ T4327] jfs_write_inode: jfs_commit_inode failed! [ 79.110315][ T4187] [ 79.110315][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.110315][ T4187] [ 79.178751][ T4187] [ 79.178751][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.178751][ T4187] [ 79.345667][ T4384] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 79.599849][ T4392] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 79.657291][ T4392] netlink: 'syz.1.44': attribute type 9 has an invalid length. [ 80.085387][ T4410] loop2: detected capacity change from 0 to 4096 [ 80.138864][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 80.150879][ T4410] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 80.222275][ T4420] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 80.250667][ T4420] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 80.262593][ T4410] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 80.287206][ T4410] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 80.301793][ T4420] device bridge1 entered promiscuous mode [ 80.365159][ T4410] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 80.401913][ T4410] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 80.446211][ T4429] xt_hashlimit: size too large, truncated to 1048576 [ 80.474477][ T4429] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 80.484085][ T4431] loop4: detected capacity change from 0 to 8 [ 80.497986][ T4410] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 80.527458][ T4410] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 80.527533][ T4410] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 80.527569][ T4410] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 80.527621][ T4410] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 80.531400][ T4410] ntfs: volume version 3.1. [ 80.559225][ T4431] SQUASHFS error: zlib decompression failed, data probably corrupt [ 80.559328][ T4431] SQUASHFS error: Failed to read block 0x9b: -5 [ 80.559346][ T4431] SQUASHFS error: Unable to read metadata cache entry [99] [ 80.559366][ T4431] SQUASHFS error: Unable to read inode 0x127 [ 80.870329][ T4337] syz.0.20 (4337): drop_caches: 3 [ 81.039164][ T4446] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 81.059487][ T4449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 81.090704][ T4449] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 81.220511][ T4455] loop2: detected capacity change from 0 to 256 [ 81.283339][ T4455] ======================================================= [ 81.283339][ T4455] WARNING: The mand mount option has been deprecated and [ 81.283339][ T4455] and is ignored by this kernel. Remove the mand [ 81.283339][ T4455] option from the mount to silence this warning. [ 81.283339][ T4455] ======================================================= [ 81.307729][ T4460] IPv6: sit1: Disabled Multicast RS [ 81.481787][ T4455] FAT-fs (loop2): Directory bread(block 64) failed [ 81.488537][ T4455] FAT-fs (loop2): Directory bread(block 65) failed [ 81.505886][ T4455] FAT-fs (loop2): Directory bread(block 66) failed [ 81.532094][ T4455] FAT-fs (loop2): Directory bread(block 67) failed [ 81.561104][ T4455] FAT-fs (loop2): Directory bread(block 68) failed [ 81.600073][ T4455] FAT-fs (loop2): Directory bread(block 69) failed [ 81.632606][ T4455] FAT-fs (loop2): Directory bread(block 70) failed [ 81.654111][ T4455] FAT-fs (loop2): Directory bread(block 71) failed [ 81.685343][ T4455] FAT-fs (loop2): Directory bread(block 72) failed [ 81.705535][ T4455] FAT-fs (loop2): Directory bread(block 73) failed [ 81.719760][ T4467] loop1: detected capacity change from 0 to 8192 [ 81.843501][ T4467] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 81.882987][ T4467] REISERFS (device loop1): using ordered data mode [ 81.889733][ T4467] reiserfs: using flush barriers [ 81.903753][ T4483] device geneve2 entered promiscuous mode [ 81.912989][ T4467] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.977407][ T4467] REISERFS (device loop1): checking transaction log (loop1) [ 82.048730][ T4467] REISERFS (device loop1): Using tea hash to sort names [ 82.106002][ T4467] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 82.340538][ T4503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.442049][ T4255] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.536640][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 82.643431][ T4517] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.101'. [ 82.802218][ T4255] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 82.825916][ T4255] usb 1-1: config 0 has no interface number 0 [ 82.840333][ T4255] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 82.895467][ T4255] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.001220][ T4536] loop4: detected capacity change from 0 to 256 [ 83.082009][ T4255] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 83.107469][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.117075][ T4255] usb 1-1: Product: syz [ 83.121357][ T4255] usb 1-1: Manufacturer: syz [ 83.128968][ T4255] usb 1-1: SerialNumber: syz [ 83.132173][ T4536] FAT-fs (loop4): Directory bread(block 64) failed [ 83.140216][ T4536] FAT-fs (loop4): Directory bread(block 65) failed [ 83.161782][ T4255] usb 1-1: config 0 descriptor?? [ 83.201317][ T4536] FAT-fs (loop4): Directory bread(block 66) failed [ 83.212349][ T4495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.234355][ T4255] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 83.250424][ T4536] FAT-fs (loop4): Directory bread(block 67) failed [ 83.261971][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.276162][ T4536] FAT-fs (loop4): Directory bread(block 68) failed [ 83.286970][ T4536] FAT-fs (loop4): Directory bread(block 69) failed [ 83.296386][ T4536] FAT-fs (loop4): Directory bread(block 70) failed [ 83.303242][ T4536] FAT-fs (loop4): Directory bread(block 71) failed [ 83.306980][ T4255] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 83.316454][ T4536] FAT-fs (loop4): Directory bread(block 72) failed [ 83.342068][ T4536] FAT-fs (loop4): Directory bread(block 73) failed [ 83.430059][ T4540] device bridge1 entered promiscuous mode [ 83.532020][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 83.626122][ T4548] loop2: detected capacity change from 0 to 512 [ 83.656419][ T13] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.667274][ T13] usb 2-1: config 179 has no interface number 0 [ 83.685221][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 83.704839][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 83.722807][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.751565][ T13] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.778009][ T13] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.820016][ T13] usb 2-1: config 179 interface 65 has no altsetting 0 [ 83.841974][ T13] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 83.859841][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.918315][ T13] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 83.944247][ T4316] usb 1-1: USB disconnect, device number 2 [ 83.962374][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.990072][ T4316] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 84.015815][ T4316] cyberjack 1-1:0.69: device disconnected [ 84.037588][ T4548] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.054369][ T4548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.092827][ T4548] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.124284][ T4548] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 84.159581][ T13] usb 2-1: USB disconnect, device number 2 [ 84.171511][ T13] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 84.230415][ T4564] loop3: detected capacity change from 0 to 64 [ 84.364978][ T4566] device wg1 entered promiscuous mode [ 84.372458][ T1107] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 84.408123][ T1107] usb 5-1: config 0 has no interface number 1 [ 84.426777][ T1107] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 84.458625][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.479888][ T1107] usb 5-1: config 0 descriptor?? [ 84.556763][ T1107] usb 5-1: MIDIStreaming interface descriptor not found [ 84.659716][ T1107] gspca_main: spca561-2.14.0 probing abcd:cdee [ 84.845575][ T1107] spca561: probe of 5-1:0.0 failed with error -22 [ 84.891474][ T1107] usb 5-1: USB disconnect, device number 2 [ 85.043462][ T4602] Cannot find map_set index 0 as target [ 85.070955][ T4605] loop3: detected capacity change from 0 to 256 [ 85.138781][ T4609] loop2: detected capacity change from 0 to 512 [ 85.204721][ T4609] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 85.245266][ T4605] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 85.270988][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.308851][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 85.389526][ T4609] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.451425][ T4609] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.148: corrupted xattr block 32 [ 85.689519][ T4638] loop1: detected capacity change from 0 to 512 [ 85.777530][ T4638] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 85.777530][ T4638] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.777530][ T4638] [ 85.838265][ T4638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.902397][ T4638] EXT4-fs (loop1): 1 truncate cleaned up [ 85.917379][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x000000000000ee01,nouser_xattr,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 86.092320][ T4244] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.232046][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.472209][ T4244] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 86.480550][ T4244] usb 4-1: config 0 has no interface number 0 [ 86.551505][ T4244] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 86.602253][ T4316] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 86.612998][ T4244] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.634789][ T4316] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.701734][ T4316] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.726644][ T4694] loop4: detected capacity change from 0 to 2048 [ 86.756444][ T4316] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.767653][ T1325] cfg80211: failed to load regulatory.db [ 86.808259][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.832201][ T4244] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 86.861781][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.889008][ T4702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.918791][ T4244] usb 4-1: Product: syz [ 86.927213][ T4316] usb 1-1: invalid MIDI out EP 0 [ 86.943039][ T4244] usb 4-1: Manufacturer: syz [ 86.975156][ T4244] usb 4-1: SerialNumber: syz [ 87.014077][ T4244] usb 4-1: config 0 descriptor?? [ 87.032870][ T4653] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.056113][ T4244] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 87.089522][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 87.109822][ T4244] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 87.133784][ T4316] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 87.173392][ T4316] usb 1-1: USB disconnect, device number 3 [ 87.267119][ T4708] loop1: detected capacity change from 0 to 64 [ 87.369779][ T4714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 87.394512][ T4714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 87.433045][ T4625] udevd[4625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.498908][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 87.498927][ T26] audit: type=1800 audit(87.456:2): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 87.548193][ T21] usb 4-1: USB disconnect, device number 3 [ 87.609794][ T21] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 87.644805][ T21] cyberjack 4-1:0.69: device disconnected [ 87.667694][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.816859][ T4721] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 87.849852][ T4721] netlink: 'syz.4.194': attribute type 9 has an invalid length. [ 87.932369][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 88.052052][ T1107] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.086278][ T1107] usb 3-1: config 0 has no interface number 0 [ 88.123187][ T1107] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.161904][ T1107] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.350428][ T4742] netlink: 'syz.4.204': attribute type 30 has an invalid length. [ 88.402434][ T1107] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.421798][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.444012][ T1107] usb 3-1: Product: syz [ 88.487409][ T1107] usb 3-1: Manufacturer: syz [ 88.502089][ T1107] usb 3-1: SerialNumber: syz [ 88.546840][ T1107] usb 3-1: config 0 descriptor?? [ 88.604981][ T1107] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.814122][ T4755] program syz.0.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.842201][ T1107] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 88.849337][ T1107] quatech2: probe of 3-1:0.51 failed with error -90 [ 88.921386][ T4757] netlink: 'syz.4.211': attribute type 8 has an invalid length. [ 89.026806][ T4759] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 89.049890][ T4728] loop1: detected capacity change from 0 to 40427 [ 89.064679][ T4237] usb 3-1: USB disconnect, device number 2 [ 89.097497][ T4728] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 89.126400][ T4728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.197376][ T4728] F2FS-fs (loop1): invalid crc value [ 89.264568][ T4728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.344797][ T4770] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 89.436980][ T4728] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.453147][ T4728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.486205][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.511221][ T4776] loop0: detected capacity change from 0 to 2048 [ 89.564280][ T4776] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.694590][ T4784] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.309043][ T4808] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 90.342163][ T4808] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 90.350691][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 90.436365][ T4810] netlink: 84 bytes leftover after parsing attributes in process `syz.2.236'. [ 90.482082][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 90.536539][ T4806] loop0: detected capacity change from 0 to 8192 [ 90.641357][ T4806] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.650875][ T4806] REISERFS (device loop0): using ordered data mode [ 90.659201][ T4806] reiserfs: using flush barriers [ 90.669433][ T4806] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.717216][ T4806] REISERFS (device loop0): checking transaction log (loop0) [ 90.733736][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 90.760463][ T4786] loop3: detected capacity change from 0 to 32768 [ 90.801821][ T4786] (syz.3.225,4786,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.830571][ T4806] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [1 2 0x0 SD], item_len 30764, item_location 3847, free_space(entry_count) 0 [ 90.840843][ T4786] (syz.3.225,4786,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.875531][ T4806] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 90.924245][ T4806] REISERFS (device loop0): Remounting filesystem read-only [ 90.985183][ T4806] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 91.031054][ T4786] JBD2: Ignoring recovery information on journal [ 91.051937][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.233695][ T4833] netlink: 168 bytes leftover after parsing attributes in process `syz.2.246'. [ 91.292540][ T4786] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.354282][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.419675][ T4837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.454980][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.473070][ T4837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.482368][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.498414][ T1107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.548556][ T4786] ocfs2: Unmounting device (7,3) on (node local) [ 91.569709][ T1107] usb 2-1: config 1 interface 1 has no altsetting 1 [ 91.789907][ T1107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.832046][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.860619][ T1107] usb 2-1: Product: syz [ 91.882303][ T1107] usb 2-1: Manufacturer: syz [ 91.887737][ T1107] usb 2-1: SerialNumber: syz [ 91.978806][ T1107] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 91.995782][ T1107] cdc_ncm 2-1:1.0: bind() failure [ 92.030632][ T1107] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 92.038141][ T1107] cdc_ncm 2-1:1.1: bind() failure [ 92.105061][ T4830] loop0: detected capacity change from 0 to 32768 [ 92.153381][ T4857] loop4: detected capacity change from 0 to 1764 [ 92.218788][ T1107] usb 2-1: USB disconnect, device number 3 [ 92.240737][ T4830] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.300550][ T4830] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.458746][ T4830] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 92.662827][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 92.721366][ T4877] loop2: detected capacity change from 0 to 64 [ 92.730569][ T4830] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 92.808139][ T4881] loop3: detected capacity change from 0 to 16 [ 92.903166][ T4881] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.933674][ T4830] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 92.953001][ T4830] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 92.953001][ T4830] inode = 12 2341 [ 92.953001][ T4830] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 92.989655][ T4830] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 92.999936][ T4830] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 93.020193][ T4830] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 93.031488][ T4830] gfs2: fsid=syz:syz.s: File system withdrawn [ 93.074603][ T4830] CPU: 0 PID: 4830 Comm: syz.0.244 Not tainted syzkaller #0 [ 93.082054][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.092250][ T4830] Call Trace: [ 93.095570][ T4830] [ 93.098714][ T4830] dump_stack_lvl+0x188/0x250 [ 93.103435][ T4830] ? kobject_uevent_env+0x371/0x890 [ 93.108698][ T4830] ? show_regs_print_info+0x20/0x20 [ 93.113939][ T4830] ? load_image+0x400/0x400 [ 93.118486][ T4830] ? kobject_uevent_env+0x371/0x890 [ 93.123734][ T4830] ? preempt_schedule_thunk+0x16/0x18 [ 93.129163][ T4830] gfs2_withdraw+0x1149/0x1490 [ 93.133987][ T4830] ? gfs2_lm+0x240/0x240 [ 93.138268][ T4830] ? load_image+0x400/0x400 [ 93.142822][ T4830] ? gfs2_consist_inode_i+0xc0/0xe0 [ 93.148062][ T4830] gfs2_dirent_scan+0x525/0x650 [ 93.152954][ T4830] ? gfs2_dirent_search+0x7f0/0x7f0 [ 93.158222][ T4830] gfs2_dirent_search+0x2e9/0x7f0 [ 93.163290][ T4830] ? gfs2_dirent_search+0x7f0/0x7f0 [ 93.168523][ T4830] ? gfs2_permission+0x40a/0x4e0 [ 93.173503][ T4830] ? gfs2_dir_search+0x220/0x220 [ 93.178476][ T4830] ? gfs2_lookupi+0x600/0x600 [ 93.183191][ T4830] ? gfs2_glock_nq+0xcb0/0x1550 [ 93.188086][ T4830] gfs2_dir_search+0x49/0x220 [ 93.192811][ T4830] gfs2_lookupi+0x46c/0x600 [ 93.197384][ T4830] ? gfs2_lookup_simple+0x100/0x100 [ 93.202628][ T4830] ? gfs2_lookupi+0x40e/0x600 [ 93.207370][ T4830] ? __d_lookup_rcu+0x68a/0x760 [ 93.212274][ T4830] ? __lock_acquire+0x7d10/0x7d10 [ 93.217355][ T4830] __gfs2_lookup+0xa9/0x290 [ 93.221917][ T4830] ? gfs2_atomic_open+0x210/0x210 [ 93.227006][ T4830] ? d_alloc_parallel+0x1222/0x1330 [ 93.232263][ T4830] gfs2_atomic_open+0x8e/0x210 [ 93.237073][ T4830] ? gfs2_rename2+0x1ef0/0x1ef0 [ 93.242148][ T4830] path_openat+0xe8c/0x2fa0 [ 93.246723][ T4830] ? slab_post_alloc_hook+0x4c/0x380 [ 93.252249][ T4830] ? do_filp_open+0x410/0x410 [ 93.257290][ T4830] do_filp_open+0x1e2/0x410 [ 93.262282][ T4830] ? vfs_tmpfile+0x300/0x300 [ 93.266942][ T4830] ? _raw_spin_unlock+0x24/0x40 [ 93.271843][ T4830] ? alloc_fd+0x598/0x630 [ 93.276234][ T4830] do_sys_openat2+0x150/0x4b0 [ 93.280991][ T4830] ? __lock_acquire+0x7d10/0x7d10 [ 93.286072][ T4830] ? do_sys_open+0xe0/0xe0 [ 93.290531][ T4830] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 93.296676][ T4830] ? lock_chain_count+0x20/0x20 [ 93.301572][ T4830] ? vtime_user_exit+0x2c8/0x3e0 [ 93.306567][ T4830] __x64_sys_openat+0x135/0x160 [ 93.311471][ T4830] do_syscall_64+0x4c/0xa0 [ 93.315934][ T4830] ? clear_bhb_loop+0x30/0x80 [ 93.320755][ T4830] ? clear_bhb_loop+0x30/0x80 [ 93.325477][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.331430][ T4830] RIP: 0033:0x7f14775e5629 [ 93.335885][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.351485][ T4885] loop4: detected capacity change from 0 to 8192 [ 93.355659][ T4830] RSP: 002b:00007f147583f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.355713][ T4830] RAX: ffffffffffffffda RBX: 00007f147785efa0 RCX: 00007f14775e5629 [ 93.378502][ T4830] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 93.386516][ T4830] RBP: 00007f147767bb39 R08: 0000000000000000 R09: 0000000000000000 [ 93.394663][ T4830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.402677][ T4830] R13: 00007f147785f038 R14: 00007f147785efa0 R15: 00007ffdc8bb5bc8 [ 93.410708][ T4830] [ 93.978932][ T4896] netlink: 100 bytes leftover after parsing attributes in process `syz.2.276'. [ 93.981196][ T4885] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 94.003433][ T4885] REISERFS (device loop4): using ordered data mode [ 94.010001][ T4885] reiserfs: using flush barriers [ 94.107837][ T4885] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.222383][ T4885] REISERFS (device loop4): checking transaction log (loop4) [ 94.265493][ T4885] REISERFS (device loop4): Using r5 hash to sort names [ 94.525849][ T4911] ubi0: attaching mtd0 [ 94.550071][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.565025][ T4911] ubi0: scanning is finished [ 94.569869][ T4911] ubi0: empty MTD device detected [ 94.586248][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.607435][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.620905][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.645222][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.691960][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.715136][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.720980][ T4911] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.730683][ T4911] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 94.751011][ T4911] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.759709][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.769556][ T4911] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 94.784047][ T4911] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.785728][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.793705][ T4911] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 94.812718][ T4911] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1494460581 [ 94.828235][ T4911] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.829695][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.846465][ T4917] ubi0: background thread "ubi_bgt0d" started, PID 4917 [ 94.876533][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.896804][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.917067][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.937330][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.945008][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.967456][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.987336][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.008443][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.036575][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.056844][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.072900][ T4898] loop1: detected capacity change from 0 to 32768 [ 95.079513][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.087056][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.095388][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.103165][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.110688][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.118499][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.126223][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.134001][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.141623][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.151395][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.160191][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.179131][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.191440][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.202431][ T4929] capability: warning: `syz.2.292' uses deprecated v2 capabilities in a way that may be insecure [ 95.227550][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.238985][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.252234][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.254748][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.273630][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.281368][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.294598][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.305066][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.316155][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.326060][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.337093][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.347129][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.358389][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.369331][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.380362][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.390362][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.398528][ T4935] loop2: detected capacity change from 0 to 64 [ 95.407685][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.415306][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.422908][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.430348][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.438021][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.445487][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.453036][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.460555][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.468748][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.476543][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.484054][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.491494][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.499097][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.506729][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.514505][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.522253][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 95.531985][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.539758][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.547572][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.564331][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.573151][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.580594][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.588356][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.596063][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.604083][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.611724][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.619461][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.627024][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.634601][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.642157][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.642988][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.649593][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.649622][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.649647][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.678499][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.695397][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.700246][ T21] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.710162][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.724170][ T4237] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.736144][ T4237] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 95.870637][ T4943] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 95.893525][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.913048][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.935067][ T21] usb 5-1: Product: syz [ 95.961895][ T21] usb 5-1: Manufacturer: syz [ 95.966651][ T21] usb 5-1: SerialNumber: syz [ 96.023295][ T21] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 96.033970][ T21] cdc_ncm 5-1:1.0: bind() failure [ 96.047693][ T4949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'. [ 96.098256][ T4949] netlink: 212 bytes leftover after parsing attributes in process `syz.2.302'. [ 96.257495][ T21] cdc_mbim 5-1:1.1: CDC Union missing and no IAD found [ 96.271918][ T21] cdc_mbim 5-1:1.1: bind() failure [ 96.311687][ T4960] xt_hashlimit: max too large, truncated to 1048576 [ 96.382587][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 96.527201][ T1325] usb 5-1: USB disconnect, device number 3 [ 96.577157][ T4954] fido_id[4954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.733278][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.836233][ T4980] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 97.139299][ T4994] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 97.182786][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.194141][ T4996] netlink: 'syz.4.325': attribute type 7 has an invalid length. [ 97.214610][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.222155][ T4996] netlink: 'syz.4.325': attribute type 8 has an invalid length. [ 97.353176][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.371905][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 97.403164][ T5008] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 97.432107][ T21] usb 4-1: SerialNumber: syz [ 97.473573][ T5011] loop1: detected capacity change from 0 to 1024 [ 97.480060][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 97.480536][ T5014] capability: warning: `syz.0.333' uses 32-bit capabilities (legacy support in use) [ 97.528103][ T5012] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 97.539028][ T5012] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 97.551046][ T5012] device bridge2 entered promiscuous mode [ 97.573693][ T5016] loop4: detected capacity change from 0 to 1024 [ 97.690593][ T5020] loop2: detected capacity change from 0 to 8 [ 97.775433][ T21] usb 4-1: 0:2 : does not exist [ 97.870767][ T21] usb 4-1: USB disconnect, device number 4 [ 97.992365][ T5030] xt_hashlimit: size too large, truncated to 1048576 [ 98.001317][ T5030] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 98.001531][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 98.052065][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 98.075388][ T5029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 98.122487][ T5032] loop1: detected capacity change from 0 to 2048 [ 98.216867][ T5032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.228556][ T4568] udevd[4568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.280264][ T5040] netlink: 'syz.0.346': attribute type 3 has an invalid length. [ 98.295030][ T5040] netlink: 232 bytes leftover after parsing attributes in process `syz.0.346'. [ 98.347537][ T5039] device geneve2 entered promiscuous mode [ 98.621308][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 98.926955][ T5076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 99.127486][ T5073] loop0: detected capacity change from 0 to 8192 [ 99.247998][ T5073] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 99.342714][ T5073] REISERFS (device loop0): using ordered data mode [ 99.354245][ T5073] reiserfs: using flush barriers [ 99.373462][ T5073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.404163][ T5104] netlink: 72 bytes leftover after parsing attributes in process `syz.2.378'. [ 99.442466][ T5073] REISERFS (device loop0): checking transaction log (loop0) [ 99.487541][ T5073] REISERFS (device loop0): Using tea hash to sort names [ 99.511775][ T5073] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 99.617052][ T5114] loop3: detected capacity change from 0 to 1024 [ 99.809553][ T155] hfsplus: b-tree write err: -5, ino 4 [ 99.991191][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 100.042581][ T5124] loop2: detected capacity change from 0 to 4096 [ 100.052735][ T5132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 100.127336][ T5132] IPv6: sit2: Disabled Multicast RS [ 100.161410][ T5124] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 100.237118][ T5124] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.334635][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 100.383257][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.441159][ T5124] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.462202][ T4237] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.491734][ T5124] ntfs: volume version 3.1. [ 100.509203][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 100.529059][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 100.550611][ T5124] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.620376][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 100.671201][ T5124] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 100.712123][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 100.833832][ T4237] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 100.850749][ T4237] usb 1-1: config 0 has no interface number 0 [ 101.022328][ T4237] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 101.036133][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.086094][ T4237] usb 1-1: Product: syz [ 101.099534][ T4237] usb 1-1: Manufacturer: syz [ 101.124940][ T4237] usb 1-1: SerialNumber: syz [ 101.152975][ T4237] usb 1-1: config 0 descriptor?? [ 101.204962][ T4237] gspca_main: spca500-2.14.0 probing 046d:0900 [ 101.408006][ T1325] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 101.432100][ T4237] gspca_spca500: reg write: error -71 [ 101.473987][ T4237] gspca_spca500: reg write: error -71 [ 101.502023][ T4237] gspca_spca500: reg write: error -71 [ 101.513358][ T4255] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.522365][ T4237] gspca_spca500: reg write: error -71 [ 101.542192][ T4237] gspca_spca500: reg write: error -71 [ 101.572043][ T4237] gspca_spca500: reg write: error -71 [ 101.596682][ T5165] loop2: detected capacity change from 0 to 32768 [ 101.603565][ T4237] gspca_spca500: reg write: error -71 [ 101.622074][ T4237] gspca_spca500: reg write: error -71 [ 101.662088][ T4237] gspca_spca500: reg write: error -71 [ 101.677256][ T5165] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.686780][ T4237] gspca_spca500: reg write: error -71 [ 101.717955][ T4237] gspca_spca500: reg write: error -71 [ 101.746813][ T4237] gspca_spca500: reg write: error -71 [ 101.772069][ T4237] gspca_spca500: reg write: error -71 [ 101.789886][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 101.793557][ T4237] gspca_spca500: reg write: error -71 [ 101.817538][ T4237] usb 1-1: USB disconnect, device number 4 [ 101.868660][ T1325] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.892452][ T1325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.902745][ T4255] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.928683][ T4255] usb 2-1: config 1 has no interface number 1 [ 102.002277][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.092101][ T4255] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.102299][ T1325] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.119778][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.129918][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.129948][ T4255] usb 2-1: Product: syz [ 102.129964][ T4255] usb 2-1: Manufacturer: syz [ 102.129980][ T4255] usb 2-1: SerialNumber: syz [ 102.171364][ T1325] usb 4-1: Product: syz [ 102.176085][ T1325] usb 4-1: Manufacturer: syz [ 102.176372][ T1325] usb 4-1: SerialNumber: syz [ 102.178390][ T1325] usb 4-1: config 0 descriptor?? [ 102.219524][ T1325] usb 4-1: selecting invalid altsetting 0 [ 102.347907][ T5188] loop0: detected capacity change from 0 to 64 [ 102.422094][ T21] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 102.430434][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.480969][ T21] usb 5-1: config 0 has no interface number 0 [ 102.494448][ T5160] usb 4-1: selecting invalid altsetting 0 [ 102.502860][ T21] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 102.513206][ T5160] usb 4-1: 0:0: usb_set_interface failed (-22) [ 102.520382][ T21] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.523576][ T4255] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 102.560191][ T1325] usb 4-1: USB disconnect, device number 5 [ 102.577470][ T4255] usb 2-1: 2:1 : sample bitwidth 8 in over sample bytes 0 [ 102.590979][ T5196] netlink: 'syz.0.417': attribute type 21 has an invalid length. [ 102.607164][ T4255] usb 2-1: 2:1 : unsupported sample bitwidth 8 in 0 bytes [ 102.697848][ T4255] usb 2-1: USB disconnect, device number 4 [ 102.722281][ T21] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 102.722315][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.722338][ T21] usb 5-1: Product: syz [ 102.722354][ T21] usb 5-1: Manufacturer: syz [ 102.722371][ T21] usb 5-1: SerialNumber: syz [ 102.725009][ T21] usb 5-1: config 0 descriptor?? [ 102.819117][ T5200] device lo entered promiscuous mode [ 102.831291][ T5200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.860446][ T5200] syz.0.420 (5200) used greatest stack depth: 21136 bytes left [ 103.002943][ T4710] udevd[4710]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 103.170444][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 103.194986][ T21] usb 5-1: USB disconnect, device number 4 [ 103.310892][ T5222] loop2: detected capacity change from 0 to 64 [ 103.413582][ T5226] loop0: detected capacity change from 0 to 1024 [ 103.538739][ T5232] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 103.562073][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.593523][ T5232] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.433'. [ 103.603340][ T5232] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 103.619887][ T5226] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 623: comm syz.0.431: Attempting to read directory block (623) that is past i_size (638464) [ 103.878089][ T5224] loop1: detected capacity change from 0 to 32768 [ 103.887527][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.922484][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.960029][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.978904][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.083421][ T5224] XFS (loop1): Mounting V5 Filesystem [ 104.194573][ T5257] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 104.300624][ T5228] loop3: detected capacity change from 0 to 32768 [ 104.423422][ T5224] XFS (loop1): Ending clean mount [ 104.450857][ T5228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.432 (5228) [ 104.639376][ T5228] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 104.686687][ T4185] XFS (loop1): Unmounting Filesystem [ 104.700730][ T5228] BTRFS info (device loop3): using free space tree [ 104.724050][ T5228] BTRFS info (device loop3): has skinny extents [ 105.259242][ T5228] BTRFS info (device loop3): enabling ssd optimizations [ 105.451797][ T5313] loop4: detected capacity change from 0 to 2048 [ 105.476402][ T5320] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 105.608082][ T5313] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.650113][ T5313] NILFS (loop4): mounting unchecked fs [ 105.706409][ T4710] udevd[4710]: incorrect nilfs2 checksum on /dev/loop4 [ 105.728976][ T5313] NILFS (loop4): recovery complete [ 105.757089][ T5330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.104668][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 106.326191][ T5355] loop2: detected capacity change from 0 to 1024 [ 106.356904][ T5316] loop0: detected capacity change from 0 to 32768 [ 106.451980][ T1107] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.498221][ T5316] XFS (loop0): Mounting V5 Filesystem [ 106.648545][ T5316] XFS (loop0): Ending clean mount [ 106.777922][ T4184] XFS (loop0): Unmounting Filesystem [ 106.866697][ T1107] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.891773][ T1107] usb 2-1: config 0 has no interface number 0 [ 106.905632][ T1107] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 107.072429][ T1107] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 107.081643][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 107.153975][ T1107] usb 2-1: Product: syz [ 107.186373][ T1107] usb 2-1: SerialNumber: syz [ 107.251332][ T1107] usb 2-1: config 0 descriptor?? [ 107.257308][ T5387] loop3: detected capacity change from 0 to 512 [ 107.328425][ T1107] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 107.345308][ T1107] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 107.490353][ T5387] EXT4-fs (loop3): Ignoring removed bh option [ 107.506767][ T5387] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 107.506767][ T5387] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 107.506767][ T5387] [ 107.594378][ T5387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.759472][ T5397] loop0: detected capacity change from 0 to 1024 [ 107.781217][ T5357] usb 2-1: USB disconnect, device number 5 [ 107.792137][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 107.799576][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 107.822832][ T5357] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 108.071004][ T5370] syz.4.478 (5370): drop_caches: 3 [ 108.096926][ T5387] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.123194][ T5397] hfsplus: invalid xattr key length: 0 [ 108.167628][ T5387] EXT4-fs (loop3): 1 truncate cleaned up [ 108.206842][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006c,nouser_xattr,nodelalloc,quota,,errors=continue. Quota mode: writeback. [ 108.343443][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.499'. [ 108.488576][ T5426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.551481][ T5431] overlayfs: workdir and upperdir must be separate subtrees [ 108.618318][ T5439] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 108.626508][ T5439] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 108.652203][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.709837][ T5443] loop2: detected capacity change from 0 to 1024 [ 108.751050][ T5447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.840494][ T5443] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.849636][ T5443] hfsplus: request for non-existent node 33423360 in B*Tree [ 109.023672][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.071600][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.078893][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.517'. [ 109.166697][ T5462] loop3: detected capacity change from 0 to 1024 [ 109.189742][ T26] audit: type=1326 audit(109.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.4.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dfaa0c629 code=0x0 [ 109.272257][ T13] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 109.291967][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.328693][ T13] usb 2-1: Product: syz [ 109.345798][ T13] usb 2-1: Manufacturer: syz [ 109.350479][ T13] usb 2-1: SerialNumber: syz [ 109.389706][ T13] usb 2-1: config 0 descriptor?? [ 109.436813][ T144] hfsplus: b-tree write err: -5, ino 4 [ 109.465390][ T13] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 109.517259][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.572594][ T13] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 109.600431][ T13] usb 2-1: media controller created [ 109.680672][ T5489] loop4: detected capacity change from 0 to 1024 [ 109.733509][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.907198][ T5489] hfsplus: invalid xattr key length: 0 [ 109.992110][ T13] DVB: Unable to find symbol tda10046_attach() [ 109.998342][ T13] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 110.028552][ T13] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 110.068720][ T13] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 110.122116][ T13] usb 2-1: USB disconnect, device number 6 [ 110.134609][ T5512] device vti0 entered promiscuous mode [ 110.215874][ T5514] tmpfs: Bad value for 'mpol' [ 110.262064][ T5358] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.642087][ T5358] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 110.665272][ T5358] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 110.695179][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.784236][ T5358] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 110.973239][ T5564] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 111.427026][ T5594] comedi comedi3: pcl724: I/O port conflict (0x2008001,4) [ 111.912131][ T5358] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 111.967858][ T150] block nbd2: Attempted send on invalid socket [ 111.977191][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 111.991550][ T5631] XFS (nbd2): SB validate failed with error -5. [ 112.122184][ T5358] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 112.130414][ T5358] stv0680 4-1:4.0: last error: 70, command = 0x88 [ 112.189483][ T5358] usb 4-1: USB disconnect, device number 6 [ 112.269246][ T5652] netlink: 'syz.1.602': attribute type 5 has an invalid length. [ 112.479134][ T5666] netlink: 292 bytes leftover after parsing attributes in process `syz.4.608'. [ 112.594383][ T26] audit: type=1326 audit(112.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b60aa629 code=0x7ffc0000 [ 112.685082][ T26] audit: type=1326 audit(112.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86b60aa629 code=0x7ffc0000 [ 112.752654][ T26] audit: type=1326 audit(112.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86b60aa629 code=0x7ffc0000 [ 112.931551][ T5694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.624'. [ 113.229799][ T5720] loop4: detected capacity change from 0 to 128 [ 113.258463][ T5723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.292579][ T5720] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 113.331634][ T5717] loop3: detected capacity change from 0 to 4096 [ 113.369729][ T5717] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 113.379905][ T5720] process 'syz.4.636' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 113.434943][ T5725] loop0: detected capacity change from 0 to 4096 [ 113.519087][ T5731] loop1: detected capacity change from 0 to 64 [ 113.521912][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.584252][ T5725] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 113.814762][ T5745] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 113.992625][ T5755] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 114.122179][ T5755] CIFS mount error: No usable UNC path provided in device string! [ 114.122179][ T5755] [ 114.155294][ T5755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 114.408085][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 114.538254][ T5793] loop3: detected capacity change from 0 to 1764 [ 114.555933][ T5799] loop1: detected capacity change from 0 to 512 [ 114.609552][ T5799] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.656116][ T5793] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 114.718529][ T5799] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 115.087600][ T5826] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.120058][ T5828] nftables ruleset with unbound chain [ 115.220069][ T5785] loop4: detected capacity change from 0 to 32768 [ 115.229290][ T5830] dlm: non-version read from control device 4096 [ 115.286819][ T5836] bond0: Error: Cannot enslave bond to itself. [ 115.298019][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.667 (5785) [ 115.360149][ T5839] device netdevsim0 entered promiscuous mode [ 115.377460][ T5785] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 115.414508][ T5785] BTRFS info (device loop4): using free space tree [ 115.451885][ T5785] BTRFS info (device loop4): has skinny extents [ 115.472342][ T5844] tmpfs: Bad value for 'mpol' [ 115.776247][ T5871] loop1: detected capacity change from 0 to 128 [ 115.836252][ T5785] BTRFS info (device loop4): enabling ssd optimizations [ 115.929713][ T5874] loop3: detected capacity change from 0 to 4096 [ 116.029717][ T5874] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 116.329158][ T5874] ntfs3: loop3: failed to convert "c46c" to cp1250 [ 116.772266][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.887056][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 116.956638][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 117.072769][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 117.137554][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 117.155529][ T5909] loop0: detected capacity change from 0 to 4096 [ 117.202669][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 117.289670][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 117.341006][ T5909] ntfs: volume version 3.1. [ 117.415819][ T5909] ntfs: (device loop0): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 118.020657][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 118.198726][ T5965] loop0: detected capacity change from 0 to 2048 [ 118.390763][ T5965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.437541][ T5983] loop1: detected capacity change from 0 to 2048 [ 118.507088][ T5983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.613577][ T5991] loop3: detected capacity change from 0 to 256 [ 118.682135][ T5991] FAT-fs (loop3): Directory bread(block 64) failed [ 118.690251][ T5991] FAT-fs (loop3): Directory bread(block 65) failed [ 118.708574][ T5999] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.733582][ T5991] FAT-fs (loop3): Directory bread(block 66) failed [ 118.774865][ T5991] FAT-fs (loop3): Directory bread(block 67) failed [ 118.812550][ T5991] FAT-fs (loop3): Directory bread(block 68) failed [ 118.850683][ T5991] FAT-fs (loop3): Directory bread(block 69) failed [ 118.877322][ T5991] FAT-fs (loop3): Directory bread(block 70) failed [ 118.932410][ T5991] FAT-fs (loop3): Directory bread(block 71) failed [ 118.953345][ T5991] FAT-fs (loop3): Directory bread(block 72) failed [ 118.966926][ T6009] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.980602][ T5991] FAT-fs (loop3): Directory bread(block 73) failed [ 119.026432][ T6009] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 119.097024][ T6017] user_cmd nlpid 336 [ 119.332098][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.572043][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 119.605040][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 119.619594][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.788'. [ 119.692258][ T5894] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 119.710606][ T5894] usb 3-1: config 0 has no interface number 0 [ 119.721991][ T5894] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.770895][ T5894] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.774235][ T6060] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.932265][ T5894] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 119.951738][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 120.020102][ T5894] usb 3-1: Product: syz [ 120.032005][ T5894] usb 3-1: SerialNumber: syz [ 120.078006][ T5894] usb 3-1: config 0 descriptor?? [ 120.143885][ T5894] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 120.163911][ T5894] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 120.200639][ T6071] loop4: detected capacity change from 0 to 4096 [ 120.245952][ T6071] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.439245][ T6071] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 120.442183][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 120.549802][ T6071] ntfs: volume version 3.1. [ 120.599366][ T6071] ntfs: (device loop4): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 120.638989][ T6071] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 120.663287][ T4244] usb 3-1: USB disconnect, device number 3 [ 120.680974][ T4244] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 120.689951][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.701809][ T6071] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 120.871975][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.951957][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 121.075403][ T5894] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 121.132491][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 121.196819][ T4261] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.252185][ T5894] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 121.262404][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.270530][ T5894] usb 1-1: Product: syz [ 121.295778][ T5894] usb 1-1: Manufacturer: syz [ 121.300502][ T5894] usb 1-1: SerialNumber: syz [ 121.354400][ T5894] pwc: Askey VC010 type 1 USB webcam detected. [ 121.407993][ T6124] loop2: detected capacity change from 0 to 4096 [ 121.414969][ T5895] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 121.425362][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.444019][ T5895] usb 4-1: Product: syz [ 121.448817][ T5895] usb 4-1: Manufacturer: syz [ 121.453568][ T6124] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 121.471567][ T5895] usb 4-1: SerialNumber: syz [ 121.498728][ T5895] usb 4-1: config 0 descriptor?? [ 121.522156][ T6128] loop4: detected capacity change from 0 to 4096 [ 121.544458][ T6128] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 121.545557][ T5895] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 121.587243][ T6124] ntfs3: loop2: failed to convert "c46c" to cp1250 [ 121.599683][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 121.613695][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.623421][ T5894] pwc: send_video_command error -71 [ 121.628696][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 121.642343][ T4261] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 121.647638][ T5894] Philips webcam: probe of 1-1:76.0 failed with error -71 [ 121.654266][ T4261] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 121.672407][ T5894] usb 1-1: USB disconnect, device number 5 [ 121.682353][ T5895] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 121.709517][ T5895] usb 4-1: media controller created [ 121.746927][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.750201][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.764825][ T6128] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 121.800534][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 121.846819][ T5895] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 121.862288][ T6128] ntfs3: loop4: failed to convert "c46c" to cp863 [ 121.886401][ T4261] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 121.903378][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 121.939714][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 121.955382][ T5895] dvb-usb: schedule remote query interval to 50 msecs. [ 121.969300][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 121.977702][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 121.979769][ T5895] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 122.036525][ T5895] usb 4-1: USB disconnect, device number 7 [ 122.153407][ T5895] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 122.153547][ T6136] loop4: detected capacity change from 0 to 8 [ 122.248988][ T4715] udevd[4715]: incorrect cramfs checksum on /dev/loop4 [ 122.266199][ T6136] cramfs: Error -3 while decompressing! [ 122.278478][ T6139] device netdevsim0 entered promiscuous mode [ 122.298543][ T6139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.319429][ T6136] cramfs: ffffffff964010a8(26)->ffff888072f5c000(4096) [ 122.329995][ T6136] cramfs: Error -3 while decompressing! [ 122.335914][ T6136] cramfs: ffffffff964010c2(26)->ffff888070167000(4096) [ 122.344805][ T6136] cramfs: Error -3 while decompressing! [ 122.350722][ T6136] cramfs: ffffffff964010dc(16)->ffff88806f929000(4096) [ 122.358198][ T6136] cramfs: Error -3 while decompressing! [ 122.367141][ T6136] cramfs: ffffffff964010a8(26)->ffff888072f5c000(4096) [ 122.401316][ T4715] udevd[4715]: incorrect cramfs checksum on /dev/loop4 [ 122.468336][ T6146] autofs4:pid:6146:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8192), cmd(0xc018937e) [ 122.517048][ T6146] autofs4:pid:6146:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 122.944977][ T6172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.844'. [ 123.062327][ T4261] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 123.196663][ T6184] device netdevsim0 entered promiscuous mode [ 123.243099][ T6184] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.272055][ T4261] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 123.280381][ T4261] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 123.349833][ T4261] usb 2-1: USB disconnect, device number 7 [ 123.656671][ T6203] loop4: detected capacity change from 0 to 1024 [ 123.745929][ T6203] hfsplus: invalid length 32517 has been corrected to 255 [ 123.759761][ T6210] loop3: detected capacity change from 0 to 1024 [ 123.783552][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 123.842308][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 124.182068][ T6234] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 124.276550][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.879'. [ 124.379462][ T1107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.420729][ T1107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.456772][ T21] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.599840][ T6267] loop4: detected capacity change from 0 to 64 [ 124.649971][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.894'. [ 124.716520][ T6273] loop2: detected capacity change from 0 to 1024 [ 124.747747][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 124.858715][ T154] hfsplus: b-tree write err: -5, ino 4 [ 124.910501][ T6283] loop0: detected capacity change from 0 to 512 [ 125.118736][ T6283] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 125.131235][ T6283] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 125.141584][ T6283] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.900: Failed to acquire dquot type 0 [ 125.163168][ T1107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.179154][ T6283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.900: bg 0: block 64: padding at end of block bitmap is not set [ 125.239405][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 125.268176][ T6283] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 125.297940][ T6283] EXT4-fs (loop0): 1 truncate cleaned up [ 125.327368][ T6283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.345769][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 125.511992][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.520030][ T21] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.904545][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 125.914176][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.933897][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 125.958999][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 126.008260][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.056348][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 126.087589][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.118570][ T1107] usb 5-1: config 0 descriptor?? [ 126.162242][ T6340] netlink: 68 bytes leftover after parsing attributes in process `syz.0.926'. [ 126.171167][ T6340] netlink: 68 bytes leftover after parsing attributes in process `syz.0.926'. [ 126.228765][ T6297] loop1: detected capacity change from 0 to 32768 [ 126.263168][ T6297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.905 (6297) [ 126.327223][ T6297] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 126.348409][ T6297] BTRFS info (device loop1): using free space tree [ 126.371930][ T6297] BTRFS info (device loop1): has skinny extents [ 126.399690][ T4261] usb 5-1: USB disconnect, device number 5 [ 126.596941][ T6297] BTRFS info (device loop1): enabling ssd optimizations [ 126.659107][ T6366] loop0: detected capacity change from 0 to 4096 [ 126.707249][ T6366] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 126.722132][ T6366] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 126.794429][ T6366] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 126.811011][ T6335] loop3: detected capacity change from 0 to 40427 [ 126.858548][ T6335] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.869112][ T6366] ntfs: volume version 3.1. [ 126.912249][ T6335] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.936504][ T6366] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 126.961732][ T6366] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 126.980530][ T6335] F2FS-fs (loop3): invalid crc value [ 127.053133][ T6366] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 127.089727][ T6335] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.116571][ T6366] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 127.138025][ T6342] loop2: detected capacity change from 0 to 32768 [ 127.191163][ T6366] ntfs: (device loop0): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 127.356622][ T6342] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 127.408439][ T6335] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.431502][ T6335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.507365][ T6390] loop1: detected capacity change from 0 to 64 [ 127.721800][ T6400] loop4: detected capacity change from 0 to 24 [ 127.749252][ T6390] hfs: unable to load iocharset "Sp—" [ 127.782180][ T6390] hfs: unable to parse mount options [ 127.797134][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 127.822966][ T6400] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 127.876001][ T6400] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 128.037100][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.172885][ T6410] loop2: detected capacity change from 0 to 512 [ 128.200550][ T6412] damon: min_nr_regions (0) must be at least 3 [ 128.326697][ T6410] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.379565][ T6410] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.945: bad orphan inode 131083 [ 128.415825][ T6410] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 128.472117][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.491358][ T6410] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.945: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 128.552162][ T5895] usb 1-1: config 12 has an invalid interface number: 243 but max is 0 [ 128.591964][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.592281][ T5895] usb 1-1: config 12 has no interface number 0 [ 128.645416][ T5895] usb 1-1: config 12 interface 243 has no altsetting 0 [ 128.813162][ T6435] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 128.822192][ T5895] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=de.58 [ 128.831479][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.853351][ T6435] netlink: 228 bytes leftover after parsing attributes in process `syz.3.941'. [ 128.870599][ T5895] usb 1-1: Product: syz [ 128.878620][ T5895] usb 1-1: Manufacturer: syz [ 128.910552][ T5895] usb 1-1: SerialNumber: syz [ 128.968194][ T6441] ipt_REJECT: TCP_RESET invalid for non-tcp [ 129.015086][ T6444] netlink: 68 bytes leftover after parsing attributes in process `syz.3.958'. [ 129.084157][ T6447] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 129.113200][ T6450] xt_cgroup: xt_cgroup: no path or classid specified [ 129.248175][ T5895] gspca_main: pac7311-2.14.0 probing 093a:260e [ 129.292019][ T5895] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 129.299967][ T5895] pac7311: probe of 1-1:12.243 failed with error -71 [ 129.354842][ T5895] usb 1-1: USB disconnect, device number 6 [ 129.403615][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 129.964135][ T6509] netlink: 'syz.0.990': attribute type 21 has an invalid length. [ 129.972018][ T6374] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.014007][ T6509] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.033201][ T6509] IPv6: Can't replace route, no match found [ 130.078401][ T6513] loop3: detected capacity change from 0 to 64 [ 130.132034][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.139554][ T6517] loop0: detected capacity change from 0 to 512 [ 130.166397][ T6513] Trying to free block not in datazone [ 130.182411][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.200409][ T6513] Trying to free block not in datazone [ 130.219153][ T6513] Trying to free block not in datazone [ 130.229956][ T6513] Trying to free block not in datazone [ 130.232096][ T6374] usb 5-1: Using ep0 maxpacket: 32 [ 130.240281][ T6513] minix_free_block (loop3:6): bit already cleared [ 130.248467][ T6513] Trying to free block not in datazone [ 130.254109][ T6513] Trying to free block not in datazone [ 130.296727][ T6517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.994: bg 0: block 473: padding at end of block bitmap is not set [ 130.331528][ T6517] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 130.358002][ T6517] EXT4-fs (loop0): 1 orphan inode deleted [ 130.364193][ T6517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.421690][ T6517] __quota_error: 1 callbacks suppressed [ 130.421719][ T6517] Quota error (device loop0): write_blk: dquota write failed [ 130.434148][ T6374] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.441359][ T6517] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 130.463572][ T6517] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.994: Failed to acquire dquot type 1 [ 130.522310][ T6521] loop3: detected capacity change from 0 to 4096 [ 130.553482][ T5895] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.556650][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 130.562957][ T5895] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 130.586782][ T5895] usb 3-1: config 220 has no interface number 2 [ 130.606665][ T5895] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 130.622979][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.628784][ T5895] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 130.654504][ T5895] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 130.667858][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.675499][ T5895] usb 3-1: config 220 interface 0 has no altsetting 0 [ 130.680812][ T6374] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 130.702010][ T5895] usb 3-1: config 220 interface 76 has no altsetting 0 [ 130.712271][ T5895] usb 3-1: config 220 interface 1 has no altsetting 0 [ 130.719898][ T6374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.728956][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 130.740253][ T6374] usb 5-1: Product: syz [ 130.744514][ T6374] usb 5-1: Manufacturer: syz [ 130.749389][ T6374] usb 5-1: SerialNumber: syz [ 130.767668][ T6374] usb 5-1: config 0 descriptor?? [ 130.843359][ T6374] usb 5-1: bad CDC descriptors [ 130.855047][ T6374] usb 5-1: unsupported MDLM descriptors [ 130.886789][ T5895] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.925547][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.942324][ T5895] usb 3-1: Product: syz [ 130.946809][ T1107] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 130.966281][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.972342][ T5895] usb 3-1: Manufacturer: syz [ 130.986873][ T5895] usb 3-1: SerialNumber: syz [ 130.995227][ T1107] usb 2-1: Product: syz [ 131.000216][ T1107] usb 2-1: Manufacturer: syz [ 131.009577][ T1107] usb 2-1: SerialNumber: syz [ 131.025341][ T1107] usb 2-1: config 0 descriptor?? [ 131.045194][ T4261] usb 5-1: USB disconnect, device number 6 [ 131.306009][ T1107] adutux 2-1:0.0: Could not retrieve serial number [ 131.322038][ T1107] adutux: probe of 2-1:0.0 failed with error -5 [ 131.376709][ T5895] usb 3-1: selecting invalid altsetting 0 [ 131.387555][ T5895] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 131.405237][ T5895] usb 3-1: No valid video chain found. [ 131.503361][ T5895] usb 3-1: selecting invalid altsetting 0 [ 131.517289][ T5895] usbtest: probe of 3-1:220.1 failed with error -22 [ 131.532533][ T5895] usb 3-1: USB disconnect, device number 4 [ 131.546945][ T5894] usb 2-1: USB disconnect, device number 8 [ 131.881538][ T6574] loop3: detected capacity change from 0 to 64 [ 132.073157][ T6587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.385048][ T6608] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47551 - 0 [ 132.420727][ T6608] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47551 - 0 [ 132.451989][ T6608] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47551 - 0 [ 132.480241][ T6608] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47551 - 0 [ 132.517566][ T6608] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 57273 - 0 [ 132.552243][ T6608] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 57273 - 0 [ 132.576455][ T6608] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 57273 - 0 [ 132.608729][ T6608] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 57273 - 0 [ 132.654828][ T6608] device geneve3 entered promiscuous mode [ 132.663292][ T6626] loop1: detected capacity change from 0 to 512 [ 132.806252][ T6626] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 132.811315][ T6638] loop0: detected capacity change from 0 to 512 [ 132.834456][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.841056][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.970921][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 133.018765][ T26] audit: type=1800 audit(132.976:7): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1047" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 133.217933][ T4261] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.511968][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 133.596155][ T6650] loop3: detected capacity change from 0 to 32768 [ 133.712103][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.729001][ T6670] loop1: detected capacity change from 0 to 512 [ 133.817091][ T6650] JBD2: Ignoring recovery information on journal [ 133.824090][ T4261] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 133.857966][ T6670] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 133.872486][ T6670] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 133.916383][ T6670] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1067: Failed to acquire dquot type 0 [ 133.935474][ T6650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.984881][ T6670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1067: bg 0: block 64: padding at end of block bitmap is not set [ 134.024679][ T4261] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 134.053372][ T6670] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 134.062730][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.095349][ T6670] EXT4-fs (loop1): 1 truncate cleaned up [ 134.101061][ T6670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.111794][ T4261] usb 5-1: Product: syz [ 134.112375][ T4261] usb 5-1: Manufacturer: syz [ 134.112393][ T4261] usb 5-1: SerialNumber: syz [ 134.181307][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 134.287359][ T6684] netlink: 'syz.3.1071': attribute type 3 has an invalid length. [ 134.306906][ T6686] loop2: detected capacity change from 0 to 256 [ 134.311010][ T6682] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.334850][ T6682] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.422021][ T4261] usb 5-1: Invalid number of CPorts: 0 [ 134.427572][ T4261] es2_ap_driver: probe of 5-1:7.0 failed with error -22 [ 134.655287][ T4261] usb 5-1: USB disconnect, device number 7 [ 134.702147][ T4244] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.732314][ T6698] loop1: detected capacity change from 0 to 2048 [ 134.818711][ T6698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.951912][ T4244] usb 4-1: Using ep0 maxpacket: 32 [ 135.072124][ T4244] usb 4-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 135.145276][ T6718] loop0: detected capacity change from 0 to 64 [ 135.249040][ T6725] __nla_validate_parse: 1 callbacks suppressed [ 135.249057][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 135.272501][ T4244] usb 4-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 135.283405][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 135.290991][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.325741][ T4244] usb 4-1: Product: syz [ 135.330247][ T4244] usb 4-1: Manufacturer: syz [ 135.336240][ T4244] usb 4-1: SerialNumber: syz [ 135.395594][ T4244] pwc: Askey VC010 type 1 USB webcam detected. [ 135.642167][ T4244] pwc: send_video_command error -71 [ 135.647971][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 135.671040][ T4244] Philips webcam: probe of 4-1:76.0 failed with error -71 [ 135.685426][ T6745] ip6t_srh: unknown srh invflags 7F00 [ 135.711069][ T4244] usb 4-1: USB disconnect, device number 8 [ 135.795128][ T6753] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 135.807904][ T6753] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1106'. [ 135.991599][ T6764] loop2: detected capacity change from 0 to 512 [ 135.993740][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 136.030418][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 136.091384][ T6764] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 136.213788][ T6764] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 136.273200][ T6764] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.1120: iget: bad i_size value: 12154757448730 [ 136.327994][ T6764] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1120: couldn't read orphan inode 13 (err -117) [ 136.360453][ T6764] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 136.432712][ T6761] loop4: detected capacity change from 0 to 32768 [ 136.525015][ T6761] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 136.682003][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.793568][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 136.903671][ T4261] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.948064][ T6813] loop2: detected capacity change from 0 to 64 [ 137.199429][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 137.208044][ T6828] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1143'. [ 137.242531][ T6828] unsupported nlmsg_type 40 [ 137.376805][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.469503][ T6845] Cannot find del_set index 4 as target [ 137.520607][ T6840] loop1: detected capacity change from 0 to 2048 [ 137.562174][ T4261] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 137.571291][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.596370][ T6847] siw: device registration error -23 [ 137.605284][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.622703][ T4261] usb 4-1: Product: syz [ 137.626941][ T4261] usb 4-1: Manufacturer: syz [ 137.631606][ T4261] usb 4-1: SerialNumber: syz [ 137.669677][ T6850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.724009][ T4261] usb 4-1: config 0 descriptor?? [ 137.749344][ T26] audit: type=1800 audit(137.706:8): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1147" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 137.817908][ T6840] NILFS (loop1): error -2 truncating bmap (ino=16) [ 137.855018][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 137.958196][ T6850] ------------[ cut here ]------------ [ 137.965032][ T6850] WARNING: CPU: 0 PID: 6850 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 137.974885][ T6850] Modules linked in: [ 137.978844][ T6850] CPU: 0 PID: 6850 Comm: segctord Not tainted syzkaller #0 [ 137.986319][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.996484][ T6850] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.002565][ T6850] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff [ 138.022398][ T6850] RSP: 0018:ffffc9000335f390 EFLAGS: 00010293 [ 138.028508][ T6850] RAX: ffffffff830ebd6c RBX: ffff88801ee471a0 RCX: ffff88805d36d940 [ 138.036598][ T6850] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 138.044891][ T6850] RBP: 0000000000000003 R08: ffff888021b5348f R09: 1ffff1100436a691 [ 138.052985][ T6850] R10: dffffc0000000000 R11: ffffed100436a692 R12: ffff88805d36f0c8 [ 138.061014][ T6850] R13: ffff888023eef9e0 R14: 00000000003f0002 R15: ffff88805ebcd330 [ 138.069093][ T6850] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 138.078354][ T6850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.085130][ T6850] CR2: 00007f1dfac56158 CR3: 0000000063093000 CR4: 00000000003506f0 [ 138.093280][ T6850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.101419][ T6850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.109756][ T6850] Call Trace: [ 138.113118][ T6850] [ 138.116426][ T6850] nilfs_dat_commit_update+0x24/0x40 [ 138.121758][ T6850] nilfs_btree_commit_update_v+0x93/0x410 [ 138.127674][ T6850] nilfs_btree_propagate+0x95a/0xcf0 [ 138.133050][ T6850] nilfs_bmap_propagate+0x70/0x120 [ 138.138298][ T6850] nilfs_segctor_apply_buffers+0x15d/0x320 [ 138.144300][ T6850] ? nilfs_collect_file_data+0xc0/0xc0 [ 138.150254][ T6850] nilfs_segctor_scan_file+0x7af/0x9d0 [ 138.155851][ T6850] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 138.163315][ T6850] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 138.169270][ T6850] ? rcu_is_watching+0x11/0xa0 [ 138.174366][ T6850] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 138.180372][ T6850] ? verify_lock_unused+0x140/0x140 [ 138.185705][ T6850] ? nilfs_transaction_unlock+0x220/0x220 [ 138.191599][ T6850] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.197878][ T6850] ? clear_nonspinnable+0x60/0x60 [ 138.203007][ T6850] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.204330][ T4261] usb 4-1: USB disconnect, device number 9 [ 138.208543][ T6850] ? __lock_acquire+0x7d10/0x7d10 [ 138.220226][ T6850] ? __rwlock_init+0x140/0x140 [ 138.225103][ T6850] ? do_raw_spin_unlock+0x11d/0x230 [ 138.230351][ T6850] ? _raw_spin_unlock+0x24/0x40 [ 138.235346][ T6850] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.240869][ T6850] nilfs_segctor_construct+0x17b/0x690 [ 138.246428][ T6850] nilfs_segctor_thread+0x523/0x1180 [ 138.252033][ T6850] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 138.258001][ T6850] ? nilfs_iput_work_func+0x70/0x70 [ 138.263919][ T6850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.269955][ T6850] ? _raw_spin_unlock+0x40/0x40 [ 138.274892][ T6850] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 138.280939][ T6850] ? init_wait_entry+0xd0/0xd0 [ 138.285830][ T6850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.292003][ T6850] ? __kthread_parkme+0x157/0x1b0 [ 138.297086][ T6850] kthread+0x436/0x520 [ 138.301201][ T6850] ? nilfs_iput_work_func+0x70/0x70 [ 138.306896][ T6850] ? kthread_blkcg+0xd0/0xd0 [ 138.311643][ T6850] ret_from_fork+0x1f/0x30 [ 138.316194][ T6850] [ 138.319306][ T6850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.326719][ T6850] CPU: 0 PID: 6850 Comm: segctord Not tainted syzkaller #0 [ 138.333956][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.344140][ T6850] Call Trace: [ 138.347454][ T6850] [ 138.350420][ T6850] dump_stack_lvl+0x188/0x250 [ 138.355153][ T6850] ? show_regs_print_info+0x20/0x20 [ 138.360495][ T6850] ? load_image+0x400/0x400 [ 138.365051][ T6850] panic+0x2e5/0x810 [ 138.369259][ T6850] ? bpf_jit_dump+0xd0/0xd0 [ 138.373830][ T6850] ? ret_from_fork+0x1f/0x30 [ 138.378593][ T6850] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.384018][ T6850] __warn+0x248/0x2b0 [ 138.388141][ T6850] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.393567][ T6850] report_bug+0x1b7/0x2e0 [ 138.397944][ T6850] handle_bug+0x3a/0x70 [ 138.402137][ T6850] exc_invalid_op+0x16/0x40 [ 138.406988][ T6850] asm_exc_invalid_op+0x16/0x20 [ 138.411897][ T6850] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.417944][ T6850] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff [ 138.438364][ T6850] RSP: 0018:ffffc9000335f390 EFLAGS: 00010293 [ 138.444504][ T6850] RAX: ffffffff830ebd6c RBX: ffff88801ee471a0 RCX: ffff88805d36d940 [ 138.452539][ T6850] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 138.460558][ T6850] RBP: 0000000000000003 R08: ffff888021b5348f R09: 1ffff1100436a691 [ 138.468690][ T6850] R10: dffffc0000000000 R11: ffffed100436a692 R12: ffff88805d36f0c8 [ 138.476712][ T6850] R13: ffff888023eef9e0 R14: 00000000003f0002 R15: ffff88805ebcd330 [ 138.484915][ T6850] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 138.490443][ T6850] nilfs_dat_commit_update+0x24/0x40 [ 138.495788][ T6850] nilfs_btree_commit_update_v+0x93/0x410 [ 138.501677][ T6850] nilfs_btree_propagate+0x95a/0xcf0 [ 138.507015][ T6850] nilfs_bmap_propagate+0x70/0x120 [ 138.512187][ T6850] nilfs_segctor_apply_buffers+0x15d/0x320 [ 138.518341][ T6850] ? nilfs_collect_file_data+0xc0/0xc0 [ 138.523977][ T6850] nilfs_segctor_scan_file+0x7af/0x9d0 [ 138.529498][ T6850] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 138.536772][ T6850] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 138.542729][ T6850] ? rcu_is_watching+0x11/0xa0 [ 138.547558][ T6850] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 138.553564][ T6850] ? verify_lock_unused+0x140/0x140 [ 138.558848][ T6850] ? nilfs_transaction_unlock+0x220/0x220 [ 138.564702][ T6850] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 138.570926][ T6850] ? clear_nonspinnable+0x60/0x60 [ 138.576441][ T6850] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.581961][ T6850] ? __lock_acquire+0x7d10/0x7d10 [ 138.587359][ T6850] ? __rwlock_init+0x140/0x140 [ 138.592617][ T6850] ? do_raw_spin_unlock+0x11d/0x230 [ 138.598042][ T6850] ? _raw_spin_unlock+0x24/0x40 [ 138.602956][ T6850] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 138.608488][ T6850] nilfs_segctor_construct+0x17b/0x690 [ 138.614022][ T6850] nilfs_segctor_thread+0x523/0x1180 [ 138.619452][ T6850] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 138.625407][ T6850] ? nilfs_iput_work_func+0x70/0x70 [ 138.631027][ T6850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.637556][ T6850] ? _raw_spin_unlock+0x40/0x40 [ 138.642450][ T6850] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 138.648396][ T6850] ? init_wait_entry+0xd0/0xd0 [ 138.653215][ T6850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.659256][ T6850] ? __kthread_parkme+0x157/0x1b0 [ 138.664336][ T6850] kthread+0x436/0x520 [ 138.668494][ T6850] ? nilfs_iput_work_func+0x70/0x70 [ 138.673975][ T6850] ? kthread_blkcg+0xd0/0xd0 [ 138.678802][ T6850] ret_from_fork+0x1f/0x30 [ 138.683371][ T6850] [ 138.686904][ T6850] Kernel Offset: disabled [ 138.691559][ T6850] Rebooting in 86400 seconds..