last executing test programs: 4.320475193s ago: executing program 0 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 4.035690969s ago: executing program 3 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 3.459582082s ago: executing program 3 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400cc0004001e01090049"], 0x3c}}, 0x0) 3.229384074s ago: executing program 0 (id=657): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.221825274s ago: executing program 3 (id=666): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000013c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a9, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000380)=""/167, 0xa7) getdents64(r0, 0x0, 0x22) 2.996547925s ago: executing program 3 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 2.898105984s ago: executing program 0 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.651216147s ago: executing program 0 (id=662): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x72ea}]}) write$ppp(r0, &(0x7f0000000300)="1632", 0x2) 2.648295247s ago: executing program 3 (id=672): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5509, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x200}) fstatfs(r0, &(0x7f0000000440)=""/169) 2.539956327s ago: executing program 1 (id=663): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2.266760632s ago: executing program 0 (id=664): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0/file0\x00', 0x19400d1, &(0x7f0000000240)=ANY=[], 0x1, 0x120a, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.656143908s ago: executing program 0 (id=665): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) lseek(r0, 0x0, 0x4) 1.352504726s ago: executing program 1 (id=668): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.165698783s ago: executing program 2 (id=669): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000c000700020006000ac00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.079063731s ago: executing program 3 (id=670): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/41, 0x29) getdents64(r0, 0xfffffffffffffffe, 0x29) 896.941438ms ago: executing program 1 (id=671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090c00000000007baaf0ff00000000bf86000000000000a7080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000e4ffffb6050000080000001608000000000000bf9102000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 774.883089ms ago: executing program 1 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 693.927096ms ago: executing program 2 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000140)={'pim6reg1\x00', @random="ee192f5f1e71"}) 627.295042ms ago: executing program 1 (id=675): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 499.094314ms ago: executing program 4 (id=603): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 498.247364ms ago: executing program 2 (id=685): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) connect$unix(r0, &(0x7f0000000e40)=@file={0x1, './file1\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) 351.052168ms ago: executing program 1 (id=676): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6611) 350.948767ms ago: executing program 2 (id=677): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x72ea}]}) write$ppp(r0, &(0x7f0000000300)="1632", 0x2) 350.696168ms ago: executing program 4 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x720, &(0x7f00000002c0)={0x0}) 269.306485ms ago: executing program 4 (id=679): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x1, {{0xa, 0x1, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 191.044972ms ago: executing program 4 (id=680): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 190.035752ms ago: executing program 2 (id=691): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000002100)={'macvlan1'}, 0xb) 37.325097ms ago: executing program 4 (id=681): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 570.53µs ago: executing program 2 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) 0s ago: executing program 4 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32}}) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 60.476978][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.517181][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.526988][ T2619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.564579][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.573190][ T2619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.585150][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.596329][ T3572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.606385][ T3572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.615250][ T3572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.625411][ T3572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.798073][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.843813][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.880209][ T3675] loop0: detected capacity change from 0 to 64 [ 60.894657][ T2619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.918037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.926327][ T2619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.948147][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.978664][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.990016][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.012772][ T2619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.014626][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.044523][ T2619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.085509][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.279535][ T3686] loop2: detected capacity change from 0 to 512 [ 61.329011][ T3664] loop1: detected capacity change from 0 to 32768 [ 61.403700][ T3664] ======================================================= [ 61.403700][ T3664] WARNING: The mand mount option has been deprecated and [ 61.403700][ T3664] and is ignored by this kernel. Remove the mand [ 61.403700][ T3664] option from the mount to silence this warning. [ 61.403700][ T3664] ======================================================= [ 61.438573][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.482249][ T3695] raw_sendmsg: syz.3.22 forgot to set AF_INET. Fix it! [ 61.484619][ T3686] EXT4-fs error (device loop2): __ext4_iget:4872: inode #14: block 1886221359: comm syz.2.19: invalid block [ 61.503981][ T3651] Bluetooth: hci4: command 0x0419 tx timeout [ 61.510677][ T3651] Bluetooth: hci1: command 0x0419 tx timeout [ 61.517198][ T3651] Bluetooth: hci3: command 0x0419 tx timeout [ 61.524586][ T3651] Bluetooth: hci0: command 0x0419 tx timeout [ 61.540557][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 61.551553][ T3686] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.19: couldn't read orphan inode 14 (err -117) [ 61.564376][ T3701] loop0: detected capacity change from 0 to 256 [ 61.566716][ T3686] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.583483][ T3686] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 61.594069][ T3651] Bluetooth: hci2: command 0x0419 tx timeout [ 61.604529][ T3701] exfat: Deprecated parameter 'utf8' [ 61.610010][ T3701] exfat: Deprecated parameter 'utf8' [ 61.698245][ T3701] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 62.163266][ T3651] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.223575][ T3618] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.250337][ T3724] loop1: detected capacity change from 0 to 128 [ 62.297894][ T3727] loop3: detected capacity change from 0 to 256 [ 62.339942][ T3724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.352424][ T3724] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 62.411420][ T3724] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 62.573920][ T3651] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.619064][ T3651] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.630232][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.657422][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.681823][ T3651] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.701942][ T3618] usb 3-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 62.725936][ T3651] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.738130][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.759015][ T3618] usb 3-1: config 0 descriptor?? [ 62.868362][ T3742] loop0: detected capacity change from 0 to 4096 [ 62.881770][ T3651] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.912790][ T3651] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.931214][ T3651] usb 5-1: Product: syz [ 62.936450][ T3751] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 62.951467][ T3651] usb 5-1: Manufacturer: syz [ 63.014444][ T3651] cdc_wdm 5-1:1.0: skipping garbage [ 63.023650][ T3651] cdc_wdm 5-1:1.0: skipping garbage [ 63.046562][ T3651] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 63.052682][ T3651] cdc_wdm 5-1:1.0: Unknown control protocol [ 63.134342][ T3742] ntfs3: loop0: ino=1f, "file2" The size of extended attributes must not exceed 64KiB [ 63.191862][ T3757] autofs4:pid:3757:autofs_fill_super: pipe file descriptor does not contain proper ops [ 63.277929][ T3618] hid-generic 0003:05AC:0062.0001: unbalanced delimiter at end of report description [ 63.304236][ T3616] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.316167][ T3618] hid-generic: probe of 0003:05AC:0062.0001 failed with error -22 [ 63.333252][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 63.339540][ T3618] usb 5-1: USB disconnect, device number 2 [ 63.340245][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 63.352082][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 63.375770][ T3761] device netdevsim0 entered promiscuous mode [ 63.437376][ T3765] loop0: detected capacity change from 0 to 128 [ 63.529703][ T23] usb 3-1: USB disconnect, device number 2 [ 63.574105][ T3616] usb 4-1: Using ep0 maxpacket: 32 [ 63.607825][ T3771] openvswitch: netlink: Missing key (keys=40, expected=100) [ 63.693240][ T3616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.705873][ T3616] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 63.715706][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.749180][ T3616] usb 4-1: config 0 descriptor?? [ 63.983908][ T3791] loop1: detected capacity change from 0 to 1024 [ 64.033081][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.065630][ T3791] hfsplus: request for non-existent node 3 in B*Tree [ 64.072790][ T3791] hfsplus: request for non-existent node 3 in B*Tree [ 64.237057][ T3616] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 64.281172][ T3616] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 64.320349][ T3616] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0002/input/input5 [ 64.322893][ T3803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 64.395733][ T3807] loop1: detected capacity change from 0 to 64 [ 64.413303][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.439539][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.465546][ T3616] usb 4-1: USB disconnect, device number 2 [ 64.472293][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 64.494305][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.532770][ T23] usb 1-1: config 0 descriptor?? [ 64.685468][ T3814] loop1: detected capacity change from 0 to 64 [ 64.714745][ T3573] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 64.902134][ T3812] loop4: detected capacity change from 0 to 32768 [ 65.021313][ T3812] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.75 (3812) [ 65.039537][ T23] wacom 0003:056A:032B.0003: unknown main item tag 0x0 [ 65.048234][ T23] wacom 0003:056A:032B.0003: unknown main item tag 0x0 [ 65.069111][ T23] wacom 0003:056A:032B.0003: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.0-1/input0 [ 65.093203][ T3573] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 65.115403][ T3573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.130843][ T3573] usb 3-1: config 0 descriptor?? [ 65.137341][ T3812] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 65.162520][ T3812] BTRFS info (device loop4): using free space tree [ 65.169503][ T3812] BTRFS info (device loop4): has skinny extents [ 65.194990][ T3573] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 65.242052][ T23] usb 1-1: USB disconnect, device number 2 [ 65.321627][ T3839] netlink: 288 bytes leftover after parsing attributes in process `syz.1.83'. [ 65.370570][ T3846] netlink: 'syz.3.84': attribute type 7 has an invalid length. [ 65.403127][ T3573] gp8psk: usb in 128 operation failed. [ 65.420681][ T3812] BTRFS info (device loop4): enabling ssd optimizations [ 65.673203][ T3573] gp8psk: FW Version = 241.01.130 (0xf10182) Build 2088/100/55 [ 65.842558][ T3871] loop0: detected capacity change from 0 to 1024 [ 65.913547][ T3573] gp8psk: usb in 149 operation failed. [ 65.919143][ T3573] gp8psk: failed to get FPGA version [ 65.981364][ T3573] gp8psk: usb in 138 operation failed. [ 66.043920][ T3573] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 66.126353][ T3573] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 66.193041][ T3573] usb 3-1: USB disconnect, device number 3 [ 66.269505][ T3882] bridge0: port 3(syz_tun) entered blocking state [ 66.323219][ T3882] bridge0: port 3(syz_tun) entered disabled state [ 66.363140][ T3882] device syz_tun entered promiscuous mode [ 66.386146][ T3882] bridge0: port 3(syz_tun) entered blocking state [ 66.393014][ T3882] bridge0: port 3(syz_tun) entered forwarding state [ 66.421077][ T3888] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 66.539085][ T3868] loop1: detected capacity change from 0 to 32768 [ 66.651891][ T3868] JBD2: Ignoring recovery information on journal [ 66.701871][ T3868] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 66.762735][ T26] audit: type=1804 audit(1727300910.565:2): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.91" name="/newroot/34/file1/file1" dev="loop1" ino=16946 res=1 errno=0 [ 66.813268][ T3616] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.849147][ T3570] ocfs2: Unmounting device (7,1) on (node local) [ 66.886533][ T3902] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 66.969625][ T3902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.001603][ T3902] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 67.087770][ T3910] loop3: detected capacity change from 0 to 64 [ 67.130687][ T3913] loop0: detected capacity change from 0 to 1024 [ 67.190780][ T3616] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 67.210117][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.229205][ T3616] usb 3-1: config 0 descriptor?? [ 67.274548][ T3616] cp210x 3-1:0.0: cp210x converter detected [ 67.713199][ T3616] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 67.760294][ T3616] usb 3-1: cp210x converter now attached to ttyUSB0 [ 67.883015][ T3573] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.957100][ T3878] usb 3-1: USB disconnect, device number 4 [ 67.994882][ T3878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 68.011609][ T3878] cp210x 3-1:0.0: device disconnected [ 68.011930][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 68.131549][ T3573] usb 2-1: Using ep0 maxpacket: 8 [ 68.197530][ T3959] loop3: detected capacity change from 0 to 512 [ 68.244582][ T3961] loop0: detected capacity change from 0 to 64 [ 68.253307][ T3573] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 68.267557][ T3573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.287617][ T3573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.307642][ T3573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.307927][ T3959] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 68.328724][ T3573] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.331054][ T3959] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 68.369340][ T3966] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 68.429374][ T3573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.464529][ T3573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.783171][ T3573] usb 2-1: GET_CAPABILITIES returned 0 [ 68.789992][ T3573] usbtmc 2-1:16.0: can't read capabilities [ 68.871815][ T3986] loop3: detected capacity change from 0 to 256 [ 68.900375][ T3985] Falling back ldisc for ptm0. [ 68.910095][ T3986] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 68.955147][ T3988] loop2: detected capacity change from 0 to 1024 [ 69.001165][ T3877] usb 2-1: USB disconnect, device number 2 [ 69.115639][ T3994] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.148756][ T3994] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 69.513182][ T3573] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.640721][ T3586] Bluetooth: hci5: sending frame failed (-49) [ 69.811891][ T4012] loop0: detected capacity change from 0 to 32768 [ 69.861205][ T4012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (4012) [ 69.881976][ T4012] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 69.891673][ T4012] BTRFS info (device loop0): using free space tree [ 69.898734][ T3573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 69.913914][ T4012] BTRFS info (device loop0): has skinny extents [ 69.945760][ T4012] BTRFS info (device loop0): enabling ssd optimizations [ 70.016622][ T1076] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.076042][ T3573] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=61.5b [ 70.086152][ T3573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.094457][ T3573] usb 4-1: Product: syz [ 70.098776][ T3573] usb 4-1: Manufacturer: syz [ 70.103520][ T3573] usb 4-1: SerialNumber: syz [ 70.114168][ T3573] usb 4-1: config 0 descriptor?? [ 70.123308][ T4047] fuse: Invalid user_id [ 70.252570][ T4053] loop4: detected capacity change from 0 to 16 [ 70.328279][ T1076] usb 2-1: Using ep0 maxpacket: 8 [ 70.330188][ T4053] erofs: (device loop4): mounted with root inode @ nid 36. [ 70.360098][ T3573] usb 4-1: USB disconnect, device number 3 [ 70.385052][ T4053] attempt to access beyond end of device [ 70.385052][ T4053] loop4: rw=524288, want=312, limit=16 [ 70.397707][ T4053] attempt to access beyond end of device [ 70.397707][ T4053] loop4: rw=524288, want=320, limit=16 [ 70.477092][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.495452][ T1076] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.507509][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.523816][ T1076] usb 2-1: config 0 descriptor?? [ 70.609353][ T4064] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.804958][ T1076] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 70.853119][ T4058] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.949154][ T4072] netlink: 'syz.3.167': attribute type 11 has an invalid length. [ 70.959458][ T4072] netlink: 'syz.3.167': attribute type 11 has an invalid length. [ 70.967606][ T4072] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.167'. [ 70.977395][ T4070] loop0: detected capacity change from 0 to 32768 [ 71.030036][ T4070] [ 71.030036][ T4070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.030036][ T4070] [ 71.055356][ T1076] usb 2-1: USB disconnect, device number 3 [ 71.068385][ T1076] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 71.095352][ T4070] find_entry called with index = 0 [ 71.109660][ T4070] read_mapping_page failed! [ 71.116145][ T4070] ERROR: (device loop0): txCommit: [ 71.116145][ T4070] [ 71.133144][ T4058] usb 5-1: Using ep0 maxpacket: 16 [ 71.151973][ T3568] [ 71.151973][ T3568] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.151973][ T3568] [ 71.170230][ T3568] [ 71.170230][ T3568] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.170230][ T3568] [ 71.190631][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197332][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.273057][ T4058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.390819][ T4076] sg_write: process 97 (syz.0.169) changed security contexts after opening file descriptor, this is not allowed. [ 71.410455][ T4076] program syz.0.169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.473220][ T4058] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 71.482308][ T4058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.491569][ T4058] usb 5-1: Product: syz [ 71.495795][ T4058] usb 5-1: Manufacturer: syz [ 71.500394][ T4058] usb 5-1: SerialNumber: syz [ 71.510448][ T4058] usb 5-1: config 0 descriptor?? [ 71.565267][ T4058] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 71.618981][ T4080] loop1: detected capacity change from 0 to 1024 [ 71.667733][ T3584] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 71.673091][ T1076] Bluetooth: hci5: command 0xfc11 tx timeout [ 71.795533][ T4085] attempt to access beyond end of device [ 71.795533][ T4085] loop1: rw=0, want=5780, limit=1024 [ 71.821435][ T4080] attempt to access beyond end of device [ 71.821435][ T4080] loop1: rw=0, want=5780, limit=1024 [ 71.841243][ T4080] attempt to access beyond end of device [ 71.841243][ T4080] loop1: rw=0, want=5780, limit=1024 [ 71.923049][ T3573] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.984610][ T4091] sctp: [Deprecated]: syz.1.176 (pid 4091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.984610][ T4091] Use struct sctp_sack_info instead [ 72.051845][ T4093] loop1: detected capacity change from 0 to 256 [ 72.115281][ T4093] FAT-fs (loop1): Directory bread(block 64) failed [ 72.122480][ T4093] FAT-fs (loop1): Directory bread(block 65) failed [ 72.133091][ T4093] FAT-fs (loop1): Directory bread(block 66) failed [ 72.139760][ T4093] FAT-fs (loop1): Directory bread(block 67) failed [ 72.146436][ T4093] FAT-fs (loop1): Directory bread(block 68) failed [ 72.154382][ T4093] FAT-fs (loop1): Directory bread(block 69) failed [ 72.156722][ T3808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.160985][ T4093] FAT-fs (loop1): Directory bread(block 70) failed [ 72.168622][ T3573] usb 1-1: Using ep0 maxpacket: 8 [ 72.175721][ T4093] FAT-fs (loop1): Directory bread(block 71) failed [ 72.187425][ T4093] FAT-fs (loop1): Directory bread(block 72) failed [ 72.194193][ T4093] FAT-fs (loop1): Directory bread(block 73) failed [ 72.302609][ T4089] loop2: detected capacity change from 0 to 32768 [ 72.454066][ T4058] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 72.460944][ T4058] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 72.464883][ T3573] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 72.497736][ T3573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.525539][ T4058] usb 5-1: USB disconnect, device number 3 [ 72.528220][ T3573] usb 1-1: Product: syz [ 72.548582][ T3573] usb 1-1: Manufacturer: syz [ 72.553584][ T3808] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.573119][ T3573] usb 1-1: SerialNumber: syz [ 72.583575][ T3808] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.596110][ T3573] usb 1-1: config 0 descriptor?? [ 72.613055][ T3808] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.632554][ T3808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.642631][ T3573] option 1-1:0.0: GSM modem (1-port) converter detected [ 72.693402][ T4087] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 72.733596][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 72.847372][ T4058] usb 1-1: USB disconnect, device number 3 [ 72.868579][ T4058] option 1-1:0.0: device disconnected [ 73.015117][ T23] usb 4-1: USB disconnect, device number 4 [ 73.046716][ T4114] loop1: detected capacity change from 0 to 1024 [ 73.529218][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 73.800074][ T4111] loop2: detected capacity change from 0 to 40427 [ 73.833248][ T4058] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.876005][ T4111] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 73.903614][ T4111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.944821][ T4111] F2FS-fs (loop2): invalid crc value [ 73.969350][ T4111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.111541][ T4111] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.123980][ T4111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.153384][ T4058] usb 2-1: Using ep0 maxpacket: 16 [ 74.168275][ T4111] attempt to access beyond end of device [ 74.168275][ T4111] loop2: rw=2049, want=53256, limit=40427 [ 74.224803][ T3569] attempt to access beyond end of device [ 74.224803][ T3569] loop2: rw=2049, want=45104, limit=40427 [ 74.231780][ T4134] loop0: detected capacity change from 0 to 32768 [ 74.264383][ T4134] XFS: ikeep mount option is deprecated. [ 74.306380][ T4058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.349462][ T4058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.371606][ T4058] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 74.426699][ T4058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.460579][ T4058] usb 2-1: config 0 descriptor?? [ 74.473734][ T4134] XFS (loop0): Mounting V5 Filesystem [ 74.678569][ T4134] XFS (loop0): Ending clean mount [ 74.716604][ T4134] XFS (loop0): Quotacheck needed: Please wait. [ 74.852791][ T4134] XFS (loop0): Quotacheck: Done. [ 74.897071][ T26] audit: type=1800 audit(1727300918.705:3): pid=4134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="bus" dev="loop0" ino=9290 res=0 errno=0 [ 74.936949][ T4058] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 74.960951][ T4192] loop2: detected capacity change from 0 to 64 [ 74.969059][ T4058] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 75.040643][ T3568] XFS (loop0): Unmounting Filesystem [ 75.048581][ T4196] loop3: detected capacity change from 0 to 128 [ 75.168277][ T4058] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: db. [ 75.341012][ T144] attempt to access beyond end of device [ 75.341012][ T144] loop3: rw=1, want=1041, limit=128 [ 75.373806][ T23] usb 2-1: USB disconnect, device number 4 [ 75.702751][ T4224] netlink: 'syz.0.220': attribute type 5 has an invalid length. [ 76.204275][ T4246] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 76.306860][ T1073] cfg80211: failed to load regulatory.db [ 76.640491][ T4256] loop1: detected capacity change from 0 to 190 [ 76.710044][ T4213] loop3: detected capacity change from 0 to 32768 [ 76.739567][ T4256] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 76.781230][ T4256] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 76.811410][ T4256] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 76.837766][ T4213] XFS: ikeep mount option is deprecated. [ 76.847339][ T4213] XFS: noikeep mount option is deprecated. [ 76.862200][ T4256] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 76.892243][ T4256] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 76.977006][ T4213] XFS (loop3): Mounting V5 Filesystem [ 77.055382][ T4256] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 77.103572][ T4230] loop0: detected capacity change from 0 to 32768 [ 77.132179][ T4256] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 77.193530][ T4230] XFS: ikeep mount option is deprecated. [ 77.207140][ T4213] XFS (loop3): Ending clean mount [ 77.228518][ T4256] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 77.252558][ T4256] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 77.271580][ T4213] XFS (loop3): Quotacheck needed: Please wait. [ 77.283891][ T4256] ntfs: volume version 3.1. [ 77.302858][ T4256] attempt to access beyond end of device [ 77.302858][ T4256] loop1: rw=0, want=560, limit=190 [ 77.396706][ T4250] loop2: detected capacity change from 0 to 40427 [ 77.411630][ T4248] loop4: detected capacity change from 0 to 32768 [ 77.412431][ T4230] XFS (loop0): Mounting V5 Filesystem [ 77.441364][ T4256] attempt to access beyond end of device [ 77.441364][ T4256] loop1: rw=0, want=568, limit=190 [ 77.443609][ T4213] XFS (loop3): Quotacheck: Done. [ 77.463556][ T4256] attempt to access beyond end of device [ 77.463556][ T4256] loop1: rw=0, want=568, limit=190 [ 77.487094][ T4250] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 77.488948][ T4248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.242 (4248) [ 77.509190][ T4250] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.561661][ T4248] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 77.572208][ T4248] BTRFS info (device loop4): setting nodatacow, compression disabled [ 77.580945][ T4248] BTRFS info (device loop4): enabling auto defrag [ 77.587727][ T4248] BTRFS info (device loop4): max_inline at 0 [ 77.593848][ T4248] BTRFS info (device loop4): using free space tree [ 77.600661][ T4248] BTRFS info (device loop4): has skinny extents [ 77.638361][ T4250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.642443][ T4230] XFS (loop0): Ending clean mount [ 77.655712][ T3571] XFS (loop3): Unmounting Filesystem [ 77.662407][ T4230] XFS (loop0): Quotacheck needed: Please wait. [ 77.747113][ T4284] loop1: detected capacity change from 0 to 1024 [ 77.839653][ T4250] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.847466][ T4230] XFS (loop0): Quotacheck: Done. [ 77.863922][ T4250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.079445][ T3568] XFS (loop0): Unmounting Filesystem [ 78.211929][ T4248] BTRFS info (device loop4): Snapshot src from another FS [ 78.252433][ T4303] loop1: detected capacity change from 0 to 16 [ 78.359186][ T4303] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.478674][ T4307] loop3: detected capacity change from 0 to 512 [ 78.679321][ T4307] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 78.698370][ T4307] EXT4-fs (loop3): 1 truncate cleaned up [ 78.707129][ T4307] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 78.743732][ T4319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 78.752720][ T4319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 79.013388][ T4321] capability: warning: `syz.4.260' uses deprecated v2 capabilities in a way that may be insecure [ 79.123710][ T4328] loop0: detected capacity change from 0 to 16 [ 79.180601][ T4328] erofs: (device loop0): mounted with root inode @ nid 36. [ 79.278457][ T4335] loop4: detected capacity change from 0 to 8 [ 79.342669][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.368000][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 79.382022][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 79.447246][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.601752][ T4346] loop0: detected capacity change from 0 to 8 [ 79.629938][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.712079][ T4346] SQUASHFS error: zstd decompression error: 2 [ 79.736132][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.739033][ T4346] SQUASHFS error: zstd decompression failed, data probably corrupt [ 79.797234][ T4346] SQUASHFS error: Failed to read block 0x62b: -5 [ 79.840344][ T4351] SQUASHFS error: Unable to read metadata cache entry [629] [ 79.858838][ T4344] loop4: detected capacity change from 0 to 8192 [ 79.886008][ T4346] SQUASHFS error: Unable to read metadata cache entry [629] [ 79.902554][ T4351] SQUASHFS error: Unable to read directory block [629:ff26] [ 79.914867][ T4346] SQUASHFS error: Unable to read directory block [629:ff26] [ 80.032380][ T4344] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 80.075661][ T4344] REISERFS (device loop4): using ordered data mode [ 80.082290][ T4344] reiserfs: using flush barriers [ 80.100793][ T4344] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.120277][ T4344] REISERFS (device loop4): checking transaction log (loop4) [ 80.175140][ T4344] REISERFS (device loop4): Using r5 hash to sort names [ 80.203057][ T4364] loop0: detected capacity change from 0 to 164 [ 80.213931][ T4344] REISERFS (device loop4): using 3.5.x disk format [ 80.249390][ T4344] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 80.297482][ T4368] Process accounting resumed [ 80.397734][ T4371] loop2: detected capacity change from 0 to 64 [ 80.589162][ T4381] loop0: detected capacity change from 0 to 8 [ 80.683306][ T4381] squashfs image failed sanity check [ 80.721052][ T4387] loop3: detected capacity change from 0 to 4096 [ 80.776446][ T4354] chnl_net:caif_netlink_parms(): no params data found [ 80.867508][ T4387] ntfs: volume version 3.1. [ 81.083674][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.123013][ T21] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 81.136406][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.150807][ T4354] device bridge_slave_0 entered promiscuous mode [ 81.235714][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253091][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.261193][ T4354] device bridge_slave_1 entered promiscuous mode [ 81.363126][ T4057] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.404922][ T4354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.493286][ T21] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 81.506025][ T4354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.516043][ T21] usb 3-1: config 0 has no interface number 0 [ 81.522774][ T21] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 81.543104][ T21] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 81.557435][ T21] usb 3-1: config 0 interface 255 has no altsetting 0 [ 81.564516][ T21] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 81.573956][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.596316][ T21] usb 3-1: config 0 descriptor?? [ 81.637518][ T21] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 81.644700][ T4057] usb 1-1: Using ep0 maxpacket: 16 [ 81.803764][ T4057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 81.822618][ T4354] team0: Port device team_slave_0 added [ 81.841383][ T4313] usb 3-1: USB disconnect, device number 5 [ 81.862241][ T4354] team0: Port device team_slave_1 added [ 81.991835][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 82.020282][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.033381][ T4057] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 82.041266][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.058813][ T4057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.092535][ T4354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.099425][ T4057] usb 1-1: Product: syz [ 82.107306][ T4057] usb 1-1: Manufacturer: syz [ 82.111910][ T4057] usb 1-1: SerialNumber: syz [ 82.123076][ T4057] usb 1-1: config 0 descriptor?? [ 82.160135][ T4057] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 82.173457][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.180417][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.233420][ T4057] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 82.301252][ T4437] loop4: detected capacity change from 0 to 128 [ 82.307690][ T4354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.326271][ T4437] EXT4-fs (loop4): Ignoring removed nobh option [ 82.401467][ T4437] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 82.443708][ T4437] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038 (0x7fffffff) [ 82.450606][ T4434] loop3: detected capacity change from 0 to 4096 [ 82.478828][ T4354] device hsr_slave_0 entered promiscuous mode [ 82.509491][ T4354] device hsr_slave_1 entered promiscuous mode [ 82.560076][ T4434] __ntfs_error: 9 callbacks suppressed [ 82.560093][ T4434] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 3. [ 82.588027][ T4434] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 82.615744][ T4354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.635691][ T4354] Cannot create hsr debugfs directory [ 82.656808][ T144] device hsr_slave_0 left promiscuous mode [ 82.663571][ T4434] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 82.681068][ T144] device hsr_slave_1 left promiscuous mode [ 82.686055][ T4434] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 82.716641][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.741497][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.746844][ T4434] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 82.805494][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.812582][ T4434] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 82.833250][ T4057] em28xx 1-1:0.0: chip ID is em2882/3 [ 82.845248][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.880926][ T144] device bridge_slave_1 left promiscuous mode [ 82.907496][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.965019][ T144] device bridge_slave_0 left promiscuous mode [ 82.981980][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.034885][ T144] device veth1_macvtap left promiscuous mode [ 83.041496][ T144] device veth0_macvtap left promiscuous mode [ 83.047843][ T144] device veth1_vlan left promiscuous mode [ 83.064914][ T144] device veth0_vlan left promiscuous mode [ 83.186689][ T4057] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 83.195591][ T4057] em28xx 1-1:0.0: board has no eeprom [ 83.244399][ T4470] loop3: detected capacity change from 0 to 4096 [ 83.353753][ T4057] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 83.366425][ T4057] em28xx 1-1:0.0: dvb set to bulk mode. [ 83.395926][ T4057] usb 1-1: USB disconnect, device number 4 [ 83.406472][ T4056] em28xx 1-1:0.0: Binding DVB extension [ 83.440032][ T4057] em28xx 1-1:0.0: Disconnecting em28xx [ 83.490103][ T4056] em28xx 1-1:0.0: Registering input extension [ 83.613209][ T4056] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 83.623049][ T4056] Registered IR keymap rc-empty [ 83.663702][ T4056] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 83.740776][ T4056] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 83.796933][ T4474] loop3: detected capacity change from 0 to 32768 [ 83.826600][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.838878][ T4056] em28xx 1-1:0.0: Input extension successfully initialized [ 83.849031][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.898663][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.907097][ T4057] em28xx 1-1:0.0: Closing input extension [ 83.945632][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.008034][ T4057] em28xx 1-1:0.0: Freeing device [ 84.066027][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 84.108001][ T144] bond0 (unregistering): Released all slaves [ 84.169561][ T4464] tap0: tun_chr_ioctl cmd 35111 [ 84.299543][ T4484] loop4: detected capacity change from 0 to 2048 [ 84.534473][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.953927][ T4513] loop3: detected capacity change from 0 to 2048 [ 85.072287][ T4513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.396323][ T4485] loop0: detected capacity change from 0 to 32768 [ 85.503886][ T4534] loop2: detected capacity change from 0 to 256 [ 85.553758][ T4485] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 85.562341][ T4485] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 85.577601][ T4544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.598020][ T4534] exfat: Deprecated parameter 'utf8' [ 85.605491][ T4534] exfat: Deprecated parameter 'utf8' [ 85.611449][ T4534] exfat: Deprecated parameter 'utf8' [ 85.629394][ T4546] sock: sock_timestamping_bind_phc: sock not bind to device [ 85.658562][ T4485] XFS (loop0): Mounting V5 Filesystem [ 85.660364][ T4534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 85.822205][ T4354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.919158][ T4485] XFS (loop0): Ending clean mount [ 85.945717][ T4354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.955179][ T4485] XFS (loop0): Quotacheck needed: Please wait. [ 85.969903][ T4354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.000088][ T4354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.097758][ T4485] XFS (loop0): Quotacheck: Done. [ 86.143219][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 86.353961][ T3568] XFS (loop0): Unmounting Filesystem [ 86.360671][ T4354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.402203][ T4572] sp0: Synchronizing with TNC [ 86.605146][ T4581] loop2: detected capacity change from 0 to 512 [ 86.631044][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.645431][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.666928][ T4354] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.683095][ T4581] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.749307][ T4581] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.765842][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.785291][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.813061][ T4581] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 86.824074][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.833904][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.841809][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.885257][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.944005][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.979746][ T4581] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.337: invalid indirect mapped block 4294967295 (level 0) [ 86.997220][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.004533][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.070501][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.096555][ T4581] EXT4-fs (loop2): Remounting filesystem read-only [ 87.136606][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.145433][ T4581] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.337: invalid indirect mapped block 4294967295 (level 1) [ 87.168171][ T4600] loop3: detected capacity change from 0 to 2048 [ 87.184482][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.204726][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.261055][ T4581] EXT4-fs (loop2): 1 orphan inode deleted [ 87.270299][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.289969][ T4581] EXT4-fs (loop2): 1 truncate cleaned up [ 87.320431][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.334770][ T4581] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 87.384726][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.414425][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.428279][ T4597] loop4: detected capacity change from 0 to 4096 [ 87.436097][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.493851][ T4354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.522114][ T3571] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 87.557449][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.570982][ T3571] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 87.607717][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.627005][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.663925][ T4597] ntfs: volume version 3.1. [ 87.799649][ T4611] netlink: 'syz.2.344': attribute type 7 has an invalid length. [ 88.021420][ T4618] loop2: detected capacity change from 0 to 64 [ 88.035698][ T4615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 88.223309][ T3616] Bluetooth: hci2: command 0x0419 tx timeout [ 88.235305][ T4627] ALSA: mixer_oss: invalid OSS volume '' [ 88.267440][ T4632] loop0: detected capacity change from 0 to 1024 [ 88.315507][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.333076][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.378815][ T4354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.519592][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.562853][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.615688][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.693760][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.722870][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.741279][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.781083][ T4354] device veth0_vlan entered promiscuous mode [ 88.855753][ T4354] device veth1_vlan entered promiscuous mode [ 88.885474][ T3872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.992325][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.010118][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.054608][ T4354] device veth0_macvtap entered promiscuous mode [ 89.091086][ T4354] device veth1_macvtap entered promiscuous mode [ 89.163299][ T3872] usb 5-1: Using ep0 maxpacket: 8 [ 89.204060][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.243076][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.270678][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.283674][ T3872] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 89.291993][ T3872] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 89.332366][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.338111][ T3872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 89.364824][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.378543][ T3872] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 89.389623][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.413031][ T3872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 89.431207][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.449192][ T3872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.459251][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.481674][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.483795][ T3872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 89.526414][ T4635] loop2: detected capacity change from 0 to 32768 [ 89.549818][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.578628][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.619863][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.629829][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.646811][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.677750][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.703812][ T4635] XFS (loop2): Mounting V5 Filesystem [ 89.709180][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.742584][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.754996][ T3872] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 89.764725][ T3872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.773179][ T3872] usb 5-1: Product: syz [ 89.777357][ T3872] usb 5-1: Manufacturer: syz [ 89.782126][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.793074][ T3872] usb 5-1: SerialNumber: syz [ 89.801804][ T3872] usb 5-1: config 0 descriptor?? [ 89.808566][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.819202][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.831300][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.843350][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.850674][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.855618][ T3872] hub 5-1:0.0: bad descriptor, ignoring hub [ 89.865505][ T3872] hub: probe of 5-1:0.0 failed with error -5 [ 89.876691][ T3872] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 89.901056][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.916211][ T4635] XFS (loop2): Ending clean mount [ 89.929190][ T4354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.941334][ T4354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.964081][ T4635] XFS (loop2): Quotacheck needed: Please wait. [ 89.971989][ T4354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.003459][ T4354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.111566][ T4635] XFS (loop2): Quotacheck: Done. [ 90.127858][ T4641] udc-core: couldn't find an available UDC or it's busy [ 90.153981][ T4641] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.207181][ T4313] usb 5-1: USB disconnect, device number 4 [ 90.230525][ T4684] netlink: 'syz.0.361': attribute type 25 has an invalid length. [ 90.242587][ T4684] netlink: 'syz.0.361': attribute type 8 has an invalid length. [ 90.364137][ T1467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.373639][ T4647] chnl_net:caif_netlink_parms(): no params data found [ 90.396944][ T3569] XFS (loop2): Unmounting Filesystem [ 90.412200][ T1467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.504834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.518695][ T1467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.551686][ T1467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.587136][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.627655][ T4688] loop0: detected capacity change from 0 to 8192 [ 90.764432][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.792148][ T4688] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.834353][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.850584][ T4688] REISERFS (device loop0): using ordered data mode [ 90.858252][ T4688] reiserfs: using flush barriers [ 90.883737][ T4688] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.888622][ T4647] device bridge_slave_0 entered promiscuous mode [ 90.910167][ T4688] REISERFS (device loop0): checking transaction log (loop0) [ 90.920665][ T4688] REISERFS (device loop0): Using r5 hash to sort names [ 90.945637][ T4688] reiserfs: enabling write barrier flush mode [ 90.953044][ T4697] syz.1.364 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.968223][ T4688] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.997113][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.009786][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.018328][ T4647] device bridge_slave_1 entered promiscuous mode [ 91.019575][ T4702] loop2: detected capacity change from 0 to 512 [ 91.033032][ T4313] Bluetooth: hci3: command 0x0409 tx timeout [ 91.139692][ T4702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.200780][ T4705] loop1: detected capacity change from 0 to 4096 [ 91.217009][ T4702] EXT4-fs (loop2): 1 truncate cleaned up [ 91.222789][ T4702] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 91.244639][ T4705] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 91.287998][ T4705] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 91.310972][ T4705] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 91.331405][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.378720][ T4647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.401974][ T4705] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 91.424853][ T4705] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 91.470547][ T4705] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 91.473834][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.485057][ T4705] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 91.548366][ T4705] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 91.557674][ T4714] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.558830][ T4705] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 91.613014][ T4705] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 91.624778][ T4647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.643739][ T4705] ntfs: volume version 3.1. [ 91.755956][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.807150][ T4647] team0: Port device team_slave_0 added [ 91.856570][ T4647] team0: Port device team_slave_1 added [ 91.994427][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.021530][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.038965][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.119144][ T4647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.212309][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.235233][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.323139][ T4647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.517060][ T4647] device hsr_slave_0 entered promiscuous mode [ 92.547546][ T4647] device hsr_slave_1 entered promiscuous mode [ 92.571857][ T4647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.593112][ T4647] Cannot create hsr debugfs directory [ 92.602284][ T4748] loop1: detected capacity change from 0 to 4096 [ 92.657418][ T1076] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.668993][ T4723] loop0: detected capacity change from 0 to 32768 [ 92.717992][ T4723] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.373 (4723) [ 92.753792][ T4748] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 92.774707][ T4723] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.801485][ T4723] BTRFS info (device loop0): disabling tree log [ 92.829886][ T4723] BTRFS info (device loop0): metadata ratio 65537 [ 92.888514][ T4748] ntfs3: loop1: failed to convert "c46c" to cp775 [ 92.898002][ T4723] BTRFS info (device loop0): metadata ratio 64 [ 92.910957][ T4723] BTRFS info (device loop0): using free space tree [ 92.929884][ T4723] BTRFS info (device loop0): has skinny extents [ 92.953779][ T1076] usb 3-1: Using ep0 maxpacket: 8 [ 93.054287][ T4744] loop4: detected capacity change from 0 to 32768 [ 93.093310][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.118520][ T4744] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.382 (4744) [ 93.136879][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.168891][ T1076] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 93.231083][ T1076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.256860][ T3872] Bluetooth: hci3: command 0x041b tx timeout [ 93.271582][ T1076] usb 3-1: config 0 descriptor?? [ 93.294195][ T4744] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 93.353194][ T4744] BTRFS info (device loop4): turning off barriers [ 93.359701][ T4744] BTRFS info (device loop4): enabling auto defrag [ 93.430207][ T4744] BTRFS info (device loop4): enabling all of the rescue options [ 93.443060][ T4723] BTRFS info (device loop0): enabling ssd optimizations [ 93.533201][ T4744] BTRFS info (device loop4): ignoring data csums [ 93.539677][ T4744] BTRFS info (device loop4): ignoring bad roots [ 93.573503][ T4744] BTRFS info (device loop4): disabling log replay at mount time [ 93.581240][ T4744] BTRFS info (device loop4): enabling ssd optimizations [ 93.633175][ T4744] BTRFS info (device loop4): using spread ssd allocation scheme [ 93.653641][ T4744] BTRFS info (device loop4): using free space tree [ 93.660187][ T4744] BTRFS info (device loop4): has skinny extents [ 93.747176][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.758489][ T4744] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 93.773147][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x6 [ 93.780288][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x5 [ 93.814568][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x4 [ 93.825322][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.832297][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.859334][ T4744] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 93.870764][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.878271][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.885862][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.894633][ T1076] cherry 0003:046A:0027.0005: unknown main item tag 0x0 [ 93.901611][ T1076] cherry 0003:046A:0027.0005: unknown global tag 0xd [ 93.903161][ T4744] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 93.908351][ T1076] cherry 0003:046A:0027.0005: item 0 4 1 13 parsing failed [ 93.929134][ T1076] cherry: probe of 0003:046A:0027.0005 failed with error -22 [ 93.996273][ T4744] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 94.014919][ T1076] usb 3-1: USB disconnect, device number 6 [ 94.023805][ T4770] loop1: detected capacity change from 0 to 32768 [ 94.059753][ T4744] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 94.074504][ T4744] workqueue: max_active 32767 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 94.098551][ T4744] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 94.110806][ T4744] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 94.140196][ T4770] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.164939][ T4744] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 94.208500][ T4770] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.253936][ T4744] workqueue: max_active 32767 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 94.360320][ T4770] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 94.381502][ T3878] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.389808][ T4647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.397727][ T3878] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.440177][ T4744] BTRFS error (device loop4): nologreplay must be used with ro mount option [ 94.443603][ T4647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.496186][ T4647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.526857][ T3878] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 94.549156][ T4814] loop2: detected capacity change from 0 to 2048 [ 94.556631][ T3878] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.564047][ T4770] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.589709][ T4816] loop0: detected capacity change from 0 to 512 [ 94.625490][ T4647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.716091][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 94.803806][ T4816] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff) [ 94.999059][ T4814] loop2: detected capacity change from 0 to 2048 [ 95.343201][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 95.372487][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,stripe=0x000000000000009a,max_batch_time=0x0000000000000008,,errors=continue. Quota mode: none. [ 95.428805][ T144] device hsr_slave_0 left promiscuous mode [ 95.445057][ T144] device hsr_slave_1 left promiscuous mode [ 95.458116][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.466755][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.487026][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.503921][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.511769][ T144] device bridge_slave_1 left promiscuous mode [ 95.530731][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.555309][ T144] device bridge_slave_0 left promiscuous mode [ 95.568873][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.632507][ T144] device veth1_macvtap left promiscuous mode [ 95.643189][ T144] device veth0_macvtap left promiscuous mode [ 95.663423][ T4313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.669160][ T144] device veth1_vlan left promiscuous mode [ 95.685798][ T144] device veth0_vlan left promiscuous mode [ 95.699426][ T4859] CUSE: unknown device info "Ã" [ 95.704703][ T4859] CUSE: zero length info key specified [ 95.745055][ T4861] loop2: detected capacity change from 0 to 256 [ 95.796724][ T4861] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 95.882462][ T4867] loop4: detected capacity change from 0 to 512 [ 96.015881][ T4867] EXT4-fs (loop4): 1 orphan inode deleted [ 96.033286][ T4313] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 96.043903][ T4867] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.060025][ T144] team0 (unregistering): Port device team_slave_1 removed [ 96.065511][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.078459][ T4867] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038 (0x7fffffff) [ 96.094385][ T144] team0 (unregistering): Port device team_slave_0 removed [ 96.110689][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.114308][ T4313] usb 1-1: config 0 has no interface number 0 [ 96.144963][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.152738][ T4313] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.174905][ T4313] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.189979][ T4313] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 96.210799][ T4313] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 96.220685][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.238325][ T4877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.242182][ T4313] usb 1-1: config 0 descriptor?? [ 96.308479][ T4313] HFC-S_USB: probe of 1-1:0.168 failed with error -5 [ 96.378334][ T144] bond0 (unregistering): Released all slaves [ 96.408236][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 96.420807][ T4883] nbd: socks must be embedded in a SOCK_ITEM attr [ 96.550312][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 96.568058][ T21] usb 1-1: USB disconnect, device number 5 [ 96.667638][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.702671][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.733617][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.758596][ T4647] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.801690][ T4898] netlink: 34 bytes leftover after parsing attributes in process `syz.2.415'. [ 96.826469][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.836311][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.846757][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.853862][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.862863][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.871930][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.882725][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.889837][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.897765][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.914083][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.953045][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.964967][ T4896] loop4: detected capacity change from 0 to 8192 [ 96.973279][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.994287][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.009821][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.041750][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.062839][ T4647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.079749][ T4647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.123143][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.131385][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.146756][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.157739][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.186386][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.239392][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.247127][ T4904] loop0: detected capacity change from 0 to 2048 [ 97.331533][ T4909] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 97.341008][ T4904] NILFS (loop0): invalid segment: Checksum error in segment payload [ 97.356066][ T4909] netlink: 'syz.4.419': attribute type 2 has an invalid length. [ 97.381641][ T4904] NILFS (loop0): trying rollback from an earlier position [ 97.424488][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 97.473242][ T4904] NILFS (loop0): recovery complete [ 97.493357][ T4890] loop1: detected capacity change from 0 to 32768 [ 97.501806][ T4916] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.557774][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.575653][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.588222][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 97.588237][ T26] audit: type=1804 audit(1727300941.395:4): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.417" name="/newroot/77/file0/file1" dev="loop0" ino=12 res=1 errno=0 [ 97.634134][ T4915] loop2: detected capacity change from 0 to 4096 [ 97.648664][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.679090][ T4915] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 97.680027][ T4890] XFS (loop1): Mounting V5 Filesystem [ 97.807667][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.819973][ T4915] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 97.852228][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.895351][ T4890] XFS (loop1): Ending clean mount [ 97.916569][ T4890] XFS (loop1): Quotacheck needed: Please wait. [ 97.935026][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.954020][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.973801][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.028497][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.041878][ T4915] ntfs3: loop2: ino=1e, "file1" Internal error [ 98.052512][ T4890] XFS (loop1): Quotacheck: Done. [ 98.068935][ T4935] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 98.089400][ T4935] netlink: 592 bytes leftover after parsing attributes in process `syz.0.424'. [ 98.100168][ T4915] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 98.128991][ T4647] device veth0_vlan entered promiscuous mode [ 98.163809][ T4647] device veth1_vlan entered promiscuous mode [ 98.217263][ T4354] XFS (loop1): Unmounting Filesystem [ 98.226741][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.284542][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.309918][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.352810][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.381381][ T4647] device veth0_macvtap entered promiscuous mode [ 98.423732][ T4647] device veth1_macvtap entered promiscuous mode [ 98.438252][ T26] audit: type=1326 audit(1727300942.245:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.2.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x0 [ 98.525374][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.548166][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.582094][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.603806][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.630375][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.648132][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.659624][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.677289][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.693351][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.701403][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.720992][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.753712][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.800742][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.834763][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.858089][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.887674][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.911624][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.942115][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.972818][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.000319][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.046380][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.076941][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.093784][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.116034][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.166158][ T4647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.181822][ T4647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.211666][ T4647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.231064][ T4647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.368393][ T4949] loop0: detected capacity change from 0 to 32768 [ 99.409043][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.422627][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.497518][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.498526][ T1467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.565112][ T4949] XFS (loop0): Mounting V5 Filesystem [ 99.571723][ T1467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.596805][ T4952] loop4: detected capacity change from 0 to 32768 [ 99.618156][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.707399][ T4952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.435 (4952) [ 99.749438][ T4949] XFS (loop0): Ending clean mount [ 99.785825][ T4949] XFS (loop0): Quotacheck needed: Please wait. [ 99.817484][ T4952] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 99.837205][ T4952] BTRFS info (device loop4): using free space tree [ 99.841405][ T4981] loop3: detected capacity change from 0 to 512 [ 99.862147][ T4952] BTRFS info (device loop4): has skinny extents [ 99.888564][ T4949] XFS (loop0): Quotacheck: Done. [ 99.943826][ T4981] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.973163][ T4981] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 99.986579][ T3568] XFS (loop0): Unmounting Filesystem [ 100.006612][ T4981] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.353: Corrupt directory, running e2fsck is recommended [ 100.058977][ T4981] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 100.107920][ T4981] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.353: corrupted in-inode xattr [ 100.123885][ T4952] BTRFS info (device loop4): enabling ssd optimizations [ 100.168882][ T4981] EXT4-fs (loop3): Remounting filesystem read-only [ 100.185505][ T4981] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.353: couldn't read orphan inode 15 (err -117) [ 100.219314][ T4981] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 100.262973][ T4981] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.276261][ T4981] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 100.287303][ T4981] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.353: Corrupt directory, running e2fsck is recommended [ 100.715629][ T5016] program syz.3.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.088238][ T5034] loop0: detected capacity change from 0 to 512 [ 101.166854][ T5008] loop2: detected capacity change from 0 to 32768 [ 101.431533][ T5034] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 101.431533][ T5034] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 101.431533][ T5034] [ 101.487645][ T5034] EXT4-fs (loop0): 1 orphan inode deleted [ 101.498164][ T5034] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,nouser_xattr,sysvgroups,norecovery,usrquota,minixdf,,errors=continue. Quota mode: writeback. [ 101.522552][ T5034] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038 (0x7fffffff) [ 101.527475][ T5008] XFS (loop2): Mounting V5 Filesystem [ 101.754810][ T5008] XFS (loop2): Ending clean mount [ 101.776931][ T5008] XFS (loop2): Quotacheck needed: Please wait. [ 101.904939][ T5008] XFS (loop2): Quotacheck: Done. [ 101.912552][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 101.937670][ T5036] loop4: detected capacity change from 0 to 32768 [ 102.002955][ T5036] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.011179][ T5036] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.050154][ T3569] XFS (loop2): Unmounting Filesystem [ 102.055728][ T5064] loop0: detected capacity change from 0 to 1024 [ 102.084728][ T5036] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 102.108399][ T4838] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 102.114929][ T3579] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.139013][ T3579] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.197546][ T5066] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 102.249831][ T3579] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 102.267322][ T3579] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.273714][ T5036] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.361649][ T5069] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 102.471195][ T5073] loop3: detected capacity change from 0 to 4096 [ 102.473452][ T4838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.507330][ T4838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.548805][ T4838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 102.572032][ T5076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.580776][ T4838] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 102.612862][ T4838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.653520][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 102.662414][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 102.676264][ T5079] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 102.705002][ T4838] hub 2-1:1.0: bad descriptor, ignoring hub [ 102.707325][ T5081] overlayfs: conflicting lowerdir path [ 102.710935][ T4838] hub: probe of 2-1:1.0 failed with error -5 [ 102.711406][ T4838] cdc_wdm 2-1:1.0: skipping garbage [ 102.735364][ T4838] cdc_wdm 2-1:1.0: skipping garbage [ 102.740644][ T4838] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 102.755617][ T5082] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 102.875497][ T5092] loop3: detected capacity change from 0 to 128 [ 102.906601][ T5094] loop2: detected capacity change from 0 to 2048 [ 102.952212][ T5095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.023614][ T4838] usb 2-1: USB disconnect, device number 5 [ 103.312822][ T26] audit: type=1326 audit(1727300947.115:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5114 comm="syz.2.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x0 [ 103.403139][ T4838] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 103.419755][ T5117] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.470793][ T5120] loop0: detected capacity change from 0 to 128 [ 103.489513][ T5105] loop3: detected capacity change from 0 to 32768 [ 103.530434][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.542268][ T5120] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 103.543698][ T5105] XFS: ikeep mount option is deprecated. [ 103.574805][ T5105] XFS (loop3): Mounting V5 Filesystem [ 103.639378][ T5105] XFS (loop3): Ending clean mount [ 103.646870][ T5105] XFS (loop3): Quotacheck needed: Please wait. [ 103.699397][ T5105] XFS (loop3): Quotacheck: Done. [ 103.738149][ T4647] XFS (loop3): Unmounting Filesystem [ 103.763191][ T4838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.789385][ T4838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.793281][ T5131] loop0: detected capacity change from 0 to 4096 [ 103.804960][ T4838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 103.820282][ T4838] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 103.832073][ T4838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.878951][ T5131] ntfs: (device loop0): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 103.888846][ T5131] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 103.897748][ T4838] hub 2-1:1.0: bad descriptor, ignoring hub [ 103.904315][ T5131] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 103.917798][ T4838] hub: probe of 2-1:1.0 failed with error -5 [ 103.924709][ T4838] cdc_wdm 2-1:1.0: skipping garbage [ 103.930061][ T4838] cdc_wdm 2-1:1.0: skipping garbage [ 103.936092][ T5131] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.959741][ T4838] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 103.991473][ T5131] ntfs: volume version 3.1. [ 104.026734][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 104.189181][ T5139] loop0: detected capacity change from 0 to 2048 [ 104.196240][ T5141] loop2: detected capacity change from 0 to 2048 [ 104.213214][ T4838] usb 2-1: USB disconnect, device number 6 [ 104.248024][ T5139] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 104.268671][ T5141] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.269100][ T5139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.295071][ T5141] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 104.373387][ T3579] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.464206][ T5152] loop2: detected capacity change from 0 to 64 [ 104.699802][ T5156] loop2: detected capacity change from 0 to 2048 [ 104.739100][ T5160] netlink: 84 bytes leftover after parsing attributes in process `syz.1.506'. [ 104.779243][ T5156] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.803922][ T3579] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 104.816934][ T3579] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 104.821623][ T5161] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.835882][ T3579] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 104.845579][ T5150] loop0: detected capacity change from 0 to 40427 [ 104.898419][ T5150] F2FS-fs (loop0): invalid crc value [ 104.908502][ T5150] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.944048][ T3579] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 104.956534][ T3579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.973571][ T3579] usb 4-1: SerialNumber: syz [ 104.982013][ T5150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.990947][ T3579] usb 4-1: config 0 descriptor?? [ 105.013861][ T5137] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.020984][ T5137] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.030058][ T3568] attempt to access beyond end of device [ 105.030058][ T3568] loop0: rw=2049, want=45104, limit=40427 [ 105.044229][ T3579] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 105.253738][ T4312] usb 4-1: USB disconnect, device number 5 [ 105.513675][ T5177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.536290][ T5175] batman_adv: batadv0: Adding interface: macvlan2 [ 105.542737][ T5175] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.570468][ T5175] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 105.627776][ T5181] loop2: detected capacity change from 0 to 512 [ 105.660984][ T5183] loop0: detected capacity change from 0 to 2048 [ 105.711011][ T5181] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 105.734308][ T5181] ext4 filesystem being mounted at /103/bus supports timestamps until 2038 (0x7fffffff) [ 105.756189][ T5189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.780747][ T5183] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 105.848861][ T5191] bridge0: port 3(vlan0) entered blocking state [ 105.883226][ T5191] bridge0: port 3(vlan0) entered disabled state [ 105.894938][ T5191] device vlan0 entered promiscuous mode [ 105.896725][ T5183] Remounting filesystem read-only [ 105.902046][ T5191] bridge0: port 3(vlan0) entered blocking state [ 105.911945][ T5191] bridge0: port 3(vlan0) entered forwarding state [ 105.921888][ T5191] bridge0: mtu less than device minimum [ 105.938471][ T5191] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 106.022747][ T5196] loop1: detected capacity change from 0 to 2048 [ 106.041861][ T5200] loop3: detected capacity change from 0 to 16 [ 106.053746][ T5202] loop0: detected capacity change from 0 to 128 [ 106.076801][ T5196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.104813][ T5200] erofs: Unknown parameter 'ÿÿÿÿ' [ 106.119896][ T5202] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.132088][ T5202] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038 (0x7fffffff) [ 106.153618][ T5202] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x18) [ 106.250418][ T5205] nbd: must specify a device to reconfigure [ 106.583554][ T3579] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.783367][ T4312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.793487][ T3620] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.843910][ T3579] usb 4-1: Using ep0 maxpacket: 16 [ 106.977962][ T5232] loop2: detected capacity change from 0 to 4096 [ 106.993258][ T3579] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 107.001665][ T3579] usb 4-1: config 0 has no interface number 0 [ 107.008345][ T3579] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.020109][ T3579] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.023226][ T4312] usb 2-1: Using ep0 maxpacket: 32 [ 107.044136][ T5232] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.068412][ T5232] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 107.090005][ T5232] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 107.101964][ T5232] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 107.122963][ T5232] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 107.138414][ T5232] ntfs: volume version 3.1. [ 107.173302][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 44376, setting to 1024 [ 107.184707][ T4312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.203212][ T3620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.214238][ T3620] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 107.224240][ T3620] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 107.233516][ T3620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.243783][ T3579] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 107.252837][ T3579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.261677][ T3620] usb 1-1: config 0 descriptor?? [ 107.269971][ T3579] usb 4-1: Product: syz [ 107.281070][ T3579] usb 4-1: Manufacturer: syz [ 107.285908][ T3579] usb 4-1: SerialNumber: syz [ 107.294390][ T3579] usb 4-1: config 0 descriptor?? [ 107.313248][ T5211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.323252][ T5211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.330186][ T5234] loop2: detected capacity change from 0 to 4096 [ 107.353177][ T4312] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 107.362551][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.370682][ T4312] usb 2-1: Product: syz [ 107.376123][ T4312] usb 2-1: Manufacturer: syz [ 107.381061][ T4312] usb 2-1: SerialNumber: syz [ 107.392425][ T4312] usb 2-1: config 0 descriptor?? [ 107.413312][ T5222] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.435915][ T4312] usb 2-1: invalid MIDI out EP 0 [ 107.473460][ T4312] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 107.547053][ T5211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.554989][ T5211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.642486][ T13] usb 2-1: USB disconnect, device number 7 [ 107.753145][ T3620] Bluetooth: Can't get state to change to load configuration err [ 107.760931][ T3620] Bluetooth: Loading sysconfig file failed [ 107.768488][ T3620] ath3k: probe of 1-1:0.0 failed with error -16 [ 107.776087][ T3620] usb 1-1: USB disconnect, device number 6 [ 108.175760][ T5242] loop1: detected capacity change from 0 to 256 [ 108.193505][ T3579] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.204566][ T3579] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 108.223941][ T3579] asix: probe of 4-1:0.251 failed with error -71 [ 108.236612][ T3579] usb 4-1: USB disconnect, device number 6 [ 108.277559][ T5242] FAT-fs (loop1): Directory bread(block 64) failed [ 108.288213][ T5242] FAT-fs (loop1): Directory bread(block 65) failed [ 108.310729][ T5242] FAT-fs (loop1): Directory bread(block 66) failed [ 108.319958][ T5242] FAT-fs (loop1): Directory bread(block 67) failed [ 108.331001][ T5242] FAT-fs (loop1): Directory bread(block 68) failed [ 108.338435][ T5242] FAT-fs (loop1): Directory bread(block 69) failed [ 108.345346][ T5242] FAT-fs (loop1): Directory bread(block 70) failed [ 108.352845][ T5242] FAT-fs (loop1): Directory bread(block 71) failed [ 108.362533][ T5242] FAT-fs (loop1): Directory bread(block 72) failed [ 108.369296][ T5242] FAT-fs (loop1): Directory bread(block 73) failed [ 108.372585][ T5248] loop0: detected capacity change from 0 to 1024 [ 108.478661][ T5251] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.492787][ T5248] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.617415][ T5261] loop0: detected capacity change from 0 to 64 [ 109.260340][ T5264] loop2: detected capacity change from 0 to 32768 [ 109.413061][ T5264] JBD2: Ignoring recovery information on journal [ 109.500162][ T5266] loop3: detected capacity change from 0 to 32768 [ 109.513060][ T5264] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.532020][ T5274] loop1: detected capacity change from 0 to 32768 [ 109.615748][ T5295] loop0: detected capacity change from 0 to 1024 [ 109.631297][ T5266] XFS (loop3): Mounting V5 Filesystem [ 109.654252][ T3569] ocfs2: Unmounting device (7,2) on (node local) [ 109.689970][ T5295] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 109.694657][ T5266] XFS (loop3): Ending clean mount [ 109.804102][ T5295] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 109.838781][ T4647] XFS (loop3): Unmounting Filesystem [ 109.930663][ T5311] loop2: detected capacity change from 0 to 512 [ 109.990582][ T5311] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.007532][ T5295] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 110.015998][ T5311] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 110.030014][ T5311] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.568: inode #15: comm syz.2.568: iget: illegal inode # [ 110.080342][ T5311] EXT4-fs (loop2): Remounting filesystem read-only [ 110.080836][ T5316] loop1: detected capacity change from 0 to 2048 [ 110.094201][ T5311] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.568: couldn't read orphan inode 15 (err -117) [ 110.107078][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,. Quota mode: none. [ 110.130099][ T5311] EXT4-fs (loop2): shut down requested (2) [ 110.244913][ T5316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.313860][ T5316] ext4 filesystem being mounted at /42/bus supports timestamps until 2038 (0x7fffffff) [ 110.358225][ T5324] loop0: detected capacity change from 0 to 4096 [ 110.442032][ T5324] ntfs: volume version 3.1. [ 110.516277][ T5338] loop2: detected capacity change from 0 to 164 [ 110.644785][ T5346] loop3: detected capacity change from 0 to 2048 [ 110.722102][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.748515][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 110.748531][ T26] audit: type=1800 audit(1727300954.555:7): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 110.811419][ T5354] loop0: detected capacity change from 0 to 1024 [ 110.874021][ T5354] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 110.903690][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.975075][ T3579] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.193803][ T5359] loop3: detected capacity change from 0 to 32768 [ 111.233041][ T3579] usb 3-1: Using ep0 maxpacket: 16 [ 111.246202][ T5359] XFS: ikeep mount option is deprecated. [ 111.251866][ T5359] XFS: ikeep mount option is deprecated. [ 111.275318][ T5369] loop0: detected capacity change from 0 to 2048 [ 111.283143][ T5359] XFS (loop3): Mounting V5 Filesystem [ 111.303142][ T13] usb 2-1: config 1 has an invalid interface number: 3 but max is 1 [ 111.311157][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.324374][ T13] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 111.333797][ T13] usb 2-1: config 1 has no interface number 2 [ 111.336547][ T5359] XFS (loop3): Ending clean mount [ 111.339906][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.356759][ T13] usb 2-1: config 1 interface 3 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.375176][ T13] usb 2-1: config 1 interface 3 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.388941][ T3579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.399195][ T13] usb 2-1: config 1 interface 3 has no altsetting 0 [ 111.491694][ T5359] syz.3.587 (5359) used greatest stack depth: 17624 bytes left [ 111.508101][ T4647] XFS (loop3): Unmounting Filesystem [ 111.596682][ T3579] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.606594][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.616016][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.624357][ T3579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.633066][ T3579] usb 3-1: Product: syz [ 111.637241][ T3579] usb 3-1: Manufacturer: syz [ 111.641843][ T3579] usb 3-1: SerialNumber: syz [ 111.647364][ T13] usb 2-1: Product: syz [ 111.651543][ T13] usb 2-1: Manufacturer: syz [ 111.656277][ T13] usb 2-1: SerialNumber: syz [ 111.681622][ T3579] usb 3-1: config 0 descriptor?? [ 111.724070][ T13] usb 2-1: selecting invalid altsetting 1 [ 111.734513][ T3579] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.769044][ T3579] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 111.789471][ T5379] loop0: detected capacity change from 0 to 32768 [ 111.837812][ T5379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.593 (5379) [ 111.888292][ T5379] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 111.897707][ T5379] BTRFS info (device loop0): setting nodatacow, compression disabled [ 111.906038][ T5379] BTRFS info (device loop0): setting datacow [ 111.912043][ T5379] BTRFS info (device loop0): doing ref verification [ 111.921299][ T5379] BTRFS info (device loop0): force clearing of disk cache [ 111.930269][ T5379] BTRFS info (device loop0): turning off barriers [ 111.945428][ T5379] BTRFS info (device loop0): enabling ssd optimizations [ 111.952386][ T5379] BTRFS info (device loop0): using spread ssd allocation scheme [ 111.954964][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 111.962031][ T5379] BTRFS info (device loop0): not using ssd optimizations [ 111.974778][ T5385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 111.976692][ T5379] BTRFS info (device loop0): not using spread ssd allocation scheme [ 111.994113][ T5379] BTRFS info (device loop0): using free space tree [ 112.000858][ T5379] BTRFS info (device loop0): has skinny extents [ 112.030320][ T5379] BTRFS info (device loop0): clearing free space tree [ 112.041543][ T5379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.052307][ T5379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.094008][ T5379] BTRFS info (device loop0): creating free space tree [ 112.109225][ T5379] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.123210][ T5379] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.164056][ T13] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 112.171780][ T13] cdc_ncm 2-1:1.0: bind() failure [ 112.191048][ T13] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 112.198772][ T13] cdc_ncm 2-1:1.1: bind() failure [ 112.377552][ T3579] em28xx 3-1:0.0: chip ID is em2874 [ 112.484020][ T4312] usb 2-1: USB disconnect, device number 8 [ 112.743612][ T3579] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.763796][ T3579] em28xx 3-1:0.0: board has no eeprom [ 112.892284][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 112.894259][ T5434] loop0: detected capacity change from 0 to 64 [ 112.900177][ T3579] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 112.923233][ T3579] em28xx 3-1:0.0: dvb set to bulk mode. [ 112.939755][ T3620] em28xx 3-1:0.0: Binding DVB extension [ 112.954885][ T3579] usb 3-1: USB disconnect, device number 7 [ 112.961914][ T3579] em28xx 3-1:0.0: Disconnecting em28xx [ 113.019445][ T3620] em28xx 3-1:0.0: Registering input extension [ 113.141613][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.150075][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.163744][ T5423] device bridge_slave_0 entered promiscuous mode [ 113.174097][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.182131][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.190969][ T5423] device bridge_slave_1 entered promiscuous mode [ 113.198184][ T5446] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.260292][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.263260][ T3620] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 113.288109][ T3620] Registered IR keymap rc-empty [ 113.304326][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.308784][ T3620] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 113.328188][ T5420] loop3: detected capacity change from 0 to 32768 [ 113.337464][ T3620] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 113.373260][ T3620] em28xx 3-1:0.0: Input extension successfully initialized [ 113.387547][ T5420] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.605 (5420) [ 113.397685][ T5423] team0: Port device team_slave_0 added [ 113.409421][ T3579] em28xx 3-1:0.0: Closing input extension [ 113.431066][ T5455] netlink: 80 bytes leftover after parsing attributes in process `syz.2.618'. [ 113.450951][ T3579] em28xx 3-1:0.0: Freeing device [ 113.460743][ T5423] team0: Port device team_slave_1 added [ 113.470863][ T5420] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 113.486620][ T5420] BTRFS info (device loop3): force clearing of disk cache [ 113.503168][ T5420] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.520414][ T5459] loop1: detected capacity change from 0 to 128 [ 113.529636][ T5420] BTRFS info (device loop3): use zstd compression, level 3 [ 113.539107][ T5420] BTRFS info (device loop3): using free space tree [ 113.548381][ T5420] BTRFS info (device loop3): has skinny extents [ 113.578662][ T26] audit: type=1326 audit(1727300957.385:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x7ffc0000 [ 113.605804][ T26] audit: type=1326 audit(1727300957.385:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x7ffc0000 [ 113.606988][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.627924][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.628884][ T26] audit: type=1326 audit(1727300957.385:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f981fbd5f39 code=0x7ffc0000 [ 113.666442][ T26] audit: type=1326 audit(1727300957.385:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x7ffc0000 [ 113.666466][ T5420] BTRFS info (device loop3): enabling ssd optimizations [ 113.697380][ T26] audit: type=1326 audit(1727300957.385:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981fbd5f39 code=0x7ffc0000 [ 113.701527][ T5459] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.734781][ T5420] BTRFS info (device loop3): clearing free space tree [ 113.741764][ T5420] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.752181][ T5420] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.759955][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.776036][ T5459] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038 (0x7fffffff) [ 113.819933][ T5420] BTRFS info (device loop3): creating free space tree [ 113.827829][ T5420] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.838314][ T5459] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 113.859957][ T5420] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.876812][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.957218][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.984812][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.041319][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.413917][ T5423] device hsr_slave_0 entered promiscuous mode [ 114.420932][ T5423] device hsr_slave_1 entered promiscuous mode [ 114.448343][ T5423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.482787][ T5423] Cannot create hsr debugfs directory [ 114.704600][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 114.759156][ T5423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.933035][ T5423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.960276][ T5502] loop0: detected capacity change from 0 to 32768 [ 114.976469][ T5523] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 115.037928][ T5502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.631 (5502) [ 115.094517][ T5423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.128172][ T5502] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 115.151022][ T5502] BTRFS info (device loop0): using free space tree [ 115.168341][ T5511] loop2: detected capacity change from 0 to 32768 [ 115.171396][ T5502] BTRFS info (device loop0): has skinny extents [ 115.182392][ T5530] loop3: detected capacity change from 0 to 512 [ 115.214583][ T5530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.230371][ T5423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.242361][ T5511] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.247529][ T5502] BTRFS info (device loop0): enabling ssd optimizations [ 115.272399][ T5530] EXT4-fs (loop3): 1 truncate cleaned up [ 115.289761][ T5530] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 115.315780][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.379045][ T5423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.390531][ T5423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.408668][ T5423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.414001][ T3569] ocfs2: Unmounting device (7,2) on (node local) [ 115.471859][ T5423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.765126][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.806210][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.853054][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.868824][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.894191][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.913457][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.932214][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.939380][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.957644][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.973829][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.992680][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.999830][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.051754][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.080643][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.104961][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.114602][ T5569] loop2: detected capacity change from 0 to 2048 [ 116.146909][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.167920][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.188127][ T5569] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.214995][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.226509][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.244747][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.262440][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.275931][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,sb=0x0000000000000401,norecovery,. Quota mode: none. [ 116.308827][ T5423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.320490][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.329289][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.357644][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.366442][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.399752][ T5563] loop1: detected capacity change from 0 to 32768 [ 116.457171][ T5563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.652 (5563) [ 116.542681][ T5563] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 116.543694][ T5584] loop3: detected capacity change from 0 to 128 [ 116.591236][ T5563] BTRFS info (device loop1): setting nodatasum [ 116.601843][ T5586] process 'syz.0.657' launched './file0' with NULL argv: empty string added [ 116.611423][ T5563] BTRFS info (device loop1): force zlib compression, level 3 [ 116.619206][ T5563] BTRFS info (device loop1): setting nodatacow [ 116.630316][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.639708][ T5563] BTRFS info (device loop1): turning on flush-on-commit [ 116.639746][ T5563] BTRFS info (device loop1): allowing degraded mounts [ 116.639772][ T5563] BTRFS info (device loop1): using free space tree [ 116.639796][ T5563] BTRFS info (device loop1): has skinny extents [ 116.676293][ T5584] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.699397][ T5584] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.731503][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.781190][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.783152][ T3617] Bluetooth: hci5: command 0x041b tx timeout [ 116.918875][ T5563] BTRFS info (device loop1): enabling ssd optimizations [ 116.921010][ T5613] loop2: detected capacity change from 0 to 512 [ 117.077714][ T5613] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.122190][ T5613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.201327][ T5613] EXT4-fs (loop2): 1 orphan inode deleted [ 117.213757][ T5613] EXT4-fs (loop2): 1 truncate cleaned up [ 117.219428][ T5613] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 117.268632][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.313940][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.340364][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.349928][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.364059][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.372289][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.397145][ T5423] device veth0_vlan entered promiscuous mode [ 117.431898][ T5423] device veth1_vlan entered promiscuous mode [ 117.440428][ T5613] EXT4-fs error (device loop2): ext4_lookup:1856: inode #16: comm syz.2.661: iget: bad extra_isize 42 (inode size 256) [ 117.530854][ T5613] EXT4-fs (loop2): Remounting filesystem read-only [ 117.549590][ T5632] loop0: detected capacity change from 0 to 22 [ 117.577704][ T5423] device veth0_macvtap entered promiscuous mode [ 117.615010][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.643800][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.652625][ T5632] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 117.670902][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.703289][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.726839][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.765727][ T5423] device veth1_macvtap entered promiscuous mode [ 117.786446][ T5632] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 117.852344][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.892067][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.892439][ T5622] loop3: detected capacity change from 0 to 40427 [ 117.938094][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.975952][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.016714][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.035203][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.057966][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.078439][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.106968][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.113962][ T5638] loop1: detected capacity change from 0 to 2048 [ 118.125658][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.137368][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.166760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.184186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.205697][ T5638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.216028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.228307][ T5640] loop2: detected capacity change from 0 to 1024 [ 118.246357][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.258521][ T5622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.294847][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.295974][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.333152][ T5640] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038 (0x7fffffff) [ 118.359769][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.417614][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.447684][ T26] audit: type=1800 audit(1727300962.255:13): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.667" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 118.491887][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.517323][ T26] audit: type=1804 audit(1727300962.325:14): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.667" name="/newroot/136/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 118.521929][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.550024][ T5622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.582210][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.594493][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.613531][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.631701][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.683961][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.701365][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.726452][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.740894][ T5423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.758471][ T5423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.769484][ T5423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.791448][ T5423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.869446][ T4055] Bluetooth: hci5: command 0x040f tx timeout [ 118.918794][ T5652] netlink: 'syz.2.669': attribute type 12 has an invalid length. [ 118.933148][ T5652] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 119.006129][ T1467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.048308][ T1467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.071401][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.121564][ T2619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.133047][ T2619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.170217][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.419603][ T5669] loop1: detected capacity change from 0 to 512 [ 119.458578][ T5669] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.483052][ T5669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.569735][ T5669] EXT4-fs (loop1): 1 orphan inode deleted [ 119.595212][ T5669] EXT4-fs (loop1): 1 truncate cleaned up [ 119.623098][ T5669] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 119.673966][ T5671] loop3: detected capacity change from 0 to 8192 [ 119.695246][ T5669] EXT4-fs error (device loop1): ext4_lookup:1856: inode #16: comm syz.1.676: iget: bad extra_isize 42 (inode size 256) [ 119.728749][ T5671] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.753896][ T5683] ------------[ cut here ]------------ [ 119.759554][ T5683] WARNING: CPU: 0 PID: 5683 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120 [ 119.769481][ T5683] Modules linked in: [ 119.773397][ T5683] CPU: 0 PID: 5683 Comm: syz.1.676 Not tainted 5.15.167-syzkaller #0 [ 119.781590][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.788326][ T5669] EXT4-fs (loop1): Remounting filesystem read-only [ 119.791648][ T5683] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 119.803850][ T5683] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 119.823471][ T5683] RSP: 0018:ffffc900030d76b0 EFLAGS: 00010006 [ 119.829559][ T5683] RAX: ffffffff902d1fc0 RBX: ffffffff901a87c0 RCX: ffff8880799c5940 [ 119.837547][ T5683] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880616c2a58 [ 119.845531][ T5683] RBP: ffffc900030d77b0 R08: 0000000000000001 R09: 0000000000000000 [ 119.851046][ T5687] Â: renamed from pim6reg1 [ 119.853506][ T5683] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 119.853524][ T5683] R13: 1ffff9200061aee4 R14: ffff8880616c2a58 R15: ffffffff96990c81 [ 119.853540][ T5683] FS: 00007fb4ec9a46c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 119.853557][ T5683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.853589][ T5683] CR2: 00007fb4ec9a3f98 CR3: 000000007352e000 CR4: 00000000003506f0 [ 119.853607][ T5683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.853619][ T5683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.853633][ T5683] Call Trace: [ 119.853640][ T5683] [ 119.853647][ T5683] ? __warn+0x15b/0x300 [ 119.853675][ T5683] ? look_up_lock_class+0xa0/0x120 [ 119.853698][ T5683] ? report_bug+0x1b7/0x2e0 [ 119.853725][ T5683] ? handle_bug+0x3d/0x70 [ 119.853744][ T5683] ? exc_invalid_op+0x16/0x40 [ 119.853764][ T5683] ? asm_exc_invalid_op+0x16/0x20 [ 119.896937][ T5647] loop0: detected capacity change from 0 to 32768 [ 119.897560][ T5683] ? look_up_lock_class+0xa0/0x120 [ 119.958902][ T5683] register_lock_class+0x100/0x9a0 [ 119.964033][ T5683] ? is_dynamic_key+0x1f0/0x1f0 [ 119.968899][ T5683] ? is_dynamic_key+0x1f0/0x1f0 [ 119.973766][ T5683] ? mark_lock+0x98/0x340 [ 119.978111][ T5683] __lock_acquire+0xd7/0x1ff0 [ 119.982809][ T5683] lock_acquire+0x1db/0x4f0 [ 119.987342][ T5683] ? ext4_ioctl+0x3dec/0x5b80 [ 119.992046][ T5683] ? read_lock_is_recursive+0x10/0x10 [ 119.997432][ T5683] ? __might_sleep+0xc0/0xc0 [ 120.002034][ T5683] ? rwsem_write_trylock+0x166/0x210 [ 120.007337][ T5683] ? clear_nonspinnable+0x60/0x60 [ 120.012384][ T5683] down_write_nested+0x3b/0x60 [ 120.017168][ T5683] ? ext4_ioctl+0x3dec/0x5b80 [ 120.021858][ T5683] ext4_ioctl+0x3dec/0x5b80 [ 120.026383][ T5683] ? do_vfs_ioctl+0x1b66/0x2b70 [ 120.031263][ T5683] ? ext4_fileattr_set+0x1750/0x1750 [ 120.036591][ T5683] ? __x64_compat_sys_ioctl+0x80/0x80 [ 120.041987][ T5683] ? __lock_acquire+0x1ff0/0x1ff0 [ 120.047024][ T5683] ? slab_free_freelist_hook+0xdd/0x160 [ 120.052587][ T5683] ? tomoyo_path_number_perm+0x648/0x810 [ 120.058257][ T5683] ? kfree+0xf1/0x270 [ 120.062280][ T5683] ? tomoyo_path_number_perm+0x6ab/0x810 [ 120.067936][ T5683] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 120.073434][ T5683] ? __fget_files+0x413/0x480 [ 120.078132][ T5683] ? bpf_lsm_file_ioctl+0x5/0x10 [ 120.083085][ T5683] ? security_file_ioctl+0x7d/0xa0 [ 120.088211][ T5683] ? ext4_fileattr_set+0x1750/0x1750 [ 120.093520][ T5683] __se_sys_ioctl+0xf1/0x160 [ 120.098124][ T5683] do_syscall_64+0x3b/0xb0 [ 120.102556][ T5683] ? clear_bhb_loop+0x15/0x70 [ 120.107268][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.113184][ T5683] RIP: 0033:0x7fb4ee54cf39 [ 120.117610][ T5683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.137225][ T5683] RSP: 002b:00007fb4ec9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.145667][ T5683] RAX: ffffffffffffffda RBX: 00007fb4ee705058 RCX: 00007fb4ee54cf39 [ 120.153661][ T5683] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 120.161648][ T5683] RBP: 00007fb4ee5bf216 R08: 0000000000000000 R09: 0000000000000000 [ 120.169684][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.177670][ T5683] R13: 0000000000000001 R14: 00007fb4ee705058 R15: 00007ffeef3b09a8 [ 120.185665][ T5683] [ 120.188712][ T5683] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.196000][ T5683] CPU: 0 PID: 5683 Comm: syz.1.676 Not tainted 5.15.167-syzkaller #0 [ 120.204079][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.214150][ T5683] Call Trace: [ 120.217448][ T5683] [ 120.220401][ T5683] dump_stack_lvl+0x1e3/0x2d0 [ 120.225100][ T5683] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 120.230750][ T5683] ? panic+0x860/0x860 [ 120.234842][ T5683] ? lock_is_held_type+0x140/0x180 [ 120.239975][ T5683] ? lock_is_held_type+0x140/0x180 [ 120.245101][ T5683] panic+0x318/0x860 [ 120.249019][ T5683] ? __warn+0x16a/0x300 [ 120.253191][ T5683] ? fb_is_primary_device+0xd0/0xd0 [ 120.258443][ T5683] ? look_up_lock_class+0xa0/0x120 [ 120.263572][ T5683] __warn+0x2b2/0x300 [ 120.267572][ T5683] ? look_up_lock_class+0xa0/0x120 [ 120.272701][ T5683] report_bug+0x1b7/0x2e0 [ 120.277051][ T5683] handle_bug+0x3d/0x70 [ 120.281219][ T5683] exc_invalid_op+0x16/0x40 [ 120.285738][ T5683] asm_exc_invalid_op+0x16/0x20 [ 120.290606][ T5683] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 120.296456][ T5683] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 120.316217][ T5683] RSP: 0018:ffffc900030d76b0 EFLAGS: 00010006 [ 120.322326][ T5683] RAX: ffffffff902d1fc0 RBX: ffffffff901a87c0 RCX: ffff8880799c5940 [ 120.330310][ T5683] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880616c2a58 [ 120.338429][ T5683] RBP: ffffc900030d77b0 R08: 0000000000000001 R09: 0000000000000000 [ 120.346658][ T5683] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 120.354644][ T5683] R13: 1ffff9200061aee4 R14: ffff8880616c2a58 R15: ffffffff96990c81 [ 120.362642][ T5683] register_lock_class+0x100/0x9a0 [ 120.367795][ T5683] ? is_dynamic_key+0x1f0/0x1f0 [ 120.372659][ T5683] ? is_dynamic_key+0x1f0/0x1f0 [ 120.377530][ T5683] ? mark_lock+0x98/0x340 [ 120.381877][ T5683] __lock_acquire+0xd7/0x1ff0 [ 120.386596][ T5683] lock_acquire+0x1db/0x4f0 [ 120.391127][ T5683] ? ext4_ioctl+0x3dec/0x5b80 [ 120.395824][ T5683] ? read_lock_is_recursive+0x10/0x10 [ 120.401214][ T5683] ? __might_sleep+0xc0/0xc0 [ 120.405817][ T5683] ? rwsem_write_trylock+0x166/0x210 [ 120.411121][ T5683] ? clear_nonspinnable+0x60/0x60 [ 120.416171][ T5683] down_write_nested+0x3b/0x60 [ 120.420950][ T5683] ? ext4_ioctl+0x3dec/0x5b80 [ 120.425643][ T5683] ext4_ioctl+0x3dec/0x5b80 [ 120.430163][ T5683] ? do_vfs_ioctl+0x1b66/0x2b70 [ 120.435032][ T5683] ? ext4_fileattr_set+0x1750/0x1750 [ 120.440334][ T5683] ? __x64_compat_sys_ioctl+0x80/0x80 [ 120.445717][ T5683] ? __lock_acquire+0x1ff0/0x1ff0 [ 120.450786][ T5683] ? slab_free_freelist_hook+0xdd/0x160 [ 120.456359][ T5683] ? tomoyo_path_number_perm+0x648/0x810 [ 120.462102][ T5683] ? kfree+0xf1/0x270 [ 120.466105][ T5683] ? tomoyo_path_number_perm+0x6ab/0x810 [ 120.471763][ T5683] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 120.477263][ T5683] ? __fget_files+0x413/0x480 [ 120.481964][ T5683] ? bpf_lsm_file_ioctl+0x5/0x10 [ 120.486919][ T5683] ? security_file_ioctl+0x7d/0xa0 [ 120.492047][ T5683] ? ext4_fileattr_set+0x1750/0x1750 [ 120.497347][ T5683] __se_sys_ioctl+0xf1/0x160 [ 120.501957][ T5683] do_syscall_64+0x3b/0xb0 [ 120.506489][ T5683] ? clear_bhb_loop+0x15/0x70 [ 120.511178][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.517090][ T5683] RIP: 0033:0x7fb4ee54cf39 [ 120.521517][ T5683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.541222][ T5683] RSP: 002b:00007fb4ec9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.549669][ T5683] RAX: ffffffffffffffda RBX: 00007fb4ee705058 RCX: 00007fb4ee54cf39 [ 120.558125][ T5683] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 120.566129][ T5683] RBP: 00007fb4ee5bf216 R08: 0000000000000000 R09: 0000000000000000 [ 120.574116][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.582100][ T5683] R13: 0000000000000001 R14: 00007fb4ee705058 R15: 00007ffeef3b09a8 [ 120.590097][ T5683] [ 120.593516][ T5683] Kernel Offset: disabled [ 120.597846][ T5683] Rebooting in 86400 seconds..