last executing test programs: 2.062643243s ago: executing program 3 (id=760): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', r1, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) 1.570849622s ago: executing program 3 (id=769): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.570512482s ago: executing program 0 (id=770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.570204122s ago: executing program 0 (id=772): r0 = fanotify_init(0x200, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fanotify_mark(r0, 0x102, 0x40001043, 0xffffffffffffffff, 0x0) 1.550652124s ago: executing program 3 (id=774): r0 = socket$nl_audit(0x10, 0x3, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$sock_buf(r0, 0x1, 0x3e, 0x0, &(0x7f0000000600)) 1.416046358s ago: executing program 3 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x44052) 1.415396958s ago: executing program 0 (id=778): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r0 = socket(0x28, 0x5, 0x0) setsockopt$MRT_DONE(r0, 0x28, 0x6, 0x20000000, 0x10) 1.330409166s ago: executing program 0 (id=780): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) 1.303758959s ago: executing program 3 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 1.214875138s ago: executing program 0 (id=784): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.214581108s ago: executing program 3 (id=785): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 991.00305ms ago: executing program 1 (id=791): r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x3, 0xa}) 990.708881ms ago: executing program 2 (id=792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffffff80, @rand_addr=' \x01\x00', 0x81}]}, &(0x7f00000002c0)=0x10) 980.360511ms ago: executing program 1 (id=794): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 943.378275ms ago: executing program 2 (id=795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 842.953745ms ago: executing program 2 (id=796): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x32, 0xffffffffffffffff, 0x837de000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000000)) 807.405989ms ago: executing program 1 (id=798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 801.69594ms ago: executing program 2 (id=799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0xc, 0x11, 0x1, @empty, @local, {[], {0x4e23, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}}}}}}}}, 0x0) 717.447368ms ago: executing program 1 (id=801): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 664.298353ms ago: executing program 2 (id=802): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 592.65981ms ago: executing program 4 (id=803): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.']) 525.103608ms ago: executing program 4 (id=804): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0xf}) fallocate(r0, 0x0, 0x0, 0x400001) 468.105753ms ago: executing program 1 (id=805): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 467.888583ms ago: executing program 4 (id=806): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'gretap0\x00', @random="0efc6c10d6c2"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 322.832868ms ago: executing program 4 (id=807): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) 263.439784ms ago: executing program 1 (id=808): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/139, 0x82}, {0x0, 0x1d}], 0x3) 146.590456ms ago: executing program 4 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x30b, 0x70bd2b, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x406}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) 42.899526ms ago: executing program 0 (id=810): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674"], 0xa0}}, 0x0) 8.142139ms ago: executing program 2 (id=811): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x3, 0x0, 0x0) 0s ago: executing program 4 (id=812): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) kernel console output (not intermixed with test programs): hsr_slave_0 entered promiscuous mode [ 67.648048][ T4183] device hsr_slave_1 entered promiscuous mode [ 67.655156][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.662780][ T4183] Cannot create hsr debugfs directory [ 67.853178][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.865272][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.875280][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.884757][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.936539][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.946877][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.956566][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.969473][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.058137][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.070525][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.082738][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.106613][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.141265][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.166562][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.185751][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.200172][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.209205][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.242650][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.253801][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.290942][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.298276][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.308113][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.317266][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.324610][ T3087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.333414][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.343345][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.351834][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.360025][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.369298][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.397903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.409372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.418186][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.425391][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.435138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.444352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.452969][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.460007][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.467858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.477763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.487251][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.494381][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.502766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.511694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.520275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.558804][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.568028][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.577549][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.588072][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.597027][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.605883][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.615681][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.624889][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.634446][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.643721][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.653458][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.662874][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.671179][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.679360][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.698952][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.709868][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.728582][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.740193][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.750615][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.759383][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.768967][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.777908][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.786552][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.795249][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.804664][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.815934][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.828778][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.841000][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.871081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.892769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.911599][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.939000][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.952870][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.972041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.980951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.993306][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.000370][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.033840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.054279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.072169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.082086][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.089156][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.098570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.113567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.158333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.167858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.176803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.186579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.195091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.203971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.212643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.220889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.234886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.262395][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.269912][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.279494][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.295021][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.303230][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.313685][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.326003][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.355852][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.365516][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.380863][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.406118][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.428303][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.443050][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.482217][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.501972][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.526177][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.538517][ T4192] device veth0_vlan entered promiscuous mode [ 69.549082][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.561817][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.569830][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.578570][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 69.578695][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 69.590914][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 69.590980][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 69.592119][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.611137][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 69.612629][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.624209][ T3087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.632254][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.640989][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.649890][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.656979][ T3087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.666108][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.689891][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.701307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.709526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.719919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.729713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.737988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.752357][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.768095][ T4192] device veth1_vlan entered promiscuous mode [ 69.785305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.793529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.803756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.812873][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.819901][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.829736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.838966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.848124][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.855243][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.863345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.895184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.903553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.912807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.923044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.932267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.940667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.977103][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.985959][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.997212][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.006228][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.016599][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.025774][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.034624][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.046311][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.057568][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.066517][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.088372][ T4185] device veth0_vlan entered promiscuous mode [ 70.106893][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.115850][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.126125][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.134973][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.145625][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.154613][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.163943][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.172520][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.180808][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.189523][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.198852][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.207681][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.219564][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.235720][ T4192] device veth0_macvtap entered promiscuous mode [ 70.247864][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.257342][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.266657][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.276069][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.285235][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.300318][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.312216][ T4192] device veth1_macvtap entered promiscuous mode [ 70.324841][ T4184] device veth0_vlan entered promiscuous mode [ 70.341162][ T4185] device veth1_vlan entered promiscuous mode [ 70.350365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.362236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.370367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.379664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.393743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.402985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.423384][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.447936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.463368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.484867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.503224][ T4184] device veth1_vlan entered promiscuous mode [ 70.524546][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.559509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.569281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.577824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.588385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.597593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.606612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.618168][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.629689][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.638722][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.647723][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.661736][ T4185] device veth0_macvtap entered promiscuous mode [ 70.700094][ T4184] device veth0_macvtap entered promiscuous mode [ 70.721201][ T4185] device veth1_macvtap entered promiscuous mode [ 70.734625][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.749049][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.760925][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.772841][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.783710][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.791192][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.802291][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.816044][ T4184] device veth1_macvtap entered promiscuous mode [ 70.832535][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.840746][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.875411][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.885681][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.914802][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.926153][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.938369][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.948018][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.958811][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.969112][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.980027][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.992993][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.013854][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.023569][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.032882][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.043812][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.053071][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.060484][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.068093][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.076729][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.085626][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.102123][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.113217][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.124476][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.135999][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.146720][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.159150][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.169556][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.180747][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.192479][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.209138][ T4183] device veth0_vlan entered promiscuous mode [ 71.222888][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.231713][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.240436][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.249296][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.263483][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.274388][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284228][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293144][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.302091][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321037][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.330005][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.340337][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.349513][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.369244][ T4183] device veth1_vlan entered promiscuous mode [ 71.382219][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.390458][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.419467][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.495130][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.501093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.511730][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.517336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.528187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.599906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.618642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.630219][ T4183] device veth0_macvtap entered promiscuous mode [ 71.642926][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.651059][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.659613][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 71.659778][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 71.671565][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 71.672198][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 71.680643][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.684261][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 71.708384][ T4183] device veth1_macvtap entered promiscuous mode [ 71.709422][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.727756][ T4195] device veth0_vlan entered promiscuous mode [ 71.734876][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.753370][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.758688][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.762991][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.787237][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.803341][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.811115][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.824788][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.846777][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.864679][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.876086][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.886942][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.900450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.916503][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.932249][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.960168][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.969065][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.997355][ T4195] device veth1_vlan entered promiscuous mode [ 72.005612][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.021504][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.032244][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.050051][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.062934][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.073634][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.083627][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.094269][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.108029][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.153796][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.172768][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.180926][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.196290][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.214268][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.230039][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239587][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.256118][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.305018][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.314283][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.326673][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.336108][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.354368][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.367274][ T4195] device veth0_macvtap entered promiscuous mode [ 72.444780][ T4195] device veth1_macvtap entered promiscuous mode [ 72.563734][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.569380][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.601424][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.610377][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.618941][ T4302] loop3: detected capacity change from 0 to 32768 [ 72.627112][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.637649][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.679809][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.703937][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.741372][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.761574][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.795603][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.811185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.839983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.868629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.878370][ T4311] capability: warning: `syz.4.11' uses deprecated v2 capabilities in a way that may be insecure [ 72.890473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.900437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.944193][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.978610][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.989998][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.000902][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.011169][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.041995][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.059021][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.072569][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.087645][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.103627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.118915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.146092][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.181432][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.190152][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.192557][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.222187][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.249545][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.286276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.319857][ T4309] loop0: detected capacity change from 0 to 32768 [ 73.474849][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.474898][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.476996][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.555822][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555878][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.557194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.731964][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 73.732041][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 73.732091][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 73.732141][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 73.742193][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 73.825221][ T4333] loop1: detected capacity change from 0 to 512 [ 73.900935][ T4333] EXT4-fs (loop1): Ignoring removed nobh option [ 73.900977][ T4333] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.957908][ T4335] loop2: detected capacity change from 0 to 4096 [ 74.055384][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.2: corrupted inode contents [ 74.121201][ T4335] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.153544][ T4333] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #3: comm syz.1.2: mark_inode_dirty error [ 74.184465][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.2: corrupted inode contents [ 74.232518][ T4333] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.2: mark_inode_dirty error [ 74.285168][ T4335] ntfs3: loop2: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 74.299935][ T4333] Quota error (device loop1): write_blk: dquota write failed [ 74.318226][ T4333] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 74.369909][ T4333] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.2: Failed to acquire dquot type 0 [ 74.437927][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.2: corrupted inode contents [ 74.490542][ T4333] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #16: comm syz.1.2: mark_inode_dirty error [ 74.519700][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.2: corrupted inode contents [ 74.571550][ T4333] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.2: mark_inode_dirty error [ 74.610682][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.2: corrupted inode contents [ 74.666950][ T4333] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 74.689758][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.2: corrupted inode contents [ 74.733061][ T4341] loop3: detected capacity change from 0 to 32768 [ 74.751657][ T4333] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.2: mark_inode_dirty error [ 74.765696][ T4341] ======================================================= [ 74.765696][ T4341] WARNING: The mand mount option has been deprecated and [ 74.765696][ T4341] and is ignored by this kernel. Remove the mand [ 74.765696][ T4341] option from the mount to silence this warning. [ 74.765696][ T4341] ======================================================= [ 74.824264][ T4333] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 74.852366][ T4333] EXT4-fs (loop1): 1 truncate cleaned up [ 74.864030][ T4333] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 74.932761][ T4333] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.014557][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.021152][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.149986][ T4361] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 75.590823][ T4353] loop2: detected capacity change from 0 to 32768 [ 75.600266][ T4388] tipc: Enabling of bearer rejected, failed to enable media [ 75.664484][ T4394] loop3: detected capacity change from 0 to 1024 [ 75.779889][ T4353] XFS (loop2): Mounting V5 Filesystem [ 75.936918][ T4353] XFS (loop2): Ending clean mount [ 75.973784][ T4353] XFS (loop2): Quotacheck needed: Please wait. [ 76.019160][ T4413] loop4: detected capacity change from 0 to 256 [ 76.066148][ T4353] XFS (loop2): Quotacheck: Done. [ 76.097739][ T4413] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 76.240400][ T4183] XFS (loop2): Unmounting Filesystem [ 76.683320][ T4434] usb usb1: usbfs: process 4434 (syz.4.61) did not claim interface 5 before use [ 76.779473][ T4437] loop1: detected capacity change from 0 to 512 [ 76.815619][ T4437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.850581][ T4437] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.64: bad orphan inode 131083 [ 76.886643][ T4437] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 76.929633][ T4446] process 'syz.2.66' launched './file0' with NULL argv: empty string added [ 77.100810][ T4457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 77.348545][ T4472] loop1: detected capacity change from 0 to 2048 [ 77.430794][ T4472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.559368][ T4483] loop3: detected capacity change from 0 to 1024 [ 77.688624][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 77.722039][ T4492] device ip6_vti0 entered promiscuous mode [ 77.801533][ T4250] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.850683][ T4495] loop1: detected capacity change from 0 to 512 [ 77.905024][ T4495] EXT4-fs (loop1): Ignoring removed nobh option [ 77.957476][ T4495] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.977710][ T2287] Bluetooth: hci4: command 0x0411 tx timeout [ 78.016343][ T4495] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.88: iget: bad i_size value: 38620345925642 [ 78.148288][ T4495] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 78.221847][ T4250] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 78.246221][ T4495] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 78.510568][ T4507] loop3: detected capacity change from 0 to 32768 [ 78.518105][ T4250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.528306][ T4250] usb 5-1: config 0 has no interface number 0 [ 78.621934][ T4507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.630430][ T4507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.650163][ T4507] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 78.650163][ T4507] inode = 1 19 [ 78.650163][ T4507] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 78.669853][ T4507] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.684489][ T4507] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 78.693420][ T4507] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 78.707546][ T4507] gfs2: fsid=syz:syz.0: File system withdrawn [ 78.713781][ T4507] CPU: 0 PID: 4507 Comm: syz.3.92 Not tainted syzkaller #0 [ 78.721001][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.731169][ T4507] Call Trace: [ 78.734461][ T4507] [ 78.737419][ T4507] dump_stack_lvl+0x168/0x230 [ 78.742137][ T4507] ? kobject_uevent_env+0x371/0x890 [ 78.747356][ T4507] ? show_regs_print_info+0x20/0x20 [ 78.752581][ T4507] ? load_image+0x3b0/0x3b0 [ 78.757108][ T4507] ? kobject_uevent_env+0x371/0x890 [ 78.762332][ T4507] ? lockref_put_or_lock+0x6e/0xb0 [ 78.767548][ T4507] gfs2_withdraw+0x111b/0x1460 [ 78.772337][ T4507] ? gfs2_lm+0x220/0x220 [ 78.776589][ T4507] ? __lock_acquire+0x13ad/0x7c60 [ 78.781636][ T4507] ? gfs2_consist_inode_i+0xc0/0xe0 [ 78.786856][ T4507] gfs2_inode_refresh+0xb5e/0xfe0 [ 78.791918][ T4507] ? do_promote+0x71a/0xab0 [ 78.796446][ T4507] ? gfs2_inode_metasync+0xf0/0xf0 [ 78.801595][ T4507] ? __lock_acquire+0x7c60/0x7c60 [ 78.806670][ T4507] inode_go_lock+0x127/0x470 [ 78.811289][ T4507] do_promote+0x741/0xab0 [ 78.815640][ T4507] finish_xmote+0x514/0xb70 [ 78.820160][ T4507] do_xmote+0x7b6/0x1120 [ 78.824430][ T4507] gfs2_glock_nq+0xc7a/0x1550 [ 78.829146][ T4507] init_journal+0xc42/0x2220 [ 78.833768][ T4507] ? end_bio_io_page+0x100/0x100 [ 78.838739][ T4507] ? vsnprintf+0x1905/0x1a00 [ 78.843546][ T4507] ? snprintf+0xd7/0x120 [ 78.847850][ T4507] ? init_journal+0x710/0x2220 [ 78.852677][ T4507] ? vscnprintf+0x80/0x80 [ 78.857062][ T4507] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 78.862236][ T4507] init_inodes+0xdb/0x320 [ 78.866592][ T4507] gfs2_fill_super+0x1701/0x1f50 [ 78.871554][ T4507] ? gfs2_reconfigure+0xcd0/0xcd0 [ 78.876589][ T4507] ? gfs2_glock_nq_num+0x82/0x1b0 [ 78.881651][ T4507] ? preempt_count_add+0x8d/0x190 [ 78.886747][ T4507] ? sb_set_blocksize+0xa5/0xe0 [ 78.891629][ T4507] get_tree_bdev+0x3f1/0x610 [ 78.896292][ T4507] ? gfs2_reconfigure+0xcd0/0xcd0 [ 78.901486][ T4507] gfs2_get_tree+0x4d/0x1e0 [ 78.906165][ T4507] vfs_get_tree+0x88/0x270 [ 78.910723][ T4507] do_new_mount+0x24a/0xa40 [ 78.915269][ T4507] __se_sys_mount+0x2d6/0x3c0 [ 78.920146][ T4507] ? __x64_sys_mount+0xc0/0xc0 [ 78.925233][ T4507] ? lockdep_hardirqs_on+0x94/0x140 [ 78.927474][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.930460][ T4507] ? __x64_sys_mount+0x1c/0xc0 [ 78.942669][ T4507] do_syscall_64+0x4c/0xa0 [ 78.947103][ T4507] ? clear_bhb_loop+0x30/0x80 [ 78.951794][ T4507] ? clear_bhb_loop+0x30/0x80 [ 78.956494][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.962403][ T4507] RIP: 0033:0x7f21d1f2ce6a [ 78.966829][ T4507] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.986462][ T4507] RSP: 002b:00007f21d0191e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.994896][ T4507] RAX: ffffffffffffffda RBX: 00007f21d0191ef0 RCX: 00007f21d1f2ce6a [ 79.002886][ T4507] RDX: 0000200000000040 RSI: 0000200000012500 RDI: 00007f21d0191eb0 [ 79.010873][ T4507] RBP: 0000200000000040 R08: 00007f21d0191ef0 R09: 0000000000204004 [ 79.018882][ T4507] R10: 0000000000204004 R11: 0000000000000246 R12: 0000200000012500 [ 79.026871][ T4507] R13: 00007f21d0191eb0 R14: 00000000000125bb R15: 0000200000000600 [ 79.035049][ T4507] [ 79.039481][ T4507] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 79.072069][ T4250] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 79.081139][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.089248][ T4250] usb 5-1: Product: syz [ 79.093568][ T4250] usb 5-1: Manufacturer: syz [ 79.098143][ T4250] usb 5-1: SerialNumber: syz [ 79.107870][ T4250] usb 5-1: config 0 descriptor?? [ 79.121865][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.155477][ T4250] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 79.228759][ T4250] usb 5-1: No valid video chain found. [ 79.251495][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 79.268111][ T4523] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.294342][ T4523] CIFS mount error: No usable UNC path provided in device string! [ 79.294342][ T4523] [ 79.305309][ T4523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 79.343328][ T4525] loop0: detected capacity change from 0 to 128 [ 79.366609][ T4527] loop3: detected capacity change from 0 to 1024 [ 79.386696][ T1325] usb 5-1: USB disconnect, device number 2 [ 79.411762][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.434518][ T4525] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 79.445943][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.465771][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.495423][ T4525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.521536][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.543578][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.562053][ T4235] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 79.581827][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.596081][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.614482][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.632880][ T4235] usb 3-1: config 0 descriptor?? [ 79.691818][ T4515] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 80.126732][ T4235] koneplus 0003:1E7D:2E22.0001: item fetching failed at offset 0/2 [ 80.146432][ T4235] koneplus 0003:1E7D:2E22.0001: parse failed [ 80.156010][ T4235] koneplus: probe of 0003:1E7D:2E22.0001 failed with error -22 [ 80.157452][ T4548] loop0: detected capacity change from 0 to 4096 [ 80.201450][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.327337][ T4235] usb 3-1: USB disconnect, device number 2 [ 80.361015][ T4549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.413151][ T4546] loop4: detected capacity change from 0 to 40427 [ 80.455201][ T4546] F2FS-fs (loop4): invalid crc value [ 80.484228][ T4546] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.568843][ T4546] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.575079][ T4554] loop0: detected capacity change from 0 to 1024 [ 80.580863][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.604456][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.618487][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 80.659161][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.679495][ T4554] hfsplus: bad catalog entry type [ 80.690791][ T23] usb 4-1: config 0 descriptor?? [ 80.717735][ T4185] attempt to access beyond end of device [ 80.717735][ T4185] loop4: rw=2049, want=45104, limit=40427 [ 80.735051][ T4263] hfsplus: b-tree write err: -5, ino 4 [ 81.174214][ T23] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 81.197557][ T4571] sp0: Synchronizing with TNC [ 81.218213][ T4570] [U] è [ 81.223557][ T23] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 81.336175][ T4243] usb 2-1: USB disconnect, device number 2 [ 81.381717][ T23] cp2112 0003:10C4:EA90.0002: error requesting version [ 81.460538][ T23] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 81.500690][ T23] usb 4-1: USB disconnect, device number 2 [ 81.674051][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 81.700782][ T4587] fido_id[4587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 81.786025][ T4594] tmpfs: Bad value for 'mpol' [ 81.839209][ T4567] loop0: detected capacity change from 0 to 40427 [ 81.895738][ T4567] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 81.918993][ T4567] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.001908][ T4567] F2FS-fs (loop0): invalid crc value [ 82.009314][ T4602] loop1: detected capacity change from 0 to 1024 [ 82.037209][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 82.055426][ T4567] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.089267][ T4602] hfsplus: invalid length 32517 has been corrected to 255 [ 82.213799][ T4610] loop4: detected capacity change from 0 to 128 [ 82.227145][ T4611] hfsplus: invalid length 32517 has been corrected to 255 [ 82.255000][ T4567] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.281466][ T4567] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.341938][ T892] hfsplus: b-tree write err: -5, ino 4 [ 82.365414][ T4610] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 82.485581][ T4610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.538455][ T4184] attempt to access beyond end of device [ 82.538455][ T4184] loop0: rw=2049, want=45104, limit=40427 [ 82.860775][ T4606] loop2: detected capacity change from 0 to 32768 [ 82.993023][ T4606] XFS (loop2): Mounting V5 Filesystem [ 83.074701][ T4630] device ip6_vti0 entered promiscuous mode [ 83.166847][ T4606] XFS (loop2): Ending clean mount [ 83.277764][ T4183] XFS (loop2): Unmounting Filesystem [ 83.306759][ T4634] loop4: detected capacity change from 0 to 1024 [ 83.571440][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.624634][ T4642] loop1: detected capacity change from 0 to 512 [ 83.780948][ T4642] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.146: error while reading EA inode 32 err=-116 [ 83.844316][ T4642] EXT4-fs (loop1): Remounting filesystem read-only [ 83.850945][ T4642] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.933147][ T4642] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.146: error while reading EA inode 32 err=-116 [ 83.961182][ T4642] EXT4-fs (loop1): Remounting filesystem read-only [ 83.978814][ T4642] EXT4-fs (loop1): 1 orphan inode deleted [ 83.987053][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.008290][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.018894][ T4642] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore,. Quota mode: none. [ 84.048659][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.058051][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.101794][ T4636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.163145][ T4658] loop2: detected capacity change from 0 to 128 [ 84.281978][ T4658] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 84.297960][ T4663] loop1: detected capacity change from 0 to 764 [ 84.319651][ T4658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.392841][ T4663] rock: directory entry would overflow storage [ 84.399341][ T4663] rock: sig=0x4654, size=5, remaining=4 [ 84.528416][ T4251] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.546317][ T4670] netlink: 'syz.2.157': attribute type 3 has an invalid length. [ 84.615063][ T4672] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 84.831763][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 84.887729][ T4682] loop3: detected capacity change from 0 to 512 [ 84.999269][ T4682] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.163: inode has both inline data and extents flags [ 85.114860][ T4682] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 85.151741][ T4251] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 85.171850][ T4682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.183757][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.209400][ T4251] usb 5-1: Product: syz [ 85.214153][ T4251] usb 5-1: Manufacturer: syz [ 85.218762][ T4251] usb 5-1: SerialNumber: syz [ 85.240044][ T4251] usb 5-1: config 0 descriptor?? [ 85.304230][ T4251] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 85.391197][ T4694] loop3: detected capacity change from 0 to 128 [ 85.445633][ T4694] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 85.497710][ T4694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.657714][ T23] usb 1-1: USB disconnect, device number 2 [ 85.751668][ T4251] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 85.765969][ T4251] visor: probe of 5-1:0.0 failed with error -5 [ 85.975541][ T23] usb 5-1: USB disconnect, device number 3 [ 86.451051][ T4706] loop0: detected capacity change from 0 to 512 [ 86.488291][ T4706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.573910][ T4706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 86.590743][ T4706] System zones: 1-12 [ 86.630655][ T4706] EXT4-fs (loop0): 1 truncate cleaned up [ 86.639772][ T4711] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 86.671500][ T4706] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000100,stripe=0x0000000000000004,debug,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 87.315455][ T4713] loop3: detected capacity change from 0 to 32768 [ 87.343524][ T4243] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.456396][ T4713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 87.711154][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 87.711840][ T4243] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 87.736897][ T4243] usb 5-1: config 0 has no interface number 0 [ 87.743593][ T4243] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 87.761473][ T4243] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 87.799996][ T4730] loop0: detected capacity change from 0 to 32768 [ 87.903026][ T4730] XFS (loop0): Mounting V5 Filesystem [ 87.941625][ T4243] usb 5-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 87.962966][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.971482][ T4250] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.990070][ T4243] usb 5-1: Product: syz [ 87.994595][ T4243] usb 5-1: Manufacturer: syz [ 87.999202][ T4243] usb 5-1: SerialNumber: syz [ 88.013524][ T4243] usb 5-1: config 0 descriptor?? [ 88.050084][ T4730] XFS (loop0): Ending clean mount [ 88.144139][ T4184] XFS (loop0): Unmounting Filesystem [ 88.225760][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 88.227555][ T4251] Process accounting resumed [ 88.260930][ T4760] Process accounting resumed [ 88.310886][ T4243] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 88.332966][ T4243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.352560][ T4250] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 88.360676][ T4250] usb 2-1: config 0 has no interface number 0 [ 88.372316][ T4250] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 88.382516][ T4250] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 88.392978][ T4243] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 88.401188][ T4243] usb 5-1: media controller created [ 88.406518][ T4250] usb 2-1: config 0 interface 41 has no altsetting 0 [ 88.424504][ T4243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.512481][ T4243] DVB: Unable to find symbol dib7000p_attach() [ 88.518816][ T4243] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 88.571607][ T4250] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 88.585292][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.609320][ T4250] usb 2-1: Product: syz [ 88.619409][ T4250] usb 2-1: Manufacturer: syz [ 88.632813][ T4250] usb 2-1: SerialNumber: syz [ 88.641629][ T4243] rc_core: IR keymap rc-dib0700-rc5 not found [ 88.648208][ T4243] Registered IR keymap rc-empty [ 88.658198][ T4250] usb 2-1: config 0 descriptor?? [ 88.667999][ T4243] dvb-usb: could not initialize remote control. [ 88.679474][ T4243] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 88.692413][ T4746] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.709843][ T4746] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.755070][ T4243] dib0700: There's no endpoint for remote controller [ 88.772528][ T4781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.202'. [ 88.964972][ T4243] usb 5-1: USB disconnect, device number 4 [ 88.973309][ T4250] dm9601: probe of 2-1:0.41 failed with error -71 [ 88.997566][ T4243] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 89.006957][ T4250] sr9700: probe of 2-1:0.41 failed with error -71 [ 89.016024][ T4250] usb 2-1: USB disconnect, device number 3 [ 89.746006][ T4811] netlink: 160 bytes leftover after parsing attributes in process `syz.2.216'. [ 90.184456][ T4828] loop2: detected capacity change from 0 to 1024 [ 90.891180][ T4852] mkiss: ax0: crc mode is auto. [ 90.967480][ T4832] loop0: detected capacity change from 0 to 32768 [ 91.073787][ T4832] [ 91.073787][ T4832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.073787][ T4832] [ 91.177144][ T4832] ERROR: (device loop0): ea_get: invalid ea.flag [ 91.177144][ T4832] [ 91.227755][ T4868] ERROR: (device loop0): ea_get: invalid ea.flag [ 91.227755][ T4868] [ 91.261425][ T4867] loop2: detected capacity change from 0 to 1024 [ 91.278169][ T4832] ERROR: (device loop0): remounting filesystem as read-only [ 91.280502][ T4870] loop1: detected capacity change from 0 to 128 [ 91.295214][ T4868] ERROR: (device loop0): remounting filesystem as read-only [ 91.461507][ T4867] EXT4-fs (loop2): Ignoring removed orlov option [ 91.567543][ T4867] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,nodioread_nolock,dioread_lock,barrier,dioread_lock,nodioread_nolock,,errors=continue. Quota mode: none. [ 91.570162][ T4877] loop4: detected capacity change from 0 to 256 [ 91.693716][ T4867] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.900873][ T4892] program syz.1.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.923935][ T4891] program syz.0.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.210279][ T4906] tipc: Started in network mode [ 92.230042][ T4906] tipc: Node identity ac14140f, cluster identity 4711 [ 92.255460][ T4906] tipc: Enabled bearer , priority 10 [ 92.419624][ T4918] bridge_slave_0: default FDB implementation only supports local addresses [ 92.465928][ T4864] loop3: detected capacity change from 0 to 32768 [ 92.574788][ T4930] loop2: detected capacity change from 0 to 16 [ 92.589256][ T4864] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.613500][ T4864] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.632356][ T4926] loop1: detected capacity change from 0 to 1024 [ 92.672530][ T4864] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 92.698721][ T4926] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.713403][ T4930] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.730418][ T4250] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 92.748766][ T4250] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 92.803266][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 92.883232][ T4250] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 92.900774][ T4250] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.909230][ T4864] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.937588][ T4864] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 92.950282][ T4864] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 92.950282][ T4864] inode = 12 2341 [ 92.950282][ T4864] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 92.974531][ T4864] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 92.985237][ T4864] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 92.998568][ T4864] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 93.018433][ T4864] gfs2: fsid=syz:syz.0: File system withdrawn [ 93.040590][ T4864] CPU: 0 PID: 4864 Comm: syz.3.242 Not tainted syzkaller #0 [ 93.048196][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.058268][ T4864] Call Trace: [ 93.061653][ T4864] [ 93.064604][ T4864] dump_stack_lvl+0x168/0x230 [ 93.069329][ T4864] ? kobject_uevent_env+0x371/0x890 [ 93.074570][ T4864] ? show_regs_print_info+0x20/0x20 [ 93.079895][ T4864] ? load_image+0x3b0/0x3b0 [ 93.084518][ T4864] ? kobject_uevent_env+0x371/0x890 [ 93.089759][ T4864] gfs2_withdraw+0x111b/0x1460 [ 93.094568][ T4864] ? gfs2_lm+0x220/0x220 [ 93.098831][ T4864] ? load_image+0x3b0/0x3b0 [ 93.103359][ T4864] ? gfs2_consist_inode_i+0xc0/0xe0 [ 93.108583][ T4864] gfs2_dirent_scan+0x525/0x650 [ 93.113454][ T4864] ? gfs2_dirent_scan+0x650/0x650 [ 93.118502][ T4864] gfs2_dir_read+0x7df/0x1770 [ 93.123208][ T4864] ? __might_sleep+0xf0/0xf0 [ 93.127810][ T4864] ? gfs2_dir_hash_inval+0x70/0x70 [ 93.133111][ T4864] ? _raw_spin_unlock+0x24/0x40 [ 93.137977][ T4864] ? gfs2_glock_nq+0xcb0/0x1550 [ 93.142865][ T4864] gfs2_readdir+0x148/0x1a0 [ 93.147412][ T4864] ? gfs2_fallocate+0x470/0x470 [ 93.152386][ T4864] ? gfs2_readdir+0x102/0x1a0 [ 93.157273][ T4864] ? preempt_count_add+0x8d/0x190 [ 93.162733][ T4864] ? down_read_killable+0x1ce/0x340 [ 93.167981][ T4864] ? fsnotify_perm+0x254/0x560 [ 93.172789][ T4864] iterate_dir+0x218/0x560 [ 93.177454][ T4864] ? gfs2_fallocate+0x470/0x470 [ 93.182338][ T4864] __se_sys_getdents+0xe5/0x250 [ 93.187241][ T4864] ? __x64_sys_getdents+0x80/0x80 [ 93.192297][ T4864] ? fillonedir+0x4c0/0x4c0 [ 93.196860][ T4864] ? vtime_user_exit+0x2dc/0x400 [ 93.201965][ T4864] ? lockdep_hardirqs_on+0x94/0x140 [ 93.207429][ T4864] do_syscall_64+0x4c/0xa0 [ 93.211882][ T4864] ? clear_bhb_loop+0x30/0x80 [ 93.216660][ T4864] ? clear_bhb_loop+0x30/0x80 [ 93.221366][ T4864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.227421][ T4864] RIP: 0033:0x7f21d1f2b6c9 [ 93.231971][ T4864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.251825][ T4864] RSP: 002b:00007f21d0192038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 93.254038][ T23] tipc: Node number set to 2886997007 [ 93.260532][ T4864] RAX: ffffffffffffffda RBX: 00007f21d2181fa0 RCX: 00007f21d1f2b6c9 [ 93.274668][ T4864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 93.283004][ T4864] RBP: 00007f21d1fadf91 R08: 0000000000000000 R09: 0000000000000000 [ 93.291183][ T4864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.299173][ T4864] R13: 00007f21d2182038 R14: 00007f21d2181fa0 R15: 00007ffd6d8fc488 [ 93.307479][ T4864] [ 93.355750][ T4940] tipc: Started in network mode [ 93.360830][ T4940] tipc: Node identity , cluster identity 4711 [ 93.372154][ T4940] tipc: Failed to obtain node identity [ 93.377667][ T4940] tipc: Enabling of bearer rejected, failed to enable media [ 93.488553][ T4944] loop2: detected capacity change from 0 to 4096 [ 93.566114][ T4944] ntfs: volume version 3.1. [ 93.626211][ T4934] loop4: detected capacity change from 0 to 32768 [ 93.687680][ T4932] loop0: detected capacity change from 0 to 40427 [ 93.794845][ T4932] F2FS-fs (loop0): invalid crc value [ 93.862696][ T4932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.048092][ T4932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.334217][ T4975] loop1: detected capacity change from 0 to 128 [ 94.364591][ T4979] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 94.411067][ T4975] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.496716][ T4975] hpfs: filesystem error: improperly stopped [ 94.502174][ T4987] loop4: detected capacity change from 0 to 256 [ 94.521582][ T4975] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.529357][ T4975] hpfs: You really don't want any checks? You are crazy... [ 94.574532][ T4975] hpfs: hpfs_map_sector(): read error [ 94.579954][ T4975] hpfs: code page support is disabled [ 94.628077][ T4975] hpfs: hpfs_map_4sectors(): unaligned read [ 94.633443][ T4991] loop3: detected capacity change from 0 to 2048 [ 94.650192][ T4975] hpfs: hpfs_map_4sectors(): unaligned read [ 94.691550][ T4975] hpfs: filesystem error: unable to find root dir [ 94.768709][ T4995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.808692][ T4993] loop2: detected capacity change from 0 to 4096 [ 94.945323][ T5002] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.217513][ T5012] loop2: detected capacity change from 0 to 512 [ 95.234619][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 95.260115][ T5020] loop4: detected capacity change from 0 to 512 [ 95.260760][ T5018] netlink: 'syz.1.313': attribute type 2 has an invalid length. [ 95.280098][ T5018] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 95.296451][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 95.352516][ T5012] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.372167][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 95.388841][ T5012] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.427631][ T5020] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.477436][ T5012] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #4: comm syz.2.308: corrupted inode contents [ 95.504631][ T5032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 95.513699][ T1110] cfg80211: failed to load regulatory.db [ 95.517573][ T4250] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.537476][ T5012] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #4: comm syz.2.308: mark_inode_dirty error [ 95.640694][ T5037] loop0: detected capacity change from 0 to 256 [ 95.678124][ T5012] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #4: comm syz.2.308: corrupted inode contents [ 95.727168][ T5012] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.308: mark_inode_dirty error [ 95.768024][ T5037] FAT-fs (loop0): Directory bread(block 64) failed [ 95.781406][ T4250] usb 4-1: Using ep0 maxpacket: 16 [ 95.786726][ T5037] FAT-fs (loop0): Directory bread(block 65) failed [ 95.798240][ T5012] Quota error (device loop2): write_blk: dquota write failed [ 95.810319][ T5037] FAT-fs (loop0): Directory bread(block 66) failed [ 95.825902][ T5037] FAT-fs (loop0): Directory bread(block 67) failed [ 95.833342][ T5037] FAT-fs (loop0): Directory bread(block 68) failed [ 95.840319][ T5037] FAT-fs (loop0): Directory bread(block 69) failed [ 95.847927][ T5037] FAT-fs (loop0): Directory bread(block 70) failed [ 95.854931][ T5037] FAT-fs (loop0): Directory bread(block 71) failed [ 95.862166][ T5037] FAT-fs (loop0): Directory bread(block 72) failed [ 95.869543][ T5037] FAT-fs (loop0): Directory bread(block 73) failed [ 95.878295][ T5012] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 95.911934][ T4250] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.920058][ T4250] usb 4-1: config 0 has no interface number 0 [ 95.925332][ T5012] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 95.970420][ T5047] loop4: detected capacity change from 0 to 256 [ 95.975571][ T5012] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.308: Failed to acquire dquot type 1 [ 96.146655][ T4250] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.168016][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.216731][ T5053] mkiss: ax0: crc mode is auto. [ 96.221869][ T4250] usb 4-1: Product: syz [ 96.226067][ T4250] usb 4-1: Manufacturer: syz [ 96.230660][ T4250] usb 4-1: SerialNumber: syz [ 96.298263][ T4250] usb 4-1: config 0 descriptor?? [ 96.316102][ T5058] smc: net device wlan1 applied user defined pnetid SYZ1 [ 96.358818][ T4250] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 96.755497][ T5083] loop1: detected capacity change from 0 to 1024 [ 96.821492][ T5051] loop0: detected capacity change from 0 to 32768 [ 96.853091][ T5087] loop2: detected capacity change from 0 to 47 [ 96.911069][ T5051] XFS (loop0): Mounting V5 Filesystem [ 96.961499][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.001676][ T4250] gspca_spca1528: reg_w err -71 [ 97.027784][ T5051] XFS (loop0): Ending clean mount [ 97.030473][ T5087] MINIX-fs: deleted inode referenced: 9 [ 97.042623][ T4250] spca1528: probe of 4-1:0.1 failed with error -71 [ 97.054760][ T5087] MINIX-fs: deleted inode referenced: 9 [ 97.066278][ T4250] usb 4-1: USB disconnect, device number 3 [ 97.080915][ T5051] XFS (loop0): Quotacheck needed: Please wait. [ 97.162345][ T5051] XFS (loop0): Quotacheck: Done. [ 97.211564][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 97.271490][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.289463][ T4184] XFS (loop0): Unmounting Filesystem [ 97.341880][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.368910][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.381455][ T23] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 97.390810][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.435741][ T23] usb 5-1: config 0 descriptor?? [ 97.519232][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 97.549834][ T5101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.346'. [ 97.646448][ T1108] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.663222][ T1108] usb 2-1: config 0 has no interface number 0 [ 97.836340][ T1108] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 97.860639][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.871760][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 97.889727][ T1108] usb 2-1: Product: syz [ 97.921631][ T1108] usb 2-1: Manufacturer: syz [ 97.935249][ T23] ntrig 0003:1B96:0008.0003: bogus close delimiter [ 97.949601][ T1108] usb 2-1: SerialNumber: syz [ 97.961500][ T23] ntrig 0003:1B96:0008.0003: item 0 0 2 10 parsing failed [ 97.972581][ T1108] usb 2-1: config 0 descriptor?? [ 97.982218][ T23] ntrig 0003:1B96:0008.0003: parse failed [ 97.998466][ T5117] loop0: detected capacity change from 0 to 1024 [ 97.998658][ T23] ntrig: probe of 0003:1B96:0008.0003 failed with error -22 [ 98.016090][ T1108] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 98.028095][ T5120] loop2: detected capacity change from 0 to 64 [ 98.035259][ T1108] usb 2-1: selecting invalid altsetting 1 [ 98.044634][ T1108] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 98.102237][ T1108] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.177752][ T1108] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 98.195550][ T1108] usb 2-1: media controller created [ 98.236817][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.261186][ T1325] usb 5-1: USB disconnect, device number 5 [ 98.301826][ T1108] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 98.309675][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 98.362947][ T1108] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 98.505474][ T1108] usb 2-1: USB disconnect, device number 4 [ 98.679728][ T5132] netlink: 96 bytes leftover after parsing attributes in process `syz.0.360'. [ 98.955228][ T26] audit: type=1326 audit(1763502551.932:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffe3b6c9 code=0x7ffc0000 [ 99.049571][ T26] audit: type=1326 audit(1763502551.972:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0ffe3b6c9 code=0x7ffc0000 [ 99.071528][ T1108] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.152072][ T26] audit: type=1326 audit(1763502551.972:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0ffe3b6c9 code=0x7ffc0000 [ 99.232489][ T5153] loop1: detected capacity change from 0 to 1024 [ 99.462515][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.502805][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.555168][ T1108] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 99.590178][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.593551][ T5163] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 99.625786][ T5163] hfsplus: cannot replace xattr [ 99.636469][ T1108] usb 5-1: config 0 descriptor?? [ 99.799544][ T5172] loop3: detected capacity change from 0 to 2048 [ 99.889728][ T5182] loop0: detected capacity change from 0 to 64 [ 99.971054][ T5172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.010539][ T5182] attempt to access beyond end of device [ 100.010539][ T5182] loop0: rw=0, want=268435470, limit=64 [ 100.050271][ T5182] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 100.135023][ T1108] isku 0003:1E7D:319C.0004: item fetching failed at offset 5/7 [ 100.155047][ T1108] isku 0003:1E7D:319C.0004: parse failed [ 100.161017][ T1108] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 100.339445][ T1325] usb 5-1: USB disconnect, device number 6 [ 100.475382][ T5202] loop0: detected capacity change from 0 to 512 [ 100.497944][ T5204] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.543150][ T5208] netlink: 280 bytes leftover after parsing attributes in process `syz.3.394'. [ 100.567558][ T5202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.636003][ T5202] EXT4-fs (loop0): 1 orphan inode deleted [ 100.661607][ T5202] EXT4-fs (loop0): 1 truncate cleaned up [ 100.673959][ T5202] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,grpjquota=,. Quota mode: none. [ 100.976114][ T5234] loop3: detected capacity change from 0 to 128 [ 101.010350][ T5236] loop4: detected capacity change from 0 to 128 [ 101.043606][ T5238] loop1: detected capacity change from 0 to 128 [ 101.053443][ T5234] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 101.078097][ T5242] loop0: detected capacity change from 0 to 22 [ 101.130282][ T5236] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.132263][ T5242] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 101.149667][ T5238] hpfs: bad mount options. [ 101.151681][ T5236] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.228238][ T5242] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 101.578237][ T5260] loop1: detected capacity change from 0 to 4096 [ 101.677537][ T5269] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.750277][ T5263] loop0: detected capacity change from 0 to 2048 [ 101.775151][ T5264] loop2: detected capacity change from 0 to 8192 [ 101.853795][ T1325] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 101.880526][ T5263] hpfs: hpfs_map_sector(): read error [ 101.914604][ T5264] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 101.992167][ T5264] REISERFS (device loop2): using journaled data mode [ 102.013856][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 102.028131][ T5264] reiserfs: using flush barriers [ 102.119138][ T5264] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.197906][ T5264] REISERFS (device loop2): checking transaction log (loop2) [ 102.241609][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.259751][ T5264] REISERFS (device loop2): Using r5 hash to sort names [ 102.283825][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.288384][ T5264] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 102.311411][ T1325] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.331264][ T5284] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 102.345448][ T5280] loop1: detected capacity change from 0 to 2048 [ 102.347827][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.377863][ T5286] loop0: detected capacity change from 0 to 512 [ 102.379474][ T5264] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.385271][ T1325] usb 5-1: config 0 descriptor?? [ 102.428347][ T5264] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.445302][ T1325] hub 5-1:0.0: USB hub found [ 102.452760][ T5264] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.491718][ T5280] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.511990][ T5264] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.547942][ T5286] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.597418][ T5286] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.625554][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop1 [ 102.656367][ T5294] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.661542][ T1325] hub 5-1:0.0: 2 ports detected [ 102.727009][ T5286] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 102.941844][ T1110] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.130080][ T1325] usb 5-1: USB disconnect, device number 7 [ 103.331750][ T1110] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 103.355119][ T1110] usb 4-1: config 0 has no interface number 0 [ 103.365741][ T1110] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 103.393986][ T1110] usb 4-1: config 0 interface 11 has no altsetting 0 [ 103.410663][ T1110] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 103.428522][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.469321][ T1110] usb 4-1: config 0 descriptor?? [ 103.526501][ T5295] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.538449][ T5333] program syz.0.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.560482][ T5335] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 103.563266][ T1110] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 103.587855][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 103.595209][ T5337] loop2: detected capacity change from 0 to 1024 [ 103.625305][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 103.654775][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 103.687160][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 103.692337][ T5337] hfsplus: bad catalog entry type [ 103.700725][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 103.712734][ T5339] loop0: detected capacity change from 0 to 1024 [ 103.716620][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 103.751784][ T4263] hfsplus: b-tree write err: -5, ino 4 [ 103.763848][ T1110] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.787755][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 103.835246][ T5339] hfsplus: bad catalog entry type [ 103.840461][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 103.870810][ T5347] netlink: 108 bytes leftover after parsing attributes in process `syz.1.459'. [ 103.890429][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 103.911799][ T5347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.459'. [ 103.920848][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 103.934848][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 103.973938][ T1110] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 104.033423][ T1110] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.049641][ T1110] usb 4-1: USB disconnect, device number 4 [ 104.090106][ T144] hfsplus: b-tree write err: -5, ino 4 [ 104.100024][ T1110] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.110676][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 104.133788][ T1110] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.147006][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'. [ 104.161788][ T1110] keyspan 4-1:0.11: device disconnected [ 104.437752][ T5381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.515770][ T5389] netlink: zone id is out of range [ 104.575162][ T5389] netlink: set zone limit has 4 unknown bytes [ 104.728987][ T5405] loop0: detected capacity change from 0 to 64 [ 104.961439][ T4235] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.321682][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.360370][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.390184][ T4235] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 105.420018][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.450018][ T4235] usb 4-1: config 0 descriptor?? [ 105.458367][ T5403] loop2: detected capacity change from 0 to 32768 [ 105.493488][ T5403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.486 (5403) [ 105.528320][ T5407] loop1: detected capacity change from 0 to 32768 [ 105.589386][ T5403] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 105.618496][ T5407] ea_get: invalid extended attribute [ 105.621304][ T5403] BTRFS info (device loop2): using free space tree [ 105.632511][ T5407] ffff88805e854d30: 04 00 00 00 .... [ 105.650516][ T5403] BTRFS info (device loop2): has skinny extents [ 105.938489][ T5421] loop0: detected capacity change from 0 to 32768 [ 105.943926][ T4235] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 105.980700][ T4235] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 105.997915][ T4235] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 106.062381][ T5419] loop4: detected capacity change from 0 to 32768 [ 106.068928][ T5403] BTRFS info (device loop2): enabling ssd optimizations [ 106.089276][ T5419] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.494 (5419) [ 106.163751][ T4235] isku 0003:1E7D:319C.0005: couldn't init struct isku_device [ 106.171204][ T4235] isku 0003:1E7D:319C.0005: couldn't install keyboard [ 106.184840][ T4235] isku: probe of 0003:1E7D:319C.0005 failed with error -71 [ 106.187980][ T5403] BTRFS info (device loop2): Snapshot src from another FS [ 106.196759][ T5419] CIFS mount error: No usable UNC path provided in device string! [ 106.196759][ T5419] [ 106.274452][ T4235] usb 4-1: USB disconnect, device number 5 [ 106.283247][ T5419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.342625][ T4200] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4200) [ 106.503532][ T5450] fido_id[5450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.182223][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.189124][ T5496] loop2: detected capacity change from 0 to 1024 [ 107.406542][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.525411][ T5496] loop2: detected capacity change from 0 to 32768 [ 107.594559][ T5496] XFS (loop2): Mounting V5 Filesystem [ 107.631749][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.641960][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.654534][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.656514][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 107.668428][ T1110] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 107.683156][ T2287] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.686720][ T5496] XFS (loop2): Ending clean mount [ 107.691772][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.726347][ T1110] usb 2-1: config 0 descriptor?? [ 107.746890][ T4183] XFS (loop2): Unmounting Filesystem [ 107.961726][ T1108] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.981161][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.987463][ T5515] 9pnet: p9_fd_create_unix (5515): problem connecting socket: éq‰Y’3aK: -111 [ 108.008391][ T1108] usb 5-1: Product: syz [ 108.015285][ T5516] loop0: detected capacity change from 0 to 16 [ 108.022402][ T1108] usb 5-1: Manufacturer: syz [ 108.027645][ T1108] usb 5-1: SerialNumber: syz [ 108.034461][ T1108] r8152-cfgselector 5-1: config 0 descriptor?? [ 108.091504][ T5516] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.102603][ T2287] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.125792][ T2287] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.144109][ T2287] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 108.176298][ T2287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.210937][ T2287] usb 4-1: config 0 descriptor?? [ 108.236706][ T1110] elecom 0003:056E:00FB.0006: report_id 22043 is invalid [ 108.258319][ T1110] elecom 0003:056E:00FB.0006: item 0 2 1 8 parsing failed [ 108.292018][ T1110] elecom: probe of 0003:056E:00FB.0006 failed with error -22 [ 108.449393][ T5469] usb 2-1: USB disconnect, device number 5 [ 108.603116][ T5526] loop2: detected capacity change from 0 to 32768 [ 108.667824][ T5526] XFS (loop2): Mounting V5 Filesystem [ 108.704842][ T2287] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 108.731553][ T1108] r8152-cfgselector 5-1: Unknown version 0x0000 [ 108.761645][ T1108] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 108.808402][ T5526] XFS (loop2): Ending clean mount [ 108.809873][ T5534] loop0: detected capacity change from 0 to 32768 [ 108.817239][ T5526] XFS (loop2): Quotacheck needed: Please wait. [ 108.853769][ T5526] XFS (loop2): Quotacheck: Done. [ 108.879751][ T4183] XFS (loop2): Unmounting Filesystem [ 108.911904][ T2287] usb 4-1: USB disconnect, device number 6 [ 108.999400][ T5534] XFS (loop0): Mounting V5 Filesystem [ 109.149164][ T5534] XFS (loop0): Ending clean mount [ 109.257186][ T4184] XFS (loop0): Unmounting Filesystem [ 109.353730][ T5556] loop2: detected capacity change from 0 to 4096 [ 109.544323][ T5569] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.538'. [ 109.556223][ T5556] ntfs: volume version 3.1. [ 109.717400][ T5579] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.860388][ T5583] loop2: detected capacity change from 0 to 2048 [ 109.926034][ T5583] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.023642][ T5588] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.245607][ T5601] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.591920][ T5575] loop3: detected capacity change from 0 to 32768 [ 110.618921][ T5622] netlink: 11 bytes leftover after parsing attributes in process `syz.4.561'. [ 110.674910][ T5575] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.541 (5575) [ 110.756403][ T5575] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 110.801814][ T5575] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.825137][ T5635] loop1: detected capacity change from 0 to 512 [ 110.831420][ T5575] BTRFS info (device loop3): use lzo compression, level 0 [ 110.831448][ T5575] BTRFS info (device loop3): using free space tree [ 110.831461][ T5575] BTRFS info (device loop3): has skinny extents [ 110.895231][ T5635] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 110.904989][ T5635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.914918][ T5635] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.924119][ T5635] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 111.091610][ T4243] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.165677][ T5641] loop0: detected capacity change from 0 to 32768 [ 111.270865][ T5641] jfs_mount: Failed to read AGGREGATE_I [ 111.297772][ T5641] Mount JFS Failure: -5 [ 111.342648][ T5575] BTRFS info (device loop3): enabling ssd optimizations [ 111.361407][ T5641] jfs_mount failed w/return code = -5 [ 111.398081][ T5641] IPv6: addrconf: prefix option has invalid lifetime [ 111.456174][ T5575] fs-verity (loop3, inode 260): Unknown hash algorithm number: 132 [ 111.482638][ T5666] IPv6: addrconf: prefix option has invalid lifetime [ 111.512870][ T4243] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 111.561985][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.608145][ T4243] usb 5-1: config 0 descriptor?? [ 111.626857][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 111.735015][ T5659] loop2: detected capacity change from 0 to 32768 [ 111.780580][ T5659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.571 (5659) [ 112.015681][ T5659] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 112.047298][ T5675] loop0: detected capacity change from 0 to 4096 [ 112.051646][ T5659] BTRFS info (device loop2): enabling auto defrag [ 112.071091][ T5659] BTRFS info (device loop2): force zlib compression, level 3 [ 112.111534][ T5659] BTRFS info (device loop2): turning on sync discard [ 112.131718][ T5659] BTRFS info (device loop2): force clearing of disk cache [ 112.171584][ T5659] BTRFS info (device loop2): enabling disk space caching [ 112.174034][ T4243] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 112.196472][ T5680] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.199430][ T5659] BTRFS info (device loop2): ignoring data csums [ 112.251414][ T4243] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 112.258798][ T4243] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 112.281751][ T5659] BTRFS info (device loop2): disk space caching is enabled [ 112.310019][ T5659] BTRFS info (device loop2): has skinny extents [ 112.320715][ T5663] loop1: detected capacity change from 0 to 32768 [ 112.331417][ T4243] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 112.339219][ T4243] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 112.409066][ T4250] Bluetooth: hci4: command 0x0405 tx timeout [ 112.416488][ T5663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.572 (5663) [ 112.417278][ T4243] magicmouse 0003:05AC:0269.0008: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 112.572690][ T4243] usb 5-1: USB disconnect, device number 9 [ 112.584714][ T5663] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.611665][ T5663] BTRFS info (device loop1): using free space tree [ 112.618209][ T5663] BTRFS info (device loop1): has skinny extents [ 112.739636][ T5659] BTRFS info (device loop2): enabling ssd optimizations [ 112.805271][ T5707] fido_id[5707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 112.934171][ T5684] loop3: detected capacity change from 0 to 32768 [ 113.193698][ T5663] BTRFS info (device loop1): enabling ssd optimizations [ 113.588714][ T5760] loop0: detected capacity change from 0 to 4096 [ 113.629733][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4174) [ 113.744042][ T5760] ntfs: volume version 3.1. [ 113.848897][ T5764] loop4: detected capacity change from 0 to 4096 [ 113.929264][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 114.096954][ T5764] ntfs3: loop4: ino=5, "/" directory corrupted [ 114.151072][ T5764] ntfs3: loop4: ino=5, "/" directory corrupted [ 114.413492][ T5795] loop1: detected capacity change from 0 to 512 [ 114.476877][ T5797] binder: 5796:5797 ioctl c0306201 2000000001c0 returned -14 [ 114.514241][ T5793] loop4: detected capacity change from 0 to 8192 [ 114.542406][ T5795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 114.550653][ T5795] System zones: 1-12 [ 114.591972][ T5793] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 114.621011][ T5795] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.606: error while reading EA inode 32 err=-116 [ 114.625939][ T5793] REISERFS (device loop4): using ordered data mode [ 114.640780][ T5793] reiserfs: using flush barriers [ 114.655093][ T5793] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.672569][ T5793] REISERFS (device loop4): checking transaction log (loop4) [ 114.684765][ T5793] REISERFS (device loop4): Using r5 hash to sort names [ 114.696204][ T5793] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.720647][ T5793] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 114.757697][ T5795] EXT4-fs (loop1): Remounting filesystem read-only [ 114.765183][ T5795] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.606: error while reading EA inode 32 err=-116 [ 114.797544][ T5793] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.851798][ T5795] EXT4-fs (loop1): Remounting filesystem read-only [ 114.858528][ T5795] EXT4-fs (loop1): 1 orphan inode deleted [ 114.922342][ T5795] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 115.148512][ T5783] loop3: detected capacity change from 0 to 40427 [ 115.220018][ T5783] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 115.291205][ T5783] F2FS-fs (loop3): invalid crc value [ 115.347032][ T5783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.631482][ T5783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.808814][ T4192] attempt to access beyond end of device [ 115.808814][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 115.939063][ T5845] loop1: detected capacity change from 0 to 256 [ 116.091438][ T5845] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 116.167223][ T5824] loop2: detected capacity change from 0 to 32768 [ 116.344463][ T5836] loop4: detected capacity change from 0 to 40427 [ 116.438977][ T5824] XFS (loop2): Mounting V5 Filesystem [ 116.523175][ T5836] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.560074][ T5836] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.569170][ T5856] loop1: detected capacity change from 0 to 32768 [ 116.592350][ T5824] XFS (loop2): Ending clean mount [ 116.597798][ T5836] F2FS-fs (loop4): invalid crc value [ 116.604475][ T5824] XFS (loop2): Quotacheck needed: Please wait. [ 116.651992][ T5856] (syz.1.631,5856,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xbdbe900f. Applying ECC. [ 116.666451][ T5856] (syz.1.631,5856,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.694170][ T5856] (syz.1.631,5856,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.740226][ T5824] XFS (loop2): Quotacheck: Done. [ 116.747310][ T5856] JBD2: Ignoring recovery information on journal [ 116.810195][ T5836] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.831975][ T1092] block nbd3: Attempted send on invalid socket [ 116.839617][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.871745][ T5856] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 116.904454][ T5869] efs: cannot read volume header [ 116.962966][ T4183] XFS (loop2): Unmounting Filesystem [ 116.987470][ T5836] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.050824][ T5836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.110095][ T5875] tmpfs: Bad value for 'nr_inodes' [ 117.180734][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 117.658500][ T5886] netlink: 'syz.2.634': attribute type 9 has an invalid length. [ 117.700165][ T5886] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.634'. [ 117.803428][ T5889] netlink: 'syz.2.634': attribute type 9 has an invalid length. [ 117.866990][ T5889] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.634'. [ 117.897113][ T5893] loop1: detected capacity change from 0 to 256 [ 118.030262][ T5878] loop3: detected capacity change from 0 to 32768 [ 118.098462][ T5878] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.638 (5878) [ 118.156536][ T5878] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.183357][ T5878] BTRFS info (device loop3): enabling ssd optimizations [ 118.231421][ T5878] BTRFS info (device loop3): turning off barriers [ 118.237887][ T5878] BTRFS info (device loop3): using free space tree [ 118.245734][ T5897] loop4: detected capacity change from 0 to 4096 [ 118.271525][ T5878] BTRFS info (device loop3): has skinny extents [ 118.317546][ T5901] autofs4:pid:5901:autofs_fill_super: called with bogus options [ 118.367267][ T5906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.545328][ T5912] loop2: detected capacity change from 0 to 1764 [ 118.588206][ T5895] loop0: detected capacity change from 0 to 8192 [ 118.657220][ T5912] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 119.441473][ T4243] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.571647][ T5956] loop2: detected capacity change from 0 to 4096 [ 119.632463][ T5956] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 119.733752][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 119.751634][ T4243] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 119.779898][ T5956] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 119.832806][ T5956] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 119.860965][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.881805][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.908329][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.918094][ T5956] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 119.976898][ T5956] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 120.008761][ T5956] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 120.024114][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.056277][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.079907][ T5956] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 120.101431][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.114573][ T5956] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 120.129136][ T5956] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 120.161531][ T5956] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 120.192793][ T5956] ntfs: volume version 3.1. [ 120.206983][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.221559][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.257368][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.361634][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.377326][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.408180][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.500431][ T5993] loop2: detected capacity change from 0 to 2048 [ 120.521744][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.541042][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.569795][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.587373][ T5993] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.630602][ T5993] NILFS (loop2): corrupt root inode [ 120.637249][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop2 [ 120.641958][ T5996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.701632][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.714268][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop2 [ 120.741421][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.771567][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.805152][ T5978] loop4: detected capacity change from 0 to 32768 [ 120.811562][ T5472] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.835925][ T5978] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.673 (5978) [ 120.892597][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.903662][ T5978] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 120.926556][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.948125][ T5978] BTRFS info (device loop4): force zlib compression, level 3 [ 120.965170][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.974954][ T5978] BTRFS info (device loop4): force clearing of disk cache [ 120.985529][ T5978] BTRFS info (device loop4): setting nodatasum [ 121.001435][ T5978] BTRFS info (device loop4): enabling disk space caching [ 121.034111][ T5978] BTRFS info (device loop4): disk space caching is enabled [ 121.062555][ T5978] BTRFS info (device loop4): has skinny extents [ 121.071702][ T5472] usb 4-1: Using ep0 maxpacket: 16 [ 121.081684][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.090629][ T4243] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.151451][ T4243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.191734][ T5472] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.211462][ T5472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.218959][ T5472] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 121.237260][ T5472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.263272][ T5472] usb 4-1: config 0 descriptor?? [ 121.337026][ T5984] loop0: detected capacity change from 0 to 32768 [ 121.357027][ T4243] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.366615][ T4243] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.431452][ T4243] usb 2-1: Product: syz [ 121.435654][ T4243] usb 2-1: Manufacturer: syz [ 121.440254][ T4243] usb 2-1: SerialNumber: syz [ 121.469539][ T5978] BTRFS info (device loop4): clearing free space tree [ 121.486995][ T5978] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.532080][ T4243] usb 2-1: config 0 descriptor?? [ 121.539249][ T5978] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.623327][ T6032] ptrace attach of "./syz-executor exec"[4183] was attempted by ""[6032] [ 121.644072][ T4243] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.724582][ T5472] thrustmaster 0003:044F:B304.0009: item fetching failed at offset 5/7 [ 121.744156][ T5472] thrustmaster 0003:044F:B304.0009: parse failed [ 121.750571][ T5472] thrustmaster: probe of 0003:044F:B304.0009 failed with error -22 [ 121.832657][ T5752] usb 2-1: USB disconnect, device number 6 [ 121.856863][ T5752] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 121.869612][ T4176] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (4176) [ 122.179854][ T5485] usb 4-1: USB disconnect, device number 7 [ 122.431611][ T4243] kernel write not supported for file /input/mice (pid: 4243 comm: kworker/0:5) [ 122.676262][ T6058] loop4: detected capacity change from 0 to 512 [ 122.743735][ T6057] loop0: detected capacity change from 0 to 64 [ 122.760533][ T6062] loop1: detected capacity change from 0 to 16 [ 122.776802][ T6060] loop3: detected capacity change from 0 to 1024 [ 123.148198][ T6052] loop2: detected capacity change from 0 to 131072 [ 123.201194][ T6052] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 123.209139][ T6052] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 123.209402][ T6062] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.245394][ T6060] hfsplus: bad catalog entry type [ 123.253712][ T6058] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2776: inode #11: comm syz.4.701: corrupted xattr block 95 [ 123.350551][ T6058] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.701: bg 0: block 7: invalid block bitmap [ 123.367073][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 123.375467][ T6052] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 123.390235][ T6052] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 123.432263][ T6058] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 123.453109][ T6058] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2942: inode #11: comm syz.4.701: corrupted xattr block 95 [ 123.496008][ T6058] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 123.571626][ T6058] EXT4-fs (loop4): 1 orphan inode deleted [ 123.578106][ T6058] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.603973][ T6071] loop3: detected capacity change from 0 to 64 [ 123.765925][ T6071] hfs: small file entry [ 124.342117][ T6096] loop0: detected capacity change from 0 to 32768 [ 124.399797][ T6096] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 124.408102][ T6096] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 124.423391][ T6096] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 124.423391][ T6096] bh = 34 (type: exp=5, found=4) [ 124.423391][ T6096] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 124.444111][ T6096] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 124.451504][ T6096] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 124.460642][ T6096] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 124.468970][ T6096] gfs2: fsid=syz:syz.s: File system withdrawn [ 124.475857][ T6096] CPU: 1 PID: 6096 Comm: syz.0.718 Not tainted syzkaller #0 [ 124.483164][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.493374][ T6096] Call Trace: [ 124.496671][ T6096] [ 124.499615][ T6096] dump_stack_lvl+0x168/0x230 [ 124.504315][ T6096] ? kobject_uevent_env+0x371/0x890 [ 124.509534][ T6096] ? show_regs_print_info+0x20/0x20 [ 124.514754][ T6096] ? load_image+0x3b0/0x3b0 [ 124.519278][ T6096] ? kobject_uevent_env+0x371/0x890 [ 124.524504][ T6096] gfs2_withdraw+0x111b/0x1460 [ 124.529304][ T6096] ? gfs2_lm+0x220/0x220 [ 124.533566][ T6096] ? gfs2_meta_read+0x7d4/0xa50 [ 124.538505][ T6096] ? gfs2_meta_read+0x7d4/0xa50 [ 124.543383][ T6096] ? gfs2_meta_new+0x160/0x160 [ 124.548164][ T6096] gfs2_metatype_check_ii+0x74/0x90 [ 124.553395][ T6096] gfs2_meta_buffer+0x262/0x310 [ 124.558283][ T6096] __fillup_metapath+0x14d/0x340 [ 124.563248][ T6096] __gfs2_iomap_get+0x703/0x13e0 [ 124.568224][ T6096] ? gfs2_alloc_extent+0x4f0/0x4f0 [ 124.573389][ T6096] ? rcu_is_watching+0x11/0xa0 [ 124.578338][ T6096] ? trace_gfs2_bmap+0x8a/0x1f0 [ 124.583204][ T6096] gfs2_block_map+0x229/0x670 [ 124.587912][ T6096] ? gfs2_iomap_end+0x6b0/0x6b0 [ 124.592776][ T6096] ? mark_lock+0x94/0x320 [ 124.597126][ T6096] ? verify_lock_unused+0x140/0x140 [ 124.602347][ T6096] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 124.608365][ T6096] ? lockdep_hardirqs_on+0x94/0x140 [ 124.613585][ T6096] gfs2_write_alloc_required+0x362/0x610 [ 124.619240][ T6096] ? __rwlock_init+0x140/0x140 [ 124.624030][ T6096] ? gfs2_map_journal_extents+0xaa0/0xaa0 [ 124.629787][ T6096] ? _raw_spin_unlock+0x24/0x40 [ 124.634655][ T6096] ? gfs2_glock_nq+0xcb0/0x1550 [ 124.639568][ T6096] gfs2_jdesc_check+0x1c3/0x290 [ 124.644445][ T6096] check_journal_clean+0x151/0x300 [ 124.649594][ T6096] ? gfs2_trans_remove_revoke+0x370/0x370 [ 124.655338][ T6096] ? check_journal_clean+0x10d/0x300 [ 124.660652][ T6096] ? __rwlock_init+0x140/0x140 [ 124.665440][ T6096] ? do_raw_spin_unlock+0x11d/0x230 [ 124.670668][ T6096] ? _raw_spin_unlock+0x24/0x40 [ 124.675619][ T6096] ? gfs2_jdesc_find+0xa7/0xc0 [ 124.680401][ T6096] init_journal+0x179c/0x2220 [ 124.685122][ T6096] ? end_bio_io_page+0x100/0x100 [ 124.690080][ T6096] ? vsnprintf+0x1905/0x1a00 [ 124.694799][ T6096] ? snprintf+0xd7/0x120 [ 124.699064][ T6096] ? init_journal+0x710/0x2220 [ 124.703843][ T6096] ? vscnprintf+0x80/0x80 [ 124.708187][ T6096] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 124.713319][ T6096] init_inodes+0xdb/0x320 [ 124.717672][ T6096] gfs2_fill_super+0x1701/0x1f50 [ 124.722641][ T6096] ? gfs2_reconfigure+0xcd0/0xcd0 [ 124.727682][ T6096] ? gfs2_glock_nq_num+0x82/0x1b0 [ 124.732720][ T6096] ? preempt_count_add+0x8d/0x190 [ 124.737772][ T6096] ? sb_set_blocksize+0xa5/0xe0 [ 124.742645][ T6096] get_tree_bdev+0x3f1/0x610 [ 124.747255][ T6096] ? gfs2_reconfigure+0xcd0/0xcd0 [ 124.752298][ T6096] gfs2_get_tree+0x4d/0x1e0 [ 124.756824][ T6096] vfs_get_tree+0x88/0x270 [ 124.761406][ T6096] do_new_mount+0x24a/0xa40 [ 124.765934][ T6096] __se_sys_mount+0x2d6/0x3c0 [ 124.770703][ T6096] ? __x64_sys_mount+0xc0/0xc0 [ 124.775578][ T6096] ? lockdep_hardirqs_on+0x94/0x140 [ 124.780799][ T6096] ? __x64_sys_mount+0x1c/0xc0 [ 124.785588][ T6096] do_syscall_64+0x4c/0xa0 [ 124.790013][ T6096] ? clear_bhb_loop+0x30/0x80 [ 124.794699][ T6096] ? clear_bhb_loop+0x30/0x80 [ 124.799565][ T6096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.805633][ T6096] RIP: 0033:0x7efdae8ffe6a [ 124.810066][ T6096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.819286][ T6110] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.724'. [ 124.829680][ T6096] RSP: 002b:00007efdacb64e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.829751][ T6096] RAX: ffffffffffffffda RBX: 00007efdacb64ef0 RCX: 00007efdae8ffe6a [ 124.829766][ T6096] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007efdacb64eb0 [ 124.829779][ T6096] RBP: 000020000001f680 R08: 00007efdacb64ef0 R09: 0000000000000084 [ 124.829792][ T6096] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 124.829804][ T6096] R13: 00007efdacb64eb0 R14: 000000000001f707 R15: 00002000000000c0 [ 124.829831][ T6096] [ 124.893484][ T6096] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 124.919747][ T6110] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 124.928363][ T6110] openvswitch: netlink: Message has 1 unknown bytes. [ 125.048834][ T6097] loop1: detected capacity change from 0 to 32768 [ 125.058445][ T6114] loop0: detected capacity change from 0 to 512 [ 125.065330][ T6112] loop4: detected capacity change from 0 to 512 [ 125.120258][ T6112] EXT4-fs (loop4): Ignoring removed oldalloc option [ 125.158643][ T6114] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.176114][ T6114] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 125.182192][ T6097] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.200648][ T6112] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,quota,oldalloc,barrier,,errors=continue. Quota mode: writeback. [ 125.248503][ T6112] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.339397][ T6097] (syz.1.720,6097,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 125.352806][ T6097] (syz.1.720,6097,0):ocfs2_group_add:503 ERROR: status = -22 [ 125.386935][ T6112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.726: bg 0: block 217: padding at end of block bitmap is not set [ 125.444930][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 125.457288][ T6112] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 125.491476][ T5485] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 125.528975][ T5465] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.577392][ T5465] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.735871][ T6127] fido_id[6127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.840817][ T6133] loop1: detected capacity change from 0 to 8192 [ 125.875791][ T5485] usb 4-1: config 0 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 125.888170][ T5485] usb 4-1: config 0 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.915319][ T5485] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.926919][ T6133] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 125.937865][ T5485] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 125.947327][ T6133] REISERFS (device loop1): using ordered data mode [ 125.961470][ T5485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.962126][ T6133] reiserfs: using flush barriers [ 125.971618][ T5485] usb 4-1: config 0 descriptor?? [ 125.991698][ T6122] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.000377][ T6133] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.020519][ T6133] REISERFS (device loop1): checking transaction log (loop1) [ 126.160308][ T6133] REISERFS (device loop1): Using tea hash to sort names [ 126.193139][ T6133] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 126.244744][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'. [ 126.321960][ T6154] loop4: detected capacity change from 0 to 4096 [ 126.361283][ T6154] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 126.490712][ T5485] wacom 0003:056A:0333.000B: hidraw0: USB HID v0.01 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0 [ 126.610802][ T6166] netlink: 'syz.1.747': attribute type 4 has an invalid length. [ 126.660692][ T5475] usb 4-1: USB disconnect, device number 8 [ 126.662590][ T6166] netlink: 'syz.1.747': attribute type 8 has an invalid length. [ 126.685536][ T6162] loop0: detected capacity change from 0 to 4096 [ 126.712130][ T6166] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.747'. [ 126.783598][ T6170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.828605][ T6162] ntfs: volume version 3.1. [ 126.853933][ T6162] __ntfs_error: 10 callbacks suppressed [ 126.854044][ T6162] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 126.882411][ T6162] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 126.957764][ T6175] loop4: detected capacity change from 0 to 512 [ 127.038986][ T6175] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 127.108044][ T6175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.117708][ T6175] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.751: iget: bad i_size value: 360287970189639680 [ 127.143471][ T6175] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.751: couldn't read orphan inode 15 (err -117) [ 127.143937][ T6175] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,barrier,nogrpid,max_dir_size_kb=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 127.214683][ T6175] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.751: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.216984][ T6194] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.751: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.267231][ T6199] loop2: detected capacity change from 0 to 512 [ 127.336066][ T6204] syz.0.765 (6204): /proc/6203/oom_adj is deprecated, please use /proc/6203/oom_score_adj instead. [ 127.379902][ T6199] EXT4-fs (loop2): Ignoring removed nobh option [ 127.395482][ T6199] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 127.478783][ T6199] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.490737][ T6199] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.761: iget: bad i_size value: 38620345925642 [ 127.546143][ T6212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.767'. [ 127.568183][ T6199] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.761: couldn't read orphan inode 15 (err -117) [ 127.616253][ T6214] loop4: detected capacity change from 0 to 1024 [ 127.633247][ T6199] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,nomblk_io_submit,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 127.809460][ T154] hfsplus: b-tree write err: -5, ino 4 [ 128.218357][ T6248] loop0: detected capacity change from 0 to 8192 [ 128.339138][ T6248] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 128.339209][ T6248] REISERFS (device loop0): using ordered data mode [ 128.339220][ T6248] reiserfs: using flush barriers [ 128.340345][ T6248] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.340642][ T6248] REISERFS (device loop0): checking transaction log (loop0) [ 128.354508][ T5485] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.359622][ T6248] REISERFS (device loop0): Using r5 hash to sort names [ 128.410144][ T6273] syz.4.797[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.410246][ T6273] syz.4.797[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.527526][ T6248] reiserfs: enabling write barrier flush mode [ 128.563915][ T6248] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.587352][ T6283] loop1: detected capacity change from 0 to 8 [ 128.594316][ T6248] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.619558][ T6248] REISERFS (device loop0): Remounting filesystem read-only [ 128.641461][ T5485] usb 4-1: Using ep0 maxpacket: 32 [ 128.663466][ T6248] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 128.685853][ T6287] loop2: detected capacity change from 0 to 128 [ 128.695401][ T6248] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.711146][ T6286] program syz.4.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.717314][ T6283] SQUASHFS error: Unable to read directory block [631:26] [ 128.729401][ T6248] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.754452][ T6248] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 128.768641][ T6248] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.793711][ T6248] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.809425][ T6248] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 128.834284][ T6287] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 128.843124][ T6248] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 128.855122][ T6287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.921728][ T5485] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 128.939026][ T5485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.978798][ T5485] usb 4-1: Product: syz [ 129.007219][ T5485] usb 4-1: Manufacturer: syz [ 129.030987][ T6248] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 129.038438][ T5485] usb 4-1: SerialNumber: syz [ 129.060739][ T6287] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 129.104219][ T6287] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 129.117801][ T5485] usb 4-1: config 0 descriptor?? [ 129.179060][ T5485] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 129.206764][ T4184] ------------[ cut here ]------------ [ 129.233701][ T4184] kernel BUG at fs/reiserfs/journal.c:1913! [ 129.257274][ T4184] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 129.263494][ T4184] CPU: 0 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 129.271044][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.281103][ T4184] RIP: 0010:do_journal_release+0x536/0x540 [ 129.286924][ T4184] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 34 46 be ff e9 ac fc ff ff e8 1a de 79 ff <0f> 0b e8 13 de 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 129.306537][ T4184] RSP: 0018:ffffc90002f1fb80 EFLAGS: 00010293 [ 129.312667][ T4184] RAX: ffffffff81fdedf6 RBX: ffff88807e656000 RCX: ffff88807a770000 [ 129.312685][ T4184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.312696][ T4184] RBP: ffffc90002f1fc78 R08: dffffc0000000000 R09: ffffc90002f1fbc0 [ 129.312708][ T4184] R10: fffff520005e3f7f R11: 1ffff920005e3f78 R12: ffffc900035a9000 [ 129.312721][ T4184] R13: 1ffff920005e3f74 R14: ffff88807e656678 R15: 0000000000000000 [ 129.312733][ T4184] FS: 0000555577918500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 129.312808][ T4184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.312819][ T4184] CR2: 00007f7b4bd6d000 CR3: 00000000644ec000 CR4: 00000000003506f0 [ 129.312833][ T4184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.312841][ T4184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.312849][ T4184] Call Trace: [ 129.312855][ T4184] [ 129.312862][ T4184] ? journal_release+0x30/0x30 [ 129.312886][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 129.312903][ T4184] journal_release+0x1b/0x30 [ 129.312920][ T4184] reiserfs_put_super+0x21e/0x480 [ 129.312934][ T4184] ? hook_inode_free_security+0xa0/0xa0 [ 129.312952][ T4184] ? reiserfs_dirty_inode+0x240/0x240 [ 129.312969][ T4184] ? reiserfs_dirty_inode+0x240/0x240 [ 129.312985][ T4184] generic_shutdown_super+0x130/0x300 [ 129.313002][ T4184] kill_block_super+0x7c/0xe0 [ 129.313018][ T4184] deactivate_locked_super+0x93/0xf0 [ 129.313043][ T4184] cleanup_mnt+0x418/0x4d0 [ 129.313059][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 129.313076][ T4184] task_work_run+0x125/0x1a0 [ 129.313096][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 129.313113][ T4184] exit_to_user_mode_prepare+0xee/0x180 [ 129.313131][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 129.313147][ T4184] do_syscall_64+0x58/0xa0 [ 129.313161][ T4184] ? clear_bhb_loop+0x30/0x80 [ 129.313176][ T4184] ? clear_bhb_loop+0x30/0x80 [ 129.313191][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.313206][ T4184] RIP: 0033:0x7efdae8ff9f7 [ 129.313220][ T4184] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 129.313234][ T4184] RSP: 002b:00007ffd29530588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.313252][ T4184] RAX: 0000000000000000 RBX: 00007efdae980d7d RCX: 00007efdae8ff9f7 [ 129.313262][ T4184] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd29530640 [ 129.313271][ T4184] RBP: 00007ffd29530640 R08: 0000000000000000 R09: 0000000000000000 [ 129.313279][ T4184] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd295316d0 [ 129.313290][ T4184] R13: 00007efdae980d7d R14: 000000000001f829 R15: 00007ffd29531710 [ 129.313307][ T4184] [ 129.313312][ T4184] Modules linked in: [ 129.313398][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.323020][ T4183] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 129.323182][ T4183] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 129.341501][ T4243] Bluetooth: hci2: command 0x0811 tx timeout [ 129.462009][ T4184] ---[ end trace 7082e018ffbaf9d6 ]--- [ 129.462030][ T4184] RIP: 0010:do_journal_release+0x536/0x540 [ 129.462066][ T4184] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 34 46 be ff e9 ac fc ff ff e8 1a de 79 ff <0f> 0b e8 13 de 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 129.462078][ T4184] RSP: 0018:ffffc90002f1fb80 EFLAGS: 00010293 [ 129.462092][ T4184] RAX: ffffffff81fdedf6 RBX: ffff88807e656000 RCX: ffff88807a770000 [ 129.462104][ T4184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.462113][ T4184] RBP: ffffc90002f1fc78 R08: dffffc0000000000 R09: ffffc90002f1fbc0 [ 129.462183][ T4184] R10: fffff520005e3f7f R11: 1ffff920005e3f78 R12: ffffc900035a9000 [ 129.462195][ T4184] R13: 1ffff920005e3f74 R14: ffff88807e656678 R15: 0000000000000000 [ 129.462206][ T4184] FS: 0000555577918500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 129.462219][ T4184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.462230][ T4184] CR2: 00007f9b04d66f98 CR3: 00000000644ec000 CR4: 00000000003506e0 [ 129.462245][ T4184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.462255][ T4184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.462303][ T4184] Kernel panic - not syncing: Fatal exception [ 129.462499][ T4184] Kernel Offset: disabled